last executing test programs: 3m30.420259207s ago: executing program 0 (id=574): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e21, 0x400d, @remote, 0xb5}, 0x1c) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x311}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 3m30.314246233s ago: executing program 0 (id=575): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r5, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0xfd}}, 0x10, 0x0}, 0x1000000) 3m29.359335553s ago: executing program 0 (id=580): r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m29.289855649s ago: executing program 0 (id=581): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0}) 3m29.289662706s ago: executing program 0 (id=582): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x2000) 3m29.198762723s ago: executing program 0 (id=583): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000280)=@req={0x20, &(0x7f0000000100)={'bridge_slave_1\x00', @ifru_hwaddr=@multicast}}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000002f80), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fddbdfff060000000e0001006e657464657673696d0000000f0102006e657464657673696d30000008000b0006000000060011000100000008001300390b00000500140001000000add2c204593b079e042c1d26e623cb06d57d695f1a17c1f77600860c2ee88bb2cd32e83d7201f21914ce978269be735c30f403ff071f85dec64213e6c1b5a4a7f312c5e5"], 0x54}, 0x1, 0x0, 0x0, 0x4c000}, 0x4000) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r5 = socket$inet6(0xa, 0xa, 0x400000) sendmmsg$inet6(r5, 0x0, 0xfffffffffffffd38, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r7 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) write$FUSE_CREATE_OPEN(r7, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000000, 0x3, 0x9, 0xfffffffffeffff83, 0x3, 0x1, {0xffffffffffffffff, 0x3ff, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fb, 0x7ffffffb, 0x6, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x12}}}, 0xa0) sendfile(r7, r7, &(0x7f0000000080), 0x7f04) 3m13.937869485s ago: executing program 32 (id=583): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000280)=@req={0x20, &(0x7f0000000100)={'bridge_slave_1\x00', @ifru_hwaddr=@multicast}}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000002f80), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fddbdfff060000000e0001006e657464657673696d0000000f0102006e657464657673696d30000008000b0006000000060011000100000008001300390b00000500140001000000add2c204593b079e042c1d26e623cb06d57d695f1a17c1f77600860c2ee88bb2cd32e83d7201f21914ce978269be735c30f403ff071f85dec64213e6c1b5a4a7f312c5e5"], 0x54}, 0x1, 0x0, 0x0, 0x4c000}, 0x4000) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r5 = socket$inet6(0xa, 0xa, 0x400000) sendmmsg$inet6(r5, 0x0, 0xfffffffffffffd38, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r7 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) write$FUSE_CREATE_OPEN(r7, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000000, 0x3, 0x9, 0xfffffffffeffff83, 0x3, 0x1, {0xffffffffffffffff, 0x3ff, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fb, 0x7ffffffb, 0x6, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x12}}}, 0xa0) sendfile(r7, r7, &(0x7f0000000080), 0x7f04) 1m54.656031679s ago: executing program 4 (id=1131): ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"766cace9c303653f121a2d892000", 0x0, 0x0, {0x81, 0x86}, {0x7, 0x8}, 0x5, [0x3, 0x3, 0x4, 0x6, 0x0, 0x400, 0x3, 0x2, 0x8, 0x7, 0x80000000, 0x81, 0x10, 0x522586d, 0xfffffffffffffffb, 0x7]}) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6000000002060500000000c2000000000000000005000400000000000900020073797a32000000001400078005001400fbcfd9150800084000000000050005000a000000050001000600000011000300686173683a6e65742c6e6574"], 0x60}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7b, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xff7ffffc}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x7}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8850}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x15) writev(r5, &(0x7f0000000280)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500", 0x1a}, {&(0x7f0000000580)="fa21bd2b5c40cc420740358ffc7f9f4b6e68fc8d1aa2597e7b484f301f11e35f22", 0x21}], 0x2) socket$rxrpc(0x21, 0x2, 0xa) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280080005000100000014000700000000000000000500000000000000010800"], 0x74}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x4001, 0x3, 0x2e4, 0x0, 0x0, 0x148, 0x0, 0x148, 0x250, 0x240, 0x240, 0x250, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x8000000, 0x0, 0x2, 0x0, 'syz1\x00'}}, @common=@addrtype={{0x2c}, {0x0, 0x280}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x2, 0x7}, {0x4, 0x2, 0x4}, 0xff}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x340) syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x0, 0x28a}, &(0x7f0000000140), &(0x7f0000000200)) socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1m53.5620679s ago: executing program 4 (id=1135): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_getevents(0x0, 0x4, 0x0, 0x0, 0x0) 1m53.234072251s ago: executing program 4 (id=1138): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001d00), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x1040000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000017000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) flock(r2, 0x8) (fail_nth: 1) 1m50.090260316s ago: executing program 4 (id=1157): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0b0400000000000000000200000034000480300001800a0001006d617463680000002000028008000240000000030b000100736f636b6574000006000300d67a00000900010073797a30000000000900020073797a3200000000140000000100010000000000000000000000000a"], 0x88}, 0x1, 0x0, 0x0, 0x40480e0}, 0x4008014) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000500)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0x80003f00, 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f00000000c0), 0x1, 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000004c0)=0xb) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc0f8565c, &(0x7f00000005c0)={0x9d95a585, 0x4, 0x4, {0x4, @pix_mp={0x6c, 0x9509, 0x20493859, 0x3, 0x0, [{0x100, 0x7}, {0xfffffffd, 0x9}, {0x6e14, 0x81}, {0x4, 0xcc0}, {0x83b, 0x62fb}, {0x7, 0x80000001}, {0xffffffc0, 0x7}, {0x8, 0x8001}], 0xee, 0x5, 0x1, 0x2, 0x5}}, 0x7ff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x4008000}, 0x24040880) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007001100000000000c000180060006"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x8001}}, './file0\x00'}) bind$alg(r6, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-avx\x00'}, 0x58) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x6, 0x10, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x4e}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r7, 0x58, &(0x7f0000000240)}, 0x10) setresuid(0xee01, 0xee00, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = getpgrp(0x0) fcntl$setownex(r9, 0xf, &(0x7f0000000100)={0x2, r10}) sendmsg$unix(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000040)) 1m49.96529978s ago: executing program 4 (id=1160): setrlimit(0x1, &(0x7f0000000380)={0x1, 0x713}) r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r0, &(0x7f00000003c0)=""/4096, 0x1000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0xffff8000, 0x0) write$FUSE_INIT(r2, &(0x7f0000000380)={0x50, 0x0, r3, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r7 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0x50002000}) syz_fuse_handle_req(r6, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x200, 0xffffffff, {0x5, 0x0, 0x7, 0x6, 0x3, 0x400000000000000, 0xfffffff9, 0x8000000, 0x0, 0x2000, 0x10003, 0x0, r5, 0x734}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000100)) syz_fuse_handle_req(r2, &(0x7f0000006680)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x8, {0x4, 0x1, 0xfffffdfffffffff1, 0x0, 0x9, 0x4, {0x6, 0x80000808000080, 0x3, 0x6, 0x2b9, 0x100000000000008, 0x80000000, 0x4, 0x6, 0x97e092f1f294850e, 0x7fffffff, r4, r5, 0x0, 0xcc}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x54}}, 0x4000) 1m49.829428963s ago: executing program 4 (id=1162): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000280)=@req={0x20, &(0x7f0000000100)={'bridge_slave_1\x00', @ifru_hwaddr=@multicast}}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000002f80), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fddbdfff060000000e0001006e657464657673696d0000000f0102006e657464657673696d30000008000b0006000000060011000100000008001300390b00000500140001000000add2c204593b079e042c1d26e623cb06d57d695f1a17c1f77600860c2ee88bb2cd32e83d7201f21914ce978269be735c30f403ff071f85dec64213e6c1b5a4a7f312c5e5"], 0x54}, 0x1, 0x0, 0x0, 0x4c000}, 0x4000) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0xfffffffffffffd38, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r6 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000000, 0x3, 0x9, 0xfffffffffeffff83, 0x3, 0x1, {0xffffffffffffffff, 0x3ff, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fb, 0x7ffffffb, 0x6, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x12}}}, 0xa0) sendfile(r6, r6, &(0x7f0000000080), 0x7f04) 1m49.78617828s ago: executing program 33 (id=1162): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000280)=@req={0x20, &(0x7f0000000100)={'bridge_slave_1\x00', @ifru_hwaddr=@multicast}}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000002f80), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fddbdfff060000000e0001006e657464657673696d0000000f0102006e657464657673696d30000008000b0006000000060011000100000008001300390b00000500140001000000add2c204593b079e042c1d26e623cb06d57d695f1a17c1f77600860c2ee88bb2cd32e83d7201f21914ce978269be735c30f403ff071f85dec64213e6c1b5a4a7f312c5e5"], 0x54}, 0x1, 0x0, 0x0, 0x4c000}, 0x4000) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0xfffffffffffffd38, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r6 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000000, 0x3, 0x9, 0xfffffffffeffff83, 0x3, 0x1, {0xffffffffffffffff, 0x3ff, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fb, 0x7ffffffb, 0x6, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x12}}}, 0xa0) sendfile(r6, r6, &(0x7f0000000080), 0x7f04) 25.557876122s ago: executing program 3 (id=1565): ioperm(0x0, 0x401, 0xfffffffffffffffc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) rt_sigaction(0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000240)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='mm_page_alloc\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='environ\x00') read$FUSE(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x3a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005480)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x20000000, 0xea, 0x100004}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0xf0ff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4882, 0x4}}}}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x50}}, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x2f4, @empty}, 0x1c) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e609, [{{0x9, 0x2, 0xffffffffffffff84}}]}}, 0x0) 22.466469166s ago: executing program 3 (id=1574): ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000280)=@req={0x20, &(0x7f0000000100)={'bridge_slave_1\x00', @ifru_hwaddr=@multicast}}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000002f80), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdfff060000000e0001006e657464657673696d0000000f0102006e657464657673696d30000008000b0006000000060011000100000008001300390b00000500140001000000add2c204593b079e042c1d26e623cb06d57d695f1a17c1f77600860c2ee88bb2cd32e83d7201f21914ce978269be735c30f403ff071f85dec64213e6c1b5a4a7f312c5e5"], 0x54}, 0x1, 0x0, 0x0, 0x4c000}, 0x4000) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r4 = socket$inet6(0xa, 0xa, 0x400000) sendmmsg$inet6(r4, 0x0, 0xfffffffffffffd38, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r6 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000000, 0x3, 0x9, 0xfffffffffeffff83, 0x3, 0x1, {0xffffffffffffffff, 0x3ff, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fb, 0x7ffffffb, 0x6, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x12}}}, 0xa0) sendfile(r6, r6, &(0x7f0000000080), 0x7f04) 21.602159574s ago: executing program 3 (id=1579): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000100)="7800000018002507b9409b14ffff0b000204be040207fe056406040c5c001f003f0006010d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a3200040016000803180000000000e000", 0x68, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6a) syz_open_dev$sndmidi(&(0x7f0000000040), 0x800002, 0x141101) r4 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7077, 0x0, 0x14, 0x288, 0x0, r2}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_SYMLINKAT={0x26, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)='./file1\x00'}) io_uring_enter(r4, 0x7c45, 0x0, 0xe, 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000100)={0x5, 0x6a6bcd02, 0xc2, 0xff, 0x3}) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r9, 0x40043311, 0x0) r10 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb34902, 0x1000006, 0x28011, r10, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x256f16877c8c0da9, 0x0) writev(r7, &(0x7f0000000ac0), 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000001e40)=[{{&(0x7f00000009c0)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000040)="42d7386debb9", 0x6, 0xfffffffffffffffe) 19.8264564s ago: executing program 3 (id=1587): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r5, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0xfffd}}, 0x10, 0x0}, 0x1000000) 18.888462626s ago: executing program 3 (id=1596): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x3f00) 18.888104084s ago: executing program 3 (id=1597): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x1, 0x141101) r1 = openat$autofs(0xffffff9c, &(0x7f0000000080), 0x2200, 0x0) r2 = openat$null(0xffffff9c, &(0x7f00000000c0), 0x40, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000140)=0xe4) openat$ubi_ctrl(0xffffff9c, &(0x7f00000003c0), 0x101001, 0x0) r4 = getegid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {r3, r4}}, './file0\x00'}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x23b, &(0x7f0000000740)={0x0, 0x1c2a, 0x100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x2ded, 0x4000, 0x0, 0x0, 0x0) futex_waitv(&(0x7f00000007c0)=[{0x0, 0xffffffffffffffff, 0x2}], 0x1, 0x0, 0x0, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000340), 0x4) r10 = socket$tipc(0x1e, 0x2, 0x0) r11 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r11, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r10, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x1000000) 6.186104625s ago: executing program 2 (id=1662): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x499f, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@remote, @in6=@local, 0x40, 0x0, 0x3, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x6e6bbe, 0x1, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x3, 0x1, 0x7}}, 0xe4) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1}) r5 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) 5.475195715s ago: executing program 5 (id=1664): socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_io_uring_setup(0x5f17, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x80, 0x352}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000340)=ANY=[@ANYRESHEX=r0, @ANYBLOB="502a24fa1274ffeb1a0dffe3212e56c85d13980dcae171658a8ab04cc806aecb733445588af40220bb7ff2ab0cc32c8c", @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES16=0x0, @ANYRESDEC=r0, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8e, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) open(&(0x7f0000000100)='./file0\x00', 0x440, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r8 = socket$tipc(0x1e, 0x2, 0x0) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, 0x0, 0x0) r10 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x0, 0x0) ioctl$TIOCGPGRP(r11, 0x540f, &(0x7f00000000c0)) r12 = openat$cgroup_subtree(r11, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r12, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r12, &(0x7f0000000080)=ANY=[], 0x6) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000000408010300000000000000000200000a0900010073797a3000008000"], 0x20}, 0x1, 0x0, 0x0, 0x40000c0}, 0x1) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x70bd28, 0x25dfdbfa, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x14) 4.87181007s ago: executing program 5 (id=1666): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) landlock_create_ruleset(&(0x7f0000000180)={0x4642, 0x3, 0x2}, 0x18, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r3, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r4, 0xc0045401, &(0x7f0000000200)=0x118) read$eventfd(r2, &(0x7f0000000340), 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x26e1, 0x0) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r6, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{0x0}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x80}, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f00000003c0)={0x5, &(0x7f0000000380)=[{0xc000, 0x80, 0x2, 0x8}, {0x4, 0x4, 0x40, 0x9}, {0x6, 0x2e, 0x3, 0x7}, {0x10, 0x81, 0x10}, {0x9, 0x7, 0x1, 0x4}]}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 3.632420537s ago: executing program 34 (id=1597): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x1, 0x141101) r1 = openat$autofs(0xffffff9c, &(0x7f0000000080), 0x2200, 0x0) r2 = openat$null(0xffffff9c, &(0x7f00000000c0), 0x40, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000140)=0xe4) openat$ubi_ctrl(0xffffff9c, &(0x7f00000003c0), 0x101001, 0x0) r4 = getegid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {r3, r4}}, './file0\x00'}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x23b, &(0x7f0000000740)={0x0, 0x1c2a, 0x100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x2ded, 0x4000, 0x0, 0x0, 0x0) futex_waitv(&(0x7f00000007c0)=[{0x0, 0xffffffffffffffff, 0x2}], 0x1, 0x0, 0x0, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000340), 0x4) r10 = socket$tipc(0x1e, 0x2, 0x0) r11 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r11, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r10, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x1000000) 2.819337616s ago: executing program 1 (id=1671): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04f74120"], 0x7) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffd, 0x0, 0xfffffffd, 0x0, 0x0, "65366a50432b80e2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) 2.814678329s ago: executing program 2 (id=1672): socket$inet6(0xa, 0x5, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000001440), 0x0, 0x40002002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)) r4 = syz_open_pts(r3, 0x101000) r5 = dup3(r4, r3, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0)=0x17) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000140)={@multicast2, @remote, 0x0}, &(0x7f0000000240)=0xc) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000001c0)={@empty, @loopback, @private2, 0x8, 0x0, 0x1, 0x400, 0x6, 0x8, r6}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(0xffffffffffffffff, 0x0) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xffc1) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000040)={{0xb1, 0x9}, 0x1, 0x5, 0x10, {0x81, 0x10}, 0x5, 0xf}) 2.66828608s ago: executing program 1 (id=1673): r0 = socket$inet(0x2, 0x800, 0x0) getsockopt$sock_buf(r0, 0x1, 0x45, 0x0, &(0x7f0000000340)) getresuid(&(0x7f0000000040)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000900, r1, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) r2 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) timer_create(0x2, &(0x7f0000000140)={0x0, 0x1e, 0x1, @thr={0x0, 0x0}}, &(0x7f00000001c0)=0x0) timer_settime(r3, 0x0, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) shmctl$IPC_SET(r2, 0x1, &(0x7f00000020c0)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x100, 0xa}, 0x9, 0x6, 0x2, 0xf5eb, 0x0, 0x0, 0x3ff}) shmctl$SHM_UNLOCK(r2, 0xc) 2.568595046s ago: executing program 1 (id=1674): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) socket(0x10, 0x3, 0x0) r4 = openat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x400000, 0x186, 0x1}, 0x18) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x0, 0xfff, 0xef, 0x29}, 0x10) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000000)={0xa0000001}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000480)={@hyper, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000000)={{@local, 0x8000000}, @local, 0x0, 0x0, 0x421, 0x7, 0xffffffffffffffff, 0x4100}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0) 2.568079953s ago: executing program 5 (id=1675): syz_io_uring_setup(0x38a9, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x242}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x22100}) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f00000004c0)=ANY=[@ANYRES16=r2, @ANYRESDEC=r2, @ANYRES32=r2, @ANYRESDEC], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)=0xffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) close(r7) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r6, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) 1.609368192s ago: executing program 1 (id=1676): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x4d6) 1.547975218s ago: executing program 5 (id=1677): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000280)=@req={0x20, &(0x7f0000000100)={'bridge_slave_1\x00', @ifru_hwaddr=@multicast}}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000002f80), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fddbdfff060000000e0001006e657464657673696d0000000f0102006e657464657673696d30000008000b0006000000060011000100000008001300390b00000500140001000000add2c204593b079e042c1d26e623cb06d57d695f1a17c1f77600860c2ee88bb2cd32e83d7201f21914ce978269be735c30f403ff071f85dec64213e6c1b5a4a7f312c5e5"], 0x54}, 0x1, 0x0, 0x0, 0x4c000}, 0x4000) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r5 = socket$inet6(0xa, 0xa, 0x400000) sendmmsg$inet6(r5, 0x0, 0xfffffffffffffd38, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r7 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) write$FUSE_CREATE_OPEN(r7, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000000, 0x3, 0x9, 0xfffffffffeffff83, 0x3, 0x1, {0xffffffffffffffff, 0x3ff, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fb, 0x7ffffffb, 0x6, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x12}}}, 0xa0) sendfile(r7, r7, &(0x7f0000000080), 0x7f04) 1.54748858s ago: executing program 1 (id=1678): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000280)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000002f80), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fddbdfff060000000e0001006e657464657673696d0000000f0102006e657464657673696d30000008000b0006000000060011000100000008001300390b00000500140001000000add2c204593b079e042c1d26e623cb06d57d695f1a17c1f77600860c2ee88bb2cd32e83d7201f21914ce978269be735c30f403ff071f85dec64213e6c1b5a4a7f312c5e5"], 0x54}, 0x1, 0x0, 0x0, 0x4c000}, 0x4000) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r5 = socket$inet6(0xa, 0xa, 0x400000) sendmmsg$inet6(r5, 0x0, 0xfffffffffffffd38, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r7 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) write$FUSE_CREATE_OPEN(r7, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000000, 0x3, 0x9, 0xfffffffffeffff83, 0x3, 0x1, {0xffffffffffffffff, 0x3ff, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fb, 0x7ffffffb, 0x6, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x12}}}, 0xa0) sendfile(r7, r7, &(0x7f0000000080), 0x7f04) 1.297457552s ago: executing program 2 (id=1679): socket$inet6(0xa, 0x5, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000001440), 0x0, 0x40002002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)) r2 = syz_open_pts(r1, 0x101000) r3 = dup3(r2, r1, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0x17) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000140)={@multicast2, @remote}, &(0x7f0000000240)=0xc) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xffc1) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000040)={{0xb1, 0x9}, 0x1, 0x5, 0x10, {0x81, 0x10}, 0x5, 0xf}) 1.148010363s ago: executing program 2 (id=1680): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04f74120"], 0x7) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffd, 0x0, 0xfffffffd, 0x0, 0x0, "65366a50432b80e2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) 1.078530354s ago: executing program 2 (id=1681): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = signalfd(r0, &(0x7f0000000000), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r1) r2 = inotify_init1(0x800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setresgid(0xee01, 0x0, 0xffffffffffffffff) syz_emit_ethernet(0x82, &(0x7f0000000200)=ANY=[@ANYBLOB="7b91bbbbbbbb0000000000000800450000740004000000019078ac1e0001ac1414aa05009000000000e0460000000000000000110000ffffffffac1414fd070300070300443c00030a01012f00000000ac1e0001000000007f00000100000200ac1414aa000000000000000000000000ac141400"/130], 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, &(0x7f0000000180)) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x548, 0x2) fcntl$setstatus(r1, 0x4, 0x2c00) fcntl$setown(r1, 0x8, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfef, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f000000e400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000380)={0x50, 0xaf427d74613510bd, r6, {0x7, 0x1f, 0x7, 0x100000, 0x0, 0x81, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x0, {0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000000c0)='./file0\x00', 0x20300, 0xf4) syz_fuse_handle_req(r5, 0x0, 0x0, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x18, 0x0, 0x4c, {0x134}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) inotify_add_watch(r2, &(0x7f0000000180)='./control\x00', 0xa4000960) socket$packet(0x11, 0x2, 0x300) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 766.781494ms ago: executing program 6 (id=1669): socket$inet6_mptcp(0xa, 0x1, 0x106) syz_init_net_socket$netrom(0x6, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x25dfdbfd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa4}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="0ce02312cba867e6f105"]) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f00000002c0)={[{@size={'size', 0x3d, [0x70]}}]}) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setscheduler(r3, 0x5, &(0x7f00000001c0)=0x1a4) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) sendto$inet(0xffffffffffffffff, &(0x7f0000000380)="437550b523af1a7f2da599e5139f10a0f56401a09a7d028e470e28217045a0db9dba02d08dfe3937f513c950593b1b21f1a9", 0x32, 0x20004801, &(0x7f0000000400)={0x2, 0x4e24, @empty}, 0x10) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) r6 = socket(0x1e, 0x4, 0x0) r7 = openat$cachefiles(0xffffff9c, &(0x7f0000000340), 0x200e00, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, &(0x7f0000000480)={0x48, 0x8, r7, 0x0, 0x81, 0xd3, &(0x7f00000005c0)="a4fd23e639a4919d0faeefdf381c8fa2223df4e1c8f97313f756aa614b33e3d84d806214c0fe8d31ece4741b7b57f35e493253a3cfd00dfe36cf12d026ea97927e29a37afdf425d777134ee7528f7230c9b607ab9fa3ce5c7e47a3a936a0574adff1b02ede00607145a8bb37bc3b2164f910dc1bf1442b9ea0dbf20ff32242fb845e69958b813be60894e61a018b6e37d2448c68477421d075f8b8fe5127606150f50beed8068811a484c5372544c403fbb9fe3c83952478021ec023d5b66e07565a47056f8734ed58b4a809e936f5795e97fc", 0x5}) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000052001103000000000000000002000000555abfba380b33eff246c53958ff211c6f80c5d01f63617fcc76abe3bdc5a1d049300e0a337610aea1ff73e9"], 0x14}}, 0x0) 368.064458ms ago: executing program 1 (id=1682): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) landlock_create_ruleset(&(0x7f0000000180)={0x4642, 0x3, 0x2}, 0x18, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r3, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r4, 0xc0045401, &(0x7f0000000200)=0x118) read$eventfd(r2, &(0x7f0000000340), 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x26e1, 0x0) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r6, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{0x0}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x80}, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f00000003c0)={0x5, &(0x7f0000000380)=[{0xc000, 0x80, 0x2, 0x8}, {0x4, 0x4, 0x40, 0x9}, {0x6, 0x2e, 0x3, 0x7}, {0x10, 0x81, 0x10}, {0x9, 0x7, 0x1, 0x4}]}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 263.222177ms ago: executing program 5 (id=1683): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x600, &(0x7f00000003c0)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x2c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmmsg$inet(r2, &(0x7f0000003cc0)=[{{&(0x7f0000000000)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000001800)=[{&(0x7f0000000380)="9a2c6fe5646ae56792bbfb618a79d841484ea042c1d047f98938c342c005a86267299fe455461779de2dd0c7f24be67b7e5272a1c6106e50b34aacabf2ffeb2980432c6dcd3e44a94322d92bc543be79d18c29a3efbde53f5de58003524bd6860844b6c1a50dfa28b8484577935c2f7dd5b101c7978bb325c385301040e9b4dfac3e08f044e68e8b5e7d37559059e4f910bc164f71451c448bf12ae6a6c58496bafaab49009578610b559767deda5e1aafee8bb1e57b069f4f2d3d3ad1f319fa1da5b852f0bea742dad055ea89", 0xcd}, {&(0x7f0000000480)="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", 0xff}, {&(0x7f0000000080)="5da968986f75d4ac6f7947dd7ed4e73e76d1fb2266f6fecd00a7dbcfdbf14ef8dc9bc6d3479341ecf42f9039eca8c96c4ce05f84173bead816eccb9a0dd21cfc081c", 0x42}, {&(0x7f0000000240)="be1384037e1127b249db002f89d7fbf91717fda8374602d4325332de9603a5dd39c1a93bfbc12a9c4bf269ce8b8c25b87918c90dabbf404a9abc49781f3974b0c454f0f83b3baff93d0d60e81fd671aa3da6a6621395c4d784421c8c850334530f09", 0x62}, {&(0x7f0000000580)="d8d63c008bc4c0d411ef238628c1fa3d77b15481e79a9878b1255bc91cf3330c2980acf98b10e7bcb0d2396328180514ad2a6ac9081412ec1a21d12001fab855ba7c3f4b34e86ae3f1c845c3bcbde284d203be4088090f3db1c38cda06c387d1f14360d9c87b", 0x66}, {&(0x7f0000000600)="f623cdf30b01ffd22bd78e91fe8ee8171766f1e728b3a66c5f6596ecf942dd303e3552e9d853d209ee539b96541e325b662467692712e8e0e4952b78d44ff8da2e663d8f686e8c3fe12660b45ac55d748d69352db09a2f8b31801c3963f423a9982aeaee2534de419ea0e56a9c5f7718917aa94fc503b3fe03cbad5842bdf5239727ee31f9a3e1b7b20877741f8ff2", 0x8f}, {&(0x7f00000006c0)="c731e16e9fa70ae5b43fa57fe51c29f1821c9b21fc937cbd288a9d99360d631374f5c4d77b0cfee61c19fea85c0c4d6a4f786a180b38cc609efc467d73ff5cbde364b034f1aae81ee713cc47fe46a0f2cf7ea7cde73054de6527b4b3428d9ac236f607e9ad5dd5", 0x67}, {&(0x7f0000000140)="3baac749c795d36221ee1b54698a4453b7edc031affc62a742766df1caa6c2fd8e5ac97ada33e1a6ea97595faf50983f2ade0ffa3cb2ad", 0x37}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="a43152e7294151d27dfa77306f5868a203c049db51390c9679be4a8e51a7b04c08ec5cf10716138053d36a2dba97adcbb0fea2df7533e627d44bcd7b19ee70ce466152034e1f41d7d73767fb1408d14a6b50e4c9a37a952e1ba83a7059de04eb8aaeed18090c226ba931f40616b5130985af37004ef97f7abec387b45793bec45c589048377538380bec17235a4b3514110be808b5bb2fe957f8f4", 0x9b}], 0xa}}, {{&(0x7f00000001c0)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000001c40)=[{&(0x7f0000001880)="89b27e2b8f3a27f30bc6793732a9275a89e904dac4b4c84425", 0x19}, {&(0x7f00000018c0)="5eb3a8b0fe7286def4435e5c51e16a0bf2b9d3bf13d0d3249de3328796e8599a05f09fc23c34e4ecb6ceb15c0d047694a68390e9a8d8c97d16105d6c9c2c3eda2a3329b84ffd7d472175ba3a6466d6a70d3ca1ef70725ae0ac26e20be81edf53daf9b1cd6a51dcc0801ec12d64d23994d787f3d9ff9932f0af1efb1c01138b93f7e2afbf8569f9e53dbb5527fd00dea311b12320b1c400127a939b6438efc0079685ac48e9c5fac3cf1b7caf0dd8a5100fe3b9cab91aa630bb43766c4a3c409b5f2920a21c1e51fc83a3a0cd3c95f117dfe26782cbcf773c7bd63f2430eed3f48aa574e3cebe9d252c105173fa6f7047fc5c911086c7ceef63", 0xf9}, {&(0x7f00000019c0)="9f4d3994d3eb6e", 0x7}, {&(0x7f0000001a00)}, {&(0x7f0000001a40)="7872f40da3ddaa60a9a2206e862f0f3c3bdd16a13504b8d42a14ccce36885eedd73138d68074d69d6134ca189389d31f479134a64d80feaced8f61e762fb1b33ff8a39c440d4425f810be2d7d998fa7daeda15cdf7bd1ae7edafa65b7adc27333105badc0e9459281d14bbc4337c3ccfe78a0b9024a7fabfce975828968c13d0916de886a9a311bdaa8c795c2429c180e2eda80e27412f768eac9b51201d69b57d54e4408929cc9d0f44f6d73b6daa10d808d8a115eeb99163b723f874b153fc6b42194bbf6f27c33375ee1e35", 0xcd}, {&(0x7f0000001b40)="c905f3d18bb533eeb719ce7ddfd84887e62623edd4686823a64daf54289ca210b6bf3f8b047c93b3a58d86169d7de1f9e9b54708ee46b90f91aef6346f94776a2ad1033c451916e26b95ba44c9d165244e47c51e57f034a12c2308a52bfebe4eaafeac873ce0fc89d57abe7d96bf190d463b9cfa2085b3a8d448194bec3dbfd0fb44b02b273a32f608310a545db78c3ddc0a2bf73803afd4bbadc2762e9f7a0b66b99ba336a99a49c7e051f0a820320b8044970f06b94e7e4fb73f31f214a2242dfd0a14c583cd45e662dc", 0xcb}], 0x6}}, {{&(0x7f0000001c80)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001d80)=[{&(0x7f0000001cc0)="0320dc03c64edcae47b3fbedc9d1056dabdaaac540853cb6bd2b646172f787432cd752660a72f2fb58171b4a7e21f102f3af2ec6e512d8cb937ef252", 0x3c}, {&(0x7f0000001d00)="5f13addbfeedcfef37744feb6cbd8d66cd1731148b766d7046a0bdce38256f550083498aa5e32f34ca14866b171b0bf80d982e5cf9f849ed618abb064d3c647278b3f24b7bda160ff1c742", 0x4b}], 0x2, &(0x7f0000001dc0)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r4, @multicast1, @rand_addr=0x64010102}}}, @ip_retopts={{0x10, 0x0, 0x7, {[@noop]}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x9b}}], 0x38}}, {{0x0, 0x0, &(0x7f0000003340)=[{&(0x7f0000001e00)="0b3742ef515408d19adb9929a090846df4c71bf2ac61fcf1d8dae8877bf9fe8d8c513c9e8f1b170c47fc7d91f8e47a7c3f7a9db4eae59005653c0db19fa22c0e47a2ae67c24ae808e34e50c93ab50ed3e9f91151ea49cdffb63c1bbeda97ead334fb9453654b98790521db0aa1e2c4f0cad554dd969253d56993d8dd654c4a3e34f2dfdf0eedd0e80f1196eb4f1f81d89c2c", 0x92}, {&(0x7f0000001ec0)="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", 0xff}, {&(0x7f0000001fc0)="9e2df6747262288bcc10d749bdd9e4f8844abcd4afbbd5ec7a7840586d0aacc54041c7ebe00d796ecfc3cd4a3412e28cca2c2b2be44e931fb383c12cabb57812597bbfcc5476691b6ac658d223f278c815465e89ddabea33b5e0b07fc29b0d281b483e105e3ab305d0a2ee485cf6db112202a4f22c42b96d3c52ef61d6e8a052d7d1f31e17210e3cc697082e16df5bf46718fef3d2dd2970af26f6b48794034fcc0ba914f0b86ff7228c7c5548041e50d96db10279c15a15c7b4a8d59024e4c0c3e1c48ee641001eeb23213239b39bbb1ff7981520eca20560622cb8b09e45132557bbf965d83396c3b61b39444b0ea83b2f405ef91174c64171980004d17da2b1df6169eab93b66a88f11c9b334dcdd54ed7ebfae2870fb74c521283407a6e3afc1667aae46a6a921750c94beb8a225ca611dd28cc2d26939a418aae0c665b8f65e0409903198d254a662a13b998560226b12ab1b74f742b8973222d24d28576c6ad80cb2c95cd3db8511b70baad888a1297a04d7d11cad011569554f3ffbc6b71130355be795ca37e1ba780296db119fb02a127018415773a7b707f7b02dbd3f182a165f13402dfee3897e14d4b05ebeee326f780a1c5458041b5cff469ba9875b5353ff18c58794d48a0d2c5956d184ad2ed217b6ef7c1b212c675fd021ba6f2568eb838a4e8c97a2710dc9b3f076a62956ac250ccff172fb05045f1048233f58a77b6d89b60850c827d2af0f3bc050eb65886676992745eb76715c9cb9f8dc406ddade45940b0d39c95e71565423b620ab45afb77d0a88bc293d8b5aadd5e896634accd7c5c96584be03977d11080baea91c18e8928535b6974b950f09238e19df840d44ffc4528fe1effbb646aca2293e88c888b6d64b1cde7ec1b87018ca69145b12513fec71cf609d6732cbc6f2e33c1483ef06484df90d662d7aa9358c5f7d7e88da34ac1ecb7adbf9707842049ea108c24a46f60eae634b1a21fccca6fdff91a92b10edf6474c7752da57beab2c4d7f96b88502da833661f6ccab2da378cb46f326f3b614234f4346bac489d36d193bc9acfbfeb38e57f9a2cd03bc81503d46649503f27eef504e097d602190f15b203dc89e7ebcf89db7f794d0ffa1157a4cc96795844b671eaf24f858d9f074558ec6804bf56e39f17afdb66a797b7219111de34d41c1a4f56d889a03e80528f55d5b419e063bfd84c2d51420c2e76d1894d6544f3b1547804a8071ed5d110dd98dad7e40748974b815f7a29af56e09a4edce6e31d74b58b09c3764de3a7ae73ba11de4ba7891897a4063cdeac225f7eccc461cc15aefb09a48ffb3dbcba19e0a99f2801dec4450ee4c2821c7e5adddaa54d21e1d217c1f656ff6f2aa9df52002d662c6d911035f9c9cb64ea10fcfdb62a8672b83bde395fb38f7d2dd4bddcd8a3b5e357d665ecc2b46f3747704a1fd84794e0ad9f9e13c0c6bcd532bc1abb3bfb65181e95bf6994b4f94a527e87ce3455a38035032524606c9104d6654accfe79103b9e4b0a578cf7d8046b3c8ff5860d819150de298e047bb2eed2c11a2d21e3f1dedd4c03cc6a9557ed1bd4241aca462e61149eecf62d034d111d571ae4df57f0b6f7c95268bb8dde7396aca9e7ee7b7d341894dad53d2296c4bc65116194f54a44c79ba9375953bf7e439c6d1de310878e3ae20fc4f8d12be74d6f671ce1304b5d9a1f71187fc2f5809d76ae5802318ddf244707b2540e9036ece6a0eec6573dd88f5683d5b9e2727660b7407097b1427a1b24ae163fc04ce821594f20bf0e6976d74d1b7f0fc29b3a10769ab5b4b131692e19c32d8a724b66cb77ca2430646c39400e8a74588278dc91fd1bfaa4569e1616fdfa343119e2aec64d215ca63db12be052ab688a8fc96bc7a09cd7815dab7f66ff8d4f5bb153844cf8636189429851413c070efd9ea8831aaad62e01883d421e052b08d15b2d3def24d339ccce12b849006e76d1ac8c8a11076862899bfe6a0f4c7fc453bddd53f135a3ef30cae381e37f7879fcdd0dfd7c441c32f2b6d37f28e3a5e89e31ed5facc3eefc63b8d4916e9e91d81116226df37be638963e9590514b63f91d17ca14567e878be0ed0961d66cee4343b378c9e643c74b3d933e10e6041c1edf8d58b06a1865b42ab99f9e21943d35ba460d2b8443a8bded8360259c864815139fcdd8f6da808b6f43e93337e26ed2024cf467e5164594d97d964e1b67d080db47f1a376714f2c181a72fbb73733f3fdfc7ecccfc33ad7773ca06967ce9c0b1c1a0ce730858d658b47410355ccdc4ff3baf8ab0497184ba92e2335f0df5fd7d5ba63db4f3556121966a05bd7cd7ecfcddaa58fac76f3178f605e57bb7e24dee372b162ef6bd466eba9c79ca519a3fcbc3bb24880812b39ecc26c34501cfd7cf5afcbd0ce96713e26f485b0cb3cb0107de61ef933c0eeb9329219f9305b94ceeb6e373fb50e60b59096f58d59a3b42f86eb8b60c0f05675f75e212206a1321b75da78352ef7a56c3077d805bc9f4b65629efbac5cd73648d4b237ca7021693616d63d4a8afb5099ee38e10a451d9eb7d819106b4f952292cced130d8a3fa4c2d0a283e14e96050bec074615a4af3d8a635dce525ab6e1e6dd6a949e10555d63c44ad4a0160ee3f9d5e0b387b6734dabddb7441d6ddb3b4216bca06f1d28ea56b24f21b412cebb48a0056763447b43a86a4e8705d86b200a68a78cc759d1f1afd9a0897bcccdc3a955409c4eba56d6af5eacde79038c3355c487292e8c2268ffbe1fb00f40f3e2b47c8513ad60671bfb1b9e32d67b94b482c65436a3b5f635917bab240e1e070aab77554a62f99ed2666b67f858372d60ea418ef0f4d9d96807ed644f8c9664ef9740ead004a18f2b3ef873d7f4894b3a981313e700f95277d9975fee98604bc3aa01a943a66912097a4c394420c66123f6c873c93255a916bbcf923d66d9d721037fc65ef96a6882e876596c6a2515d132af2a283c29b0be1d07cc1e287ac07b1ca07d08c6325d9b07b9c16668f3ceccd18d4606501dfe88513b9b804ae7ee669a860fffe8518bfafca3b6a716ca585394c6365372db24fc2ef05be20d7727874824eba333fe8dd5ff9c586d493f07a54ad5f5b9f40d4661f2c95b941f0e90e1be9d059a8efb68725cbab6bac496593f8bd29fbb047cc04ef1b57f69820bd1b6dde976a01e6124b5f36c112ad075112e8a0bd5acf5d11e6db5d91cdae7b41b944c94192b961e8dd61443afacd00dc1aecc59ad1f3021af0c10eeb444968afa79519ca8c4b23da972f5cfb64912694ef4f63c1b9284020dd0f4d88379092f2716b48dce0122d619d89da75af2fe67304d185190f855aaac83f8b2ee8e9b51ca8211aa872fd4db652610bc03686affa1194fcee84778f79b93b1ede70be1645458ab1a7e504b6dbca6507a4c06dfe00a812387a90d7a17f64ecb9f3797f5bccf643f9c1c5bf81208af5f7cbebe4cb4591e64a2c979c3994bf19a3a70f8835822f18b2b898d60674af23faa1d78f1fa39d3087b3d74b7a7e5cf34abec6acd9351a1ef914a030f7fc068a9303c7531ed3bdc1f85763e09f062d49f93e59ce7ae48ba73da9814575cb7cdcc62b795ee63f76158d3bd47a7c8777d842403aeedc3f0761b417d4a8fa74d9a17af119ab03b3f8d4fa5d34c7aa8733aee90e3b4672963fa7c5b868e8c22d4644c6cc0dbb036901168438ec2eafc4e21b5f1e6e7995346c79df331a599d4c5db7c6c9ae307d68c62a52591881937433ecd709a9bd8b6c34b1af9128ea08af115efeb2217d242884b212ed3a0a5f4746875f2a7b2e0a7011df0e9d69277d29adeb524fb91cd0b8e021359b45885a8d025b72b8ae7291d3f65bee1ab8fbc213453ab5ba0e9fc4215048ed131d99b5eefac3ddb2a5850e050d469086b15c63392d262eb43033525f6e66825e4bcde247bef58f52239fc696473f10b28ba2c87c66270f8013ecbef43938079848c21adceaa8717f6c6947f45b5fe5e6e3c33003ad4384aeec84547038c58bb0c71c74ff63f4f971893a681e20d76b655e1bdaf6e76a70fcbc4397857fdf651f88c6faa809a4d5937a89fcbcaeca5816f14d168c2526555aec6f55b0203213b1271d738e0e6ba30b1216e025fddff4dea43b5c2ba390e73b9bd0527bbc987368b9690be6be5fe63543b46f9694cd8ef300686bfcd121fc0e5961a10f4297f91e22c3d14569391a3a386f3878dafac9a899923eacef0d1ba93f5d6da267f349729247747b4e6318267824e40aac01efd218d474805402689d1fa386b61746c1215e53dbc726e61aa8338b0049a36728481ecdee6c3db6c17a37efe4577d926ba84ec53787950ace1f09486fee0cecf1a06e4f37c900e54a480f8b0de524e213bd315e418df7f7024a5bc6ba6e8e31d92ce0bf187b89f7f8c1c5a80d26e0182ece45fe220840e1a9c9ca3627232cbc88e665fe917685cfcf4ff161c872d13c052c916ed58e6568669049c8ae5d12d549e85921914d2f895dbdb616cad9faf83c29a64ec390d98d9f22810e6791228151db517b96512a852cf4f1461d70ad19057a21af2c4d1831406b88ef950e8822ca1477c0102ffd2f03c86bb6d7ffa22c53e12a2d077298c617c566cacaa1531684725d9bf785d94d163aa39d4d68bdbfef2adc781cbb07b32ce3cc2a14989626e32a48db7d89b37836d3c40444e06ad9036dd0795bf1c8af6f6fedc8c2dbb26bac24a310d87dc14ac4ddbece6abf37faff0f39243d328cde98efce1d901a2cb468c51995986fb426ac327ead2528d5109025fac206d771194a1c608b3e5566f0cbba710e7a892f4f61bcb6892a605c3454d1a97fda7c1ff64f3bb8395523d2b723e9efc27282d1e91653159d39e7229d861104cd20f44129fbe7f71f34eab0655e9b458144aafa4a895b651994e67088a1d9a14b24a0f50018a77ded03cc3b0530f7c8373c52736d8b2cdadda0b6419cd3f131ea4e1e9aa13a15df4cdbd5de970bf71d8758ab038001b395b845863ac67f3edb6881b6e4bf835aee1334e1364cb2ef924875eddc04c286456d3a562f904406ee1921e6c3cdb36e42fd7d1edb33819d000f254afee358aecd5a6a2acffcdd3f6b178c27e0da713d01a2d917c026cc18e4aea49234f47bb89355d4a861edd5c718f45cbf55cecee0bd7ff7c990fd58aff3e82f438e3294810b45e3bce7d2991a7fa9951093fd6e6b052578374c4dd4c320e049da61693f5ec7c61f7905e5745548314f697ad3347119cf0cc718fcca66d11c48aaeb3aeac08f05461503df34a4996789858ba31454918d3cc0a3f96f06d733c2a96fc54f0908455fd4084131c1669dc5a1bbdafed5f5893ab28c8b842c13c2377ea8f85ff12ca925d5ce1bc1b146e0173238a2a383c2fc4a68078ba2d0ba72baac3b10b374a10c84e1fa3cc7d49ebf958d1e1d6f4a76db7cc278faa4bcc7ff491f16c6961f251afc204a2e14accb0781be1016a8be7997fcbe41536e3bda639d6574f71415da4e0b96d6af51a890006aac4561d848e2a7ed6acf44181ea2967e10388ba193e4016061a2946b28284ed9f7f3fda2824ace21952794f63c2b5826575b57da2c396fe4af314c5d0ee75e13d6b8fa590e7b58e04b2e6eaa8deae0a0038f2606b31f3ff7e1d7a922c428d7f4bac336564a4cce5aac05cf99a6b214f1b8d4ed60cadebcee99f4f8cb1885b2afe1a0be0108435d68318c2c2b2184d820978bd22d13732e705d50129c88fa33b779a7a3df56116094d63b2cb706328b8a127dc2fd089d56e3bbf1", 0x1000}, {&(0x7f0000002fc0)="1bdf12afac53b73161a4d8bfe72b348f0bda1209fbaa494a271692be5f4becd6a7161ee4c151dc756c00f0dbb85526323323b2843f12ca3d77bf1d3685c0924aa35c1982", 0x44}, {&(0x7f0000003040)="03280e3041e2899ee4f105ed47b007e81db51cfe1dfa144b0737c47d41ddebfae490621f3b9424316b384e99d8da4bac6fdcb4f8f09105d36254b7800732cc95dcce1287a4d6fe6441bd8cf047cb34b2ed63", 0x52}, {&(0x7f00000030c0)="390435c382479ff6d25e06c332160887df305816ac571b82ec58b762902f8a417f9ee9194f482484b6425865f056f43be6c9bcebf9ce8d114be01cc8ce62d76e17", 0x41}, {&(0x7f0000003140)="53d3419b6bbf4447e27ff589591a796da543dea3b491646e5c587597b56fd1516ebc1015b691168f96da1786b560ae3c77dd888275fc5dbf76c179e10018ec9a2dd17ccde3f97f3fd362c91e49e378ff99de94c6dc2043081e92d6bff779076c124b56eb27e2968c3ac22825c127904dbc5d08", 0x73}, {&(0x7f00000031c0)="6cf30facf02b7ea95d3da387920c6420515ef932df76179fd0120681e49308740b1fff8d826a6aa9d0fd72b90da9ef820a2507d8733a440040aec5f11cf5ff47e16f2bd9a95e5428a7f541273835a8a37c949451bad0865122d8590157d78173f1ebc59278aa1c4b598165864f0e7f8eda0230b1c5b2d576db1472769f7fdc906e92d5d406268844d7a44a0ca4460ba5ee9821afae05ddc28e6c54f4d7d1c171726486d961cd337cdfa24599fda1d90adcb13db6057b674f1583655f74e402175cf44c85730c7f807834ef26bf29417605a11ddff3050d2b3a", 0xd9}, {&(0x7f00000032c0)="6907a0110cf26d43bf1931e56b733350583b69bc775568b26811ebae8039f79d5ed3ad24eb33e21d7d19ce266bac2ccf0db5a94a0ace97e86bd756b2396918b6908db6ad6a79758bf03ec2047577", 0x4e}], 0x9, &(0x7f00000033c0)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0xc0}}, @ip_tos_int={{0x10, 0x0, 0x1, 0xfffffffe}}, @ip_retopts={{0xdc, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x44, 0x98, 0x3, 0x3, [{@local, 0xb}, {@private=0xa010102, 0x9}, {@multicast1, 0x40}, {@rand_addr=0x64010100, 0x60acf57d}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x2}, {@multicast1, 0x8}, {@local, 0x2}]}, @cipso={0x86, 0x29, 0x3, [{0x7, 0x7, "2fc835a57a"}, {0x1, 0x10, "6d6ce0c7f8841a506965cb8ae42a"}, {0x6, 0xc, "5ad53b6c72037c380b09"}]}, @timestamp_prespec={0x44, 0x34, 0x10, 0x3, 0x9, [{@rand_addr=0x64010102, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@broadcast, 0x2}, {@local, 0x4}, {@private=0xa010100, 0x5}, {@empty, 0x9de}]}, @cipso={0x86, 0x2d, 0x1, [{0x2, 0x7, "440d4ad020"}, {0x6, 0xe, "1b5a4459b66f8699354530b0"}, {0x7, 0x12, "ba6591098753b5e55fdb816b4aa9cf9c"}]}]}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r5, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r4, @broadcast, @multicast2}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x101}}], 0x13c}}, {{&(0x7f0000003500)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f00000035c0)=[{&(0x7f0000003540)="fc13f75226a4a2f278392cebdf120bcb6c1d20b4fa37f23a7d8b570df712496e9b79d4939e1ea67acdfaf565dbdb6a09c0bb95ed51215267489eacdfb67ea7c243b0f7f66083b1fa2bcd94fbf3811c85ab473a48dec8d3310095124d99aab3b3cd17a97f6889b25ab26e9740644e6aec", 0x70}], 0x1, &(0x7f0000003600)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x7f}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003800)=[{&(0x7f0000003640)="608316d7972bb4bfb4a59c248593295a819b57dc1f8dae375eaef854fe3d7e55bb73089a0e3500f4", 0x28}, {&(0x7f0000003680)="bd8a19862818c12619f78c3850d64fc9dd512528dc412246dd4b6eaf4866af1af3807408654656cfcc8bc82c0d844027502e9347bc47790c0ec992a36c4e8a2964076de6362b9e225ebda1", 0x4b}, {&(0x7f0000003700)="942bd5ce63375ff331daa2c11263ddf72a53ad8dd42a04b91356d74a928788b654408fe876a302df06ff09cb42e8dcf57272c8c7778b4ac7c0fd3277d22431ce593c563228d293ae9a2f8b35244010f1d2173d01424ade837499043e52a5afe66cc6b4747cdfc36e29142f8c279e47f9c69ead5f84165f2f81367402d7fc", 0x7e}, {&(0x7f0000003780)="951311a80e0441c7dbdb5f1f64b5cf4255e7f1398bab1cae8e1c6636b9f9749d7a6409dd819bbe4eb48b87739f654852bbc622", 0x33}, {&(0x7f00000037c0)="3405918a570e23f6fc3ec3b0813f9b9423bdf49f965a6fc20528d27be45ca6b8ed0b8e372098d4eaddea24", 0x2b}], 0x5, &(0x7f0000003840)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0x81}}, @ip_ttl={{0x10, 0x0, 0x2, 0x8}}, @ip_ttl={{0x10, 0x0, 0x2, 0x1}}, @ip_ttl={{0x10, 0x0, 0x2, 0x2}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r4, @remote, @multicast2}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r4, @empty, @rand_addr=0x64010102}}}, @ip_ttl={{0x10, 0x0, 0x2, 0xfff}}, @ip_retopts={{0xc4, 0x0, 0x7, {[@cipso={0x86, 0x4a, 0x3, [{0x7, 0x10, "9aaa8c2ff2620a219fea5e85cdb3"}, {0x6, 0x10, "34b99ec01e2c197d1a752ba7542a"}, {0x2, 0x3, "84"}, {0x5, 0x9, "5718ebfb7961cf"}, {0x7, 0xe, "edd3302931b7bab2d8e4d528"}, {0x0, 0xa, "991fb19068621781"}]}, @lsrr={0x83, 0x17, 0xb9, [@multicast2, @local, @rand_addr=0x64010101, @broadcast, @dev={0xac, 0x14, 0x14, 0x44}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0x73, 0x3, 0x4, [{@remote}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x5}]}, @timestamp_prespec={0x44, 0x3c, 0x75, 0x3, 0x6, [{@broadcast, 0x3}, {@empty, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x400}, {@loopback, 0x2f5}, {@private=0xa010101, 0xfffff6d0}, {@broadcast, 0x3}, {@rand_addr=0x64010101, 0xfffff800}]}]}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0xd}}], 0x164}}, {{&(0x7f00000039c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000003bc0)=[{&(0x7f0000003a00)="3d76a33172ce7da641142ce03d07494c83babee202c88c124fa8b9988964f50830efda458ca5b8bc73b41abb0b2947baf5e326cc0f5dff60582302d74d3765b7b2e80cfa41c15b782b571db5b173e27076152302302a8f0c3deaf503dbc6038e998131b34f26797b92a8ca8533459ec74fc7b574cf874829c51d83f71a17ae561110a7ddaebd3e7e162a74831eda713d1b0610b7a97f568601c01b1403bad71ea362a5f6fb0597813e8169f10440c6f5fd7cbc62caad06be38", 0xb9}, {&(0x7f0000003ac0)="204a5d1bcdcb270ade1987b6ef8682338754231e1b0f88ed8ae7a93a23a55c5746e7f61accb74c64e09dba0cd0993ee00925c13ee437a842ba744a1212de0a9f4d77ae52811813572750ec822986c7765797b54a3c08e6261eebe919f8f50a06a112cdca3f6719ae3ab916f43d931e29db73469e27a6a2758bbcb875aa422fe5cbf31b093e5f1723294bdb8ff0eee69d81da67571abd09abe5a046282bff865b6c5a8a4ea430b3e4215c430c27b2159c57069575d4b3380809d33a3a64731133bb8b5d8ac3c928849f05", 0xca}], 0x2, &(0x7f0000003c00)=[@ip_tos_int={{0x10}}, @ip_tos_int={{0x10}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x2}}, @ip_retopts={{0x88, 0x0, 0x7, {[@end, @lsrr={0x83, 0x1b, 0xdb, [@dev={0xac, 0x14, 0x14, 0x25}, @rand_addr=0x64010100, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x33}, @remote]}, @timestamp_addr={0x44, 0x34, 0x7e, 0x1, 0x1, [{@local, 0x3}, {@remote, 0xff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@rand_addr=0x64010100, 0x7}, {@local, 0x9}, {@loopback, 0x5}]}, @cipso={0x86, 0x27, 0x0, [{0x7, 0x11, "ee00cf184ee2edc6b04c06db119223"}, {0x7, 0x6, "4d7b806e"}, {0x1, 0xa, "beb29aee98e789d8"}]}, @ra={0x94, 0x4}]}}}], 0xb8}}], 0x7, 0x4004011) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x48}}, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x64) 33.489825ms ago: executing program 5 (id=1684): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000006040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r4, &(0x7f0000006140)={0x0, 0x0, &(0x7f0000006100)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="090925bd7000fcdbdf257c00000008000300", @ANYRES32=r5, @ANYBLOB="d8c472ee9c3405198976eb9803ade7f7a0b544a79ccfcdbb68cc1121431e352ca2443511ba952884b6d6adcf6b5f539a5a5955606c6a302b5b49de74fe17592ffb053fd8336fdc84e96bcfaa3e0a30f27cf751bf4a1369318d9174e418939728260e3ee71949bbaa717e13a01b33055eebd2d8fda6cc75a6f0b4a952d6e27c53dffce096eced65b362bc440f91e2f32a2e08c2a1ff48ae6ef5a3804826e0d800"/174], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040010) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0xbdf) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r6, 0xab00, r7) ioctl$NBD_DO_IT(r6, 0xab03) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) openat$cdrom(0xffffff9c, 0x0, 0x10d901, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xd2d8, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001, @void, @value}, 0x94) socket$can_j1939(0x1d, 0x2, 0x7) r11 = inotify_init1(0x0) inotify_add_watch(r11, &(0x7f00000000c0)='.\x00', 0xa4000061) r12 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r12, 0x0, 0x0, 0x0) r13 = syz_io_uring_setup(0x512f, &(0x7f00000004c0)={0x0, 0x3, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4000) r16 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r16, 0x0) syz_io_uring_submit(r14, r15, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r10, 0x5, {0x0, r2}, 0x3, 0x0, 0x0, {0x0, 0x0, r9}}) io_uring_enter(r13, 0x35cc, 0xfffffffd, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=1685): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = syz_io_uring_setup(0x4072, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000ac0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x14}) io_uring_enter(r3, 0x567, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e65772064656661756c7420757365723a73797a11303030303030303030303030303010303430393300"], 0x2a, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a3000000000090002"], 0x54}}, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a"], 0xfdef) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) kernel console output (not intermixed with test programs): atman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.351358][ T9987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.356070][ T9987] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.359496][ T9987] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.362189][ T9987] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.365163][ T9987] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.400730][ T110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.403838][ T110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.415399][T10076] siw: device registration error -23 [ 278.423532][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.427844][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.529583][T10078] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1163'. [ 278.824463][ T5946] Bluetooth: hci0: command tx timeout [ 279.623980][T10094] binder: 10093:10094 ioctl 4018620d 0 returned -22 [ 279.760315][T10098] binder: BINDER_SET_CONTEXT_MGR already set [ 279.762803][T10098] binder: 10097:10098 ioctl 4018620d 80000040 returned -16 [ 279.929499][T10100] JFS: discard option not supported on device [ 279.934480][T10100] Mount JFS Failure: -22 [ 279.936329][T10100] jfs_mount failed w/return code = -22 [ 280.234247][ T59] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 280.394208][ T59] usb 7-1: Using ep0 maxpacket: 8 [ 280.679467][ T59] usb 7-1: unable to get BOS descriptor or descriptor too short [ 280.682913][ T59] usb 7-1: too many configurations: 141, using maximum allowed: 8 [ 280.688318][ T59] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 280.690800][ T59] usb 7-1: can't read configurations, error -71 [ 280.904371][ T5946] Bluetooth: hci0: command tx timeout [ 281.010570][T10108] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1194'. [ 281.014047][T10108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1194'. [ 281.378773][T10120] siw: device registration error -23 [ 282.112089][T10128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1199'. [ 282.122766][T10128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1199'. [ 282.708785][T10143] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1202'. [ 282.984357][ T5946] Bluetooth: hci0: command tx timeout [ 283.047728][ T40] kauditd_printk_skb: 263 callbacks suppressed [ 283.047738][ T40] audit: type=1326 audit(1750073182.428:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10145 comm="syz.3.1203" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc6579 code=0x0 [ 283.385008][ T40] audit: type=1326 audit(1750073182.758:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10149 comm="syz.5.1204" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f01579 code=0x0 [ 284.169636][ T5980] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 284.328873][T10166] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1209'. [ 284.354884][ T5980] usb 6-1: Using ep0 maxpacket: 16 [ 284.359495][ T5980] usb 6-1: config 0 has no interfaces? [ 284.386189][ T5980] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 284.394197][ T5980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.397501][ T5980] usb 6-1: Product: syz [ 284.404263][ T5980] usb 6-1: Manufacturer: syz [ 284.414214][ T5980] usb 6-1: SerialNumber: syz [ 284.425073][ T5980] usb 6-1: config 0 descriptor?? [ 284.467567][T10168] ptrace attach of "/syz-executor exec"[5954] was attempted by " ú“\x0c¬¹H;¤'ýëãSde/È|¥zPüÚиWåÌ\x0b”PŠ<ÇI7ô{‚ŸûWr•×¢Ó‡amL5Ûï{ô„Þ¶-Ú¨ÜøžØ¸­…›¼»E“fŽYSõ7£?šVê½sˆëŒ\x0b†MÈüÚáÐ÷Æ`ÖÓðg‰ï°Ø±/â—’ýäUéµCŽÎöOGËDn›û\x07Âæw™¹m}O²ñq¦ã¬p×]ŒðK|I(Ùïó‹9¯/èk¾ìY_¡Ö¤vqyØóÿ×rƲÈ.+/ñnîyŠ]§6ÖB\x5c*‰ÈõLo§Ÿ× …\x0a ¢BÚ\x0dáÛAnÿë¬õ\x0bptQUolLê„ÓobBàÀM¦ñÖãóȹ.š»T3#(Dª\x1bªº˜™ä?-íMóŠMÞ\x0dÅ{ÞX¯óâ˜Lhl1G‡J(°ï‰Ÿ™\x0a˜«À¹\x07ê‚b\x0cf¸Û\x5c–L™e#ç½y„wÝO%Ë0õ¥,Ž¨zÇ‚œrÏ\x5cHô\x22ý@)EâlĪoª´=æÉ0}Æ|šö¶—m ÀÉ~ŽM÷ÏUK\x0býQoDU1h$étïQf‘\x0b½;\x0bvNõT/ñörP£Àx0mþ؇dG>Ît5QêI§¡šÝ0kŸópžì”;†€Èî©tÒ>?7~ðéÕžþç8ç)>‡\x0a.Fâv\x5c0CPª{©\x07Ô­4OT)®¥ü%ù³DkfCkF ç±¥;¡Ðm\x0c•vä\x0cTʪz5©ñmÖ¢´—ïvÜÄà‰Ä«'c®üß^ت°g_\x0bÆ…8±)c,¨(qøáeäB¾ðãã‘»SPt4äo¹ ¾I„HwL#©–@mU¡pªE¢^aÒÉgh~d¬_ö­9\x07r|ÖçGJj+&Ò½k(‘\x07”êërnéE§4¼(ŸõÇó#ë×\x0b YÅβBÇäˆ\x0aЦ&ÆþRý`µ?èóL1t¸Ž÷ÎÕ«wËÑ.Mç=3ª|G‹÷ƒ“sùmƒgî4`|\x22{б춋¬½†1â[{þȯw/B‹_g»6-òqyk*™o¯’\x0d\x5cc8ÀèÌÿ\x5c [ 284.726766][ T5980] usb 6-1: USB disconnect, device number 21 [ 285.368659][T10171] binder: BINDER_SET_CONTEXT_MGR already set [ 285.370609][T10171] binder: 10170:10171 ioctl 4018620d 80000040 returned -16 [ 285.374902][T10171] FAULT_INJECTION: forcing a failure. [ 285.374902][T10171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.385159][T10171] CPU: 3 UID: 0 PID: 10171 Comm: syz.1.1212 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 285.385174][T10171] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 285.385182][T10171] Call Trace: [ 285.385186][T10171] [ 285.385190][T10171] dump_stack_lvl+0x16c/0x1f0 [ 285.385212][T10171] should_fail_ex+0x512/0x640 [ 285.385230][T10171] _copy_to_user+0x32/0xd0 [ 285.385249][T10171] simple_read_from_buffer+0xcb/0x170 [ 285.385266][T10171] proc_fail_nth_read+0x197/0x270 [ 285.385282][T10171] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 285.385295][T10171] ? rw_verify_area+0xcf/0x680 [ 285.385309][T10171] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 285.385321][T10171] vfs_read+0x1e1/0xc60 [ 285.385337][T10171] ? fdget_pos+0x2a2/0x370 [ 285.385354][T10171] ? __pfx_vfs_read+0x10/0x10 [ 285.385367][T10171] ? find_held_lock+0x2b/0x80 [ 285.385382][T10171] ? __fget_files+0x20e/0x3c0 [ 285.385400][T10171] ksys_read+0x12a/0x250 [ 285.385415][T10171] ? __pfx_ksys_read+0x10/0x10 [ 285.385431][T10171] ? rcu_is_watching+0x12/0xc0 [ 285.385444][T10171] __do_fast_syscall_32+0x7c/0x3a0 [ 285.385456][T10171] do_fast_syscall_32+0x32/0x80 [ 285.385466][T10171] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 285.385480][T10171] RIP: 0023:0xf7fd5579 [ 285.385489][T10171] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 285.385500][T10171] RSP: 002b:00000000f50f6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 285.385510][T10171] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f50f6620 [ 285.385517][T10171] RDX: 000000000000000f RSI: 00000000f7462ff4 RDI: 0000000000000000 [ 285.385523][T10171] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 285.385529][T10171] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 285.385535][T10171] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 285.385549][T10171] [ 285.405683][T10173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1211'. [ 285.681716][T10180] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1216'. [ 286.860416][T10203] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1219'. [ 287.077721][ T1153] Bluetooth: (null): Invalid header checksum [ 287.079985][ T1153] Bluetooth: (null): Invalid header checksum [ 287.196110][ T12] Bluetooth: (null): Invalid header checksum [ 287.304730][ T12] Bluetooth: (null): Invalid header checksum [ 287.417818][ T1153] Bluetooth: (null): Invalid header checksum [ 287.526000][ T1148] Bluetooth: (null): Invalid header checksum [ 287.645261][ T12] Bluetooth: (null): Invalid header checksum [ 287.968703][T10207] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1221'. [ 289.033155][T10225] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1226'. [ 289.198569][T10230] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 289.218644][T10230] kvm: pic: non byte read [ 289.221496][T10230] kvm: pic: non byte read [ 289.224373][T10230] kvm: pic: level sensitive irq not supported [ 289.225061][T10230] kvm: pic: non byte read [ 289.233770][T10230] kvm: pic: non byte read [ 289.241033][T10230] kvm: pic: non byte read [ 289.247613][T10230] kvm: pic: non byte read [ 289.253758][T10230] kvm: pic: level sensitive irq not supported [ 289.255780][T10230] kvm: pic: non byte read [ 290.311815][T10250] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1232'. [ 290.535734][T10261] overlay: ./file0 is not a directory [ 290.582680][T10260] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1233'. [ 290.585861][T10260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1233'. [ 290.591098][T10260] IPv6: sit1: Disabled Multicast RS [ 290.593402][T10260] sit1: entered allmulticast mode [ 290.618494][T10263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1237'. [ 290.720566][T10269] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 290.722727][T10269] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 290.725575][T10269] vhci_hcd vhci_hcd.0: Device attached [ 290.728916][T10269] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 290.733696][T10269] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(15) [ 290.735962][T10269] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 290.738617][T10269] vhci_hcd vhci_hcd.0: Device attached [ 290.741830][T10269] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(17) [ 290.743988][T10269] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 290.747446][T10269] vhci_hcd vhci_hcd.0: Device attached [ 290.750653][T10269] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(19) [ 290.752811][T10269] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 290.755839][T10269] vhci_hcd vhci_hcd.0: Device attached [ 290.758258][T10269] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 290.762824][T10269] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 290.782959][T10278] vhci_hcd: connection closed [ 290.782983][T10275] vhci_hcd: connection closed [ 290.784626][ T80] vhci_hcd: stop threads [ 290.786468][T10273] vhci_hcd: connection closed [ 290.786961][T10270] vhci_hcd: connection closed [ 290.790883][ T80] vhci_hcd: release socket [ 290.795291][ T80] vhci_hcd: disconnect device [ 290.798052][ T80] vhci_hcd: stop threads [ 290.799481][ T80] vhci_hcd: release socket [ 290.800995][ T80] vhci_hcd: disconnect device [ 290.803427][ T80] vhci_hcd: stop threads [ 290.805306][ T80] vhci_hcd: release socket [ 290.806878][ T80] vhci_hcd: disconnect device [ 290.808598][ T80] vhci_hcd: stop threads [ 290.810403][ T80] vhci_hcd: release socket [ 290.811839][ T80] vhci_hcd: disconnect device [ 291.869236][T10291] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1241'. [ 292.324210][ T4288] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 292.512520][ T4288] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 292.520181][ T4288] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 292.523770][ T4288] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 292.528583][ T4288] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.598062][T10294] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 292.723829][ T4288] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 293.285075][T10314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1247'. [ 293.426569][ T4288] usb 7-1: USB disconnect, device number 23 [ 294.009955][T10330] openvswitch: netlink: Missing key (keys=40, expected=100) [ 294.410344][T10340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1254'. [ 294.414476][T10340] bridge_slave_1: left allmulticast mode [ 294.416848][T10340] bridge_slave_1: left promiscuous mode [ 294.419596][T10340] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.425988][T10340] bridge_slave_0: left allmulticast mode [ 294.428442][T10340] bridge_slave_0: left promiscuous mode [ 294.431117][T10340] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.064268][T10346] input: syz1 as /devices/virtual/input/input19 [ 295.151513][T10352] netlink: 'syz.2.1257': attribute type 10 has an invalid length. [ 295.165515][T10351] bond3: (slave geneve2): Releasing active interface [ 295.167838][T10351] geneve2: left promiscuous mode [ 295.221238][T10352] bond0: left promiscuous mode [ 295.233357][T10352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.236135][T10355] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1258'. [ 295.259858][T10352] team0: Port device bond0 added [ 295.271901][T10355] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.241430][T10372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1263'. [ 297.284043][T10376] macvtap2: entered allmulticast mode [ 297.398012][T10379] tmpfs: Bad value for 'mpol' [ 297.788005][T10387] syzkaller1: entered promiscuous mode [ 297.790055][T10387] syzkaller1: entered allmulticast mode [ 297.893366][T10392] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 297.898479][T10392] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1269'. [ 297.974865][T10393] bond0: (slave bond_slave_0): Releasing backup interface [ 297.977476][T10393] bond_slave_0: left promiscuous mode [ 297.981612][T10393] bond0: (slave bond_slave_1): Releasing backup interface [ 297.985503][T10393] bond_slave_1: left promiscuous mode [ 297.998254][T10393] team0: Port device team_slave_0 removed [ 298.005238][T10394] netlink: 'syz.3.1269': attribute type 10 has an invalid length. [ 298.015294][T10393] team0: Port device team_slave_1 removed [ 298.028791][T10394] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 298.034151][T10394] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 298.037241][T10394] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 298.267632][T10398] MPI: mpi too large (124808 bits) [ 298.311896][T10396] lo speed is unknown, defaulting to 1000 [ 298.369328][T10401] ubi: mtd0 is already attached to ubi31 [ 298.408915][T10407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1272'. [ 298.424020][T10396] lo speed is unknown, defaulting to 1000 [ 298.426667][T10396] lo speed is unknown, defaulting to 1000 [ 298.451147][T10409] FAULT_INJECTION: forcing a failure. [ 298.451147][T10409] name failslab, interval 1, probability 0, space 0, times 0 [ 298.455392][T10409] CPU: 3 UID: 0 PID: 10409 Comm: syz.1.1273 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 298.455407][T10409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 298.455414][T10409] Call Trace: [ 298.455417][T10409] [ 298.455421][T10409] dump_stack_lvl+0x16c/0x1f0 [ 298.455442][T10409] should_fail_ex+0x512/0x640 [ 298.455458][T10409] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 298.455477][T10409] should_failslab+0xc2/0x120 [ 298.455487][T10409] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 298.455503][T10409] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 298.455516][T10409] ? __alloc_skb+0x2b2/0x380 [ 298.455534][T10409] __alloc_skb+0x2b2/0x380 [ 298.455550][T10409] ? __pfx___alloc_skb+0x10/0x10 [ 298.455572][T10409] alloc_skb_with_frags+0xe0/0x860 [ 298.455583][T10409] ? aa_label_sk_perm+0x19b/0x5a0 [ 298.455607][T10409] ? mark_held_locks+0x49/0x80 [ 298.455626][T10409] sock_alloc_send_pskb+0x7fb/0x990 [ 298.455647][T10409] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 298.455663][T10409] ? arch_scale_cpu_capacity+0x15/0xb0 [ 298.455685][T10409] unix_stream_sendmsg+0xbdc/0x11d0 [ 298.455703][T10409] ? aa_sk_perm+0x2f4/0xb10 [ 298.455716][T10409] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 298.455732][T10409] ? __pfx_aa_sk_perm+0x10/0x10 [ 298.455745][T10409] ? __import_iovec+0x1dd/0x650 [ 298.455758][T10409] ____sys_sendmsg+0xa98/0xc70 [ 298.455771][T10409] ? gfs2_find_jhead+0x351/0xe10 [ 298.455785][T10409] ? __pfx_____sys_sendmsg+0x10/0x10 [ 298.455797][T10409] ? get_compat_msghdr+0x11a/0x170 [ 298.455815][T10409] ___sys_sendmsg+0x134/0x1d0 [ 298.455833][T10409] ? __pfx____sys_sendmsg+0x10/0x10 [ 298.455857][T10409] ? find_held_lock+0x2b/0x80 [ 298.455876][T10409] __sys_sendmsg+0x16d/0x220 [ 298.455893][T10409] ? __pfx___sys_sendmsg+0x10/0x10 [ 298.455916][T10409] ? rcu_is_watching+0x12/0xc0 [ 298.455930][T10409] __do_fast_syscall_32+0x7c/0x3a0 [ 298.455942][T10409] do_fast_syscall_32+0x32/0x80 [ 298.455952][T10409] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 298.455965][T10409] RIP: 0023:0xf7fd5579 [ 298.455974][T10409] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 298.455985][T10409] RSP: 002b:00000000f50f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 298.455995][T10409] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800001c0 [ 298.456002][T10409] RDX: 0000000004044881 RSI: 0000000000000000 RDI: 0000000000000000 [ 298.456008][T10409] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 298.456014][T10409] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 298.456020][T10409] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 298.456043][T10409] [ 298.823769][T10424] FAULT_INJECTION: forcing a failure. [ 298.823769][T10424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.842465][T10424] CPU: 1 UID: 0 PID: 10424 Comm: syz.1.1275 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 298.842490][T10424] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 298.842501][T10424] Call Trace: [ 298.842508][T10424] [ 298.842515][T10424] dump_stack_lvl+0x16c/0x1f0 [ 298.842549][T10424] should_fail_ex+0x512/0x640 [ 298.842579][T10424] _copy_to_user+0x32/0xd0 [ 298.842609][T10424] simple_read_from_buffer+0xcb/0x170 [ 298.842635][T10424] proc_fail_nth_read+0x197/0x270 [ 298.842658][T10424] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 298.842703][T10424] ? rw_verify_area+0xcf/0x680 [ 298.842726][T10424] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 298.842756][T10424] vfs_read+0x1e1/0xc60 [ 298.842781][T10424] ? fdget_pos+0x2a2/0x370 [ 298.842808][T10424] ? __pfx_vfs_read+0x10/0x10 [ 298.842829][T10424] ? find_held_lock+0x2b/0x80 [ 298.842858][T10424] ? __fget_files+0x20e/0x3c0 [ 298.842890][T10424] ksys_read+0x12a/0x250 [ 298.842912][T10424] ? __pfx_ksys_read+0x10/0x10 [ 298.842937][T10424] ? rcu_is_watching+0x12/0xc0 [ 298.842959][T10424] __do_fast_syscall_32+0x7c/0x3a0 [ 298.842978][T10424] do_fast_syscall_32+0x32/0x80 [ 298.842995][T10424] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 298.843016][T10424] RIP: 0023:0xf7fd5579 [ 298.843031][T10424] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 298.843047][T10424] RSP: 002b:00000000f50b4590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 298.843064][T10424] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f50b4620 [ 298.843075][T10424] RDX: 000000000000000f RSI: 00000000f7462ff4 RDI: 0000000000000000 [ 298.843085][T10424] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 298.843095][T10424] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 298.843106][T10424] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 298.843130][T10424] [ 299.227751][T10436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1281'. [ 300.265949][T10457] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1288'. [ 300.402470][T10460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1283'. [ 300.578874][T10465] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1290'. [ 300.645172][T10466] 9pnet_virtio: no channels available for device syz [ 301.310907][T10470] syz.1.1291 (10470): drop_caches: 2 [ 301.719742][T10476] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1293'. [ 301.726007][T10476] bridge_slave_1: left allmulticast mode [ 301.727918][T10476] bridge_slave_1: left promiscuous mode [ 301.729938][T10476] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.734769][T10476] bridge_slave_0: left allmulticast mode [ 301.736678][T10476] bridge_slave_0: left promiscuous mode [ 301.739630][T10476] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.706067][T10488] FAULT_INJECTION: forcing a failure. [ 302.706067][T10488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.711162][T10488] CPU: 0 UID: 0 PID: 10488 Comm: syz.2.1296 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 302.711177][T10488] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 302.711184][T10488] Call Trace: [ 302.711188][T10488] [ 302.711192][T10488] dump_stack_lvl+0x16c/0x1f0 [ 302.711226][T10488] should_fail_ex+0x512/0x640 [ 302.711245][T10488] _copy_from_user+0x2e/0xd0 [ 302.711263][T10488] get_compat_msghdr+0xa7/0x170 [ 302.711275][T10488] ? __pfx_get_compat_msghdr+0x10/0x10 [ 302.711286][T10488] ? __pfx__kstrtoull+0x10/0x10 [ 302.711302][T10488] ___sys_sendmsg+0x1ae/0x1d0 [ 302.711321][T10488] ? __pfx____sys_sendmsg+0x10/0x10 [ 302.711337][T10488] ? __lock_acquire+0x622/0x1c90 [ 302.711369][T10488] __sys_sendmmsg+0x2f9/0x420 [ 302.711388][T10488] ? __pfx___sys_sendmmsg+0x10/0x10 [ 302.711410][T10488] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 302.711434][T10488] ? fput+0x70/0xf0 [ 302.711445][T10488] ? ksys_write+0x1ac/0x250 [ 302.711460][T10488] ? __pfx_ksys_write+0x10/0x10 [ 302.711477][T10488] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 302.711489][T10488] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 302.711506][T10488] __do_fast_syscall_32+0x7c/0x3a0 [ 302.711518][T10488] do_fast_syscall_32+0x32/0x80 [ 302.711528][T10488] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 302.711543][T10488] RIP: 0023:0xf712e579 [ 302.711552][T10488] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 302.711562][T10488] RSP: 002b:00000000f50fd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 302.711572][T10488] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800092c0 [ 302.711579][T10488] RDX: 00000000000004ff RSI: 0000000000000000 RDI: 0000000000000000 [ 302.711585][T10488] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 302.711591][T10488] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 302.711597][T10488] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 302.711611][T10488] [ 304.313107][ T40] audit: type=1326 audit(1750073203.688:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10505 comm="syz.1.1303" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd5579 code=0x0 [ 305.502927][T10522] FAULT_INJECTION: forcing a failure. [ 305.502927][T10522] name failslab, interval 1, probability 0, space 0, times 0 [ 305.506999][T10522] CPU: 0 UID: 0 PID: 10522 Comm: syz.1.1306 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 305.507025][T10522] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 305.507032][T10522] Call Trace: [ 305.507036][T10522] [ 305.507041][T10522] dump_stack_lvl+0x16c/0x1f0 [ 305.507061][T10522] should_fail_ex+0x512/0x640 [ 305.507082][T10522] should_failslab+0xc2/0x120 [ 305.507093][T10522] __kmalloc_cache_noprof+0x6a/0x3e0 [ 305.507109][T10522] ? sctp_add_bind_addr+0xae/0x3f0 [ 305.507128][T10522] sctp_add_bind_addr+0xae/0x3f0 [ 305.507146][T10522] sctp_copy_local_addr_list+0x39d/0x5a0 [ 305.507161][T10522] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 305.507175][T10522] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 305.507191][T10522] ? sctp_bind_addr_copy+0xe0/0x530 [ 305.507207][T10522] sctp_bind_addr_copy+0xe0/0x530 [ 305.507227][T10522] sctp_connect_new_asoc+0x1d7/0x790 [ 305.507243][T10522] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 305.507258][T10522] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 305.507273][T10522] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 305.507287][T10522] sctp_sendmsg+0x15f9/0x1ee0 [ 305.507306][T10522] ? __pfx_sctp_sendmsg+0x10/0x10 [ 305.507322][T10522] ? __pfx___might_resched+0x10/0x10 [ 305.507338][T10522] ? __might_fault+0xe3/0x190 [ 305.507354][T10522] ? __pfx_aa_sk_perm+0x10/0x10 [ 305.507370][T10522] ? __pfx_sctp_sendmsg+0x10/0x10 [ 305.507384][T10522] inet_sendmsg+0x11c/0x140 [ 305.507401][T10522] __sys_sendto+0x43c/0x520 [ 305.507419][T10522] ? __pfx___sys_sendto+0x10/0x10 [ 305.507448][T10522] ? ksys_write+0x1ac/0x250 [ 305.507466][T10522] __ia32_sys_sendto+0xdd/0x1b0 [ 305.507481][T10522] ? lockdep_hardirqs_on+0x7c/0x110 [ 305.507498][T10522] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 305.507516][T10522] __do_fast_syscall_32+0x7c/0x3a0 [ 305.507528][T10522] do_fast_syscall_32+0x32/0x80 [ 305.507538][T10522] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 305.507553][T10522] RIP: 0023:0xf7fd5579 [ 305.507561][T10522] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 305.507573][T10522] RSP: 002b:00000000f50f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 305.507583][T10522] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800004c0 [ 305.507590][T10522] RDX: 000000000000ff04 RSI: 00000000000000c0 RDI: 00000000800001c0 [ 305.507596][T10522] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 305.507602][T10522] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 305.507608][T10522] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 305.507622][T10522] [ 305.765449][T10535] FAULT_INJECTION: forcing a failure. [ 305.765449][T10535] name failslab, interval 1, probability 0, space 0, times 0 [ 305.769412][T10535] CPU: 1 UID: 0 PID: 10535 Comm: syz.2.1310 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 305.769426][T10535] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 305.769433][T10535] Call Trace: [ 305.769437][T10535] [ 305.769442][T10535] dump_stack_lvl+0x16c/0x1f0 [ 305.769462][T10535] should_fail_ex+0x512/0x640 [ 305.769479][T10535] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 305.769498][T10535] should_failslab+0xc2/0x120 [ 305.769509][T10535] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 305.769525][T10535] ? __alloc_skb+0x2b2/0x380 [ 305.769544][T10535] __alloc_skb+0x2b2/0x380 [ 305.769560][T10535] ? __pfx___alloc_skb+0x10/0x10 [ 305.769581][T10535] netlink_alloc_large_skb+0x69/0x130 [ 305.769595][T10535] netlink_sendmsg+0x6a1/0xdd0 [ 305.769609][T10535] ? __pfx_netlink_sendmsg+0x10/0x10 [ 305.769623][T10535] ? __import_iovec+0x1dd/0x650 [ 305.769636][T10535] ____sys_sendmsg+0xa98/0xc70 [ 305.769650][T10535] ? __pfx_____sys_sendmsg+0x10/0x10 [ 305.769663][T10535] ? get_compat_msghdr+0x11a/0x170 [ 305.769680][T10535] ___sys_sendmsg+0x134/0x1d0 [ 305.769698][T10535] ? __pfx____sys_sendmsg+0x10/0x10 [ 305.769722][T10535] ? find_held_lock+0x2b/0x80 [ 305.769742][T10535] __sys_sendmsg+0x16d/0x220 [ 305.769759][T10535] ? __pfx___sys_sendmsg+0x10/0x10 [ 305.769783][T10535] ? rcu_is_watching+0x12/0xc0 [ 305.769796][T10535] __do_fast_syscall_32+0x7c/0x3a0 [ 305.769808][T10535] do_fast_syscall_32+0x32/0x80 [ 305.769818][T10535] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 305.769832][T10535] RIP: 0023:0xf712e579 [ 305.769841][T10535] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 305.769852][T10535] RSP: 002b:00000000f511e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 305.769862][T10535] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000800 [ 305.769869][T10535] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 305.769875][T10535] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 305.769881][T10535] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 305.769890][T10535] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 305.769904][T10535] [ 306.564513][T10547] lo speed is unknown, defaulting to 1000 [ 306.608807][T10548] ubi: mtd0 is already attached to ubi31 [ 306.652963][T10547] lo speed is unknown, defaulting to 1000 [ 306.655680][T10547] lo speed is unknown, defaulting to 1000 [ 307.066815][T10559] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 307.333595][T10563] siw: device registration error -23 [ 307.531056][T10569] netlink: 'syz.1.1318': attribute type 8 has an invalid length. [ 308.404203][ T29] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 308.419140][T10597] siw: device registration error -23 [ 308.897487][ T29] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 308.901260][ T29] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 308.905061][ T29] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 308.908517][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.917039][T10588] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 308.931026][ T29] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 309.140487][ T29] usb 7-1: USB disconnect, device number 24 [ 310.368990][T10617] lo speed is unknown, defaulting to 1000 [ 310.493974][T10617] lo speed is unknown, defaulting to 1000 [ 310.496609][T10617] lo speed is unknown, defaulting to 1000 [ 311.255129][T10645] siw: device registration error -23 [ 311.495295][ T59] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 311.645472][ T59] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.648896][ T59] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 311.654556][ T59] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 311.658377][ T59] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.661758][ T59] usb 6-1: Product: syz [ 311.663797][ T59] usb 6-1: Manufacturer: syz [ 311.665920][ T59] usb 6-1: SerialNumber: syz [ 311.914053][T10638] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 311.971876][T10653] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 312.600641][T10638] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 312.806626][ T59] cdc_mbim 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 312.808748][ T59] cdc_mbim 6-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 312.811303][ T59] cdc_mbim 6-1:1.0: setting rx_max = 2048 [ 312.985970][T10669] siw: device registration error -23 [ 313.095069][ T59] cdc_mbim 6-1:1.0: setting tx_max = 184 [ 313.098974][ T59] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 313.103017][ T59] wwan wwan0: port wwan0mbim0 attached [ 313.111115][ T59] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 42:42:42:42:42:42 [ 313.216760][ C3] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 313.219031][ C3] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 313.221181][ C3] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 313.223681][ C3] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 313.226324][ C3] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 313.228615][ C3] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 313.230772][ C3] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 313.232841][ C3] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 313.235575][ C3] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 313.238393][ C3] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 313.241624][ C3] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 313.244417][ C3] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 313.247124][ C3] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 313.249871][ C3] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 313.252610][ C3] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 313.255407][ C3] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 313.258152][ C3] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 313.260811][ C3] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 313.263483][ C3] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 313.266119][ C3] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 313.268618][ C3] cdc_mbim 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 313.276530][ T1018] usb 6-1: USB disconnect, device number 22 [ 313.279818][ T1018] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 313.377840][T10674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1343'. [ 313.396944][ T1018] wwan wwan0: port wwan0mbim0 disconnected [ 313.638878][T10679] FAULT_INJECTION: forcing a failure. [ 313.638878][T10679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.643037][T10679] CPU: 3 UID: 0 PID: 10679 Comm: syz.3.1344 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 313.643052][T10679] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 313.643059][T10679] Call Trace: [ 313.643064][T10679] [ 313.643068][T10679] dump_stack_lvl+0x16c/0x1f0 [ 313.643093][T10679] should_fail_ex+0x512/0x640 [ 313.643112][T10679] _copy_from_user+0x2e/0xd0 [ 313.643130][T10679] get_compat_msghdr+0xa7/0x170 [ 313.643141][T10679] ? __pfx_get_compat_msghdr+0x10/0x10 [ 313.643157][T10679] ___sys_sendmsg+0x1ae/0x1d0 [ 313.643185][T10679] ? __pfx____sys_sendmsg+0x10/0x10 [ 313.643209][T10679] ? find_held_lock+0x2b/0x80 [ 313.643229][T10679] __sys_sendmsg+0x16d/0x220 [ 313.643247][T10679] ? __pfx___sys_sendmsg+0x10/0x10 [ 313.643270][T10679] ? rcu_is_watching+0x12/0xc0 [ 313.643283][T10679] __do_fast_syscall_32+0x7c/0x3a0 [ 313.643295][T10679] do_fast_syscall_32+0x32/0x80 [ 313.643305][T10679] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 313.643319][T10679] RIP: 0023:0xf7fc6579 [ 313.643327][T10679] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 313.643339][T10679] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 313.643349][T10679] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000100 [ 313.643356][T10679] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 313.643362][T10679] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 313.643368][T10679] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 313.643374][T10679] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 313.643387][T10679] [ 313.722905][T10681] @: renamed from vlan0 (while UP) [ 314.298329][T10696] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1348'. [ 314.765966][T10704] FAULT_INJECTION: forcing a failure. [ 314.765966][T10704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.770833][T10704] CPU: 1 UID: 0 PID: 10704 Comm: syz.2.1350 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 314.770859][T10704] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 314.770867][T10704] Call Trace: [ 314.770871][T10704] [ 314.770876][T10704] dump_stack_lvl+0x16c/0x1f0 [ 314.770896][T10704] should_fail_ex+0x512/0x640 [ 314.770915][T10704] _copy_to_user+0x32/0xd0 [ 314.770934][T10704] simple_read_from_buffer+0xcb/0x170 [ 314.770950][T10704] proc_fail_nth_read+0x197/0x270 [ 314.770964][T10704] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 314.770978][T10704] ? rw_verify_area+0xcf/0x680 [ 314.770991][T10704] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 314.771004][T10704] vfs_read+0x1e1/0xc60 [ 314.771019][T10704] ? fdget_pos+0x2a2/0x370 [ 314.771036][T10704] ? __pfx_vfs_read+0x10/0x10 [ 314.771050][T10704] ? find_held_lock+0x2b/0x80 [ 314.771065][T10704] ? __fget_files+0x20e/0x3c0 [ 314.771084][T10704] ksys_read+0x12a/0x250 [ 314.771099][T10704] ? __pfx_ksys_read+0x10/0x10 [ 314.771115][T10704] ? rcu_is_watching+0x12/0xc0 [ 314.771129][T10704] __do_fast_syscall_32+0x7c/0x3a0 [ 314.771141][T10704] do_fast_syscall_32+0x32/0x80 [ 314.771151][T10704] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 314.771166][T10704] RIP: 0023:0xf712e579 [ 314.771174][T10704] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 314.771186][T10704] RSP: 002b:00000000f50dc590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 314.771196][T10704] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f50dc620 [ 314.771203][T10704] RDX: 000000000000000f RSI: 00000000f7492ff4 RDI: 0000000000000000 [ 314.771209][T10704] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 314.771215][T10704] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 314.771221][T10704] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 314.771235][T10704] [ 314.891241][T10707] fuse: Unknown parameter 'group_i00000000000000000000' [ 316.191462][T10725] siw: device registration error -23 [ 316.587110][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.589821][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.121089][T10735] fuse: Unknown parameter 'group_i00000000000000000000' [ 317.126848][T10737] FAULT_INJECTION: forcing a failure. [ 317.126848][T10737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.131229][T10737] CPU: 0 UID: 0 PID: 10737 Comm: syz.3.1361 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 317.131244][T10737] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 317.131251][T10737] Call Trace: [ 317.131255][T10737] [ 317.131259][T10737] dump_stack_lvl+0x16c/0x1f0 [ 317.131280][T10737] should_fail_ex+0x512/0x640 [ 317.131299][T10737] _copy_to_user+0x32/0xd0 [ 317.131317][T10737] drm_ioctl+0x5eb/0xc30 [ 317.131336][T10737] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 317.131351][T10737] ? __pfx_drm_ioctl+0x10/0x10 [ 317.131378][T10737] drm_compat_ioctl+0x327/0x460 [ 317.131392][T10737] ? __pfx_drm_compat_ioctl+0x10/0x10 [ 317.131404][T10737] __ia32_compat_sys_ioctl+0x242/0x370 [ 317.131420][T10737] __do_fast_syscall_32+0x7c/0x3a0 [ 317.131432][T10737] do_fast_syscall_32+0x32/0x80 [ 317.131442][T10737] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 317.131456][T10737] RIP: 0023:0xf7fc6579 [ 317.131465][T10737] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 317.131476][T10737] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 317.131486][T10737] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c03864bc [ 317.131493][T10737] RDX: 0000000080000380 RSI: 0000000000000000 RDI: 0000000000000000 [ 317.131499][T10737] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 317.131505][T10737] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 317.131511][T10737] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 317.131524][T10737] [ 317.184798][ C0] vkms_vblank_simulate: vblank timer overrun [ 317.340065][ T40] audit: type=1326 audit(1750073216.718:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10745 comm="syz.1.1357" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd5579 code=0x0 [ 317.484193][ T59] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 317.636511][ T59] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.641450][ T59] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 317.648123][ T59] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 317.650992][ T59] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.653551][ T59] usb 10-1: Product: syz [ 317.655575][ T59] usb 10-1: Manufacturer: syz [ 317.657101][ T59] usb 10-1: SerialNumber: syz [ 317.862972][T10733] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 318.347198][T10758] fuse: Bad value for 'fd' [ 318.424788][T10757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1365'. [ 318.470245][T10733] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 318.674942][ T59] cdc_mbim 10-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 318.677499][ T59] cdc_mbim 10-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 318.680758][ T59] cdc_mbim 10-1:1.0: setting rx_max = 2048 [ 318.882205][ T59] cdc_mbim 10-1:1.0: setting tx_max = 184 [ 318.895271][ T59] cdc_mbim 10-1:1.0: cdc-wdm0: USB WDM device [ 318.900359][ T59] wwan wwan0: port wwan0mbim0 attached [ 318.909035][ T59] cdc_mbim 10-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 42:42:42:42:42:42 [ 319.071550][T10764] FAULT_INJECTION: forcing a failure. [ 319.071550][T10764] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.078243][T10764] CPU: 3 UID: 0 PID: 10764 Comm: syz.3.1367 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 319.078267][T10764] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 319.078278][T10764] Call Trace: [ 319.078284][T10764] [ 319.078291][T10764] dump_stack_lvl+0x16c/0x1f0 [ 319.078320][T10764] should_fail_ex+0x512/0x640 [ 319.078349][T10764] _copy_from_user+0x2e/0xd0 [ 319.078375][T10764] kvm_arch_vcpu_ioctl+0x1e4/0x5120 [ 319.078391][T10764] ? is_bpf_text_address+0x94/0x1a0 [ 319.078414][T10764] ? kernel_text_address+0x8d/0x100 [ 319.078439][T10764] ? __kernel_text_address+0xd/0x40 [ 319.078466][T10764] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 319.078492][T10764] ? stack_trace_save+0x8e/0xc0 [ 319.078536][T10764] ? __lock_acquire+0xb8a/0x1c90 [ 319.078563][T10764] ? kasan_save_stack+0x42/0x60 [ 319.078589][T10764] ? kasan_save_track+0x14/0x30 [ 319.078621][T10764] ? __mutex_trylock_common+0xe9/0x250 [ 319.078645][T10764] ? __pfx___mutex_trylock_common+0x10/0x10 [ 319.078670][T10764] ? __pfx___might_resched+0x10/0x10 [ 319.078691][T10764] ? rcu_is_watching+0x12/0xc0 [ 319.078708][T10764] ? trace_contention_end+0xdd/0x130 [ 319.078730][T10764] ? __mutex_lock+0x1ca/0xb90 [ 319.078754][T10764] ? kvm_vcpu_ioctl+0x280/0x1690 [ 319.078792][T10764] ? kasan_quarantine_put+0x10a/0x240 [ 319.078822][T10764] ? kvm_vcpu_ioctl+0x1236/0x1690 [ 319.078840][T10764] kvm_vcpu_ioctl+0x1236/0x1690 [ 319.078864][T10764] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 319.078884][T10764] ? tomoyo_path_number_perm+0x18d/0x580 [ 319.078909][T10764] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 319.078928][T10764] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 319.078956][T10764] ? do_vfs_ioctl+0x523/0x1a60 [ 319.078979][T10764] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 319.079026][T10764] kvm_vcpu_compat_ioctl+0x20f/0x3d0 [ 319.079049][T10764] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 319.079070][T10764] ? __fget_files+0x20e/0x3c0 [ 319.079092][T10764] ? fput+0x60/0xf0 [ 319.079114][T10764] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 319.079136][T10764] __ia32_compat_sys_ioctl+0x242/0x370 [ 319.079162][T10764] __do_fast_syscall_32+0x7c/0x3a0 [ 319.079182][T10764] do_fast_syscall_32+0x32/0x80 [ 319.079196][T10764] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 319.079217][T10764] RIP: 0023:0xf7fc6579 [ 319.079233][T10764] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 319.079250][T10764] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 319.079268][T10764] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000004080aebf [ 319.079277][T10764] RDX: 0000000080000340 RSI: 0000000000000000 RDI: 0000000000000000 [ 319.079287][T10764] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 319.079296][T10764] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 319.079306][T10764] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 319.079329][T10764] [ 319.083519][ C2] cdc_mbim 10-1:1.0: nonzero urb status received: -71 [ 319.178513][ C2] cdc_mbim 10-1:1.0: wdm_int_callback - 0 bytes [ 319.181156][ C2] cdc_mbim 10-1:1.0: nonzero urb status received: -71 [ 319.183275][ C2] cdc_mbim 10-1:1.0: wdm_int_callback - 0 bytes [ 319.185260][ C2] cdc_mbim 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 319.188721][ T1329] usb 10-1: USB disconnect, device number 2 [ 319.191160][ T1329] cdc_mbim 10-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 319.275050][ T1329] wwan wwan0: port wwan0mbim0 disconnected [ 319.837454][T10774] fuse: Unknown parameter 'group_i00000000000000000000' [ 319.947261][T10777] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1371'. [ 320.823232][T10790] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1376'. [ 321.667106][T10781] lo speed is unknown, defaulting to 1000 [ 321.707794][T10802] ubi: mtd0 is already attached to ubi31 [ 321.797984][T10781] lo speed is unknown, defaulting to 1000 [ 321.800557][T10781] lo speed is unknown, defaulting to 1000 [ 322.732457][T10832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1385'. [ 323.324215][ T29] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 323.505372][ T29] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 323.509181][ T29] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 323.512349][ T29] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 323.515194][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.520393][T10846] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 323.524379][ T29] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 323.763248][ T29] usb 7-1: USB disconnect, device number 25 [ 324.775567][T10868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1392'. [ 325.344402][T10875] Bluetooth: MGMT ver 1.23 [ 325.466663][ T40] audit: type=1326 audit(1750073224.848:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10878 comm="syz.3.1394" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc6579 code=0x0 [ 328.703483][T10928] fuse: Bad value for 'user_id' [ 328.706308][T10928] fuse: Bad value for 'user_id' [ 328.869495][T10932] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1412'. [ 329.062144][ T40] audit: type=1326 audit(1750073228.438:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10934 comm="syz.2.1413" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf712e579 code=0x0 [ 329.718306][T10944] netlink: 'syz.3.1416': attribute type 12 has an invalid length. [ 329.721768][T10944] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1416'. [ 330.576427][T10954] lo speed is unknown, defaulting to 1000 [ 330.620252][T10955] ubi: mtd0 is already attached to ubi31 [ 330.731848][ T40] audit: type=1804 audit(1750073230.108:1533): pid=10960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1420" name="/newroot/348/file1" dev="fuse" ino=1 res=1 errno=0 [ 330.762351][T10954] lo speed is unknown, defaulting to 1000 [ 330.765580][T10954] lo speed is unknown, defaulting to 1000 [ 331.656235][T10981] bond0: entered promiscuous mode [ 331.659762][T10981] bond0: left promiscuous mode [ 331.808535][ T40] audit: type=1326 audit(1750073231.188:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10983 comm="syz.3.1427" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc6579 code=0x0 [ 331.985837][T10992] lo speed is unknown, defaulting to 1000 [ 331.999100][T10993] ubi: mtd0 is already attached to ubi31 [ 332.313944][T10992] lo speed is unknown, defaulting to 1000 [ 332.318770][T10992] lo speed is unknown, defaulting to 1000 [ 332.624996][T11000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1432'. [ 332.646241][T11004] binder: BINDER_SET_CONTEXT_MGR already set [ 332.648332][T11004] binder: 11002:11004 ioctl 4018620d 80000040 returned -16 [ 332.681692][T11008] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1436'. [ 332.686014][T11008] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1436'. [ 332.688847][T11008] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1436'. [ 332.715547][ T40] audit: type=1804 audit(1750073232.098:1535): pid=11003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1434" name="/newroot/378/file1" dev="fuse" ino=1 res=1 errno=0 [ 333.184219][ T1018] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 333.338707][ T1018] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.343141][ T1018] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.347331][ T1018] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 333.352683][ T1018] usb 10-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 333.356673][ T1018] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.362259][ T1018] usb 10-1: config 0 descriptor?? [ 333.505526][T11031] trusted_key: syz.3.1441 sent an empty control message without MSG_MORE. [ 333.842353][T11041] FAULT_INJECTION: forcing a failure. [ 333.842353][T11041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.849435][T11041] CPU: 2 UID: 0 PID: 11041 Comm: syz.1.1444 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 333.849458][T11041] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 333.849483][T11041] Call Trace: [ 333.849489][T11041] [ 333.849495][T11041] dump_stack_lvl+0x16c/0x1f0 [ 333.849526][T11041] should_fail_ex+0x512/0x640 [ 333.849555][T11041] _copy_from_user+0x2e/0xd0 [ 333.849582][T11041] generic_map_delete_batch+0x439/0x700 [ 333.849612][T11041] ? __pfx_generic_map_delete_batch+0x10/0x10 [ 333.849650][T11041] ? __pfx_generic_map_delete_batch+0x10/0x10 [ 333.849678][T11041] bpf_map_do_batch+0x4a6/0x680 [ 333.849702][T11041] __sys_bpf+0x5fc/0x4d80 [ 333.849731][T11041] ? __pfx___sys_bpf+0x10/0x10 [ 333.849757][T11041] ? ksys_write+0x190/0x250 [ 333.849785][T11041] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 333.849828][T11041] ? fput+0x70/0xf0 [ 333.849845][T11041] ? ksys_write+0x1ac/0x250 [ 333.849868][T11041] ? __pfx_ksys_write+0x10/0x10 [ 333.849896][T11041] __ia32_sys_bpf+0x76/0xe0 [ 333.849914][T11041] __do_fast_syscall_32+0x7c/0x3a0 [ 333.849932][T11041] do_fast_syscall_32+0x32/0x80 [ 333.849949][T11041] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 333.849970][T11041] RIP: 0023:0xf7fd5579 [ 333.849983][T11041] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 333.850000][T11041] RSP: 002b:00000000f50d555c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 333.850016][T11041] RAX: ffffffffffffffda RBX: 000000000000001b RCX: 0000000080000000 [ 333.850027][T11041] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 333.850036][T11041] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 333.850045][T11041] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 333.850054][T11041] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 333.850079][T11041] [ 334.080874][ T1018] usbhid 10-1:0.0: can't add hid device: -71 [ 334.082844][ T1018] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 334.095810][ T1018] usb 10-1: USB disconnect, device number 3 [ 334.097607][T11045] veth0_to_team: entered promiscuous mode [ 334.325826][T11052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1447'. [ 334.630907][T11059] fuse: Bad value for 'fd' [ 334.762498][T11062] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1450'. [ 335.324243][ T837] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 335.436786][T11085] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1457'. [ 335.476756][ T837] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 335.480069][ T837] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 335.483061][ T837] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 335.489204][ T837] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 335.492205][ T837] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.495008][ T837] usb 10-1: Product: syz [ 335.496400][ T837] usb 10-1: Manufacturer: syz [ 335.497895][ T837] usb 10-1: SerialNumber: syz [ 335.504023][ T837] hub 10-1:1.0: bad descriptor, ignoring hub [ 335.506413][ T837] hub 10-1:1.0: probe with driver hub failed with error -5 [ 335.854656][ T837] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 335.928379][T11088] fuse: Bad value for 'fd' [ 336.080262][T11094] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1460'. [ 336.426876][T11100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1461'. [ 336.456001][T11072] usb 10-1: reset high-speed USB device number 4 using dummy_hcd [ 337.869685][T11120] fuse: Bad value for 'fd' [ 337.964486][ T837] usb 10-1: USB disconnect, device number 4 [ 337.967955][ T837] usblp0: removed [ 338.065672][T11136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1470'. [ 338.402453][ T40] audit: type=1326 audit(1750073237.778:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11145 comm="syz.1.1475" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd5579 code=0x0 [ 338.472438][T11150] sctp: [Deprecated]: syz.2.1476 (pid 11150) Use of struct sctp_assoc_value in delayed_ack socket option. [ 338.472438][T11150] Use struct sctp_sack_info instead [ 338.930589][T11155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1477'. [ 338.933520][T11155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1477'. [ 339.197055][T11157] fuse: Bad value for 'fd' [ 339.435687][T11160] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1479'. [ 340.034327][ T7405] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 340.184545][ T7405] usb 10-1: Using ep0 maxpacket: 8 [ 340.210378][ T7405] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 340.213147][ T7405] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 340.227699][ T7405] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 340.232068][ T7405] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 340.243781][ T7405] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 340.264477][ T7405] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 340.273453][ T7405] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 340.279772][ T7405] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 340.283932][ T7405] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 340.288686][ T7405] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 340.293377][ T7405] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 340.297601][ T7405] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 340.301520][ T7405] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 340.306634][ T7405] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 340.311406][ T7405] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 340.322978][ T7405] usb 10-1: string descriptor 0 read error: -22 [ 340.325942][ T7405] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 340.328759][ T7405] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.343309][ T7405] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 340.497324][T11177] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1484'. [ 340.574175][ T29] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 340.894288][ T7405] usb 10-1: USB disconnect, device number 5 [ 341.424429][ T29] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.428559][ T29] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 341.447171][ T29] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 341.450252][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.452794][ T29] usb 7-1: Product: syz [ 341.456847][ T29] usb 7-1: Manufacturer: syz [ 341.458467][ T29] usb 7-1: SerialNumber: syz [ 341.671394][T11172] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 341.823014][T11195] FAULT_INJECTION: forcing a failure. [ 341.823014][T11195] name failslab, interval 1, probability 0, space 0, times 0 [ 341.827985][T11195] CPU: 3 UID: 0 PID: 11195 Comm: syz.1.1489 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 341.828007][T11195] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 341.828017][T11195] Call Trace: [ 341.828023][T11195] [ 341.828029][T11195] dump_stack_lvl+0x16c/0x1f0 [ 341.828057][T11195] should_fail_ex+0x512/0x640 [ 341.828079][T11195] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 341.828112][T11195] should_failslab+0xc2/0x120 [ 341.828132][T11195] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 341.828160][T11195] ? drm_atomic_get_connector_state+0x231/0x740 [ 341.828185][T11195] krealloc_noprof+0x1fc/0x370 [ 341.828211][T11195] drm_atomic_get_connector_state+0x231/0x740 [ 341.828233][T11195] drm_atomic_set_property+0x24d/0x34e0 [ 341.828256][T11195] ? __pfx_drm_atomic_set_property+0x10/0x10 [ 341.828273][T11195] ? __might_fault+0xe3/0x190 [ 341.828295][T11195] ? __might_fault+0xe3/0x190 [ 341.828319][T11195] ? __might_fault+0x13b/0x190 [ 341.828354][T11195] drm_mode_atomic_ioctl+0x66f/0x25f0 [ 341.828388][T11195] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 341.828409][T11195] ? __lock_acquire+0xb8a/0x1c90 [ 341.828445][T11195] ? drm_is_current_master+0x2c/0x40 [ 341.828466][T11195] ? do_raw_spin_unlock+0x172/0x230 [ 341.828492][T11195] drm_ioctl_kernel+0x1f1/0x3e0 [ 341.828518][T11195] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 341.828542][T11195] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 341.828583][T11195] drm_ioctl+0x5c9/0xc30 [ 341.828613][T11195] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 341.828633][T11195] ? __pfx_drm_ioctl+0x10/0x10 [ 341.828678][T11195] drm_compat_ioctl+0x327/0x460 [ 341.828699][T11195] ? __pfx_drm_compat_ioctl+0x10/0x10 [ 341.828720][T11195] __ia32_compat_sys_ioctl+0x242/0x370 [ 341.828748][T11195] __do_fast_syscall_32+0x7c/0x3a0 [ 341.828768][T11195] do_fast_syscall_32+0x32/0x80 [ 341.828785][T11195] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 341.828805][T11195] RIP: 0023:0xf7fd5579 [ 341.828819][T11195] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 341.828835][T11195] RSP: 002b:00000000f50f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 341.828850][T11195] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c03864bc [ 341.828861][T11195] RDX: 0000000080000500 RSI: 0000000000000000 RDI: 0000000000000000 [ 341.828870][T11195] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 341.828879][T11195] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 341.828889][T11195] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 341.828913][T11195] [ 341.931726][ T5980] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 342.085389][ T5980] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 342.089068][ T5980] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49592, setting to 1024 [ 342.092616][ T5980] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 342.096977][ T5980] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 342.100065][ T5980] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.104422][ T5980] usb 10-1: config 0 descriptor?? [ 342.563829][ T5980] plantronics 0003:047F:FFFF.000A: reserved main item tag 0xd [ 342.569433][ T5980] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 342.576399][T11207] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1493'. [ 342.582093][ T5980] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 342.767288][ T5980] usb 10-1: USB disconnect, device number 6 [ 342.899089][T11215] FAULT_INJECTION: forcing a failure. [ 342.899089][T11215] name failslab, interval 1, probability 0, space 0, times 0 [ 342.905007][T11215] CPU: 3 UID: 0 PID: 11215 Comm: syz.3.1495 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 342.905024][T11215] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 342.905030][T11215] Call Trace: [ 342.905035][T11215] [ 342.905040][T11215] dump_stack_lvl+0x16c/0x1f0 [ 342.905061][T11215] should_fail_ex+0x512/0x640 [ 342.905077][T11215] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 342.905096][T11215] should_failslab+0xc2/0x120 [ 342.905107][T11215] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 342.905123][T11215] ? copy_process+0x4b6/0x76a0 [ 342.905137][T11215] ? _raw_spin_unlock_irq+0x23/0x50 [ 342.905155][T11215] copy_process+0x4b6/0x76a0 [ 342.905175][T11215] ? __pfx_copy_process+0x10/0x10 [ 342.905190][T11215] ? lockdep_init_map_type+0x5c/0x280 [ 342.905207][T11215] ? lockdep_init_map_type+0x5c/0x280 [ 342.905222][T11215] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 342.905238][T11215] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 342.905257][T11215] vhost_task_create+0x1d2/0x2e0 [ 342.905273][T11215] ? __pfx_vhost_task_create+0x10/0x10 [ 342.905288][T11215] ? kvm_mmu_post_init_vm+0xb4/0x370 [ 342.905305][T11215] ? __pfx_vhost_task_fn+0x10/0x10 [ 342.905328][T11215] kvm_mmu_post_init_vm+0x1b7/0x370 [ 342.905343][T11215] kvm_arch_vcpu_ioctl_run+0x66/0x18c0 [ 342.905355][T11215] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 342.905372][T11215] kvm_vcpu_ioctl+0x5eb/0x1690 [ 342.905386][T11215] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 342.905399][T11215] ? tomoyo_path_number_perm+0x18d/0x580 [ 342.905413][T11215] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 342.905426][T11215] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 342.905444][T11215] ? do_vfs_ioctl+0x523/0x1a60 [ 342.905457][T11215] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 342.905482][T11215] kvm_vcpu_compat_ioctl+0x20f/0x3d0 [ 342.905495][T11215] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 342.905508][T11215] ? __fget_files+0x20e/0x3c0 [ 342.905522][T11215] ? fput+0x60/0xf0 [ 342.905536][T11215] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 342.905550][T11215] __ia32_compat_sys_ioctl+0x242/0x370 [ 342.905565][T11215] __do_fast_syscall_32+0x7c/0x3a0 [ 342.905577][T11215] do_fast_syscall_32+0x32/0x80 [ 342.905587][T11215] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 342.905601][T11215] RIP: 0023:0xf7fc6579 [ 342.905610][T11215] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 342.905621][T11215] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 342.905632][T11215] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 342.905639][T11215] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 342.905645][T11215] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 342.905651][T11215] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 342.905657][T11215] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 342.905671][T11215] [ 343.143016][T11218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1496'. [ 344.233767][T11227] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 344.303311][ T29] cdc_mbim 7-1:1.0: failed GET_NTB_PARAMETERS [ 344.305252][ T29] cdc_mbim 7-1:1.0: bind() failure [ 344.311709][ T29] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 344.315770][ T29] cdc_ncm 7-1:1.1: bind() failure [ 344.339768][ T29] usb 7-1: USB disconnect, device number 26 [ 345.489609][T11242] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 345.804902][ T5980] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 345.808555][T11250] lo speed is unknown, defaulting to 1000 [ 345.819084][T11256] ubi: mtd0 is already attached to ubi31 [ 345.916145][T11250] lo speed is unknown, defaulting to 1000 [ 345.918849][T11250] lo speed is unknown, defaulting to 1000 [ 345.956187][ T5980] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.959896][ T5980] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 345.965221][ T5980] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 345.969105][ T5980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.972359][ T5980] usb 6-1: Product: syz [ 345.974221][ T5980] usb 6-1: Manufacturer: syz [ 345.976125][ T5980] usb 6-1: SerialNumber: syz [ 346.033135][T11259] FAULT_INJECTION: forcing a failure. [ 346.033135][T11259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.037793][T11259] CPU: 3 UID: 0 PID: 11259 Comm: syz.3.1508 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 346.037808][T11259] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 346.037815][T11259] Call Trace: [ 346.037819][T11259] [ 346.037823][T11259] dump_stack_lvl+0x16c/0x1f0 [ 346.037843][T11259] should_fail_ex+0x512/0x640 [ 346.037875][T11259] _copy_from_user+0x2e/0xd0 [ 346.037892][T11259] get_user_ifreq+0x116/0x1c0 [ 346.037905][T11259] inet_ioctl+0x288/0x3f0 [ 346.037921][T11259] ? __pfx_inet_ioctl+0x10/0x10 [ 346.037944][T11259] ? tomoyo_path_number_perm+0x18d/0x580 [ 346.037959][T11259] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 346.037974][T11259] sock_do_ioctl+0x115/0x280 [ 346.037984][T11259] ? do_vfs_ioctl+0x523/0x1a60 [ 346.037997][T11259] ? __pfx_sock_do_ioctl+0x10/0x10 [ 346.038007][T11259] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 346.038027][T11259] compat_sock_ioctl+0x301/0x730 [ 346.038042][T11259] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 346.038055][T11259] ? hook_file_ioctl_common+0x145/0x410 [ 346.038070][T11259] ? __fget_files+0x20e/0x3c0 [ 346.038088][T11259] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 346.038101][T11259] __ia32_compat_sys_ioctl+0x242/0x370 [ 346.038115][T11259] __do_fast_syscall_32+0x7c/0x3a0 [ 346.038126][T11259] do_fast_syscall_32+0x32/0x80 [ 346.038137][T11259] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 346.038150][T11259] RIP: 0023:0xf7fc6579 [ 346.038159][T11259] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 346.038170][T11259] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 346.038181][T11259] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008915 [ 346.038187][T11259] RDX: 0000000080000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 346.038193][T11259] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 346.038200][T11259] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 346.038206][T11259] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 346.038220][T11259] [ 346.182230][T11249] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 346.212580][T11266] ptrace attach of "/syz-executor exec"[5942] was attempted by "/syz-executor exec"[11266] [ 346.388070][T11270] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1511'. [ 347.709708][T11291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1517'. [ 347.733384][T11291] veth7: entered promiscuous mode [ 348.016864][T11296] /dev/sr0: Can't open blockdev [ 348.931377][T11307] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1522'. [ 348.945063][ T5980] cdc_mbim 6-1:1.0: failed GET_NTB_PARAMETERS [ 348.947070][ T5980] cdc_mbim 6-1:1.0: bind() failure [ 349.173092][ T5980] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 349.176329][ T5980] cdc_ncm 6-1:1.1: bind() failure [ 349.187782][ T5980] usb 6-1: USB disconnect, device number 23 [ 349.847090][T11317] lo speed is unknown, defaulting to 1000 [ 349.850926][T11317] lo speed is unknown, defaulting to 1000 [ 349.853104][T11317] lo speed is unknown, defaulting to 1000 [ 350.005570][T11317] infiniband sz1: set active [ 350.007342][ T5980] lo speed is unknown, defaulting to 1000 [ 350.009328][T11317] infiniband sz1: added lo [ 350.062118][T11317] RDS/IB: sz1: added [ 350.063922][T11317] smc: adding ib device sz1 with port count 1 [ 350.069159][T11317] smc: ib device sz1 port 1 has pnetid [ 350.071378][ T5980] lo speed is unknown, defaulting to 1000 [ 350.073671][T11317] lo speed is unknown, defaulting to 1000 [ 350.430807][T11317] lo speed is unknown, defaulting to 1000 [ 350.616549][T11331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1526'. [ 350.630762][T11317] lo speed is unknown, defaulting to 1000 [ 350.804770][T11317] lo speed is unknown, defaulting to 1000 [ 350.892111][T11336] loop2: detected capacity change from 0 to 7 [ 350.894666][T11336] Dev loop2: unable to read RDB block 7 [ 350.896489][T11336] loop2: unable to read partition table [ 350.898315][T11336] loop2: partition table beyond EOD, truncated [ 350.900281][T11336] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 350.908424][T11317] lo speed is unknown, defaulting to 1000 [ 351.181880][T11317] lo speed is unknown, defaulting to 1000 [ 351.326391][T11317] lo speed is unknown, defaulting to 1000 [ 351.463803][T11317] lo speed is unknown, defaulting to 1000 [ 351.616360][T11317] lo speed is unknown, defaulting to 1000 [ 351.730047][T11317] lo speed is unknown, defaulting to 1000 [ 351.869134][T11317] lo speed is unknown, defaulting to 1000 [ 352.011031][T11344] xt_CT: You must specify a L4 protocol and not use inversions on it [ 352.994525][T11366] loop6: detected capacity change from 0 to 524287999 [ 353.235432][T11369] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1536'. [ 353.238372][T11369] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 353.848734][T11386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1540'. [ 354.094338][ T5980] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 354.258540][ T5980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.265280][ T5980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.268510][ T5980] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 354.273563][ T5980] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 354.278463][ T5980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.292499][ T5980] usb 6-1: config 0 descriptor?? [ 354.514223][ T29] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 354.520267][T11408] rdma_rxe: rxe_newlink: failed to add lo [ 354.685085][ T29] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 354.690392][ T29] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 354.693211][ T29] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 354.696879][ T29] usb 10-1: config 0 interface 0 has no altsetting 0 [ 354.712068][ T29] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 354.714983][ T29] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 354.718413][ T29] usb 10-1: config 0 interface 0 has no altsetting 0 [ 354.726228][ T29] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 354.729078][ T29] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 354.732590][ T29] usb 10-1: config 0 interface 0 has no altsetting 0 [ 354.736037][ T29] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 354.738865][ T29] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 354.742225][ T29] usb 10-1: config 0 interface 0 has no altsetting 0 [ 354.745483][ T29] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 354.748342][ T29] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 354.751705][ T29] usb 10-1: config 0 interface 0 has no altsetting 0 [ 354.754890][ T29] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 354.757705][ T29] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 354.761097][ T29] usb 10-1: config 0 interface 0 has no altsetting 0 [ 354.764128][ T29] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 354.767261][ T29] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 354.770669][ T29] usb 10-1: config 0 interface 0 has no altsetting 0 [ 354.773731][ T29] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 354.776734][ T29] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 354.780258][ T29] usb 10-1: config 0 interface 0 has no altsetting 0 [ 354.784002][ T29] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 354.790406][ T29] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 354.792986][ T29] usb 10-1: Product: syz [ 354.794904][ T29] usb 10-1: Manufacturer: syz [ 354.796461][ T29] usb 10-1: SerialNumber: syz [ 354.800259][ T29] usb 10-1: config 0 descriptor?? [ 354.804881][ T29] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 354.829403][ T5980] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 354.851968][ T5980] plantronics 0003:047F:FFFF.000B: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 355.130687][T11413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.134682][T11413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.436562][T11418] syz.3.1547: vmalloc error: size 2147483264, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 355.442208][T11418] CPU: 0 UID: 0 PID: 11418 Comm: syz.3.1547 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 355.442242][T11418] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 355.442254][T11418] Call Trace: [ 355.442261][T11418] [ 355.442268][T11418] dump_stack_lvl+0x16c/0x1f0 [ 355.442298][T11418] warn_alloc+0x248/0x3a0 [ 355.442325][T11418] ? __pfx_warn_alloc+0x10/0x10 [ 355.442347][T11418] ? __lock_acquire+0xb8a/0x1c90 [ 355.442376][T11418] ? find_held_lock+0x2b/0x80 [ 355.442392][T11418] ? __might_fault+0xe3/0x190 [ 355.442416][T11418] ? __might_fault+0xe3/0x190 [ 355.442438][T11418] ? __might_fault+0x13b/0x190 [ 355.442468][T11418] ? compat_do_replace+0x1af/0x7c0 [ 355.442490][T11418] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 355.442511][T11418] ? _copy_from_user+0x59/0xd0 [ 355.442539][T11418] ? copy_from_sockptr_offset.constprop.0+0xe5/0x170 [ 355.442562][T11418] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 355.442585][T11418] ? find_held_lock+0x2b/0x80 [ 355.442601][T11418] ? compat_do_replace+0x1af/0x7c0 [ 355.442620][T11418] ? __schedule+0x3fff/0x5de0 [ 355.442644][T11418] ? __asan_memcpy+0x3c/0x60 [ 355.442668][T11418] ? compat_copy_ebt_replace_from_user+0x294/0x390 [ 355.442695][T11418] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 355.442717][T11418] ? __pfx_compat_copy_ebt_replace_from_user+0x10/0x10 [ 355.442750][T11418] ? compat_do_replace+0x1af/0x7c0 [ 355.442771][T11418] __vmalloc_node_noprof+0xad/0xf0 [ 355.442791][T11418] ? compat_do_replace+0x1af/0x7c0 [ 355.442817][T11418] compat_do_replace+0x1af/0x7c0 [ 355.442843][T11418] ? __pfx_compat_do_replace+0x10/0x10 [ 355.442866][T11418] ? aa_get_newest_label+0x375/0x680 [ 355.442886][T11418] ? __pfx_aa_get_newest_label+0x10/0x10 [ 355.442917][T11418] ? bpf_lsm_capable+0x9/0x10 [ 355.442937][T11418] ? security_capable+0x7e/0x260 [ 355.442957][T11418] do_ebt_set_ctl+0x2f5/0x3c0 [ 355.442982][T11418] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 355.443008][T11418] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 355.443039][T11418] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 355.443065][T11418] nf_setsockopt+0x8d/0xf0 [ 355.443087][T11418] ip_setsockopt+0xcb/0xf0 [ 355.443114][T11418] raw_setsockopt+0xb7/0x2a0 [ 355.443140][T11418] ? __pfx_raw_setsockopt+0x10/0x10 [ 355.443164][T11418] ? errseq_sample+0x53/0x70 [ 355.443191][T11418] ? sock_common_setsockopt+0x2e/0xf0 [ 355.443211][T11418] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 355.443231][T11418] do_sock_setsockopt+0x221/0x470 [ 355.443251][T11418] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 355.443289][T11418] __sys_setsockopt+0x120/0x1a0 [ 355.443319][T11418] __ia32_sys_setsockopt+0xbc/0x160 [ 355.443343][T11418] ? lockdep_hardirqs_on+0x7c/0x110 [ 355.443364][T11418] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 355.443391][T11418] __do_fast_syscall_32+0x7c/0x3a0 [ 355.443410][T11418] do_fast_syscall_32+0x32/0x80 [ 355.443427][T11418] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 355.443447][T11418] RIP: 0023:0xf7fc6579 [ 355.443460][T11418] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 355.443478][T11418] RSP: 002b:00000000f50c555c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 355.443494][T11418] RAX: ffffffffffffffda RBX: 000000000000000e RCX: 0000000000000000 [ 355.443505][T11418] RDX: 0000000000000080 RSI: 0000000080000000 RDI: 00000000000000e0 [ 355.443514][T11418] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 355.443525][T11418] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 355.443534][T11418] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 355.443557][T11418] [ 355.443640][T11418] Mem-Info: [ 355.571952][T11418] active_anon:3921 inactive_anon:7878 isolated_anon:0 [ 355.571952][T11418] active_file:7590 inactive_file:13774 isolated_file:0 [ 355.571952][T11418] unevictable:1768 dirty:453 writeback:0 [ 355.571952][T11418] slab_reclaimable:6230 slab_unreclaimable:72668 [ 355.571952][T11418] mapped:29212 shmem:7989 pagetables:1303 [ 355.571952][T11418] sec_pagetables:318 bounce:0 [ 355.571952][T11418] kernel_misc_reclaimable:0 [ 355.571952][T11418] free:45808 free_pcp:13197 free_cma:0 [ 355.586596][T11418] Node 0 active_anon:864kB inactive_anon:44kB active_file:188kB inactive_file:16kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:6468kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7856kB pagetables:1120kB sec_pagetables:1148kB all_unreclaimable? yes Balloon:0kB [ 355.597017][T11418] Node 1 active_anon:14820kB inactive_anon:31468kB active_file:30172kB inactive_file:55080kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:110380kB dirty:1812kB writeback:0kB shmem:28420kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6052kB pagetables:4092kB sec_pagetables:124kB all_unreclaimable? no Balloon:0kB [ 355.607422][T11418] Node 0 DMA free:2100kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:724kB local_pcp:144kB free_cma:0kB [ 355.616378][T11418] lowmem_reserve[]: 0 289 289 289 289 [ 355.618217][T11418] Node 0 DMA32 free:19280kB boost:2048kB min:15264kB low:18568kB high:21872kB reserved_highatomic:4096KB free_highatomic:1192KB active_anon:848kB inactive_anon:44kB active_file:188kB inactive_file:16kB unevictable:3536kB writepending:0kB present:1032196kB managed:296392kB mlocked:0kB bounce:0kB free_pcp:11648kB local_pcp:3856kB free_cma:0kB [ 355.622343][T11417] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 355.628111][T11418] lowmem_reserve[]: 0 0 0 0 0 [ 355.632869][T11418] Node 1 DMA32 free:161852kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14864kB inactive_anon:31468kB active_file:30172kB inactive_file:55080kB unevictable:3536kB writepending:1812kB present:1048432kB managed:948268kB mlocked:0kB bounce:0kB free_pcp:40224kB local_pcp:18324kB free_cma:0kB [ 355.643325][T11418] lowmem_reserve[]: 0 0 0 0 0 [ 355.644913][T11418] Node 0 DMA: 23*4kB (UM) 7*8kB (UM) 10*16kB (UM) 12*32kB (UM) 2*64kB (UM) 2*128kB (M) 2*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2100kB [ 355.649562][T11418] Node 0 DMA32: 24*4kB (EH) 22*8kB (UMEH) 52*16kB (MEH) 138*32kB (UMEH) 71*64kB (UMH) 34*128kB (UMEH) 11*256kB (UM) 4*512kB (ME) 0*1024kB 0*2048kB 0*4096kB = 19280kB [ 355.654820][T11418] Node 1 DMA32: 313*4kB (UM) 743*8kB (UME) 276*16kB (UME) 217*32kB (UME) 323*64kB (UME) 246*128kB (UME) 66*256kB (UME) 59*512kB (UME) 25*1024kB (UM) 3*2048kB (UM) 3*4096kB (U) = 161852kB [ 355.660558][T11418] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 355.663489][T11418] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 355.666447][T11418] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 355.669392][T11418] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 355.672240][T11418] 29657 total pagecache pages [ 355.673715][T11418] 305 pages in swap cache [ 355.675139][T11418] Free swap = 121292kB [ 355.676452][T11418] Total swap = 124996kB [ 355.677763][T11418] 524155 pages RAM [ 355.678989][T11418] 0 pages HighMem/MovableOnly [ 355.680459][T11418] 209150 pages reserved [ 355.681763][T11418] 0 pages cma reserved [ 356.260870][T11422] binder: BINDER_SET_CONTEXT_MGR already set [ 356.262916][T11422] binder: 11421:11422 ioctl 4018620d 80000040 returned -16 [ 356.446441][T11424] lo speed is unknown, defaulting to 1000 [ 356.484700][T11425] ubi: mtd0 is already attached to ubi31 [ 356.553240][T11424] lo speed is unknown, defaulting to 1000 [ 356.556218][T11424] lo speed is unknown, defaulting to 1000 [ 356.559048][T11424] lo speed is unknown, defaulting to 1000 [ 356.766240][ T6028] usb 6-1: USB disconnect, device number 24 [ 356.994877][T11432] lo speed is unknown, defaulting to 1000 [ 357.035577][T11436] ubi: mtd0 is already attached to ubi31 [ 357.100357][T11432] lo speed is unknown, defaulting to 1000 [ 357.103186][T11432] lo speed is unknown, defaulting to 1000 [ 357.106055][T11432] lo speed is unknown, defaulting to 1000 [ 357.144365][ C1] usb 10-1: yurex_control_callback - control failed: -2 [ 357.149088][ T6382] usb 10-1: USB disconnect, device number 7 [ 357.158524][ T6382] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 357.366654][T11439] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1554'. [ 357.449413][T11443] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1555'. [ 357.836971][T11449] binder: 11448:11449 ioctl c0306201 0 returned -14 [ 358.300707][T11451] lo speed is unknown, defaulting to 1000 [ 358.325037][T11453] ubi: mtd0 is already attached to ubi31 [ 358.481245][T11451] lo speed is unknown, defaulting to 1000 [ 358.485042][T11451] lo speed is unknown, defaulting to 1000 [ 358.488975][T11451] lo speed is unknown, defaulting to 1000 [ 358.724004][ T40] audit: type=1326 audit(1750073258.098:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11465 comm="syz.3.1565" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 358.734866][ T40] audit: type=1326 audit(1750073258.098:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11465 comm="syz.3.1565" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 358.741659][ T40] audit: type=1326 audit(1750073258.098:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11465 comm="syz.3.1565" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 358.750011][ T40] audit: type=1326 audit(1750073258.098:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11465 comm="syz.3.1565" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 358.757762][ T40] audit: type=1326 audit(1750073258.098:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11465 comm="syz.3.1565" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 358.765290][ T40] audit: type=1326 audit(1750073258.098:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11465 comm="syz.3.1565" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 358.771887][ T40] audit: type=1326 audit(1750073258.098:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11465 comm="syz.3.1565" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc6598 code=0x7ffc0000 [ 358.780004][ T40] audit: type=1326 audit(1750073258.098:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11465 comm="syz.3.1565" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc6598 code=0x7ffc0000 [ 358.795062][ T40] audit: type=1326 audit(1750073258.098:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11465 comm="syz.3.1565" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc6598 code=0x7ffc0000 [ 358.801666][ T40] audit: type=1326 audit(1750073258.098:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11465 comm="syz.3.1565" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc6598 code=0x7ffc0000 [ 358.948592][T11471] rdma_rxe: rxe_newlink: failed to add lo [ 359.154355][ T29] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 359.315630][ T29] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 359.319100][ T29] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 359.325359][ T29] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 359.331155][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.339617][T11469] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 359.348898][ T29] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 359.686036][ T6028] usb 7-1: USB disconnect, device number 27 [ 359.821345][T11481] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1566'. [ 360.286289][ T6028] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 360.446786][ T6028] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.451473][ T6028] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.455780][ T6028] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 360.461131][ T6028] usb 10-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 360.465021][ T6028] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.470512][ T6028] usb 10-1: config 0 descriptor?? [ 360.832981][T11492] fuse: Unknown parameter '¨Æ¶8ÐqqùŽEŠÝËðTߤȿ۞°îS'Æ/ð¡gà:°ãLµ»?¯…PoÁÞ­_æ&›N¥B0xffffffffffffffffÿÿ00000000000000000000Z¢Vý¼e [ 360.832981][T11492] gtœÝĬ¥KHq\5À©š;¨' [ 361.153327][ T6028] usbhid 10-1:0.0: can't add hid device: -71 [ 361.156181][ T6028] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 361.165740][ T6028] usb 10-1: USB disconnect, device number 8 [ 361.864555][T11505] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1574'. [ 361.911801][T11501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1573'. [ 361.925287][T11508] 9pnet_virtio: no channels available for device syz [ 362.820910][T11525] FAULT_INJECTION: forcing a failure. [ 362.820910][T11525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 362.826229][T11525] CPU: 2 UID: 0 PID: 11525 Comm: syz.1.1581 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 362.826246][T11525] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 362.826253][T11525] Call Trace: [ 362.826257][T11525] [ 362.826262][T11525] dump_stack_lvl+0x16c/0x1f0 [ 362.826286][T11525] should_fail_ex+0x512/0x640 [ 362.826306][T11525] _copy_to_user+0x32/0xd0 [ 362.826325][T11525] simple_read_from_buffer+0xcb/0x170 [ 362.826342][T11525] proc_fail_nth_read+0x197/0x270 [ 362.826357][T11525] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 362.826372][T11525] ? rw_verify_area+0xcf/0x680 [ 362.826386][T11525] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 362.826400][T11525] vfs_read+0x1e1/0xc60 [ 362.826416][T11525] ? fdget_pos+0x2a2/0x370 [ 362.826434][T11525] ? __pfx_vfs_read+0x10/0x10 [ 362.826449][T11525] ? find_held_lock+0x2b/0x80 [ 362.826464][T11525] ? __fget_files+0x20e/0x3c0 [ 362.826484][T11525] ksys_read+0x12a/0x250 [ 362.826500][T11525] ? __pfx_ksys_read+0x10/0x10 [ 362.826517][T11525] ? rcu_is_watching+0x12/0xc0 [ 362.826531][T11525] __do_fast_syscall_32+0x7c/0x3a0 [ 362.826544][T11525] do_fast_syscall_32+0x32/0x80 [ 362.826555][T11525] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 362.826569][T11525] RIP: 0023:0xf7fd5579 [ 362.826587][T11525] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 362.826599][T11525] RSP: 002b:00000000f50f6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 362.826609][T11525] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50f6620 [ 362.826616][T11525] RDX: 000000000000000f RSI: 00000000f7462ff4 RDI: 0000000000000000 [ 362.826623][T11525] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 362.826629][T11525] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 362.826636][T11525] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 362.826650][T11525] [ 362.929797][T11528] random: crng reseeded on system resumption [ 364.193481][T11543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1586'. [ 364.653236][T11559] fuse: Unknown parameter 'user_id00000000000000000000' [ 365.014229][ T59] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 365.169775][ T59] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 365.174834][ T59] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 365.178094][ T59] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 365.181651][ T59] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.188189][T11565] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 365.193626][ T59] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 365.480010][ T59] usb 10-1: USB disconnect, device number 9 [ 365.737317][T11579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1598'. [ 365.883672][ T40] kauditd_printk_skb: 371 callbacks suppressed [ 365.883684][ T40] audit: type=1326 audit(1750073265.258:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11580 comm="syz.1.1599" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd5579 code=0x0 [ 366.096268][T11587] fuse: Unknown parameter 'user_id00000000000000000000' [ 366.404208][ T6382] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 366.558931][ T6382] usb 7-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 366.562632][ T6382] usb 7-1: config 1 interface 0 has no altsetting 0 [ 366.566835][ T6382] usb 7-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40 [ 366.569899][ T6382] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.572480][ T6382] usb 7-1: Product: syz [ 366.574323][ T6382] usb 7-1: Manufacturer: syz [ 366.576273][ T6382] usb 7-1: SerialNumber: syz [ 366.828953][ T6382] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/input/input21 [ 366.861432][ T6382] usb 7-1: USB disconnect, device number 28 [ 366.864046][ C2] pxrc 7-1:1.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 367.246009][T11604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1607'. [ 367.421855][T11615] fuse: Unknown parameter 'user_id00000000000000000000' [ 367.594835][ T59] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 367.734276][ T6382] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 367.756647][ T59] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 367.759550][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.763538][ T59] usb 6-1: config 0 descriptor?? [ 367.895776][ T6382] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 367.899035][ T6382] usb 7-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 367.901886][ T6382] usb 7-1: config 220 interface 0 has no altsetting 0 [ 367.905984][ T6382] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 367.908941][ T6382] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.911481][ T6382] usb 7-1: Product: syz [ 367.912849][ T6382] usb 7-1: Manufacturer: syz [ 367.914460][ T6382] usb 7-1: SerialNumber: syz [ 367.994190][ T29] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 368.138509][ T6382] usb 7-1: Found UVC 0.00 device syz (8086:0b07) [ 368.140574][ T6382] usb 7-1: No valid video chain found. [ 368.144179][ T6382] usb 7-1: USB disconnect, device number 29 [ 368.154186][ T29] usb 10-1: Using ep0 maxpacket: 8 [ 368.157360][ T29] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 368.161019][ T29] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 368.164279][ T29] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 368.168032][ T29] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 368.172214][ T29] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 368.175357][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.182280][ T59] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 368.186387][ T59] [drm:udl_init] *ERROR* Selecting channel failed [ 368.195842][ T59] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 3 [ 368.198032][ T59] [drm] Initialized udl on minor 3 [ 368.201281][ T59] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 368.206391][ T59] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 368.210826][ T837] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 368.213570][ T837] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 368.217598][ T59] usb 6-1: USB disconnect, device number 25 [ 368.385542][ T29] usb 10-1: GET_CAPABILITIES returned 0 [ 368.388006][ T29] usbtmc 10-1:16.0: can't read capabilities [ 368.588650][ T6028] usb 10-1: USB disconnect, device number 10 [ 368.852183][ T40] audit: type=1326 audit(1750073268.228:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11623 comm="syz.2.1615" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf712e579 code=0x0 [ 369.287775][T11632] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1616'. [ 369.474843][T11640] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1617'. [ 370.034129][ T34] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 370.557326][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.560739][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.564187][ T34] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 370.568368][ T34] usb 7-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 370.572120][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.603292][ T34] usb 7-1: config 0 descriptor?? [ 370.892255][T11670] xt_CT: You must specify a L4 protocol and not use inversions on it [ 371.298090][ T34] usbhid 7-1:0.0: can't add hid device: -71 [ 371.303530][ T34] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 371.307123][ T34] usb 7-1: USB disconnect, device number 30 [ 371.679204][ T40] audit: type=1326 audit(1750073271.058:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11674 comm="syz.5.1628" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f01579 code=0x0 [ 371.852749][T11685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1629'. [ 372.031974][T11694] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1633'. [ 372.294469][ T6382] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 372.455694][ T6382] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 372.464023][ T6382] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 372.467254][ T6382] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 372.470623][ T6382] usb 7-1: config 0 interface 0 has no altsetting 0 [ 372.473959][ T6382] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 372.476855][ T6382] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 372.480212][ T6382] usb 7-1: config 0 interface 0 has no altsetting 0 [ 372.483426][ T6382] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 372.486408][ T6382] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 372.489769][ T6382] usb 7-1: config 0 interface 0 has no altsetting 0 [ 372.492702][ T6382] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 372.496013][ T6382] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 372.499868][ T6382] usb 7-1: config 0 interface 0 has no altsetting 0 [ 372.502709][ T6382] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 372.506504][ T6382] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 372.510225][ T6382] usb 7-1: config 0 interface 0 has no altsetting 0 [ 372.513982][ T6382] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 372.517535][ T6382] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 372.521103][ T6382] usb 7-1: config 0 interface 0 has no altsetting 0 [ 372.524149][ T6382] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 372.527503][ T6382] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 372.531423][ T6382] usb 7-1: config 0 interface 0 has no altsetting 0 [ 372.535541][ T6382] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 372.538411][ T6382] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 372.542416][ T6382] usb 7-1: config 0 interface 0 has no altsetting 0 [ 372.546654][ T6382] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 372.549692][ T6382] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 372.552342][ T6382] usb 7-1: Product: syz [ 372.553657][ T6382] usb 7-1: Manufacturer: syz [ 372.555206][ T6382] usb 7-1: SerialNumber: syz [ 372.558119][ T6382] usb 7-1: config 0 descriptor?? [ 372.565747][ T6382] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 372.698518][T11699] FAULT_INJECTION: forcing a failure. [ 372.698518][T11699] name failslab, interval 1, probability 0, space 0, times 0 [ 372.702899][T11699] CPU: 2 UID: 0 PID: 11699 Comm: syz.5.1636 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 372.702914][T11699] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 372.702921][T11699] Call Trace: [ 372.702925][T11699] [ 372.702930][T11699] dump_stack_lvl+0x16c/0x1f0 [ 372.702972][T11699] should_fail_ex+0x512/0x640 [ 372.702989][T11699] ? fs_reclaim_acquire+0xae/0x150 [ 372.703004][T11699] ? tomoyo_encode2+0x100/0x3e0 [ 372.703019][T11699] should_failslab+0xc2/0x120 [ 372.703030][T11699] __kmalloc_noprof+0xd2/0x510 [ 372.703046][T11699] ? d_absolute_path+0x136/0x1a0 [ 372.703059][T11699] tomoyo_encode2+0x100/0x3e0 [ 372.703076][T11699] tomoyo_encode+0x29/0x50 [ 372.703091][T11699] tomoyo_realpath_from_path+0x18f/0x6e0 [ 372.703110][T11699] tomoyo_path_perm+0x274/0x460 [ 372.703123][T11699] ? tomoyo_path_perm+0x260/0x460 [ 372.703136][T11699] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 372.703155][T11699] ? d_add+0x47a/0x780 [ 372.703173][T11699] ? __pfx_current_check_access_path+0x10/0x10 [ 372.703188][T11699] ? lookup_one_qstr_excl_raw.part.0+0xf9/0x160 [ 372.703203][T11699] ? lookup_dcache+0x66/0x170 [ 372.703218][T11699] tomoyo_path_symlink+0x97/0xe0 [ 372.703235][T11699] ? __pfx_tomoyo_path_symlink+0x10/0x10 [ 372.703251][T11699] ? find_held_lock+0x2b/0x80 [ 372.703262][T11699] ? __might_fault+0xe3/0x190 [ 372.703280][T11699] security_path_symlink+0x152/0x2e0 [ 372.703294][T11699] do_symlinkat+0x10d/0x310 [ 372.703312][T11699] ? __pfx_do_symlinkat+0x10/0x10 [ 372.703328][T11699] ? getname_flags.part.0+0x1c5/0x550 [ 372.703343][T11699] __ia32_sys_symlink+0x74/0x90 [ 372.703360][T11699] __do_fast_syscall_32+0x7c/0x3a0 [ 372.703372][T11699] do_fast_syscall_32+0x32/0x80 [ 372.703382][T11699] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 372.703396][T11699] RIP: 0023:0xf7f01579 [ 372.703405][T11699] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 372.703416][T11699] RSP: 002b:00000000f500555c EFLAGS: 00000296 ORIG_RAX: 0000000000000053 [ 372.703426][T11699] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000080000140 [ 372.703433][T11699] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 372.703439][T11699] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 372.703445][T11699] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 372.703451][T11699] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 372.703465][T11699] [ 372.703531][T11699] ERROR: Out of memory at tomoyo_realpath_from_path. [ 372.825890][T11702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.829382][T11702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.545788][T11720] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 373.649733][T11727] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1642'. [ 374.014156][ T6382] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 374.516611][ T6382] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.520037][ T6382] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.523058][ T6382] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 374.559727][ T6382] usb 6-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 374.562598][ T6382] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.568021][ T6382] usb 6-1: config 0 descriptor?? [ 374.825105][ C2] usb 7-1: yurex_control_callback - control failed: -2 [ 374.834037][ T7405] usb 7-1: USB disconnect, device number 31 [ 374.845757][ T7405] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 375.221582][T11741] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 375.224451][T11741] UDF-fs: Scanning with blocksize 2048 failed [ 375.228496][T11741] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 375.231396][T11741] UDF-fs: Scanning with blocksize 4096 failed [ 375.342576][ T6382] usbhid 6-1:0.0: can't add hid device: -71 [ 375.344639][ T6382] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 375.348720][ T6382] usb 6-1: USB disconnect, device number 26 [ 375.916401][T11751] fuse: Unknown parameter '0x0000000000000003' [ 376.219751][T11756] rdma_rxe: rxe_newlink: failed to add lo [ 376.354766][T11760] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1653'. [ 376.504233][ T4288] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 376.654147][ T4288] usb 6-1: device descriptor read/64, error -71 [ 376.904183][ T4288] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 377.044394][ T4288] usb 6-1: device descriptor read/64, error -71 [ 377.159505][ T4288] usb usb6-port1: attempt power cycle [ 377.514170][ T4288] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 377.535047][ T4288] usb 6-1: device descriptor read/8, error -71 [ 377.733789][T11770] lo speed is unknown, defaulting to 1000 [ 377.777421][T11771] ubi: mtd0 is already attached to ubi31 [ 377.780963][T11775] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 377.784160][T11775] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 377.784450][ T4288] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 377.814796][ T4288] usb 6-1: device descriptor read/8, error -71 [ 377.835070][T11780] fuse: Unknown parameter '0x0000000000000003' [ 377.846117][T11770] lo speed is unknown, defaulting to 1000 [ 377.848792][T11770] lo speed is unknown, defaulting to 1000 [ 377.851506][T11770] lo speed is unknown, defaulting to 1000 [ 377.924440][ T4288] usb usb6-port1: unable to enumerate USB device [ 378.028459][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.030989][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.351409][T11789] syz.2.1662: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 379.357610][T11789] CPU: 1 UID: 0 PID: 11789 Comm: syz.2.1662 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 379.357634][T11789] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 379.357643][T11789] Call Trace: [ 379.357647][T11789] [ 379.357652][T11789] dump_stack_lvl+0x16c/0x1f0 [ 379.357674][T11789] warn_alloc+0x248/0x3a0 [ 379.357693][T11789] ? __pfx_warn_alloc+0x10/0x10 [ 379.357715][T11789] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 379.357729][T11789] ? __vmalloc_node_noprof+0xad/0xf0 [ 379.357746][T11789] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 379.357765][T11789] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 379.357782][T11789] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 379.357802][T11789] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 379.357815][T11789] vmalloc_user_noprof+0x9e/0xe0 [ 379.357829][T11789] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 379.357843][T11789] vb2_vmalloc_alloc+0x135/0x3f0 [ 379.357856][T11789] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 379.357869][T11789] __vb2_queue_alloc+0x8c9/0x1280 [ 379.357888][T11789] vb2_core_reqbufs+0xa90/0xfe0 [ 379.357904][T11789] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 379.357916][T11789] ? __pfx___mutex_trylock_common+0x10/0x10 [ 379.357934][T11789] ? __pfx___might_resched+0x10/0x10 [ 379.357970][T11789] ? trace_contention_end+0xdd/0x130 [ 379.357987][T11789] ? __mutex_lock+0x1ca/0xb90 [ 379.358000][T11789] vb2_reqbufs+0x1a3/0x1f0 [ 379.358018][T11789] ? __pfx_vb2_reqbufs+0x10/0x10 [ 379.358037][T11789] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 379.358056][T11789] v4l2_m2m_ioctl_reqbufs+0xdc/0x1e0 [ 379.358077][T11789] v4l_reqbufs+0x14f/0x1e0 [ 379.358093][T11789] __video_do_ioctl+0xb40/0xfc0 [ 379.358111][T11789] ? __might_fault+0xe3/0x190 [ 379.358128][T11789] ? __pfx___video_do_ioctl+0x10/0x10 [ 379.358150][T11789] video_usercopy+0x47c/0x1440 [ 379.358168][T11789] ? __pfx___video_do_ioctl+0x10/0x10 [ 379.358184][T11789] ? __pfx_video_usercopy+0x10/0x10 [ 379.358207][T11789] ? hook_file_ioctl_common+0x145/0x410 [ 379.358224][T11789] v4l2_ioctl+0x1bd/0x250 [ 379.358238][T11789] ? __ia32_compat_sys_openat+0xa1/0x210 [ 379.358254][T11789] v4l2_compat_ioctl32+0x214/0x2c0 [ 379.358269][T11789] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 379.358284][T11789] __ia32_compat_sys_ioctl+0x242/0x370 [ 379.358314][T11789] __do_fast_syscall_32+0x7c/0x3a0 [ 379.358326][T11789] do_fast_syscall_32+0x32/0x80 [ 379.358337][T11789] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 379.358353][T11789] RIP: 0023:0xf712e579 [ 379.358363][T11789] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 379.358375][T11789] RSP: 002b:00000000f50dc55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 379.358389][T11789] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000c0145608 [ 379.358397][T11789] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 379.358404][T11789] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 379.358410][T11789] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 379.358417][T11789] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 379.358431][T11789] [ 379.358461][T11789] Mem-Info: [ 379.392858][T11799] FAULT_INJECTION: forcing a failure. [ 379.392858][T11799] name failslab, interval 1, probability 0, space 0, times 0 [ 379.425164][T11789] active_anon:3376 inactive_anon:6950 isolated_anon:0 [ 379.425164][T11789] active_file:4142 inactive_file:14435 isolated_file:0 [ 379.425164][T11789] unevictable:1768 dirty:215 writeback:0 [ 379.425164][T11789] slab_reclaimable:6352 slab_unreclaimable:76929 [ 379.425164][T11789] mapped:27577 shmem:7619 pagetables:1267 [ 379.425164][T11789] sec_pagetables:319 bounce:0 [ 379.425164][T11789] kernel_misc_reclaimable:0 [ 379.425164][T11789] free:22920 free_pcp:1417 free_cma:0 [ 379.440653][T11799] CPU: 0 UID: 0 PID: 11799 Comm: syz.1.1665 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 379.440681][T11799] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 379.440694][T11799] Call Trace: [ 379.440700][T11799] [ 379.440708][T11799] dump_stack_lvl+0x16c/0x1f0 [ 379.440743][T11799] should_fail_ex+0x512/0x640 [ 379.440770][T11799] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 379.440799][T11799] should_failslab+0xc2/0x120 [ 379.440818][T11799] __kmalloc_cache_noprof+0x6a/0x3e0 [ 379.440861][T11799] ? nfnl_err_add+0x4e/0x350 [ 379.440891][T11799] nfnl_err_add+0x4e/0x350 [ 379.440916][T11799] nfnetlink_rcv_batch+0xc95/0x2330 [ 379.440958][T11799] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 379.440989][T11799] ? __local_bh_enable_ip+0xa4/0x120 [ 379.441022][T11799] ? __dev_queue_xmit+0x896/0x43e0 [ 379.441048][T11799] ? __dev_queue_xmit+0x8b7/0x43e0 [ 379.441088][T11799] ? __pfx___dev_queue_xmit+0x10/0x10 [ 379.441145][T11799] ? __nla_parse+0x40/0x60 [ 379.441169][T11799] nfnetlink_rcv+0x3c1/0x430 [ 379.441194][T11799] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 379.441227][T11799] netlink_unicast+0x53d/0x7f0 [ 379.441253][T11799] ? __pfx_netlink_unicast+0x10/0x10 [ 379.441283][T11799] netlink_sendmsg+0x8d1/0xdd0 [ 379.441311][T11799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 379.441335][T11799] ? __import_iovec+0x1dd/0x650 [ 379.441360][T11799] ____sys_sendmsg+0xa98/0xc70 [ 379.441387][T11799] ? __pfx_____sys_sendmsg+0x10/0x10 [ 379.441408][T11799] ? get_compat_msghdr+0x11a/0x170 [ 379.441441][T11799] ___sys_sendmsg+0x134/0x1d0 [ 379.441472][T11799] ? __pfx____sys_sendmsg+0x10/0x10 [ 379.441523][T11799] ? find_held_lock+0x2b/0x80 [ 379.441563][T11799] __sys_sendmsg+0x16d/0x220 [ 379.441593][T11799] ? __pfx___sys_sendmsg+0x10/0x10 [ 379.441637][T11799] ? rcu_is_watching+0x12/0xc0 [ 379.441661][T11799] __do_fast_syscall_32+0x7c/0x3a0 [ 379.441683][T11799] do_fast_syscall_32+0x32/0x80 [ 379.441701][T11799] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 379.441724][T11799] RIP: 0023:0xf7fd5579 [ 379.441740][T11799] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 379.441757][T11799] RSP: 002b:00000000f50f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 379.441775][T11799] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 379.441788][T11799] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 379.441798][T11799] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 379.441809][T11799] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 379.441820][T11799] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 379.441848][T11799] [ 379.578952][T11789] Node 0 active_anon:60kB inactive_anon:44kB active_file:196kB inactive_file:16kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:6452kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7728kB pagetables:1112kB sec_pagetables:1152kB all_unreclaimable? yes Balloon:0kB [ 379.591837][T11789] Node 1 active_anon:13444kB inactive_anon:26256kB active_file:16372kB inactive_file:57724kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:103856kB dirty:856kB writeback:0kB shmem:26940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5664kB pagetables:3856kB sec_pagetables:124kB all_unreclaimable? no Balloon:0kB [ 379.602352][T11789] Node 0 DMA free:1944kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 379.612397][T11789] lowmem_reserve[]: 0 289 289 289 289 [ 379.614626][T11789] Node 0 DMA32 free:18452kB boost:6144kB min:19360kB low:22664kB high:25968kB reserved_highatomic:4096KB free_highatomic:920KB active_anon:44kB inactive_anon:44kB active_file:196kB inactive_file:16kB unevictable:3536kB writepending:4kB present:1032196kB managed:296392kB mlocked:0kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 379.625364][T11789] lowmem_reserve[]: 0 0 0 0 0 [ 379.627389][T11789] Node 1 DMA32 free:79932kB boost:26624kB min:73768kB low:85552kB high:97336kB reserved_highatomic:6144KB free_highatomic:1624KB active_anon:13444kB inactive_anon:26256kB active_file:16372kB inactive_file:57724kB unevictable:3536kB writepending:856kB present:1048432kB managed:948268kB mlocked:0kB bounce:0kB free_pcp:2464kB local_pcp:192kB free_cma:0kB [ 379.637779][T11789] lowmem_reserve[]: 0 0 0 0 0 [ 379.639418][T11789] Node 0 DMA: 5*4kB (U) 4*8kB (U) 5*16kB (U) 5*32kB (U) 6*64kB (U) 2*128kB (U) 2*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 1956kB [ 379.645359][T11789] Node 0 DMA32: 99*4kB (UMEH) 101*8kB (MEH) 72*16kB (UME) 94*32kB (UMEH) 37*64kB (UMH) 32*128kB (UMEH) 13*256kB (UM) 4*512kB (MEH) 1*1024kB (U) 0*2048kB 0*4096kB = 18228kB [ 379.650718][T11789] Node 1 DMA32: 1249*4kB (UME) 1261*8kB (UMEH) 420*16kB (UMEH) 332*32kB (MEH) 256*64kB (UMEH) 98*128kB (UMEH) 34*256kB (UMEH) 11*512kB (UMEH) 0*1024kB 2*2048kB (U) 0*4096kB = 79788kB [ 379.665088][T11789] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 379.675917][T11789] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 379.679006][T11789] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 379.698130][T11789] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 379.704335][T11789] 26510 total pagecache pages [ 379.711098][T11789] 317 pages in swap cache [ 379.712609][T11789] Free swap = 115584kB [ 379.721043][T11789] Total swap = 124996kB [ 379.722593][T11789] 524155 pages RAM [ 379.723924][T11789] 0 pages HighMem/MovableOnly [ 379.725857][T11789] 209150 pages reserved [ 379.727361][T11789] 0 pages cma reserved [ 379.753432][T11805] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1668'. [ 379.790085][ T40] audit: type=1326 audit(1750073279.158:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11800 comm="syz.5.1666" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f01579 code=0x0 [ 381.046835][T11812] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 381.052327][T11812] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 381.058456][T11812] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 381.062647][T11812] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 381.065240][T11812] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 381.137719][T11810] lo speed is unknown, defaulting to 1000 [ 381.311590][T11810] lo speed is unknown, defaulting to 1000 [ 381.316648][T11810] lo speed is unknown, defaulting to 1000 [ 381.320279][T11810] lo speed is unknown, defaulting to 1000 [ 381.610610][T11810] chnl_net:caif_netlink_parms(): no params data found [ 381.712998][T11810] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.717838][T11810] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.720185][T11810] bridge_slave_0: entered allmulticast mode [ 381.724176][T11810] bridge_slave_0: entered promiscuous mode [ 381.728047][T11810] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.730614][T11810] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.733097][T11810] bridge_slave_1: entered allmulticast mode [ 381.736095][T11810] bridge_slave_1: entered promiscuous mode [ 381.792052][T11810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.802854][T11810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.204269][T11843] netlink: 'syz.5.1675': attribute type 10 has an invalid length. [ 382.360462][T11843] syz_tun: entered promiscuous mode [ 382.400870][T11843] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 382.463875][T11810] team0: Port device team_slave_0 added [ 382.469886][T11810] team0: Port device team_slave_1 added [ 382.507074][T11810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.510028][T11810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.521165][T11810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.527415][T11810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.530347][T11810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.543127][T11810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.636908][T11810] hsr_slave_0: entered promiscuous mode [ 382.640165][T11810] hsr_slave_1: entered promiscuous mode [ 382.642951][T11810] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 382.647668][T11810] Cannot create hsr debugfs directory [ 382.742480][T11848] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1677'. [ 382.801895][T11850] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1678'. [ 382.858842][T11810] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 382.866582][T11810] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 382.872389][T11810] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 382.878569][T11810] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 382.920675][T11810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.960846][T11810] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.972650][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.975361][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.987553][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.990417][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.144961][ T5946] Bluetooth: hci1: command tx timeout [ 383.176662][T11810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.177642][T11851] 9pnet_virtio: no channels available for device syz [ 383.331872][T11810] veth0_vlan: entered promiscuous mode [ 383.342334][T11810] veth1_vlan: entered promiscuous mode [ 383.377030][T11810] veth0_macvtap: entered promiscuous mode [ 383.381039][T11810] veth1_macvtap: entered promiscuous mode [ 383.391398][T11810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.408178][T11810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.412865][T11810] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.424380][T11810] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.427159][T11810] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.430120][T11810] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.472293][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.474973][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.498006][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.500828][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.075355][T11890] bond0: entered promiscuous mode [ 384.077080][T11890] bond_slave_0: entered promiscuous mode [ 384.079314][T11890] bond_slave_1: entered promiscuous mode [ 384.083095][T11890] batadv0: entered promiscuous mode [ 384.088892][T11890] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 384.092619][T11890] bond0: left promiscuous mode [ 384.094350][T11890] bond_slave_0: left promiscuous mode [ 384.096292][T11890] bond_slave_1: left promiscuous mode [ 384.098834][T11890] batadv0: left promiscuous mode [ 384.123074][ T40] audit: type=1326 audit(1750073283.498:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11887 comm="syz.1.1682" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd5579 code=0x0 [ 384.132041][T11882] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 384.134354][T11882] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 384.200033][T11882] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 384.204199][T11882] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 384.422586][ T40] audit: type=1326 audit(1750073283.798:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11894 comm="syz.5.1684" exe="/syz-executor" sig=31 arch=40000003 syscall=20 compat=1 ip=0xf7f01579 code=0x0 [ 384.615945][T11898] [ 384.617008][T11898] ====================================================== [ 384.619353][T11898] WARNING: possible circular locking dependency detected [ 384.621519][T11898] 6.16.0-rc2-syzkaller #0 Not tainted [ 384.623478][T11898] ------------------------------------------------------ [ 384.627414][T11898] syz.5.1684/11898 is trying to acquire lock: [ 384.629240][T11898] ffffffff8e72ea68 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0xb4c/0x1470 [ 384.632181][T11898] [ 384.632181][T11898] but task is already holding lock: [ 384.634398][T11898] ffff888043dee278 (&q->q_usage_counter(io)#54){++++}-{0:0}, at: blk_mq_update_nr_hw_queues+0x275/0xcb0 [ 384.637750][T11898] [ 384.637750][T11898] which lock already depends on the new lock. [ 384.637750][T11898] [ 384.640892][T11898] [ 384.640892][T11898] the existing dependency chain (in reverse order) is: [ 384.643606][T11898] [ 384.643606][T11898] -> #2 (&q->q_usage_counter(io)#54){++++}-{0:0}: [ 384.646215][T11898] blk_alloc_queue+0x619/0x760 [ 384.647854][T11898] blk_mq_alloc_queue+0x175/0x290 [ 384.649588][T11898] __blk_mq_alloc_disk+0x29/0x120 [ 384.651344][T11898] nbd_dev_add+0x4a0/0xbc0 [ 384.652893][T11898] nbd_init+0x181/0x320 [ 384.654370][T11898] do_one_initcall+0x120/0x6e0 [ 384.655967][T11898] kernel_init_freeable+0x5c2/0x900 [ 384.657699][T11898] kernel_init+0x1c/0x2b0 [ 384.659246][T11898] ret_from_fork+0x5d4/0x6f0 [ 384.660827][T11898] ret_from_fork_asm+0x1a/0x30 [ 384.662475][T11898] [ 384.662475][T11898] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 384.664680][T11898] fs_reclaim_acquire+0x102/0x150 [ 384.666345][T11898] prepare_alloc_pages+0x162/0x610 [ 384.668074][T11898] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 384.670392][T11898] __alloc_pages_noprof+0xb/0x1b0 [ 384.672207][T11898] pcpu_populate_chunk+0x110/0xb00 [ 384.673888][T11898] pcpu_alloc_noprof+0x86a/0x1470 [ 384.675771][T11898] iommu_dma_init_fq+0x202/0x8a0 [ 384.677373][T11898] iommu_setup_dma_ops+0x1336/0x1700 [ 384.679172][T11898] bus_iommu_probe+0x23e/0x530 [ 384.680787][T11898] iommu_device_register+0x1af/0x280 [ 384.682586][T11898] intel_iommu_init+0x25e7/0x3780 [ 384.684278][T11898] pci_iommu_init+0x2e/0x90 [ 384.685841][T11898] do_one_initcall+0x120/0x6e0 [ 384.687509][T11898] kernel_init_freeable+0x5c2/0x900 [ 384.689274][T11898] kernel_init+0x1c/0x2b0 [ 384.690813][T11898] ret_from_fork+0x5d4/0x6f0 [ 384.692424][T11898] ret_from_fork_asm+0x1a/0x30 [ 384.694076][T11898] [ 384.694076][T11898] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 384.696419][T11898] __lock_acquire+0x126f/0x1c90 [ 384.698069][T11898] lock_acquire+0x179/0x350 [ 384.699648][T11898] __mutex_lock+0x199/0xb90 [ 384.701187][T11898] pcpu_alloc_noprof+0xb4c/0x1470 [ 384.702889][T11898] sbitmap_init_node+0x2fd/0x770 [ 384.704554][T11898] sbitmap_queue_init_node+0x41/0x560 [ 384.706304][T11898] blk_mq_init_tags+0x12d/0x2b0 [ 384.707992][T11898] blk_mq_alloc_map_and_rqs+0x237/0xf60 [ 384.709915][T11898] __blk_mq_alloc_map_and_rqs+0x128/0x1f0 [ 384.711882][T11898] blk_mq_update_nr_hw_queues+0x4ab/0xcb0 [ 384.713829][T11898] nbd_start_device+0x172/0xcd0 [ 384.715489][T11898] nbd_ioctl+0x219/0xda0 [ 384.716948][T11898] compat_blkdev_ioctl+0x2eb/0x7a0 [ 384.718653][T11898] __ia32_compat_sys_ioctl+0x242/0x370 [ 384.720521][T11898] __do_fast_syscall_32+0x7c/0x3a0 [ 384.722252][T11898] do_fast_syscall_32+0x32/0x80 [ 384.723902][T11898] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 384.726075][T11898] [ 384.726075][T11898] other info that might help us debug this: [ 384.726075][T11898] [ 384.729128][T11898] Chain exists of: [ 384.729128][T11898] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#54 [ 384.729128][T11898] [ 384.733235][T11898] Possible unsafe locking scenario: [ 384.733235][T11898] [ 384.735467][T11898] CPU0 CPU1 [ 384.737104][T11898] ---- ---- [ 384.738788][T11898] lock(&q->q_usage_counter(io)#54); [ 384.740465][T11898] lock(fs_reclaim); [ 384.742446][T11898] lock(&q->q_usage_counter(io)#54); [ 384.744873][T11898] lock(pcpu_alloc_mutex); [ 384.746276][T11898] [ 384.746276][T11898] *** DEADLOCK *** [ 384.746276][T11898] [ 384.748781][T11898] 5 locks held by syz.5.1684/11898: [ 384.750382][T11898] #0: ffff888025e24a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x150/0xda0 [ 384.753151][T11898] #1: ffff888025e24988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x32/0xcb0 [ 384.756531][T11898] #2: ffff888025e248d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x45/0xcb0 [ 384.759897][T11898] #3: ffff888043dee278 (&q->q_usage_counter(io)#54){++++}-{0:0}, at: blk_mq_update_nr_hw_queues+0x275/0xcb0 [ 384.763499][T11898] #4: ffff888043dee2b0 (&q->q_usage_counter(queue)#6){+.+.}-{0:0}, at: blk_mq_update_nr_hw_queues+0x275/0xcb0 [ 384.767126][T11898] [ 384.767126][T11898] stack backtrace: [ 384.768964][T11898] CPU: 2 UID: 0 PID: 11898 Comm: syz.5.1684 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 384.768978][T11898] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 384.768985][T11898] Call Trace: [ 384.768991][T11898] [ 384.768997][T11898] dump_stack_lvl+0x116/0x1f0 [ 384.769018][T11898] print_circular_bug+0x275/0x350 [ 384.769034][T11898] check_noncircular+0x14c/0x170 [ 384.769051][T11898] __lock_acquire+0x126f/0x1c90 [ 384.769069][T11898] lock_acquire+0x179/0x350 [ 384.769086][T11898] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 384.769104][T11898] ? __pfx___might_resched+0x10/0x10 [ 384.769116][T11898] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 384.769133][T11898] __mutex_lock+0x199/0xb90 [ 384.769143][T11898] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 384.769158][T11898] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 384.769173][T11898] ? __pfx___mutex_lock+0x10/0x10 [ 384.769183][T11898] ? kasan_save_track+0x14/0x30 [ 384.769200][T11898] ? __kasan_kmalloc+0xaa/0xb0 [ 384.769215][T11898] ? blk_mq_init_tags+0x87/0x2b0 [ 384.769232][T11898] ? blk_mq_update_nr_hw_queues+0x4ab/0xcb0 [ 384.769247][T11898] ? nbd_start_device+0x172/0xcd0 [ 384.769264][T11898] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 384.769281][T11898] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 384.769296][T11898] pcpu_alloc_noprof+0xb4c/0x1470 [ 384.769314][T11898] sbitmap_init_node+0x2fd/0x770 [ 384.769328][T11898] sbitmap_queue_init_node+0x41/0x560 [ 384.769341][T11898] blk_mq_init_tags+0x12d/0x2b0 [ 384.769358][T11898] blk_mq_alloc_map_and_rqs+0x237/0xf60 [ 384.769374][T11898] ? lockdep_hardirqs_on+0x7c/0x110 [ 384.769392][T11898] __blk_mq_alloc_map_and_rqs+0x128/0x1f0 [ 384.769408][T11898] blk_mq_update_nr_hw_queues+0x4ab/0xcb0 [ 384.769423][T11898] ? __pfx___mutex_lock+0x10/0x10 [ 384.769433][T11898] ? trace_cap_capable+0x18d/0x200 [ 384.769445][T11898] nbd_start_device+0x172/0xcd0 [ 384.769462][T11898] ? bpf_lsm_capable+0x9/0x10 [ 384.769477][T11898] nbd_ioctl+0x219/0xda0 [ 384.769494][T11898] ? __pfx_nbd_ioctl+0x10/0x10 [ 384.769512][T11898] ? find_held_lock+0x2b/0x80 [ 384.769523][T11898] ? __pfx_nbd_ioctl+0x10/0x10 [ 384.769539][T11898] compat_blkdev_ioctl+0x2eb/0x7a0 [ 384.769556][T11898] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 384.769571][T11898] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 384.769584][T11898] __ia32_compat_sys_ioctl+0x242/0x370 [ 384.769598][T11898] __do_fast_syscall_32+0x7c/0x3a0 [ 384.769609][T11898] do_fast_syscall_32+0x32/0x80 [ 384.769619][T11898] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 384.769633][T11898] RIP: 0023:0xf7f01579 [ 384.769642][T11898] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 384.769653][T11898] RSP: 002b:00000000f500555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 384.769664][T11898] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 000000000000ab03 [ 384.769671][T11898] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 384.769677][T11898] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 384.769684][T11898] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 384.769690][T11898] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 384.769700][T11898] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 384.966650][T11898] block nbd5: shutting down sockets [ 385.425938][T10366] bond0: (slave syz_tun): Releasing backup interface VM DIAGNOSIS: 11:28:04 Registers: info registers vcpu 0 CPU#0 RAX=00000000010ef104 RBX=0000000000000000 RCX=ffffffff8b7c4be9 RDX=ffffed1005646646 RSI=ffffffff8c156220 RDI=ffffffff81918591 RBP=fffffbfff1c52ef0 RSP=ffffffff8e207e08 R8 =0000000000000000 R9 =ffffed1005646645 R10=ffff88802b23322b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e297780 R14=ffffffff90a82f50 R15=0000000000000000 RIP=ffffffff8b7c374f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097561000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f50fdda4 CR3=00000000620c2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000011 RCX=ffffffff81af8a47 RDX=ffff8880244d2440 RSI=ffffffff81af8a32 RDI=0000000000000005 RBP=ffffc90002f7fc78 RSP=ffffc90002f7fb20 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=ffff88802b43cde8 R12=1ffff920005eff6c R13=0000000000000000 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff81af8a3b RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097661000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008001d000 CR3=000000006e774000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85582355 RDI=ffffffff9b06da80 RBP=ffffffff9b06da40 RSP=ffffc900032f7168 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000002d R14=ffffffff9b06da40 R15=ffffffff855822f0 RIP=ffffffff8558237f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097761000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080000000 CR3=00000000620c2000 CR4=00352ef0 DR0=0000040000000000 DR1=000000000000064f DR2=000000000000000a DR3=0000000000000006 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000004b0754 RBX=0000000000000003 RCX=ffffffff8b7c4be9 RDX=ffffed10056a6646 RSI=ffffffff8c156220 RDI=ffffffff81918591 RBP=ffffed1003861000 RSP=ffffc9000048fdf8 R8 =0000000000000000 R9 =ffffed10056a6645 R10=ffff88802b53322b R11=0000000000000001 R12=0000000000000003 R13=ffff88801c308000 R14=ffffffff90a82f50 R15=0000000000000000 RIP=ffffffff8b7c374f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097861000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0a1638a6b0 CR3=0000000066840000 CR4=00352ef0 DR0=0000040000000000 DR1=000000000000064f DR2=000000000000000a DR3=0000000000000006 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000