last executing test programs: 2.577958146s ago: executing program 0 (id=1591): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0105b08, &(0x7f0000000040)) 2.32956623s ago: executing program 2 (id=1592): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) listen(r0, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0], 0x3, 0x8, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc01c64b9, &(0x7f0000000340)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x1, r5, 0xe0e0e0e0}) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40600}], 0x1}}], 0x1, 0x24008094) openat$uinput(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) 2.328545809s ago: executing program 2 (id=1593): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@func_proto={0x4000000}, @func={0x4, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x36, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) 2.248479446s ago: executing program 2 (id=1594): prctl$PR_SET_TIMERSLACK(0x1d, 0x0) open(0x0, 0x20002, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000540)="6f5d92e864876a347bad22fefd3b1a973d67b37855e50cec0ed6d2c93cd43672f8f78abbf028ddaf448edbe8e68586244967d1ba80555ef6aecfde54f7ab5a14cb52c3258e178a5bdbe4acc596c00fd70fcd875d2e6960c98336ebbb911ce6e42f6dc9f703f3af7f51e8a80852d7192440e833ffa2f66e3f9332904d436206ff1a67f117e6b83874dde8af391e61f19798d8bfaf2fef41845c448c28a8c3ebb41b2258cb247725f4d59639da2a09b341254bb5a700608e8b95407896cf5d085d6a7ad7", 0xd8}], 0x1}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_emit_ethernet(0x2a4, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a6026e0000fc020000000000000000000000000000fe8000000000000000000000000000aa223427d5c9a46b9fa14172170a013589317d2af31ba554311bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645e"], 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2}) r4 = add_key$user(&(0x7f0000000240), &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)="a81ea7adf7a8ef1444aa6167fd531d5328dff1de695415defd24fda17ee74ad61d0112b1629b2d8d0000600072bdbf090000a96fed48b08a7e23172abad780ca335f9c70378cdd52ed1ad8b09fce9d1c1550d01c8b858cf486e304f7857d98ab96c3d0952714471e88985aef579ae438957547e4af5c129b404932687d48f7bc7e00"/142, 0x8e, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000200)={r4, r4, r4}, &(0x7f0000000040)=""/217, 0xd9, 0x0) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x2) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000002af00b0027bd70000040000003000000040002000c00018008008fd9428e0002"], 0x24}}, 0x4040080) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x80003, 0x0) write(r8, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) dup2(r7, r8) 1.829523771s ago: executing program 1 (id=1595): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101a00, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) listen(r0, 0x0) listen(r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e26, 0x3, @mcast1, 0x7}}, 0x102, 0x4}, &(0x7f0000000280)=0x88) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000002c0)=ANY=[@ANYRES8=r2, @ANYBLOB="7f67d72fd75b395f77145c165e6c1bdce23b2753d4dfb3f5243edb8d37561b33882eb7142e30023b89e0dd36c0fd35c11ccba52c19ee4db6940b8b80dec5b1a83024ec3bb6b1f9f46027bbc5f44e802a7a4e64e7550ca30728dbbda1fc6b4f186fc1382d53d5cb13530c6417c0c3aae66453b9724176decd2a75e67cd6bc68ea94fe5a289cf258cdca1f13b29be0cca18638389b8f968522285f3ca717b1a22aa7497cc50cfc2587a8936ddb3ef4d6ce4d05ace89b1639ea8def556160", @ANYRES32=r4, @ANYRESHEX=r3, @ANYBLOB="c533ab9b62679ba6ac43e6a4d418b04d95b266204a"], 0x50) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000) socket$can_j1939(0x1d, 0x2, 0x7) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r6, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 1.699139537s ago: executing program 1 (id=1596): prctl$PR_SET_TIMERSLACK(0x1d, 0x0) open(0x0, 0x20002, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000540)="6f5d92e864876a347bad22fefd3b1a973d67b37855e50cec0ed6d2c93cd43672f8f78abbf028ddaf448edbe8e68586244967d1ba80555ef6aecfde54f7ab5a14cb52c3258e178a5bdbe4acc596c00fd70fcd875d2e6960c98336ebbb911ce6e42f6dc9f703f3af7f51e8a80852d7192440e833ffa2f66e3f9332904d436206ff1a67f117e6b83874dde8af391e61f19798d8bfaf2fef41845c448c28a8c3ebb41b2258cb247725f4d59639da2a09b341254bb5a700608e8b95407896cf5d085d6a7ad7", 0xd8}], 0x1}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_emit_ethernet(0x2a4, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a6026e0000fc020000000000000000000000000000fe8000000000000000000000000000aa223427d5c9a46b9fa14172170a013589317d2af31ba554311bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645e"], 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2}) r4 = add_key$user(&(0x7f0000000240), &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)="a81ea7adf7a8ef1444aa6167fd531d5328dff1de695415defd24fda17ee74ad61d0112b1629b2d8d0000600072bdbf090000a96fed48b08a7e23172abad780ca335f9c70378cdd52ed1ad8b09fce9d1c1550d01c8b858cf486e304f7857d98ab96c3d0952714471e88985aef579ae438957547e4af5c129b404932687d48f7bc7e00"/142, 0x8e, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000200)={r4, r4, r4}, &(0x7f0000000040)=""/217, 0xd9, 0x0) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x2) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000002af00b0027bd70000040000003000000040002000c00018008008fd9428e0002"], 0x24}}, 0x4040080) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x80003, 0x0) write(r8, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) dup2(r7, r8) 1.545784268s ago: executing program 3 (id=1598): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002a000b0000000000ecffffff0600000008000300040003000c0001"], 0x28}}, 0x0) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) vmsplice(r2, &(0x7f00000024c0)=[{&(0x7f0000002100)='_ww', 0x3}], 0x1, 0x6) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd21200100005b91325b38", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}}, 0x0) creat(&(0x7f00000000c0)='\x00', 0x108) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xd, 0x3, 0x4, 0x87, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 1.449189477s ago: executing program 3 (id=1599): socket(0x10, 0x803, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x1e0) syz_open_dev$ndb(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_setup(0x1155, &(0x7f0000004740)) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/../file0\x00', 0x0, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x114) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010125bd70000000000000000000", @ANYRES32=r5], 0x20}}, 0x0) close(0x3) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, &(0x7f0000001640)=[{0x1, 0x1, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/28, 0x1c}], &(0x7f0000000480)=[0x8, 0x6, 0x1]}, {0x8, 0x1, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000540)=""/114, 0x72}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/63, 0x3f}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f0000000600)=""/22, 0x16}, {&(0x7f0000000880)=""/88, 0x58}, {&(0x7f0000000900)=""/217, 0xd9}, {&(0x7f0000002780)=""/4096, 0x1000}], &(0x7f0000000a40)=[0x6, 0x200, 0x9, 0x8, 0x8001, 0x2]}, {0x7, 0x1, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)=""/218, 0xda}, {&(0x7f0000000b80)=""/181, 0xb5}, {&(0x7f0000000c40)=""/1, 0x1}, {&(0x7f00000047c0)=""/4096, 0x1000}, {&(0x7f0000000c80)=""/160, 0xa0}, {&(0x7f0000000d40)=""/217, 0xd9}, {&(0x7f0000000e40)=""/4, 0x4}], &(0x7f0000000ec0)=[0x9, 0x9, 0x1, 0x1a, 0x1, 0x7fffffffffffffff, 0x1]}, {0x9, 0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000f00)=""/65, 0x41}, {&(0x7f0000000f80)=""/83, 0x53}, {&(0x7f0000001000)=""/75, 0x4b}, {&(0x7f0000001080)=""/85, 0x55}, {&(0x7f0000001100)=""/155, 0x9b}, {&(0x7f00000011c0)=""/99, 0x63}, {&(0x7f0000001300)=""/214, 0xd6}, {0x0}, {&(0x7f0000001240)=""/7, 0x7}], &(0x7f0000001280)=[0x3]}], 0x4) read(r1, 0x0, 0x2) 1.319131445s ago: executing program 2 (id=1600): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5d7, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x0, 0x0, "1ec4618f6538ecc26693065a2dcc26d92bb4f1030cd2c1011cdbf894a0839dc2"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000380)}) socket$inet(0x2, 0x1, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet(0x2, 0x1, 0x0) shutdown(r2, 0x0) ioctl$TIOCCONS(r1, 0x541d) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x3}, &(0x7f0000000880)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000040)={r5, @in={{0x2, 0x4e23, @private=0xa010100}}, 0x2}, 0x88) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @local, 0x6}], 0x1c) sendmmsg$alg(r1, &(0x7f0000000840)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)="e4481d581f6e62491ca09a6bd6d96fc9a3b2a66f10eed59f055965afbd1690d37fc25e8122d2009aad87edce5ce0b8ec63427bdd4af588dab901dcf5073d5178c7f447ab4b3e203a81f16133066217abac53718132d6f37c3c412d5164ee1ace3564a1b28d4fe1cdf4eb45b459585909f541e86edc434d8a9bac55b3e147ab68ec1e1ae27a98156ff8e2a607f21b1ef09c9ca0db5232775a1479793c58ea2c72f5097539a6c25024a2e27c18e6aa472337c2a0374b095e5dd2bd6245da4916cafc3e306f79e3", 0xc6}, {&(0x7f0000000680)="26c034be5a30297fec3e9f29d49f021f1e556dfee17a30ad695b128f5775220764e5111e57186213f5205c92ced98bee8e1cdf7384ecde57781b35cf6801878b23790a1534d079c0041d72190b73b843bad8ee4f05d7b0b63b35f9033c38359784cb72b021f751f9469d20da95abd34658ec87204130b879d080", 0x7a}, {&(0x7f00000002c0)}, {&(0x7f0000000700)="5ac0ec002d6c4720d522eedab7927e15a0d5100d0d89d4f5310db801a154d167440ff3686ad90f08f2af98aef1677e6501ff7c7073ec2f8f9ae6f6fe9601146ed0ac30bed1bfede20ab8981dca613d57e71321377a986a9c304558079cb9df17f176f9b25788f9e7f461ccebce30f31138a6f32d7b71fcc0568b9c3b60552985ce0099526f45672ee9f945b810b4264fd3ca1242e7ee7d5584d217d5529977df5d17f7abee814e50dd63e06d63b1d7a70aed065067e8d5778c", 0xb9}, {&(0x7f00000007c0)="af313a5eb731d1fc1f73d8729406be720cbda2a3d6da9d437cad1a6d3d83c212178a3fe8e79d8b0dd98e0fc7b260bb6555db4ce7ecbafed41837e695d10c00cc9191e221b4ebbd817bffa3675a594541589a", 0x52}, {&(0x7f0000000340)="6df3fd26f4508f3d2d425d3d00ae1eb00cace97dd62d869ba01ea6d64059", 0x1e}], 0x6, 0x0, 0x0, 0x51}], 0x1, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r6 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)="c7dbc25973d9d2abaa649a52e44fff8d6c3db7a2b6fc1bdfa0be0f0a262ff5a70d2ea72f6b54", 0x26}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x138, 0x20000000}], 0x1, 0x20000000) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r7, 0x0, 0xa, &(0x7f0000000080)=0x3, 0x4) sendmmsg$alg(r6, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x8}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) 1.127962195s ago: executing program 2 (id=1601): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) io_submit(0x0, 0x0, 0x0) r0 = gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r6, 0x0, 0xb) splice(r7, 0x0, r8, 0x0, 0xf3a, 0x0) splice(r5, 0x0, r8, 0x0, 0x80, 0x7) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000180)='./file1\x00', 0x0, 0x1c041, 0x0) 829.953641ms ago: executing program 1 (id=1602): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x6200001e, 0x0, 0x20200, 0x0, 0x0, 0x0) 524.311924ms ago: executing program 0 (id=1603): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) (async) r3 = dup(0xffffffffffffffff) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) (async, rerun: 64) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00') ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) (async, rerun: 64) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) (rerun: 64) r6 = dup(r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x270bd24, 0x25dfdbfc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x401}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r6, 0x63) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r10) r11 = getpid() sched_setaffinity(r11, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r11, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r11, 0x8, &(0x7f0000000240)=0x2) (async, rerun: 64) sendmsg$nl_netfilter(r4, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000680)={0x55c, 0x10, 0xb, 0x902, 0x70bd25, 0x25dfdbfe, {0x1, 0x0, 0x6}, [@nested={0x10, 0x28, 0x0, 0x1, [@nested={0x4, 0x61}, @nested={0x4, 0x139}, @nested={0x4, 0xe9}]}, @typed={0x4, 0x5d}, @typed={0x14, 0x78, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @nested={0x2a1, 0x11e, 0x0, 0x1, [@generic="4193dfe3044269d59ec79da52a5c36e8913100a83e0b76e6369a1cd3078a2565e36946c6b0d73ee167dcd4bb29ffebfd5e993a77befe53947c0e191d0b10d5f39d841be3fd07bb0a8c1e117d93a8908b53fdcfbc8b65c010c3dd161d8652f0dd3837e96b5e8b34f15dc5962f584616f4c053c594b40b2d60e257b6acd6f65617dbc1e94a2de19d95444bdb060e8fba45a76ef2ff32abed72b31eb7dc5e16fb8fb7aa3f0ffc39ce8dffc61a62dc4244515bf64cf80e55e437bb3e8db5daa73861c716296c5697570b93ebe6a822f4d1b1258450255a62dd2552610e02b14a87cf8053c9e566", @generic="83cf3d4c47006544a84b0d08b828c37d4c632e6d1fd5a45d896cb9af6da9933546fa306551716ffc", @nested={0x4, 0x7f}, @generic="1b3690435281a7d39141b0e813b2ff69e695cd3baf8a8320c7567c2fae1a3e0c22efc5e0468abd90b35fb81ea5d91d23b2bd000d524a86e061a725890f1ec8e421af9053f30cdef4a72393e45a3d67cd5cad99d2dff4219cc7e853a48c4e0e3cc90780d4f2ab7efcef878f53bcc2c0301dcd4e1d974395ac68533c151da6e338032a3def6805277c72a8539878cede633ff4d71e48e2fb26989e57f220c1e8c631a5932a1945d66b385658e3b70ebd650be017db060780dd4fc820569e59a3d0d3e996b5407a2c91635dbed6081b45a89d300dd18200a78a40524c6e60c3de33c48132", @typed={0x8, 0x141, 0x0, 0x0, @uid=r10}, @generic="c71a972526928e61c71921539dafac2d639153a4705884f24f53505d6944c58ee210406560f949d02332115b51a272712ed062fb43d1fecbcb9196a5f0575b1e89da1bd1a1958af4232ee4d96d092cdb18c8de79ec2f7f8516fae7c6ca2d31004764b4de676b2540d5f3ce644159f32e070313e30cfc84da1e6543cd2d919b75a4ca7493372ba18210c1b89756e7956e70094974a55aa3ce4ed51cd5e5", @nested={0x4, 0xe7}]}, @typed={0x16, 0xfc, 0x0, 0x0, @str='hash:net,port,net\x00'}, @nested={0x25a, 0x58, 0x0, 0x1, [@nested={0x4, 0xfb}, @generic="f24ac76bd3334e25ee3736e079526bc212036adabbea41042a7d4312c3ebdd087fc336d45991968e4b2f8c4fbaa908cd580f51c5890afb17bf931ff86a4d8c28124343e57d973cf0e6175a6b785954d481f038863beb4bdf9dd428c0e916f58aeab07813c7b99635f7a35f1a9e7681796ba376a7c22060be4ddaca9daef31a465281a8f2f8769bc5e00278fbf07d887d7a1ac91ffdd5c2c93055597864", @generic="f19028fb8b6bdf55a1a99bbf5539abaf4d57b559b978950d8071667abb74a2b666ad5795506154c18fd4577ed80cb3ff024ba224c8fef8ca1f97b13903766bbd20e22556d6df4446d751170c16a2ac5bfff077740f5074bc354546bbd55afe2ad91f867fa260da4bf8b4fa0fb28574c96fb28e7ce88dc9204cd4b3de48983c1121f0fa6ce8535a00c7a6f1537bc809b17273e08a6b56edbe75a9e3f51b68376e147c58c2f109542c1ff7d2632f539de66bfcf8515a76856236159aff85f23abf12dc6a", @nested={0x4, 0x10b}, @generic="c05e825d762c98f23fe245e6b2743042b1bd1fcb78c90f85800d74905809822aaa251f6f0c8f9bc1576f64401411d1252c27472cb1507a3321b547a9cbb59a8a07b61e0a0bcbd0404eeb79bff16694fc51c0c8e3291b74d8df7e3c320b5119920ec1cce06f6b33f5561ac87badbde520092e26bbeda678e5f99e1cc733ea3c36ea52e36dbb8abeacb2fc92ecffe506eeb5f31e7e78233380b9b920652119282bbc75952a4a17f412779a360ad16b1dcab10421fe8632026e7befa201b3656e22b69eb23d51f6f1866bc5de19c3f9c9dbdefbcc9c0fd0c3a6279e471c556a5dc3b7f09ca3bae09a103a36224f67dc"]}, @typed={0x8, 0x20, 0x0, 0x0, @pid=r11}]}, 0x55c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @random="5e1fe141b7f7"}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044}, 0x0) 524.035908ms ago: executing program 1 (id=1604): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r2, 0x4068aea3, 0x0) 429.659258ms ago: executing program 3 (id=1605): r0 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$alg(r0, &(0x7f00000000c0)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x29, 0xb, 0xfffffffc}], 0x18}], 0x1, 0xffff0000) r1 = userfaultfd(0x801) r2 = openat$ptmx(0xffffff9c, &(0x7f0000000100), 0x400, 0x0) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000200)) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r3 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x4) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @local, r4}, 0xc) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000040)={0xb}, 0x11000) read(0xffffffffffffffff, &(0x7f0000032440)=""/102379, 0x18feb) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 429.105768ms ago: executing program 0 (id=1606): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)='\a\x00\x00\x00', 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7010040000000500001d080009b4000200000008000c00ac0a000008000b00000000000600010007000000"], 0x34}}, 0x20) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x26) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10004081) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) r8 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r8, 0x47bc, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000041c0)="4c0960f1ebb4ca11980e5ed5c5b167d9b6286c6223987f89013e11fd782037ae6887259b161f70afbcb11c64982d61a8a827e709ec3b1ad01a761f284afb3d589b064b205c373572d530ef8826fa7cba2d2325caa777d6a3cf14a425dda70cd9082c9922738a7757b3c29a9446078253305e911dc1bc5fc78d2a8c9ba3115ebcdd82cfd6f8df9cad1ee05982f4ddf0b61494890e73ebeb31073f3a6f722e7550d857a7024a078d0036792bc42aa6b4988a17df3610db42b6181490e18b6c8371325a7fe2d3464f6dc3aadf4dc19f39877d72b94c91df7113c38a27454442316a4fb2f4d8fbbe4cfedef5459b0a8428a66166bd02310c48bdfe62e2fe15f475e46a38506d7f44f7b825d1a1a30bb2ed52e8a56ae18fbf1840fabc624a742d2f5e21d39497d0f562ceec9ab38710a65a0482950c5babb5c40fe911acd742bbe1c2102120ecb50ab9acff0e5549d4df728e3f0ec9ef86b4e0284b502e98931c05fd7f80440ce19ac64d8ead426a8b5623a46b854baf22d80fae92893ae26eb2abd184f17350f874cb0eb208e4c20391a4c80b4df6865289e80bd65db27acbe6bf60541960b00d16f5bc7ff9d4b0ed045fd9256f7239143bdac8d7577d0f3a8adabe2becd3c7134c56d033c3c9d522c193a172912bf9d803c1a98d87e00e0e0cb525071b664d04214b8d5395b81e3b2a4f93806c55c4dd25f963f2141afbf2501074e7569f808b09e5521dac6f70ed31dc19df83e4eebd99a31b79b16aad1b1e4f555fecc4ab1f6f8e0774d88d0ed256df7217df7b6db73bbdf05082931073be23e28258ec63c387cf8cefcf904bfad858b35d2235a1867c3e2e2ac46dcbcb5899be98a000b4a350c57837a926f44afbf6bb25ebe368a56124c88c9faaba8ac3048c2b902061cf9287cc5faeedd210cf5a53f86cfa5f8b1344e585d1312fbd41ea3fcf566d53be88fcbe3cc5e6d87547a1ed8479e40728e4bac5d1241eb157fadd6805bf91e5c38c928e8b71ecc416bddd0b1cbd0a95847314e3fac05f6ce6807d7123416823d975b0e089e70ad5ecfec3caba902ada39ef5253cd8d042b4cb17a28ea276fa0cb6b2630dd1dd845a1a6e99a8cc78cb05ccebffe67ad8efadc70a30e735e66b8350c0667c658ff2b4d55a5cdc81939558b918252919c1ed15003c12f250bb8772c04399be6951e9e949c648549405b1e700c45cdeed1cea5406fbdc2ecad90b5e57d356400cb68797eb9ab826402818f74bc91bf3499f39b217959178fb982b45d083011623f26ba61e4c7872137ebcc1693a270dd0b85308ef1916b741858b06944bf44f3da1b060e2fd0294e9846f4079eb1470f6b5e79f47a45206ec886c6a2ef324872138eaa077b9e48ed516eb4bdd33a2417c5545a76c28e62fc900d03094f82c6ecdf8362fd8a4988be1ac8baadc180863d3b62d5bbab5f18e31a4137f02facd14ca23df230ab8aa0975c6084dba633fd885a2d13d07c651587608fa0fcb29ef3c13082b0bc6f1115a09f583ebbf7b594eea7670e38037aace82f673d77d71fd5e74aba5afca096419b7bd0969c26682baf019111eea4114cdce9c0e728555f62795d41bbd71d899c45d19c4d4e8899af166b798397ce0e0b6f28aea1fe02c30598c1a7c5f101ec70f70b273aef1bf88193f54f9a7985c74ae00e9baf53e51f91406d577f08e7a4ef8daabade2da873ea0861a6e75ea7ee68c94e4dea45cd17e8f1355fa874eb366a0b51302b27c6b7bee81cce196d0c07cad90eb23d47459f99d30498642ad11586cff7ef98174e3507981e0e40a4e7ca18df2b6e8743a980bd4c2414d71d5d98e391c7216a1cabf57df56b5395ec0e149060294224106e34be6f741f44d0ae8782d292f51313119698b3219d693139e0355708c331b36cd73f7cf97c540dfccd343d1209a02dc92aec62eb75060b76c881680a1b9b01c3564549884632b8d83e9d1468991cb5e854c60f07581d2b7b2bfcfbac89d15955f060081596c7d93d9bd624a87e3932815454a1b693f8c9b330117caf82533e29b6df16b293e336dd0b118a3b2d0cbb98b30d630e1398efc6aa919d1e5fa05c630d74b671db25a0092a526a4bdec1a6d68d4b81e5d08122ce02c5248e068e3358d719fe0fd730fe35932801c4dac9d0eab67da558342755bc3c8a9f27a859ddd79228e2b4241c70741118b025207626f4f18f28aa9d0852627d06ac188dc3594ef3689184155b108b5701e1cedefff84a934b84c3cf95065e118412df95ff6396d8827836849af37ac19e501fc370f334f2157bdece38ff6c14b14f7f4af9d0d99b778fa0dda6b2951760dec98ef64134c0dea0779b17af1dedc5fea30996cf54db16f792b8148d3d90cb9b53ea44c80fe9de077023cfca53e983058be6f51152563c9f5c108f995ff4cb8c4c461f79a65566e0a7c48288472ae7fa4a2255621afa2d6ba4caebb57863f062396bad28f51223df2ff472f3af14997a18ecddc46adc260d29abc2820f3ffad04bc8f6a92cd96b0f4da950b5c57f73379d732eaff07cf6ebfdd83d0ffaabca345906d60250c19b8a899b82c35edcda67fd0f65433ddce3c4875312f488cc8958dd43b58a100ddc85609e836718553010940c254598e466501d27fa661ce5e07c0278ad4d989d71a186772882be92a0cabea7061a73f13f398fb5eb959750a67970e967a5c65791e2e236cab4c726778a20ee9e6576f33053bfbc6cc637a0c058f4b61da765ed8f3794fbe94e6e73e7d35e859db0a04e66d884c430cb988827960f2c13bf3c3fb92715621b0661e15dd6a7e847e2d0ec9fee27da7c5bc6e53e509467d83db6e10a34c4c2f566e0755e9ceb0bc40218551a3976f7cdaf8f853942f9521f5e18bf7ddca0227475b220bbaa529f071f600bf01ea331df2ec0d609af64a92fc663fedf05fe95c704b98b48e893f9623a0fc5770c65ae3c8ceeb1472546bfb63cd1885dc8950975e0f64df1175f6c770e622a0beb5c909cb8fb4157f5eb5edd10fb158abe85447db6a3a68408255c5584dfc17f25c5a2e89c93d643c6eb34cdfa0b0219ead798074d139efdbe073442b5982ee816f73e46550bc907466820e6e9f8c177f32354c2cbd7bcb2a0eef319b37fe865c6bb2fee630f0dc30796cf78d1a3b6ca44a6bdc39ddf49d7a6e109fced5ab3ce5a05bb15b11ec1bf26659e2a7ca3af8c168a3e8a9a498ce3e1592a362c18ccd89cecd84f33f7ac10b28630d4d4ecf75c8b5c45c12199138bc429ee6471b4545ed9ed30bbd4697ead08f07119ad74c6eb98e226b92759a7d154d1b90b4ac1906983cfea4b4067a9ee82544022574c33a4a701d8a2eba1882c601223832018f7958773588b841ff11d3de05515a4e8ce3a5994ad4562386f78f568190ecd8cf2008897c35377626edade0efc5ea6457b4b08c1486647796e3e41d551780ad6eec7a13de98c901a9cf7db02bdbf53c374b348b47ba65faa3cd99c538e657ece5f12941b1dbbdeb0b738b4189b40b150f189eb3ee3b1adf6b0d882ae9ce9ecc3e3f059fa92525bee86c2489048aec344ec95b190cf6fdcd7964be0140404a06fd3024cd2f704c13a09e4d89876d29b1aa8036c97d626bea7df806f3724e1752252d0e14f8d1059aac0a99bf03dada0b06d7c733c09371cb5c75555f13753e99914b513735f81800c97f765bbaaf6c22bccc42e46c5502cb5c546d98d19433bad676c1a9ecf873171daca25b332819cdf96d436a9e7cd3ea5db9b6fdce77575b0d8ecde8a74dc0539421fdc9e98e071cc6bf7ff1d5ec70d03ab576ed770366e6bbd88b1b7fdd554f8c19484008c8d4a9334b75caab3ca83dd0bb3564779cb227ece5f10d95033a2a00231c5fa309e6193581e97d999d45f8535bf5e116e1f2072d0164e8d268045843a77c3b77c97f5eedccdc7f102e066faeb44ca7dd3fe47f12d028defd7247ba6dfdcb400fbedfc62e7c726a195c2db7decaad2cbb12952837f6ebf9b863a36cb6ae7173eb0f6842bec97779e122bf0a381678ba4ed2a08547ec8812e52ba55de75edbaf41bb3f798262a3f51fdf9ca0df0795190f2d60f8e0368b10795f948d8c577cd0962ed30330af2c96060f02144fd9ff41417a335f03e70c26765bb37bc53e38be1f594ea3c9c71cf05449b35ad0a96f096aae2a20136efc7e9699e2eb7f12dabaefac883a1106589895ae976dc2521a6a783aca64129bb2ab43538e974fa4893ab5d1eb3f0b927f4bd1eb26c1118f79ade08fe2a5394e0b55a2d1137cd6013ce5a6f15659bbed9d896f46dfab3c27b4c1430876de4b67e0bb17e92fb02f1c747873c26c1bca576b7089536cfb77f7b30426579bb5c747ce2435c747393b6a1c26e0c637a430c6bada34d3330e7a3ed96b4289cb9681b469109f16e197666caf7d452b06ff5ea2f58509e2f92ec2a5502bef8bb23ca9b72fd3656bf33d4f1c911c7638df0b8926f00882e53a0275935aff1ebd70f8303eb425670ba9be1ee988f31c1b854a36db1adcb9e8271fe11a9d4c335de2efef1afe42e86c5a8cca570529a8d6c0d6ec664358c3a9553f4fdcbbbc4f23576ea0e2a0359118c5a51a74bd4d8281f8c3d156065118273dec5106a257b20d3ce8cdd98b2689924ebae31f59532bf79cb964a93fe13213b14e224ceeb3f91de8022246f91d66b4866bb48477cd8a27a1ba29b1328be7b016f07b6470ec0525ea5901cb54f073c37d6d1e8447661e0c60d147a0b557c18bbf9a85315b3318d2cd64b5a5bf8d32493b76b5e66a5124b1d8b9635e23894ea576805bb3047cad399a29cf7781f307519d571c8de55feacf51d0a92c11393f9323d207ec494c3f1b5117027510b87c2651f0b0e707360e77002fc1a7a8a5582615d1d497a3c7d5bca0cd36beee00086f460e6eccb9df0762c7755293101e12751d29945f60144719dfb11d7786bcb85826e196ccad51eb1236980ddd78b644a32d157f09b5feb7c5e10caadd7c7cacdba3031a89b4b1a0f0a0f6afdac9df703cfd2f644218c4014617b0185127c67b250f20610d07de50714809087adf9ebbfe2248bdceeee008548bc445dc5c85ef765766a4f4af36bdf064f5fb810736ebaa849efc882237e5f0b1aa1f52f66838d4f8959bc21702346f2c8942532f2ec401e467ae6ab7bd59ab90142144093b626e55959cc02b784f195554712af81b46644d155ecf821bb7768519286750470076cc6f3c24132a0266cf91edbd4f459bbf34cc2f8a4249bfda1d81d42ac847bc39bd8c4e7404f8f2dcbbff703c43f7e2f18e08b3bef8a96ab99f712c7266857a05b25c46256bd64d262558d81d7009a1f25a9c74f1bbcc0f5c1a66c6c1f2efb1ee513bff080cc21a4d1027e7b5ba3664c3eb942db7d5e80f93e080019e1db23bcac9b776796bc19ad22cf4165bb9eb6fc0644f0d1cc956f1b7eff8ebb8b070a771934ccd6b1c717201185d2a5c3d74ad2d52a86d475c5133ead932df76a780d93a6567ae45eb4e2f82ba16434f34388bea132ae27a7600101c715ec04b6085e35a6da8fc162841d50b55b9d553dff0fb895ec0fa0dac30ae3972571fd62b7bdec3d16b99962590281857ccc9ddcf11c2c011419097572c0ccfcb75379d4a718ec725eab299eb76fb989380d007a406fd22ba193f42f0b2229cf67b76f22f4b498048aa96a90ee368cc9a489d3dbb96189dd7ca388f619af19e3d37ddf8c5fc3ff3e31b837c37ba430f8bec1e7f674b05d7b025d3a2cfd28ebb1a46d6c5c5b295bad25a50d796dd5ad709332321ac302758f45e16d68db2eb7a833a6b9d18624386b20b1bba6ea479284fedd6646ef513c48712467369d447630dc33aa6d8da5050307d322208fd51e4d1890da94627cdc659d9b9c709fc943732c2777b15bf6d9b1a7427ea48d681581589d9afda2c7405a32b77eb06209650cfab9631d9cf6742f003c5a9446a21132f6dd8271d07166352cdf3cbde1b90d9b2671fb045f7e6cb55ad13a7998b9b39590dc856bc1e83733ed4557a4745128bbcb4d4e943166542c856e96acb3fdb87e177a66f0d75af9695976a28b4b659ede5b2afed84cc1cd4fd13fe4bb97401c1201ae51d3e51ab64c00295c5b5f79460815016d6b71384c3540e99e89bc2af3aaa8a731acdb8a423c386095980f196fa5825b589a72645e9a53a7382bccad910c36b57eb96ba54ae2326fcc7866e00939f16bfc95420d36500861a43457411578af588e4dd4dae4be45e25080a18913274e3272b5b81f2878dd0432598a4cec13b592e2156858fc1da2790e1414a9e615101328a10719e17526086846c8831bebdf9f7c3a686fcb9eb5d4b11fa78450a460ed48fa7f6318bdb0113ef19fdae4af005b653f8c1e209e6482799b7a9a80c88195938dcaf68f11c2afa8dbc2c4068458208a4ea3eafc413c264959b79694ddf014dc1daec3981023f3d9fc8ecdeb1aaaf906f0f578c2e269dab4577c643cd4657b83f9ecd18d15f72ac714cb18027e16167caeda4464eec83418a9ace5fa5b6217ca2661738fcce6a3f183ce9ce3132e563612fbfc42da3edc9e51dbe691648a1541dd7c6ae47b9a6932481c97d8c7fad96171469f8938ad438ea25c42f2bae61bb4e97730870964535bbe564ef9a759804c35b82dae6e594b6c0d8741f520b96e63693aa1c31dcf5d1ff95ba72ee5f2775a18f2436253998e3e058a3eb3f71e890d0ae06d72d271d8f441f4c6d268343a81aa775cc9b5584d81ddbae34d11d7780dc03565d0c8e0e2270703901cd8651c9235550b51c1c8405f0be528d1003dbb3e27441719fc7e96ba8ffcc8c98abb7285ad8f15f9c4ef5fb0bbb59c69118ca6fd656e612e1db4a4544d102ff9cdb0ebe744e224047a5a4ecf3c65f4d3cdcb65aaad152f70e95c5fe1cca6646411d6c808a1815bdde943882f3ce96d7a3f3d2d2e82d4c94c141923973692f7f89213dbe927f833b7e4a5f7c591c1629feec86844d3a993d5c9224bcd4bcd50ed9a6218c88f74ba6cc069f9eb6bd8c5f37c02b21bbf9a16c70116917638ba194e2bd53828cf0f8483f58c9bd586d964e12050ef0d9d2628946bb43ec29646a0b7634fadd7e1e4c42bb8b5c25895ca08ee209aa7ef3ac9a0d4a6ba8aa60b29a7f602a3ba8d751832837241eff73cb0eaa52dec8ebd994f368077ca3086288e0013b0a0b9f6a69710b6cfd12fb562134d6d2978036d0410a8d2aad52d5050959a4b6a6df1e58a848fff92a02d3fcee891f87b624479b13b7135c729032a91006c782ced56b34e971271ac0fa6b898623b425426b3e6b765196b00dc1d85bd0ad4882438431d23fb96acb5efce7b139acfcb5e0e96d5d5f98549ae0f6d0b90aac3e1b60444161f170e829dfe3bf57930c7ac4fb22c3e2903038653645a7dba07bcd822d239c516bbdcf106ddb5e3521e4b7dd8401716a53af3001e5ebfe4f21db12bdbf9b260543db06141af43e11ed8395b9d7e04974e116ccd8f0b1081aee4c3af48a1e7dda767770e2ef126982e4d1fc8b0710623c817db4f52d060e952e4decf98a447a7b0ddb2891a050936116742f83239adc3d61309e227a7c571aa29e5b6a263faaee460da5d2bf7570a0b33e3ab23e27bb11bef5457e075c834425f04695d97f579cebc8d32fe07890e0fb9d26db6e82b7ef765b00eef42ca35b5612cc6fdc7ac6076cc5fde5a5f8dd83a5974e614ca36a98c8429b46059431c8c43939c7c4af5dbb7fafe00a3fddea970847e91ac1baff22c4f87f7defce0079bde94d98218bbcebf84e0edc9db9397672781fb165000bb99e007f10b2974eb754917de90b3293f0ed8f1d8a5152351a655bd9ff4443d850ae7127a848d7c8eae6fc6d3bdb547930b087e2d3689f77c5974d73fb1fabca677be2f7825bf685f53479b4a9de899d6324d9bd0dceea5e7c2b7c5fe2087b2e4cdd9721e3e58c89f7cb11ea548df118fa89a3fc297eaff5b3bb31706504952347784358118b69d6334b229e64edd70f1ca4d73c798d06c04e42d053156ec548ec9053d05fc2f8db19c10cd820d6fded215071c7fe01ff82c4902ce553e0134b1711e9e09b388b0dd6dd5a5de5406b0c12e1b84bc548e9812041d3b0effc0c3a617282fc529a72770a9ddfdaa7f03cefd893ec0330785b5786ad721e90035ff7234d9f0e1c9e76150a23bafa634596d24b7308dbce0daa48885441576ec2789ff399422a0e71221b4fb6a3673a4395b5d9c1869b078bf82f6bf761c1686eaf370960f8fd1919107b184154cfa12eabfd36254b03556daa3bb7e9ec4738ab5ff3f10254db92f9cd3980574e2a0f8d2e806227d3ab3cd8239e678b60dbb244c765fa01467cfcea86bae3fff625fa73826fa9bef9363733f4ecbb0537ada5755003808a59dc697f9b9bfe8c3fc9dd69d93046c7b8f570b06659e19df0900bcbb33b5e51fea4427a690a3552fb870b839af19124b7cca000a93bb115181c8c1cfb7cbb0837265311dc2db71088799a5f43a9263a45b2dccb3b5372a7c4ab392aa81c6633a4db076d1ba6bda969d1eb0ac96753e93b74b4057bf9baa1622c3706a03faa8e1e4ee1523f630cb19e191c0e10340f93794c59dc5bc923979fbe28f532b87ad231048ad58c61ed553509e2e41b9b3f577fc59ad24286ed90510624a12a659b36945bb5fcbc51904967d5527b4f40d1801fdf3cf53ed79edc214d7e53657f2ed34f7be414911e8563e89cb706be082681e419e58c525c423173f145a63df9eb9cb68b823db9ea1134b9e18c3f12b3386a37679b43de07c76aec21d24888261ddde99ceafd3a5e250378451e0cd4adc4f25e1822e2701cb566d3509ba0b6d269e47cc94809e6ec86e3b37d0a531c08219244a0b369e22a708773add85fa830397a0a9575c5a655247f7ff5723717d96cd7fba2dcf6ffe046da9ebdc1fe55d0793dd9d6ad3f1352d7150f576ca212b31152d9d397cae35fb4d0628e15284881a6929fdbd6cc535666f36247ae65d51b5c56e5718cd63d131f5f63c50d42db3ed8ce558c6400e75cba988ac44bcb8365d894125269503544b5d1a0c6a7db0b42da13aa2e406f008e9e32336b8104093f40b57e4707ec43fd05e725510b564db7692f7f0d3305f77a9da701151ff193641f26900be93c6971d40d8bf29cdc2303c58d45da61687d5e6f1594fbaef0c8ea4de18926650e9ba1d985df2a89e562debf0b7f4af2b99d641cab8ccdd42e106091632ab40d3ce6a1e1ce9158f25a66ac827b6eae204ef5d0b6b0514107a19fff07e27f7b45dc2f97e3150f8bb13562663b5b8c3e1d35f125433261aa415cfff6f520fa79d7566ad467ef218b64581eddcb48893cf563f8aa704d5a0ced68d16ecbec457ca7122fc5fe2b9eab7256724b4ef121eceea88ceacc79315edfc6ba3f2814330991dffaa20e1cb4c1dafc0b2df3e6d303b498c341f643faccd4c80f1ae6536003faac2824163df06c50c3cc841181c9f92c945e21424ae1183516f17d1ee8e509df858cd51afebd35c64a573eaab38255f8958df9bb3bd2de6ddc2d0483e56c72cfa0301c2a8053034f047ff7bd8d6d7d4af62d2105c222863147ed9950a32564d75505ef95809cd2640217fc0d47eeace1c726f7d6aba02d88051d9f16c9e309f1fe56cd3b92e223998fd7addcf18f5a78703a44ab5b6a2d8895d337688973af108d52b69c1692fd4b083f59db61fa3273ce32e1b82b6c2bee805040601ff93c96d79e7921e3eb225c85a90ae8d681bb425d6744457e1100d28a2fdf233aa3fee3de88c3b55b37035d3597236d01eae038a532d1b70d642163edbf1c80ddca7adea7f8782268d20fe51d59a5ad762f46d04e028f1788759ec235df18daf6f346df59b76d80a61ffe6b1055da3b6465590ac6d2377d95b3090149a03fc2cd05ebb63dda43db5c028ab9792f07282e03bcd1c02ede5e6dfbe4175843b0bd3bd475598ef323183b132dec7f0f56b8dfa0686acedf939696a5bcc4077637229d53d7d95b38faf5529e3cf9bb08d32c5c9454627f4cb5e2c08e9124626a159f5617e469142213ca7a85f402fb749232e7c47658bde16f6218e4672b5b68d0bcf615f77f6a7024b059745e86553ce2bbdebe197b9ca845398334e2d3fc84a0fd5841d79761e54a695509d24644e05b3aaf78b134e503dc0626f578604d2c8c54578bc236a379aab0e888d87982bb7a650a0abfeec74278b57c65bf68b68c1591e2e2d658f01400baa623e7f534711e0a0ce3e1ff5c3473e6c204efb5154f8dee6e7df7390568e05432678df50c77a426a5c0ca84897fd097d628d742b884055a8821fe6909f4350c4eca5ca7d3dc653277250109b7a0356e09435834edec1e3fadd98fedf7a3fa8243cc7bf72b3620eab4f35c7d6754e436d8310c1926bf9cc898cf63f4a28b774635d3cda5945a27a2fcd352ea863527d5ed00b73bf084c535684cabdb6ead86effefb587933476628aba307be966246c050770c53a3f443acaee8b007d269e3d81bb6ce62ab9a51928ca2ca57d1a680a5c3728278297c48e4ae5e994e87ab9ff2992430709fa707fe4e9a0f80799531c62d147758c9c32b8a6e36a1877d40746ca09ec24511c164ec13ae2523c044598ecbb6f6722513a458bdfbd7c0782ff9df1dc552255c38bc8fc95eb6ac6bd72fedc853db6ba428f881e1109f628d01924969d60df49c6e217b89cef24c6b990bcd81ed8c9286eca75c35ce045ac12530eb8df7be789ab8178294f6e446c03f2190354cddc5a75b08edf0a0a98a57ab20403962fa75382dd7cacc45a1341370e9d53229eb15e945075387623cd1dda95d52f91afd263b474da4e5c0b76abaf2342d95abbf5fff7a7a038c738c52e78157a96e8d70b76c77109040f35b3f54884cb456acdb20dcc139b7ba611bee79e5710b2bb7857decbbbf20b924a7573fe70db8d7004f9be970640e14460969f0ae458b3a7baacc95bc8f0a4887b23e3fb279f7a18372bed9b2cebd3dfb4597090abdbe889dfd3b52805e43d17f30bcc4542610d496259f41d89d040b9b856a160698187690dd5e272e9e029c90ff66a4f5b70ebf294ec470b1f0046e5017f2607c43b1e179d2c113a4f6a44017bd509f450bf2f06dacc3c8189685f09c2fe9bfa08353f7c341da3d4b81aeaebb2532fa2832f66910a5a2f93d886ffccabebb28588d289f9ec1cef24e778e88887be482131756a6515fdb024976eb7e75beaf1ea58477fa01a2da9610552ef6d8e0e3b7dbb83fea6aa69767093fb96fa4e80dcadbde728824426f8b0464269b1d5b922391cb6e1bd2f37602b1f1277d54f005f4b6d70ca42f7982e35fa90fa11c049fcc476ea5f246df4eb0d9592df3089f8498238a95be7ff62e592b554b600843173d99b071310b1616b7ab64fc926abdb8586446cf350506c54659d6ebae1b1c0eff57ccb52cfdf9a72152b8fc393e287cb7196257ad817e5095d59e13b29373d836c9fb0f78d7ec07d4b7fda4a017d83570891419c84292f90c74a86fd4b7389bc0df9e4bb7c32ef5f335dd62bf4e2db2349c71acdc770542012ab9022eef172a4434160f162c2158ab99aaad5c8ce33d09c30e954", 0x2000, &(0x7f0000000f40)={&(0x7f00000004c0)={0x50, 0x0, 0x3, {0x7, 0x29, 0x1ff, 0x2002008, 0x1, 0x40b, 0xfff, 0x7, 0x0, 0x0, 0x100, 0x6}}, &(0x7f0000000540)={0x18, 0xffffffffffffffda, 0x800000000000, {0x5}}, &(0x7f0000000580)={0x18, 0x0, 0x0, {0x3}}, &(0x7f00000005c0)={0x18, 0x0, 0x0, {0x6}}, &(0x7f0000000600)={0x18, 0xfffffffffffffffe, 0x9, {0x9}}, &(0x7f0000000640)={0x28, 0xffffffffffffffda, 0x0, {{0x4, 0x8}}}, &(0x7f0000000680)={0x60, 0x0, 0x9b9f, {{0x7, 0xe195, 0x3a, 0x8, 0x2, 0xff, 0xbfff, 0x80001}}}, &(0x7f0000000700)={0x18, 0x0, 0x8, {0x2}}, &(0x7f0000000740)={0x1a, 0x0, 0x0, {'/dev/fuse\x00'}}, &(0x7f0000000780)={0x20, 0x0, 0x6, {0x0, 0x1c}}, &(0x7f00000007c0)={0x78, 0xffffffffffffffda, 0x4, {0x4, 0x2, 0x0, {0x5, 0x6, 0x5, 0xffffffffffffffff, 0x8001, 0xb07, 0x0, 0x7f5bf0fd, 0x2, 0x4000, 0x3, 0x0, 0x0, 0x6, 0x3d}}}, &(0x7f0000000840)={0x90, 0x0, 0x4, {0x6, 0x3, 0x19, 0x3f, 0x4, 0x4, {0x6, 0xff, 0x1, 0x9, 0x0, 0x760000000, 0xfffffffe, 0x57, 0x7f, 0x8000, 0x1ff, 0x0, 0x0, 0xfffffffe, 0x4}}}, &(0x7f0000000900)=ANY=[@ANYBLOB="9800000000000000000000000000060082dd000000000000000000000000000000000000000007000000000000d4ffffff0900000073797a6b616c6c657200000000000000030000000000000007400000000000000a00000008000000040000008b12b9e1ab000000000000000600000000000000090000000000000008000000040000005b2d2f215e2a275b00"/151], &(0x7f0000000a40)=ANY=[@ANYBLOB="88020000daffffff0010000000000000040000000000000000000000000000000900ec0000000000580000000000000007000000ffff00000400000000000000040000000000000002000000000000000800000000000000ff01000000000000040000000000000005000000000000000700000000200000af000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0200000001000080000000000400000000000000090000000000000003000000070000005b2f7b000000000000000000000000000100000000000000669e000000000000020000000000000002000000ff01000006000000000000000200000000000000c40000000000000006000000000000000a000000000000008c0a00000000000007000000ffffff7f0001000000a00000ff070000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="61000000020000000000000004000000000000006a0900000000000002000000010000805d290000000000000200000000000000010000000000000003000000000000008d0100000000000005000000fffbffff000000000000000008000000000000000400000000000000000000000000000000000000000000000500000000000000fbffffff05000000060000000080010001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe0800000b0000000000000004000000000000000200000000000000010000001b04000000000000000000000000000000000000020000000000000007000000000000000500000000000000400000000500000004000000000000003600000000000000020000000000000000100000000000000800000000000000cf000000000000000b000000f7000000370e000000400000b0050000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0700000500000000000000030000000000000008000000000000000000000001040000"], &(0x7f0000000d00)={0xa0, 0x0, 0x21, {{0x0, 0x3, 0x2, 0x8000000000000001, 0x0, 0x538, {0x4, 0x3, 0x6, 0x800, 0x7f, 0x400000000000000, 0x0, 0x0, 0x8, 0xa000, 0x3fe9, 0xee01, 0x0, 0x99f2, 0x44d}}, {0x0, 0x6}}}, &(0x7f0000000dc0)={0x20, 0xfffffffffffffffe, 0x9, {0x19c, 0x4, 0xf5, 0x400}}, &(0x7f0000000e00)={0x130, 0xfffffffffffffffe, 0x20000000000000, {0x0, 0x6d, 0x0, '\x00', {0x441, 0xae7, 0xb9, 0x8, 0x0, 0x0, 0x4000, '\x00', 0x8, 0xe, 0xc5fe, 0x8, {0x8000000000000000, 0x8}, {0x81}, {0x8, 0xff}, {0x652, 0x7fff}, 0x79a, 0x2, 0x100, 0x1081f419}}}}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000280)={0x67, 0x7d, 0x1, {{0x0, 0x4e, 0x2, 0x8, {0x20, 0x2, 0x1}, 0x20080000, 0x6, 0x10000, 0x3, 0x10, '\\-+[\x1f&}]+/$,&{*)', 0x1, '\x00', 0x5, 'l2tp\x00', 0x5, 'l2tp\x00'}, 0x4, '&\x06-.', 0xee01}}, 0x67) r11 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$CDROMPLAYTRKIND(r11, 0x5304, &(0x7f0000000080)={0xd, 0x3c, 0xaa, 0x4}) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x20, r7, 0x8b8b506676a9cc29, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x20}}, 0x0) 428.987802ms ago: executing program 3 (id=1607): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001a000002ef522f735fc1494b1300000008004200e3df5af7051ed586e8bc9bced5156679b9a2415a6088", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24841}, 0x400c044) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000001880)=0x799) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r3, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) 329.415607ms ago: executing program 3 (id=1608): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5d7, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x0, 0x0, "1ec4618f6538ecc26693065a2dcc26d92bb4f1030cd2c1011cdbf894a0839dc2"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000380)}) socket$inet(0x2, 0x1, 0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$inet(0x2, 0x1, 0x0) shutdown(r3, 0x0) ioctl$TIOCCONS(r2, 0x541d) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x3}, &(0x7f0000000880)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000040)={r6, @in={{0x2, 0x4e23, @private=0xa010100}}, 0x2}, 0x88) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @local, 0x6}], 0x1c) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r7 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)="c7dbc25973d9d2abaa649a52e44fff8d6c3db7a2b6fc1bdfa0be0f0a262ff5a70d2ea72f6b54", 0x26}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x138, 0x20000000}], 0x1, 0x20000000) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r8, 0x0, 0xa, &(0x7f0000000080)=0x3, 0x4) sendmmsg$alg(r7, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x8}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) 321.971728ms ago: executing program 0 (id=1609): syz_open_dev$vim2m(0x0, 0x6eb, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x88}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x6c}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0x4e00, 0x0, 0x0, 0xbdff, 0x0, "fdffffffffffffff"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r5, 0x0, 0x40000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./bus\x00', 0x11) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x2000000, &(0x7f00000023c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="230900000000fcdbdf2501000000140008007663616e300000000000000000000000080009000000000008000a0000000014001f00fc010000000000000000000000000000060002000200000000"], 0x54}}, 0x0) openat$pfkey(0xffffff9c, &(0x7f0000000180), 0x10001, 0x0) sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0xfffffeaf, r7, 0x20, 0x70bd2a, 0x25dfdbf7, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp=r1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x84) r8 = getpid() sched_setscheduler(r8, 0x2, 0x0) sched_setaffinity(r8, 0x0, 0x0) mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x2480, 0x1) 248.880791ms ago: executing program 1 (id=1610): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000080)=@t={0x81, 0x8}) (async, rerun: 64) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, r0, 0x5, 0x4, 0x3, 0x0, @void, @value, @void, @value}, 0x50) (async, rerun: 64) r3 = syz_open_procfs(0x0, &(0x7f0000000340)='net/snmp6\x00') (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) (async) io_setup(0x5, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000080)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) (async, rerun: 32) connect$unix(r4, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 32) r6 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r6, 0x0) (async) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r7, r7, r7}, &(0x7f0000001cc0)=""/194, 0xc2, 0x0) (async, rerun: 32) preadv(r3, &(0x7f00000018c0)=[{&(0x7f00000004c0)=""/73, 0x49}], 0x1, 0x8081f3, 0x0) (async, rerun: 32) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0), 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x35}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0x44}, @exit, @map_fd={0x18, 0x1, 0x1, 0x0, r3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = pidfd_getfd(r3, r9, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r10, 0xc01064c7, &(0x7f0000000480)={0x9, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async, rerun: 64) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x101, 0x0, r10, 0x1, '\x00', 0x0, r6, 0x4, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (rerun: 64) r12 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0) ioctl$CDROM_SEND_PACKET(r12, 0x5380, 0x0) (async) r13 = bpf$ITER_CREATE(0x21, &(0x7f0000000780)={r6}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x9, 0xf, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000006c0)='syzkaller\x00', 0x9, 0xa, &(0x7f0000000700)=""/10, 0x41000, 0x72, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r9, 0x3, &(0x7f00000007c0)=[r2, r12, r6, r13, r10, r2, r2, 0x1], &(0x7f0000000800)=[{0x2, 0x1, 0x2}, {0x5, 0x3, 0x4, 0x2}, {0x1, 0x4, 0x3, 0x6}], 0x10, 0x5, @void, @value}, 0x94) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async, rerun: 64) r14 = open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) (rerun: 64) pwritev2(r14, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100000}], 0x2, 0x0, 0x0, 0xb) 159.716643ms ago: executing program 1 (id=1611): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0105b08, &(0x7f0000000040)) 86.616133ms ago: executing program 2 (id=1612): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0xfffefffd, 0x0, 0x34324152, 0x7, 0xa, [{0x2}, {0x10}, {}, {}, {0x0, 0x6}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setscheduler(0x0, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) ioctl$KVM_RESET_DIRTY_RINGS(r3, 0xaec7) r5 = socket$kcm(0x2b, 0x1, 0x0) r6 = socket(0x11, 0xa, 0x0) getsockname$packet(r6, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0xd, 0x0, 0x0) close(r5) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x9, 0x0, 0x2, 0x0, 0x40}) ioctl$TCFLSH(r4, 0x40204706, 0x20000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271b, 0x0, &(0x7f0000000000)) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404000c}, 0x40000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000064000/0x1000)=nil], &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='reno\x00', 0x5) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) 86.160873ms ago: executing program 3 (id=1613): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095000005"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x4000080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0xb) r3 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) ioctl$NBD_DO_IT(r3, 0xab03) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 85.889642ms ago: executing program 0 (id=1614): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000013000100000000001c00000000000000", @ANYRES32=r1, @ANYBLOB="000000000000000005002700000000001c001a8018"], 0x44}}, 0x0) 0s ago: executing program 0 (id=1615): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x54, 0x24, 0xf0b, 0x400004, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4000000}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x8}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20060000}, 0x0) kernel console output (not intermixed with test programs): 43.627029][ T8691] bridge_slave_1: left promiscuous mode [ 143.628743][ T8691] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.653321][ T8691] team0: Port device team_slave_0 removed [ 143.662316][ T8691] team0: Port device team_slave_1 removed [ 143.665397][ T8691] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.668578][ T8691] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.673209][ T8691] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.676276][ T8691] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.741837][ T8697] netlink: 28 bytes leftover after parsing attributes in process `syz.2.742'. [ 143.779359][ T39] kauditd_printk_skb: 20 callbacks suppressed [ 143.779369][ T39] audit: type=1326 audit(1737147020.859:4904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.1.744" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 143.788062][ T39] audit: type=1326 audit(1737147020.859:4905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.1.744" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 143.794241][ T39] audit: type=1326 audit(1737147020.859:4906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.1.744" exe="/syz-executor" sig=0 arch=40000003 syscall=151 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 143.801331][ T39] audit: type=1326 audit(1737147020.859:4907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.1.744" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 143.807708][ T39] audit: type=1326 audit(1737147020.859:4908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.1.744" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 143.813858][ T39] audit: type=1326 audit(1737147020.879:4909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.1.744" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 143.820491][ T39] audit: type=1326 audit(1737147020.879:4910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.1.744" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 143.826830][ T39] audit: type=1326 audit(1737147020.879:4911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.1.744" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 143.833135][ T39] audit: type=1326 audit(1737147020.879:4912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.1.744" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 143.839344][ T39] audit: type=1326 audit(1737147020.879:4913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.1.744" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 143.848985][ T8704] tipc: Resetting bearer [ 144.049848][ T8714] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 144.164016][ T8718] x_tables: ip_tables: ah match: only valid for protocol 51 [ 144.567736][ T30] usbhid 8-1:1.0: can't add hid device: -71 [ 144.572386][ T30] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 144.586600][ T30] usb 8-1: USB disconnect, device number 10 [ 144.985466][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 145.305619][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 145.415059][ T9] usb 7-1: config 19 has an invalid interface number: 244 but max is 0 [ 145.418710][ T9] usb 7-1: config 19 has no interface number 0 [ 145.421613][ T9] usb 7-1: config 19 interface 244 altsetting 9 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 145.426200][ T9] usb 7-1: config 19 interface 244 altsetting 9 bulk endpoint 0xF has invalid maxpacket 608 [ 145.429153][ T9] usb 7-1: config 19 interface 244 altsetting 9 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 145.432257][ T9] usb 7-1: config 19 interface 244 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 145.435412][ T9] usb 7-1: config 19 interface 244 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 145.438546][ T9] usb 7-1: config 19 interface 244 altsetting 9 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 145.441652][ T9] usb 7-1: config 19 interface 244 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 145.444721][ T9] usb 7-1: config 19 interface 244 has no altsetting 0 [ 145.448524][ T9] usb 7-1: New USB device found, idVendor=12d1, idProduct=9004, bcdDevice=dd.71 [ 145.451133][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.453448][ T9] usb 7-1: Product: syz [ 145.454640][ T9] usb 7-1: Manufacturer: 藧呱讉ç˜â§ë¼–⋀㡪⽲뱺ీ팈䩘왉Ꭶ괋Ȳ쪸ꎮࠡ旺㮂鰬瀩﨩喅켼蟭í¨å¦Ží…™ê¤ªê¤¢Ä€ç¬«ä¶“瀘ῢî¼î¦Œà¸˜Ý³è­±ï¥œîˆ‹çšŒîº“ᒇ鲦 [ 145.459883][ T9] usb 7-1: SerialNumber: syz [ 145.463721][ T8729] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 145.528193][ T8736] [U] vÔ3 [ 145.795445][ T5985] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 145.955333][ T5985] usb 6-1: Using ep0 maxpacket: 16 [ 145.958736][ T5985] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 103, changing to 10 [ 145.962919][ T5985] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34304, setting to 1024 [ 145.967284][ T5985] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 145.970731][ T5985] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.975204][ T5985] usb 6-1: config 0 descriptor?? [ 145.978848][ T8739] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 146.227061][ T9] option 7-1:19.244: GSM modem (1-port) converter detected [ 146.244706][ T9] usb 7-1: USB disconnect, device number 5 [ 146.251224][ T9] option 7-1:19.244: device disconnected [ 146.407409][ T8747] [U] 1¨6\œA°63¿´Bà\€Ê?¶ŠV‹VÀêïe [ 146.485204][ T8752] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 146.539232][ T5985] input: HID 05ac:8241 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:05AC:8241.0005/input/input18 [ 146.611574][ T5985] appleir 0003:05AC:8241.0005: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 147.157873][ T8773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.768'. [ 147.795288][ T5946] usb 6-1: reset high-speed USB device number 13 using dummy_hcd [ 147.846228][ T8781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.769'. [ 147.953541][ T8771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.477425][ T8788] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 148.780154][ T8805] random: crng reseeded on system resumption [ 149.081749][ T8810] 9pnet_fd: Insufficient options for proto=fd [ 149.172389][ T8808] capability: warning: `syz.2.776' uses deprecated v2 capabilities in a way that may be insecure [ 149.518356][ T5985] usb 6-1: USB disconnect, device number 13 [ 150.139771][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802326d400: rx timeout, send abort [ 150.143260][ C1] vcan0: j1939_tp_rxtimer: 0xffff888012901000: rx timeout, send abort [ 150.147483][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802326d400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 150.151901][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888012901000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 150.215930][ T8830] netlink: 'syz.1.781': attribute type 1 has an invalid length. [ 150.270886][ T8837] netlink: 36 bytes leftover after parsing attributes in process `syz.1.781'. [ 150.529044][ T8851] ipt_ECN: cannot use operation on non-tcp rule [ 150.673940][ T39] kauditd_printk_skb: 21 callbacks suppressed [ 150.673951][ T39] audit: type=1326 audit(1737147027.749:4935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8852 comm="syz.2.785" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 150.695227][ T39] audit: type=1326 audit(1737147027.759:4936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8852 comm="syz.2.785" exe="/syz-executor" sig=0 arch=40000003 syscall=71 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 150.701740][ T39] audit: type=1326 audit(1737147027.759:4937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8852 comm="syz.2.785" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 150.709673][ T39] audit: type=1326 audit(1737147027.759:4938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8852 comm="syz.2.785" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 150.717430][ T39] audit: type=1326 audit(1737147027.759:4939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8852 comm="syz.2.785" exe="/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 150.725268][ T832] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 150.725905][ T39] audit: type=1326 audit(1737147027.759:4940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8852 comm="syz.2.785" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 150.735057][ T39] audit: type=1326 audit(1737147027.759:4941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8852 comm="syz.2.785" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 150.741277][ T39] audit: type=1326 audit(1737147027.769:4942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8852 comm="syz.2.785" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 150.748856][ T39] audit: type=1326 audit(1737147027.799:4943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8852 comm="syz.2.785" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 150.765349][ T39] audit: type=1326 audit(1737147027.799:4944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8852 comm="syz.2.785" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 150.800494][ T8858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.786'. [ 150.818555][ T8858] team1: entered promiscuous mode [ 150.820792][ T8858] 8021q: adding VLAN 0 to HW filter on device team1 [ 150.855256][ T832] usb 6-1: device descriptor read/64, error -71 [ 151.057053][ T8861] [U]  [ 151.185301][ T832] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 151.332723][ T832] usb 6-1: device descriptor read/64, error -71 [ 151.435472][ T832] usb usb6-port1: attempt power cycle [ 151.728996][ T8869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.789'. [ 151.775359][ T832] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 151.806078][ T832] usb 6-1: device descriptor read/8, error -71 [ 151.896842][ T8876] random: crng reseeded on system resumption [ 152.066362][ T832] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 152.085904][ T832] usb 6-1: device descriptor read/8, error -71 [ 152.199203][ T832] usb usb6-port1: unable to enumerate USB device [ 152.989191][ T8899] wireguard1: entered promiscuous mode [ 153.577082][ T8908] binder: 8905:8908 ioctl ae01 0 returned -22 [ 153.963836][ T8921] netlink: 'syz.2.804': attribute type 2 has an invalid length. [ 153.965973][ T8921] netlink: 12 bytes leftover after parsing attributes in process `syz.2.804'. [ 154.021409][ T8923] syz.2.805[8923] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.021460][ T8923] syz.2.805[8923] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.024680][ T8923] syz.2.805[8923] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.515065][ T30] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 154.589923][ T8946] random: crng reseeded on system resumption [ 154.666519][ T30] usb 7-1: Using ep0 maxpacket: 8 [ 154.671203][ T30] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 154.676264][ T30] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 154.680142][ T30] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 154.683857][ T30] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 154.689058][ T30] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.693770][ T30] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 154.697456][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.921232][ T30] usb 7-1: GET_CAPABILITIES returned 0 [ 154.923346][ T30] usbtmc 7-1:16.0: can't read capabilities [ 155.133310][ T8963] random: crng reseeded on system resumption [ 155.179990][ T8965] capability: warning: `syz.3.818' uses 32-bit capabilities (legacy support in use) [ 155.186831][ T30] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.189107][ T30] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.191312][ T30] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.193562][ T30] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.235515][ T5946] usb 7-1: USB disconnect, device number 6 [ 155.281701][ T8974] fuse: Bad value for 'rootmode' [ 155.307779][ T30] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.310400][ T30] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.312690][ T30] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.314896][ T30] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.317340][ T30] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.319975][ T30] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.322310][ T30] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.324701][ T30] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.327234][ T30] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.329426][ T30] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.332247][ T30] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.335309][ T30] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.337977][ T30] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.340395][ T30] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.342557][ T30] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.344768][ T30] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.347160][ T30] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.349573][ T30] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.351859][ T30] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.354116][ T30] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.356594][ T30] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.358932][ T30] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.361291][ T30] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.363564][ T30] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.365864][ T30] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.367984][ T30] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.370510][ T30] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.372956][ T30] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.382902][ T8930] usbtmc 7-1:16.0: usb_control_msg returned -71 [ 155.385511][ T8936] usbtmc 7-1:16.0: send_request_dev_dep_msg_in returned -19 [ 155.386954][ T30] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 155.655239][ T9] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 155.807713][ T9] usb 8-1: config index 0 descriptor too short (expected 229, got 36) [ 155.810019][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.812778][ T9] usb 8-1: config 0 has no interfaces? [ 155.814314][ T9] usb 8-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 155.817169][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.822064][ T9] usb 8-1: config 0 descriptor?? [ 156.034166][ T9] usb 8-1: USB disconnect, device number 11 [ 156.069399][ T8980] gfs2: not a GFS2 filesystem [ 156.113665][ T8984] netlink: 36 bytes leftover after parsing attributes in process `syz.2.825'. [ 156.181506][ T8988] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 156.183438][ T8988] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 156.186440][ T8988] vhci_hcd vhci_hcd.0: Device attached [ 156.376491][ T8] vhci_hcd: vhci_device speed not set [ 156.465330][ T5946] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 156.505317][ T8] usb 39-1: new full-speed USB device number 3 using vhci_hcd [ 156.635813][ T5946] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 156.644990][ T5946] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 156.652266][ T5946] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 156.663861][ T5946] usb 5-1: config 0 interface 0 has no altsetting 0 [ 156.711264][ T5946] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 156.734558][ C2] vkms_vblank_simulate: vblank timer overrun [ 156.739212][ T5946] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 156.742883][ T5946] usb 5-1: config 0 interface 0 has no altsetting 0 [ 156.747876][ T5946] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 156.751401][ T5946] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 156.754921][ T5946] usb 5-1: config 0 interface 0 has no altsetting 0 [ 156.759375][ T5946] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 156.762863][ T5946] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 156.767297][ T5946] usb 5-1: config 0 interface 0 has no altsetting 0 [ 156.773943][ T5946] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 156.777212][ T5946] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 156.780702][ T5946] usb 5-1: config 0 interface 0 has no altsetting 0 [ 156.784043][ T5946] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 156.787703][ T5946] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 156.791422][ T5946] usb 5-1: config 0 interface 0 has no altsetting 0 [ 156.794829][ T5946] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 156.797962][ T5946] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 156.801439][ T5946] usb 5-1: config 0 interface 0 has no altsetting 0 [ 156.804857][ T5946] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 156.808290][ T5946] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 156.811347][ T5946] usb 5-1: config 0 interface 0 has no altsetting 0 [ 156.816034][ T5946] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 156.819500][ T5946] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 156.822726][ T5946] usb 5-1: Product: syz [ 156.824314][ T5946] usb 5-1: Manufacturer: syz [ 156.826230][ T5946] usb 5-1: SerialNumber: syz [ 156.834957][ T5946] usb 5-1: config 0 descriptor?? [ 156.839333][ T5946] yurex 5-1:0.0: Could not find endpoints [ 157.043388][ T9] usb 5-1: USB disconnect, device number 7 [ 157.540823][ T8989] vhci_hcd: connection reset by peer [ 157.543052][ T1134] vhci_hcd: stop threads [ 157.544697][ T1134] vhci_hcd: release socket [ 157.546506][ T1134] vhci_hcd: disconnect device [ 157.789550][ T9021] block device autoloading is deprecated and will be removed. [ 157.795502][ T9016] netlink: 88 bytes leftover after parsing attributes in process `syz.1.834'. [ 157.870618][ T9027] netlink: 92 bytes leftover after parsing attributes in process `syz.2.837'. [ 158.158792][ T9041] [U]  [ 158.563647][ T9044] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 159.580060][ T9085] Invalid logical block size (917504) [ 159.818453][ T9093] fuse: Bad value for 'fd' [ 160.003714][ T9099] can0: slcan on ttyS3. [ 160.005416][ T9101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.855'. [ 160.272324][ T9098] nbd3: detected capacity change from 0 to 22 [ 160.292473][ T9093] block nbd3: shutting down sockets [ 160.294411][ T5957] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.298721][ T5957] Buffer I/O error on dev nbd3, logical block 0, async page read [ 160.349632][ T6709] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.353143][ T6709] Buffer I/O error on dev nbd3, logical block 0, async page read [ 160.357555][ T5957] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.361443][ T5957] Buffer I/O error on dev nbd3, logical block 0, async page read [ 160.366450][ T5957] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.369187][ T5957] Buffer I/O error on dev nbd3, logical block 0, async page read [ 160.372064][ T5957] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.375722][ T5957] Buffer I/O error on dev nbd3, logical block 0, async page read [ 160.378143][ T5957] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.381182][ T5957] Buffer I/O error on dev nbd3, logical block 0, async page read [ 160.384566][ T5957] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.388879][ T5957] Buffer I/O error on dev nbd3, logical block 0, async page read [ 160.392175][ T5957] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.396512][ T5957] Buffer I/O error on dev nbd3, logical block 0, async page read [ 160.399894][ T5957] ldm_validate_partition_table(): Disk read failed. [ 160.403109][ T5957] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.407189][ T5957] Buffer I/O error on dev nbd3, logical block 0, async page read [ 160.410481][ T5957] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.413978][ T5957] Buffer I/O error on dev nbd3, logical block 0, async page read [ 160.417442][ T5957] Dev nbd3: unable to read RDB block 0 [ 160.421766][ T5957] nbd3: unable to read partition table [ 160.424044][ T5957] nbd3: partition table beyond EOD, truncated [ 160.433883][ T5957] ldm_validate_partition_table(): Disk read failed. [ 160.437023][ T5957] Dev nbd3: unable to read RDB block 0 [ 160.438138][ T9110] FAULT_INJECTION: forcing a failure. [ 160.438138][ T9110] name failslab, interval 1, probability 0, space 0, times 0 [ 160.440320][ T5957] nbd3: unable to read partition table [ 160.442861][ T9110] CPU: 0 UID: 0 PID: 9110 Comm: syz.1.858 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 160.444801][ T5957] nbd3: partition table beyond EOD, [ 160.448562][ T9110] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 160.448575][ T9110] Call Trace: [ 160.448581][ T9110] [ 160.448595][ T9110] dump_stack_lvl+0x16c/0x1f0 [ 160.448618][ T9110] should_fail_ex+0x497/0x5b0 [ 160.448639][ T9110] ? fs_reclaim_acquire+0xae/0x150 [ 160.448661][ T9110] should_failslab+0xc2/0x120 [ 160.450822][ T5957] truncated [ 160.454880][ T9110] __kmalloc_node_noprof+0xd1/0x520 [ 160.454908][ T9110] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 160.454930][ T9110] __kvmalloc_node_noprof+0xad/0x1a0 [ 160.472219][ T9110] alloc_fdtable+0xee/0x2b0 [ 160.474026][ T9110] dup_fd+0x92b/0xca0 [ 160.475602][ T9110] ? apparmor_task_alloc+0x2c2/0x3b0 [ 160.477686][ T9110] copy_process+0x2217/0x6f20 [ 160.479534][ T9110] ? get_pid_task+0xfc/0x250 [ 160.481370][ T9110] ? __pfx_copy_process+0x10/0x10 [ 160.483367][ T9110] ? find_held_lock+0x2d/0x110 [ 160.485249][ T9110] kernel_clone+0xfd/0x960 [ 160.486998][ T9110] ? __pfx_kernel_clone+0x10/0x10 [ 160.488953][ T9110] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 160.490939][ T9110] __do_compat_sys_ia32_clone+0xb7/0x100 [ 160.492611][ T9110] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 160.494945][ T9110] __do_fast_syscall_32+0x73/0x120 [ 160.496955][ T9110] do_fast_syscall_32+0x32/0x80 [ 160.498840][ T9110] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 160.501308][ T9110] RIP: 0023:0xf7fe1579 [ 160.502898][ T9110] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 160.510231][ T9110] RSP: 002b:00000000f513650c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 160.513444][ T9110] RAX: ffffffffffffffda RBX: 0000000062000000 RCX: 0000000000000000 [ 160.516477][ T9110] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 160.519050][ T9110] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 160.521400][ T9110] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 160.524241][ T9110] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 160.527321][ T9110] [ 160.686446][ T9089] can0 (unregistered): slcan off ttyS3. [ 160.835861][ T832] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 161.012477][ T832] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.018371][ T832] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.025216][ T832] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 161.030019][ T832] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.040612][ T832] usb 6-1: config 0 descriptor?? [ 161.300944][ T832] usbhid 6-1:0.0: can't add hid device: -71 [ 161.303350][ T832] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 161.313046][ T832] usb 6-1: USB disconnect, device number 18 [ 161.412667][ T9144] [U]  [ 161.635303][ T8] vhci_hcd: vhci_device speed not set [ 161.867391][ T9149] TCP: tcp_parse_options: Illegal window scaling value 252 > 14 received [ 161.906774][ T39] kauditd_printk_skb: 21 callbacks suppressed [ 161.906788][ T39] audit: type=1326 audit(1737147038.989:4966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.3.871" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 161.916518][ T39] audit: type=1326 audit(1737147038.989:4967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.3.871" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 161.923698][ T39] audit: type=1326 audit(1737147038.989:4968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.3.871" exe="/syz-executor" sig=0 arch=40000003 syscall=77 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 161.931169][ T39] audit: type=1326 audit(1737147038.989:4969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.3.871" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 161.938604][ T39] audit: type=1326 audit(1737147038.989:4970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.3.871" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 161.946043][ T39] audit: type=1326 audit(1737147038.999:4971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.3.871" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 161.969838][ T5955] Bluetooth: hci2: unexpected event 0x03 length: 3 < 11 [ 162.063962][ T39] audit: type=1326 audit(1737147039.139:4972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.3.871" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 162.075294][ T39] audit: type=1326 audit(1737147039.139:4973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.3.871" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 162.084004][ T39] audit: type=1326 audit(1737147039.159:4974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.3.871" exe="/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 162.094508][ T39] audit: type=1326 audit(1737147039.159:4975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.3.871" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 162.933369][ T9163] syz.1.874 (9163): drop_caches: 3 [ 163.220170][ T9182] netlink: 24 bytes leftover after parsing attributes in process `syz.1.878'. [ 164.320267][ C3] ata1: illegal qc_active transition (00000000->80000000) [ 164.658137][ T1102] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 164.666538][ T1102] ata1.00: configured for UDMA/100 [ 165.484899][ T9228] [U] [ 165.486451][ T9228] [U] [ 165.487531][ T9228] [U] [ 165.488620][ T9228] [U] [ 165.490033][ T9228] [U] [ 165.491138][ T9228] [U] [ 165.492236][ T9228] [U] [ 165.493365][ T9228] [U] [ 165.496017][ T9228] [U] [ 165.497126][ T9228] [U] [ 165.498210][ T9228] [U] [ 165.499290][ T9228] [U] [ 165.501420][ T9228] [U] [ 165.502517][ T9228] [U] [ 165.503584][ T9228] [U] [ 165.504657][ T9228] [U] [ 165.505985][ T9228] [U] [ 165.507066][ T9228] [U] [ 165.508119][ T9228] [U] [ 165.509196][ T9228] [U] [ 165.510450][ T9228] [U] [ 165.511545][ T9228] [U] [ 165.512612][ T9228] [U] [ 165.513693][ T9228] [U] [ 165.515532][ T9228] [U] [ 165.516631][ T9228] [U] [ 165.517680][ T9228] [U] [ 165.518733][ T9228] [U] [ 165.520888][ T9228] [U] [ 165.521959][ T9228] [U] [ 165.523036][ T9228] [U] [ 165.524099][ T9228] [U] [ 165.525343][ T9228] [U] [ 165.526426][ T9228] [U] [ 165.527480][ T9228] [U] [ 165.528542][ T9228] [U] [ 165.529932][ T9228] [U] [ 165.530999][ T9228] [U] [ 165.532077][ T9228] [U] [ 165.533124][ T9228] [U] [ 165.534283][ T9228] [U] [ 165.535476][ T9228] [U] [ 165.536564][ T9228] [U] [ 165.537644][ T9228] [U] [ 165.542478][ T9228] [U] [ 165.543578][ T9228] [U] [ 165.544591][ T9228] [U] [ 165.545641][ T9228] [U] [ 165.547277][ T9228] [U] [ 165.548446][ T9228] [U] [ 165.549578][ T9228] [U] [ 165.550670][ T9228] [U] [ 165.551938][ T9228] [U] [ 165.553054][ T9228] [U] [ 165.554111][ T9228] [U] [ 165.555089][ T9228] [U] [ 165.563316][ T9228] [U] [ 165.563641][ T9228] [U] [ 165.563667][ T9228] [U] [ 165.563704][ T9228] [U] [ 165.563837][ T9228] [U] [ 165.563862][ T9228] [U] [ 165.563888][ T9228] [U] [ 165.563915][ T9228] [U] [ 165.564058][ T9228] [U] [ 165.564086][ T9228] [U] [ 165.564114][ T9228] [U] [ 165.564141][ T9228] [U] [ 165.564705][ T9228] [U] [ 165.564738][ T9228] [U] [ 165.564766][ T9228] [U] [ 165.564791][ T9228] [U] [ 165.564950][ T9228] [U] [ 165.564977][ T9228] [U] [ 165.565003][ T9228] [U] [ 165.565030][ T9228] [U] [ 165.565230][ T9228] [U] [ 165.565255][ T9228] [U] [ 165.565278][ T9228] [U] [ 165.565301][ T9228] [U] [ 165.565429][ T9228] [U] [ 165.565454][ T9228] [U] [ 165.565477][ T9228] [U] [ 165.565501][ T9228] [U] [ 165.565607][ T9228] [U] [ 165.565631][ T9228] [U] [ 165.565655][ T9228] [U] [ 165.565696][ T9228] [U] [ 165.566014][ T9228] [U] [ 165.566042][ T9228] [U] [ 165.566071][ T9228] [U] [ 165.566099][ T9228] [U] [ 165.566206][ T9228] [U] [ 165.566229][ T9228] [U] [ 165.566253][ T9228] [U] [ 165.566277][ T9228] [U] [ 165.566397][ T9228] [U] [ 165.566424][ T9228] [U] [ 165.566449][ T9228] [U] [ 165.566475][ T9228] [U] [ 165.566595][ T9228] [U] [ 165.566622][ T9228] [U] [ 165.566649][ T9228] [U] [ 165.566674][ T9228] [U] [ 165.566811][ T9228] [U] [ 165.566838][ T9228] [U] [ 165.566863][ T9228] [U] [ 165.566886][ T9228] [U] [ 165.567534][ T9228] [U] [ 165.567562][ T9228] [U] [ 165.567588][ T9228] [U] [ 165.567613][ T9228] [U] [ 165.567757][ T9228] [U] [ 165.567783][ T9228] [U] [ 165.567809][ T9228] [U] [ 165.567834][ T9228] [U] [ 165.567948][ T9228] [U] [ 165.567972][ T9228] [U] [ 165.567996][ T9228] [U] [ 165.568019][ T9228] [U] [ 165.568142][ T9228] [U] [ 165.568168][ T9228] [U] [ 165.568194][ T9228] [U] [ 165.568219][ T9228] [U] [ 165.568318][ T9228] [U] [ 165.568345][ T9228] [U] [ 165.568371][ T9228] [U] [ 165.581673][ T9227] [U] [ 165.802259][ T9236] netlink: 60 bytes leftover after parsing attributes in process `syz.2.893'. [ 165.903249][ T9244] netlink: 36 bytes leftover after parsing attributes in process `syz.0.896'. [ 165.991990][ T9248] netlink: 'syz.0.896': attribute type 4 has an invalid length. [ 165.994246][ T9248] netlink: 17 bytes leftover after parsing attributes in process `syz.0.896'. [ 165.999636][ T9248] netlink: 12 bytes leftover after parsing attributes in process `syz.0.896'. [ 166.623975][ T9254] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 168.036712][ T5929] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 168.195187][ T5929] usb 6-1: Using ep0 maxpacket: 8 [ 168.199983][ T5929] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 168.203629][ T5929] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 168.207374][ T5929] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 168.211072][ T5929] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 168.228570][ T5929] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 168.236729][ T5929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.463954][ T5929] usb 6-1: usb_control_msg returned -32 [ 168.466288][ T5929] usbtmc 6-1:16.0: can't read capabilities [ 168.654846][ T9296] infiniband syz0: set active [ 168.658007][ T9296] infiniband syz0: added bond0 [ 168.687417][ T9296] RDS/IB: syz0: added [ 168.692065][ T9296] smc: adding ib device syz0 with port count 1 [ 168.694810][ T9296] smc: ib device syz0 port 1 has pnetid [ 168.905376][ T30] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 169.056135][ T30] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 169.060539][ T30] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 169.064090][ T30] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 28514, setting to 64 [ 169.071884][ T30] usb 8-1: config 0 interface 0 has no altsetting 0 [ 169.076887][ T30] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 169.081518][ T30] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 28514, setting to 64 [ 169.088570][ T30] usb 8-1: config 0 interface 0 has no altsetting 0 [ 169.093970][ T30] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 169.098583][ T30] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 28514, setting to 64 [ 169.103050][ T30] usb 8-1: config 0 interface 0 has no altsetting 0 [ 169.108766][ T30] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 169.113086][ T30] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 28514, setting to 64 [ 169.118583][ T30] usb 8-1: config 0 interface 0 has no altsetting 0 [ 169.122098][ T30] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 169.129117][ T30] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 28514, setting to 64 [ 169.133322][ T30] usb 8-1: config 0 interface 0 has no altsetting 0 [ 169.139029][ T30] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 169.142527][ T30] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 28514, setting to 64 [ 169.149579][ T30] usb 8-1: config 0 interface 0 has no altsetting 0 [ 169.153011][ T30] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 169.156759][ T30] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 28514, setting to 64 [ 169.160886][ T30] usb 8-1: config 0 interface 0 has no altsetting 0 [ 169.164346][ T30] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 169.172762][ T30] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 28514, setting to 64 [ 169.177281][ T30] usb 8-1: config 0 interface 0 has no altsetting 0 [ 169.182117][ T30] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 169.188968][ T30] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 169.192375][ T30] usb 8-1: Product: syz [ 169.194207][ T30] usb 8-1: Manufacturer: syz [ 169.196470][ T30] usb 8-1: SerialNumber: syz [ 169.211937][ T30] usb 8-1: config 0 descriptor?? [ 169.232183][ T30] yurex 8-1:0.0: Could not find endpoints [ 169.367409][ T9323] netlink: 40 bytes leftover after parsing attributes in process `syz.2.914'. [ 169.442975][ T5985] usb 8-1: USB disconnect, device number 12 [ 170.215258][ T5929] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 170.265263][ T9340] input: syz1 as /devices/virtual/input/input20 [ 170.275511][ T9340] tmpfs: Unknown parameter 'usrquota' [ 170.385205][ T5929] usb 8-1: Using ep0 maxpacket: 8 [ 170.389935][ T5929] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 170.392395][ T5929] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 170.395664][ T5929] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 170.399358][ T5929] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 170.403137][ T5929] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 170.407893][ T5929] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 170.410604][ T5929] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.449169][ T9346] trusted_key: encrypted_key: master key parameter 'defa' is invalid [ 170.617532][ T5929] usb 8-1: usb_control_msg returned -32 [ 170.619255][ T5929] usbtmc 8-1:16.0: can't read capabilities [ 170.668671][ T30] usb 6-1: USB disconnect, device number 19 [ 171.346777][ T9368] FAULT_INJECTION: forcing a failure. [ 171.346777][ T9368] name failslab, interval 1, probability 0, space 0, times 0 [ 171.355220][ T9368] CPU: 2 UID: 0 PID: 9368 Comm: syz.0.928 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 171.359188][ T9368] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 171.362587][ T9368] Call Trace: [ 171.363816][ T9368] [ 171.364897][ T9368] dump_stack_lvl+0x16c/0x1f0 [ 171.366466][ T9368] should_fail_ex+0x497/0x5b0 [ 171.368078][ T9368] ? fs_reclaim_acquire+0xae/0x150 [ 171.369972][ T9368] should_failslab+0xc2/0x120 [ 171.371811][ T9368] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 171.374069][ T9368] ? mark_held_locks+0x9f/0xe0 [ 171.375934][ T9368] ? copy_process+0x49c/0x6f20 [ 171.377791][ T9368] ? _raw_spin_unlock_irq+0x23/0x50 [ 171.379714][ T9368] copy_process+0x49c/0x6f20 [ 171.381427][ T9368] ? kasan_save_stack+0x42/0x60 [ 171.383226][ T9368] ? kasan_save_stack+0x33/0x60 [ 171.385057][ T9368] ? kasan_save_track+0x14/0x30 [ 171.386782][ T9368] ? __kasan_kmalloc+0xaa/0xb0 [ 171.388598][ T9368] ? create_io_worker+0xcc/0x5f0 [ 171.390443][ T9368] ? io_wq_enqueue+0x664/0xb30 [ 171.392306][ T9368] ? io_queue_iowq+0x28b/0x5c0 [ 171.394126][ T9368] ? io_queue_async+0x1e7/0x420 [ 171.396005][ T9368] ? io_submit_sqes+0x177a/0x25f0 [ 171.397953][ T9368] ? __do_sys_io_uring_enter+0xd43/0x1620 [ 171.400150][ T9368] ? do_fast_syscall_32+0x32/0x80 [ 171.402129][ T9368] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 171.404606][ T9368] ? __pfx_copy_process+0x10/0x10 [ 171.406565][ T9368] ? __pfx_io_wq_worker+0x10/0x10 [ 171.408477][ T9368] ? create_io_worker+0x49/0x5f0 [ 171.410374][ T9368] create_io_thread+0xaa/0xf0 [ 171.412206][ T9368] ? __pfx_create_io_thread+0x10/0x10 [ 171.414248][ T9368] ? __pfx_io_wq_worker+0x10/0x10 [ 171.416215][ T9368] ? __init_swait_queue_head+0xca/0x150 [ 171.418341][ T9368] create_io_worker+0x1c2/0x5f0 [ 171.419992][ T9368] io_wq_enqueue+0x664/0xb30 [ 171.421539][ T9368] ? __pfx_io_wq_enqueue+0x10/0x10 [ 171.423384][ T9368] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 171.425275][ T9368] ? io_prep_async_work+0x654/0x770 [ 171.426830][ T9368] io_queue_iowq+0x28b/0x5c0 [ 171.428209][ T9368] io_queue_async+0x1e7/0x420 [ 171.429980][ T9368] io_submit_sqes+0x177a/0x25f0 [ 171.431867][ T9368] __do_sys_io_uring_enter+0xd43/0x1620 [ 171.433969][ T9368] ? __fget_files+0x206/0x3a0 [ 171.435743][ T9368] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 171.438094][ T9368] ? fput+0x67/0x440 [ 171.439627][ T9368] ? ksys_write+0x1ba/0x250 [ 171.441334][ T9368] ? __pfx_ksys_write+0x10/0x10 [ 171.443196][ T9368] __do_fast_syscall_32+0x73/0x120 [ 171.445067][ T9368] do_fast_syscall_32+0x32/0x80 [ 171.446869][ T9368] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 171.449163][ T9368] RIP: 0023:0xf705e579 [ 171.450660][ T9368] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 171.457660][ T9368] RSP: 002b:00000000f502f55c EFLAGS: 00000296 ORIG_RAX: 00000000000001aa [ 171.460931][ T9368] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000003516 [ 171.463956][ T9368] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 171.466968][ T9368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 171.469997][ T9368] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 171.473174][ T9368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 171.476373][ T9368] [ 171.477808][ C2] vkms_vblank_simulate: vblank timer overrun [ 172.355584][ T30] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 172.459859][ T9400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.933'. [ 172.506541][ T30] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 172.509376][ T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.513753][ T30] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 172.519109][ T30] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 172.521519][ T30] usb 6-1: Manufacturer: syz [ 172.523857][ T30] usb 6-1: config 0 descriptor?? [ 172.565259][ T30] rc_core: IR keymap rc-hauppauge not found [ 172.567083][ T30] Registered IR keymap rc-empty [ 172.570978][ T30] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 172.575860][ T30] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input21 [ 172.624239][ T9409] random: crng reseeded on system resumption [ 172.866154][ T5929] usb 6-1: USB disconnect, device number 20 [ 172.994464][ T5985] usb 8-1: USB disconnect, device number 13 [ 174.101579][ T9428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.937'. [ 174.553084][ T62] libceph: connect (1)[c::]:6789 error -13 [ 174.558010][ T62] libceph: mon0 (1)[c::]:6789 connect error [ 174.817713][ T62] libceph: connect (1)[c::]:6789 error -13 [ 174.820100][ T62] libceph: mon0 (1)[c::]:6789 connect error [ 175.265514][ T9437] ceph: No mds server is up or the cluster is laggy [ 175.910426][ T9458] syz.3.944 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 175.957983][ T9465] [U]  [ 176.580595][ T9473] netlink: 12 bytes leftover after parsing attributes in process `syz.0.949'. [ 176.855420][ T62] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 177.086973][ T62] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 177.089422][ T62] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.092248][ T62] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 177.094834][ T62] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.098274][ T62] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.102049][ T62] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 177.104554][ T62] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 177.106898][ T62] usb 7-1: Product: syz [ 177.108095][ T62] usb 7-1: Manufacturer: syz [ 177.111942][ T62] cdc_wdm 7-1:1.0: skipping garbage [ 177.113710][ T62] cdc_wdm 7-1:1.0: skipping garbage [ 177.116251][ T62] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 177.118065][ T62] cdc_wdm 7-1:1.0: Unknown control protocol [ 177.315445][ T9476] cdc_wdm 7-1:1.0: Error submitting int urb - -90 [ 177.328256][ T9476] netlink: 1280 bytes leftover after parsing attributes in process `syz.2.951'. [ 177.331018][ T9476] openvswitch: netlink: Flow actions attr not present in new flow. [ 177.336378][ T62] usb 7-1: USB disconnect, device number 7 [ 177.784457][ T9507] sp0: Synchronizing with TNC [ 177.932973][ T9511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.961'. [ 178.073713][ T9521] overlayfs: failed to resolve './file1': -2 [ 178.463215][ T9541] ipt_REJECT: ECHOREPLY no longer supported. [ 178.936934][ T9552] SET target dimension over the limit! [ 179.533570][ T9572] [U]  [ 179.759511][ T9574] netlink: 36 bytes leftover after parsing attributes in process `syz.3.977'. [ 179.916132][ T9575] netlink: 'syz.3.977': attribute type 4 has an invalid length. [ 179.919008][ T9575] netlink: 17 bytes leftover after parsing attributes in process `syz.3.977'. [ 179.967139][ T9575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.977'. [ 180.356728][ T9581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.979'. [ 180.395416][ T5985] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 180.545283][ T5985] usb 5-1: Using ep0 maxpacket: 8 [ 180.555430][ T5985] usb 5-1: config 0 has no interfaces? [ 180.558314][ T5985] usb 5-1: config 0 has no interfaces? [ 180.561143][ T5985] usb 5-1: config 0 has no interfaces? [ 180.564784][ T5985] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 180.569952][ T5985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.572940][ T5985] usb 5-1: Product: syz [ 180.574495][ T5985] usb 5-1: Manufacturer: syz [ 180.576766][ T5985] usb 5-1: SerialNumber: syz [ 180.579937][ T5985] usb 5-1: config 0 descriptor?? [ 180.726976][ T9589] trusted_key: encrypted_key: master key parameter 'defa' is invalid [ 180.788133][ T5985] usb 5-1: USB disconnect, device number 8 [ 180.882359][ T9592] bridee_slave_0: renamed from lo [ 181.572479][ T9610] [U]  [ 182.455280][ T5929] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 182.930411][ T5929] usb 5-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 182.933044][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.944389][ T5929] usb 5-1: config 0 descriptor?? [ 182.949461][ T5929] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 182.951873][ T5929] dvb_usb_af9015 5-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 182.961929][ T9645] overlay: Unknown parameter 'func' [ 183.345207][ T5985] IPVS: starting estimator thread 0... [ 183.455752][ T9651] IPVS: using max 36 ests per chain, 86400 per kthread [ 184.428022][ T9657] [U]  [ 184.505225][ T5983] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 184.677666][ T5983] usb 6-1: config 0 has an invalid interface number: 120 but max is 0 [ 184.680066][ T5983] usb 6-1: config 0 has no interface number 0 [ 184.681966][ T5983] usb 6-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 184.686688][ T5983] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 184.689848][ T5983] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 184.693059][ T5983] usb 6-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 184.697241][ T5983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.700905][ T5983] usb 6-1: config 0 descriptor?? [ 184.702792][ T9671] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 184.707054][ T5983] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.120/input/input22 [ 184.907275][ T5983] usb 6-1: USB disconnect, device number 21 [ 185.225203][ T9704] FAULT_INJECTION: forcing a failure. [ 185.225203][ T9704] name failslab, interval 1, probability 0, space 0, times 0 [ 185.230195][ T9704] CPU: 0 UID: 0 PID: 9704 Comm: syz.3.1011 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 185.234274][ T9704] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 185.238477][ T9704] Call Trace: [ 185.239770][ T9704] [ 185.240935][ T9704] dump_stack_lvl+0x16c/0x1f0 [ 185.242717][ T9704] should_fail_ex+0x497/0x5b0 [ 185.244592][ T9704] ? fs_reclaim_acquire+0xae/0x150 [ 185.246762][ T9704] should_failslab+0xc2/0x120 [ 185.248637][ T9704] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 185.250666][ T9704] ? getname_flags.part.0+0x4c/0x550 [ 185.252726][ T9704] getname_flags.part.0+0x4c/0x550 [ 185.254724][ T9704] getname_flags+0x93/0xf0 [ 185.254943][ T5985] usb 5-1: USB disconnect, device number 9 [ 185.256451][ T9704] user_path_at+0x24/0x60 [ 185.256475][ T9704] __ia32_sys_mount+0x1fb/0x310 [ 185.256501][ T9704] ? __pfx___ia32_sys_mount+0x10/0x10 [ 185.263607][ T9704] __do_fast_syscall_32+0x73/0x120 [ 185.265626][ T9704] do_fast_syscall_32+0x32/0x80 [ 185.267534][ T9704] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 185.269995][ T9704] RIP: 0023:0xf7fc8579 [ 185.271588][ T9704] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 185.278844][ T9704] RSP: 002b:00000000f50f555c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 185.282068][ T9704] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000020000280 [ 185.285071][ T9704] RDX: 0000000000000000 RSI: 0000000001805c61 RDI: 0000000000000000 [ 185.288103][ T9704] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 185.291155][ T9704] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 185.294182][ T9704] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 185.297245][ T9704] [ 185.438719][ T9710] netlink: 'syz.0.1013': attribute type 1 has an invalid length. [ 185.441701][ T9710] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1013'. [ 186.354890][ T39] kauditd_printk_skb: 33 callbacks suppressed [ 186.354902][ T39] audit: type=1107 audit(1737147063.422:5009): pid=9735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='=ŠÙ],™˜ûáYúx­,è×­' [ 186.383246][ T1460] IPVS: starting estimator thread 0... [ 186.565276][ T9741] IPVS: using max 20 ests per chain, 48000 per kthread [ 187.308290][ T9747] [U]  [ 188.100997][ T9785] random: crng reseeded on system resumption [ 188.399600][ T9791] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 189.047918][ T9799] trusted_key: encrypted_key: master key parameter 'defa' is invalid [ 189.052859][ T9802] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1036'. [ 189.262078][ T9803] netlink: 'syz.0.1036': attribute type 4 has an invalid length. [ 189.264527][ T9803] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1036'. [ 189.272377][ T9803] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1036'. [ 189.362103][ T9807] trusted_key: encrypted_key: master key parameter 'gàZ›’Š8amëüÑr‰Õs´ÔöÓRq‹Çü‹®ôX–jÕŸ`¦1Â6ßÈCÊû*`Åbü%™X5ieSç©)ãñÓk®± œû'xûw¡wÁ™ƒI•' is invalid [ 190.937376][ T9820] wg2: entered promiscuous mode [ 191.093925][ T9831] nvme_fabrics: missing parameter 'transport=%s' [ 191.096497][ T9831] nvme_fabrics: missing parameter 'nqn=%s' [ 191.149214][ T9834] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 191.151084][ T9834] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 191.156812][ T9834] vhci_hcd vhci_hcd.0: Device attached [ 191.335278][ T5985] vhci_hcd: vhci_device speed not set [ 191.395289][ T5985] usb 37-1: new full-speed USB device number 3 using vhci_hcd [ 191.852219][ T5955] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 192.672770][ T9839] vhci_hcd: connection reset by peer [ 192.676417][ T45] vhci_hcd: stop threads [ 192.679249][ T45] vhci_hcd: release socket [ 192.681142][ T45] vhci_hcd: disconnect device [ 193.637749][ T1412] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.922814][ T9887] fuse: Bad value for 'fd' [ 196.026802][ T9943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1070'. [ 196.041305][ T9943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1070'. [ 196.081164][ T9968] FAULT_INJECTION: forcing a failure. [ 196.081164][ T9968] name failslab, interval 1, probability 0, space 0, times 0 [ 196.089612][ T9968] CPU: 1 UID: 0 PID: 9968 Comm: syz.2.1078 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 196.092667][ T9968] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 196.095715][ T9968] Call Trace: [ 196.096722][ T9968] [ 196.097593][ T9968] dump_stack_lvl+0x16c/0x1f0 [ 196.099245][ T9968] should_fail_ex+0x497/0x5b0 [ 196.101176][ T9968] ? fs_reclaim_acquire+0xae/0x150 [ 196.102646][ T9968] should_failslab+0xc2/0x120 [ 196.103998][ T9968] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 196.105537][ T9968] ? vm_area_dup+0x53/0x300 [ 196.106884][ T9968] vm_area_dup+0x53/0x300 [ 196.108149][ T9968] copy_mm+0xd89/0x25b0 [ 196.109675][ T9968] ? __pfx_copy_mm+0x10/0x10 [ 196.111024][ T9968] ? copy_process+0x3ca7/0x6f20 [ 196.112406][ T9968] ? __raw_spin_lock_init+0x3a/0x110 [ 196.113909][ T9968] copy_process+0x3e6d/0x6f20 [ 196.115169][ T9968] ? __pfx_copy_process+0x10/0x10 [ 196.116613][ T9968] ? find_held_lock+0x2d/0x110 [ 196.118330][ T9968] kernel_clone+0xfd/0x960 [ 196.119672][ T9968] ? __pfx_kernel_clone+0x10/0x10 [ 196.121110][ T9968] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 196.122839][ T9968] __do_compat_sys_ia32_clone+0xb7/0x100 [ 196.124450][ T9968] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 196.126552][ T9968] __do_fast_syscall_32+0x73/0x120 [ 196.128287][ T9968] do_fast_syscall_32+0x32/0x80 [ 196.130277][ T9968] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 196.132445][ T9968] RIP: 0023:0xf7fb1579 [ 196.133652][ T9968] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 196.139246][ T9968] RSP: 002b:00000000f510650c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 196.141708][ T9968] RAX: ffffffffffffffda RBX: 0000000062000000 RCX: 0000000000000000 [ 196.143969][ T9968] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 196.146283][ T9968] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 196.148689][ T9968] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 196.151663][ T9968] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 196.153939][ T9968] [ 196.243226][ T30] hid (null): unknown global tag 0xe [ 196.245259][ T30] hid (null): unknown global tag 0xe [ 196.247190][ T30] hid (null): unknown global tag 0xc [ 196.248735][ T30] hid (null): unknown global tag 0xd [ 196.251045][ T30] hid-generic 0000:0004:00A9.0007: unknown main item tag 0x0 [ 196.253309][ T30] hid-generic 0000:0004:00A9.0007: unknown global tag 0xe [ 196.338303][ T30] hid-generic 0000:0004:00A9.0007: item 0 2 1 14 parsing failed [ 196.341039][ T30] hid-generic 0000:0004:00A9.0007: probe with driver hid-generic failed with error -22 [ 196.505264][ T5985] vhci_hcd: vhci_device speed not set [ 196.601120][ T9975] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 196.923006][T10001] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1086'. [ 196.952104][T10000] program syz.0.1087 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 196.954957][T10000] ata1.00: invalid transfer count 0 [ 197.241748][T10006] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1089'. [ 197.246084][T10006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1089'. [ 198.011558][T10028] tipc: Resetting bearer [ 198.316610][T10028] tipc: Disabling bearer [ 198.358303][T10028] team0 (unregistering): Port device team_slave_0 removed [ 198.365482][T10028] team0 (unregistering): Port device team_slave_1 removed [ 198.712668][T10048] TCP: tcp_parse_options: Illegal window scaling value 252 > 14 received [ 198.823044][T10057] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1102'. [ 199.098752][T10065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1104'. [ 199.405851][T10077] befs: (nullb0): No write support. Marking filesystem read-only [ 199.409542][T10077] befs: (nullb0): invalid magic header [ 199.413926][T10071] trusted_key: encrypted_key: master key parameter 'defa' is invalid [ 199.538281][T10086] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1110'. [ 199.863139][T10088] syz.2.1111 (10088): drop_caches: 2 [ 200.225671][ T39] audit: type=1800 audit(1737147077.302:5010): pid=10094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1113" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 200.663483][T10109] can0: slcan on ttyS3. [ 201.415575][T10102] can0 (unregistered): slcan off ttyS3. [ 201.951335][T10139] trusted_key: encrypted_key: master key parameter 'defa' is invalid [ 201.994429][ C3] vxcan0: j1939_tp_rxtimer: 0xffff888067b34000: rx timeout, send abort [ 201.998009][ C3] vxcan0: j1939_xtp_rx_abort_one: 0xffff888067b34000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 202.165241][ T6009] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 202.261303][T10150] 9pnet: Unknown protocol version 9p200 [ 202.266488][T10150] lo speed is unknown, defaulting to 1000 [ 202.269092][T10150] lo speed is unknown, defaulting to 1000 [ 202.274371][T10150] lo speed is unknown, defaulting to 1000 [ 202.288427][T10150] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 202.298169][T10150] lo speed is unknown, defaulting to 1000 [ 202.303856][T10150] lo speed is unknown, defaulting to 1000 [ 202.309461][T10150] lo speed is unknown, defaulting to 1000 [ 202.311581][T10150] lo speed is unknown, defaulting to 1000 [ 202.315204][ T6009] usb 8-1: Using ep0 maxpacket: 16 [ 202.318154][ T6009] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 202.321764][ T6009] usb 8-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 202.324297][ T6009] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.327637][ T6009] usb 8-1: config 0 descriptor?? [ 202.331420][ T6009] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input24 [ 202.542004][ T5341] bcm5974 8-1:0.0: could not read from device [ 202.548169][ T6009] bcm5974 8-1:0.0: could not read from device [ 202.554573][ T5341] bcm5974 8-1:0.0: could not read from device [ 202.558881][ T6009] input: failed to attach handler mousedev to device input24, error: -5 [ 202.563383][ T5341] bcm5974 8-1:0.0: could not read from device [ 202.563616][T10143] all: renamed from bridge_slave_0 (while UP) [ 202.580232][ T6009] usb 8-1: USB disconnect, device number 14 [ 202.581569][ T6805] bcm5974 8-1:0.0: could not read from device [ 202.585024][ T5341] bcm5974 8-1:0.0: could not read from device [ 203.087696][T10161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1125'. [ 203.190136][T10162] bridge0: port 1(syz_tun) entered blocking state [ 203.192161][T10162] bridge0: port 1(syz_tun) entered disabled state [ 203.194570][T10162] syz_tun: entered allmulticast mode [ 203.198765][T10162] syz_tun: entered promiscuous mode [ 203.348212][T10164] trusted_key: encrypted_key: master key parameter 'defa' is invalid [ 203.599217][T10182] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1132'. [ 203.779215][T10186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1133'. [ 203.877404][T10188] trusted_key: encrypted_key: master key parameter 'defa' is invalid [ 203.943230][T10193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1136'. [ 204.352195][T10212] netlink: 'syz.3.1140': attribute type 10 has an invalid length. [ 204.372025][T10212] netlink: 'syz.3.1140': attribute type 10 has an invalid length. [ 204.385684][T10212] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 205.030215][T10224] [U]  [ 205.075191][ T5985] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 205.225302][ T5985] usb 5-1: Using ep0 maxpacket: 8 [ 205.251988][ T5985] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 205.256132][ T5985] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 205.260110][ T5985] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 205.264712][ T5985] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 205.269548][ T5985] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 205.272915][ T5985] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.273275][T10231] FAULT_INJECTION: forcing a failure. [ 205.273275][T10231] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 205.279997][T10231] CPU: 1 UID: 0 PID: 10231 Comm: syz.3.1147 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 205.283149][T10231] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 205.286308][T10231] Call Trace: [ 205.287274][T10231] [ 205.288150][T10231] dump_stack_lvl+0x16c/0x1f0 [ 205.289574][T10231] should_fail_ex+0x497/0x5b0 [ 205.291017][T10231] ? fs_reclaim_acquire+0xae/0x150 [ 205.292520][T10231] should_fail_alloc_page+0xe7/0x130 [ 205.294054][T10231] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 205.295767][T10231] ? mark_lock+0xb5/0xc60 [ 205.297026][T10231] ? __pfx_mark_lock+0x10/0x10 [ 205.298450][T10231] __alloc_pages_noprof+0x190/0x25b0 [ 205.299978][T10231] ? __pfx_mark_lock+0x10/0x10 [ 205.301437][T10231] ? hlock_class+0x4e/0x130 [ 205.302790][T10231] ? mark_lock+0xb5/0xc60 [ 205.304058][T10231] ? __pfx_mark_lock+0x10/0x10 [ 205.305479][T10231] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 205.307151][T10231] ? hlock_class+0x4e/0x130 [ 205.308491][T10231] ? mark_lock+0xb5/0xc60 [ 205.309758][T10231] ? hlock_class+0x4e/0x130 [ 205.311124][T10231] ? __lock_acquire+0xcc5/0x3c40 [ 205.312572][T10231] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 205.314222][T10231] ? policy_nodemask+0xea/0x4e0 [ 205.315687][T10231] alloc_pages_mpol_noprof+0x2c8/0x620 [ 205.317281][T10231] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 205.319013][T10231] ? hlock_class+0x4e/0x130 [ 205.320401][T10231] folio_alloc_mpol_noprof+0x36/0xd0 [ 205.322034][T10231] vma_alloc_folio_noprof+0xee/0x1b0 [ 205.323599][T10231] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 205.325338][T10231] ? find_held_lock+0x2d/0x110 [ 205.326759][T10231] do_pte_missing+0x2017/0x3e00 [ 205.328233][T10231] __handle_mm_fault+0x103c/0x2a40 [ 205.329754][T10231] ? find_held_lock+0x2d/0x110 [ 205.331252][T10231] ? __pfx___handle_mm_fault+0x10/0x10 [ 205.332865][T10231] ? follow_page_pte+0x3c3/0x1b20 [ 205.334344][T10231] ? __pfx_lock_release+0x10/0x10 [ 205.335858][T10231] ? follow_page_pte+0x3f7/0x1b20 [ 205.337373][T10231] handle_mm_fault+0x3fa/0xaa0 [ 205.338777][T10231] __get_user_pages+0x8d9/0x3b50 [ 205.340248][T10231] ? __pfx___get_user_pages+0x10/0x10 [ 205.341817][T10231] ? down_read_killable+0xcc/0x380 [ 205.343297][T10231] ? __pfx_down_read_killable+0x10/0x10 [ 205.344948][T10231] ? find_held_lock+0x2d/0x110 [ 205.346368][T10231] __gup_longterm_locked+0x211/0x1870 [ 205.347942][T10231] ? __pfx_lock_release+0x10/0x10 [ 205.349417][T10231] ? trace_lock_acquire+0x14e/0x1f0 [ 205.350985][T10231] ? __pfx___gup_longterm_locked+0x10/0x10 [ 205.352710][T10231] ? gup_fast_fallback+0x84c/0x2690 [ 205.354220][T10231] ? __pfx_lock_release+0x10/0x10 [ 205.355763][T10231] ? try_get_folio+0x517/0x800 [ 205.357178][T10231] ? sanity_check_pinned_pages+0x3ab/0x11e0 [ 205.358914][T10231] gup_fast_fallback+0x1802/0x2690 [ 205.360442][T10231] ? __pfx_gup_fast_fallback+0x10/0x10 [ 205.362091][T10231] pin_user_pages_fast+0xa8/0x100 [ 205.363564][T10231] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 205.365212][T10231] ? __kmalloc_noprof+0x23b/0x4f0 [ 205.366738][T10231] ? rds_info_getsockopt+0x376/0x4f0 [ 205.368283][T10231] rds_info_getsockopt+0x39a/0x4f0 [ 205.369812][T10231] ? __might_fault+0x13b/0x190 [ 205.371252][T10231] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 205.372874][T10231] ? trace_lock_acquire+0x14e/0x1f0 [ 205.374414][T10231] ? lock_acquire+0x2f/0xb0 [ 205.375745][T10231] ? __might_fault+0xe3/0x190 [ 205.377141][T10231] ? __might_fault+0xe3/0x190 [ 205.378528][T10231] rds_getsockopt+0x173/0x2d0 [ 205.380000][T10231] ? __pfx_rds_getsockopt+0x10/0x10 [ 205.381582][T10231] do_sock_getsockopt+0x3fe/0x870 [ 205.383082][T10231] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 205.384708][T10231] ? lock_acquire+0x2f/0xb0 [ 205.386047][T10231] ? __fget_files+0x40/0x3a0 [ 205.387427][T10231] ? __fget_files+0x206/0x3a0 [ 205.388824][T10231] __sys_getsockopt+0x12f/0x260 [ 205.390250][T10231] __ia32_sys_getsockopt+0xbc/0x160 [ 205.391874][T10231] ? lockdep_hardirqs_on+0x7c/0x110 [ 205.393406][T10231] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 205.395340][T10231] __do_fast_syscall_32+0x73/0x120 [ 205.396851][T10231] do_fast_syscall_32+0x32/0x80 [ 205.398279][T10231] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 205.400125][T10231] RIP: 0023:0xf7fc8579 [ 205.401375][T10231] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 205.406912][T10231] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 000000000000016d [ 205.409278][T10231] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000114 [ 205.411655][T10231] RDX: 000000000000271c RSI: 0000000020000580 RDI: 0000000020000000 [ 205.413969][T10231] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 205.416283][T10231] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 205.418609][T10231] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 205.421040][T10231] [ 205.483883][ T5985] usb 5-1: usb_control_msg returned -32 [ 205.485723][ T5985] usbtmc 5-1:16.0: can't read capabilities [ 205.731504][T10242] trusted_key: encrypted_key: master key parameter 'defa' is invalid [ 205.747203][T10247] random: crng reseeded on system resumption [ 205.788970][T10247] lo speed is unknown, defaulting to 1000 [ 205.808607][T10247] ebtables: wrong size: *len 120, entries_size 48, replsz 48 [ 207.780430][T10279] lo speed is unknown, defaulting to 1000 [ 207.924308][ T30] usb 5-1: USB disconnect, device number 10 [ 208.097645][T10303] [U]  [ 209.277042][T10337] lo speed is unknown, defaulting to 1000 [ 209.541659][ T5929] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 209.725391][ T5929] usb 8-1: Using ep0 maxpacket: 8 [ 209.758137][T10366] lo speed is unknown, defaulting to 1000 [ 209.771584][ T5929] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 209.814199][ T5929] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 209.830640][ T5929] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 209.840817][ T5929] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 209.860097][ T5929] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 209.868993][ T5929] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.120373][ T5929] usb 8-1: usb_control_msg returned -32 [ 210.122430][ T5929] usbtmc 8-1:16.0: can't read capabilities [ 210.518627][T10389] [U] [ 210.519682][T10389] [U] [ 210.520708][T10389] [U] [ 210.521512][T10389] [U] [ 210.522515][T10389] [U] [ 210.523522][T10389] [U] [ 210.524431][T10389] [U] [ 210.525269][T10389] [U] [ 210.526785][T10389] [U] [ 210.527846][T10389] [U] [ 210.528910][T10389] [U] [ 210.529874][T10389] [U] [ 210.530663][T10389] [U] [ 210.531453][T10389] [U] [ 210.532221][T10389] [U] [ 210.533013][T10389] [U] [ 210.533981][T10389] [U] [ 210.534847][T10389] [U] [ 210.535730][T10389] [U] [ 210.536529][T10389] [U] [ 210.537604][T10389] [U] [ 210.538676][T10389] [U] [ 210.539750][T10389] [U] [ 210.540836][T10389] [U] [ 210.541926][T10389] [U] [ 210.543023][T10389] [U] [ 210.544129][T10389] [U] [ 210.545210][T10389] [U] [ 210.551007][T10389] [U] [ 210.552129][T10389] [U] [ 210.553243][T10389] [U] [ 210.554302][T10389] [U] [ 210.555878][T10389] [U] [ 210.556947][T10389] [U] [ 210.557983][T10389] [U] [ 210.558758][T10389] [U] [ 210.559677][T10389] [U] [ 210.560448][T10389] [U] [ 210.561273][T10389] [U] [ 210.562076][T10389] [U] [ 210.562923][T10389] [U] [ 210.563694][T10389] [U] [ 210.564564][T10389] [U] [ 210.565334][T10389] [U] [ 210.567227][T10389] [U] [ 210.568283][T10389] [U] [ 210.569301][T10389] [U] [ 210.570371][T10389] [U] [ 210.571570][T10389] [U] [ 210.572631][T10389] [U] [ 210.573679][T10389] [U] [ 210.574717][T10389] [U] [ 210.576449][T10389] [U] [ 210.577519][T10389] [U] [ 210.578536][T10389] [U] [ 210.579552][T10389] [U] [ 210.580726][T10389] [U] [ 210.581767][T10389] [U] [ 210.582797][T10389] [U] [ 210.583831][T10389] [U] [ 210.585630][T10389] [U] [ 210.586490][T10389] [U] [ 210.587290][T10389] [U] [ 210.588069][T10389] [U] [ 210.588975][T10389] [U] [ 210.589791][T10389] [U] [ 210.590653][T10389] [U] [ 210.591705][T10389] [U] [ 210.592753][T10389] [U] [ 210.593616][T10389] [U] [ 210.594431][T10389] [U] [ 210.595231][T10389] [U] [ 210.596664][T10389] [U] [ 210.597495][T10389] [U] [ 210.598343][T10389] [U] [ 210.599146][T10389] [U] [ 210.600716][T10389] [U] [ 210.601550][T10389] [U] [ 210.602362][T10389] [U] [ 210.603272][T10389] [U] [ 210.604627][T10389] [U] [ 210.605796][T10389] [U] [ 210.606936][T10389] [U] [ 210.608023][T10389] [U] [ 210.610070][T10389] [U] [ 210.611301][T10389] [U] [ 210.612439][T10389] [U] [ 210.613530][T10389] [U] [ 210.615526][T10389] [U] [ 210.616484][T10389] [U] [ 210.617354][T10389] [U] [ 210.618210][T10389] [U] [ 210.619036][T10389] [U] [ 210.619900][T10389] [U] [ 210.620772][T10389] [U] [ 210.621606][T10389] [U] [ 210.622451][T10389] [U] [ 210.623610][T10389] [U] [ 210.624762][T10389] [U] [ 210.625911][T10389] [U] [ 210.628556][T10389] [U] [ 210.629639][T10389] [U] [ 210.630684][T10389] [U] [ 210.631741][T10389] [U] [ 210.632835][T10389] [U] [ 210.633892][T10389] [U] [ 210.634931][T10389] [U] [ 210.635982][T10389] [U] [ 210.637302][T10389] [U] [ 210.638351][T10389] [U] [ 210.639566][T10389] [U] [ 210.640771][T10389] [U] [ 210.642966][T10389] [U] [ 210.644141][T10389] [U] [ 210.645301][T10389] [U] [ 210.646383][T10389] [U] [ 210.647883][T10389] [U] [ 210.648903][T10389] [U] [ 210.649707][T10389] [U] [ 210.650503][T10389] [U] [ 210.651339][T10389] [U] [ 210.652138][T10389] [U] [ 210.652948][T10389] [U] [ 210.653748][T10389] [U] [ 210.654665][T10389] [U] [ 210.655843][T10389] [U] [ 210.656890][T10389] [U] [ 210.688688][T10388] [U] [ 210.757617][ T39] audit: type=1326 audit(1737147087.832:5011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10386 comm="syz.2.1176" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x0 [ 212.060864][ T39] audit: type=1804 audit(1737147089.132:5012): pid=10420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1185" name="/newroot/313/file0/file0" dev="9p" ino=38928602 res=1 errno=0 [ 212.257823][ T1460] usb 8-1: USB disconnect, device number 15 [ 212.498184][T10447] veth0_to_team: entered promiscuous mode [ 212.499943][T10447] veth0_to_team: entered allmulticast mode [ 212.639297][T10452] syz_tun: left allmulticast mode [ 212.643586][T10452] syz_tun: left promiscuous mode [ 212.645824][T10452] bridge0: port 1(syz_tun) entered disabled state [ 212.657933][T10452] bond0: (slave bond_slave_0): Releasing backup interface [ 212.691685][T10452] bond0: (slave bond_slave_1): Releasing backup interface [ 212.696650][T10452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.701138][T10452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.703304][T10452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.712314][T10452] bond0: (slave netdevsim0): Releasing backup interface [ 212.883557][T10465] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 213.172620][ T66] Bluetooth: hci3: command 0x0c1a tx timeout [ 214.045185][ T5929] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 214.215264][ T5929] usb 5-1: Using ep0 maxpacket: 8 [ 214.226015][ T5929] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 214.228831][ T5929] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 214.231621][ T5929] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 214.241498][ T5929] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 214.245963][ T5929] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 214.248870][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.410989][T10511] binder: BINDER_SET_CONTEXT_MGR already set [ 214.413859][T10511] binder: 10508:10511 ioctl 4018620d 200001c0 returned -16 [ 214.457261][ T5929] usb 5-1: usb_control_msg returned -32 [ 214.459039][ T5929] usbtmc 5-1:16.0: can't read capabilities [ 214.814970][T10528] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1208'. [ 214.962625][T10531] [U]  [ 215.238607][T10535] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 215.575577][T10544] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 215.932427][T10550] wireguard0: entered promiscuous mode [ 216.310685][T10563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1220'. [ 216.346228][T10565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1221'. [ 216.408303][T10569] overlayfs: failed to resolve './file0': -2 [ 216.487315][T10574] 9pnet_fd: Insufficient options for proto=fd [ 216.838716][ T9] usb 5-1: USB disconnect, device number 11 [ 216.849793][T10581] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1225'. [ 216.864065][T10581] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1225'. [ 216.968027][T10593] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 217.046443][T10596] syz.2.1231[10596] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.046494][T10596] syz.2.1231[10596] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.050645][T10596] syz.2.1231[10596] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.135626][T10598] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 217.259237][T10598] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 217.525386][T10606] ubi0: detaching mtd0 [ 217.542137][T10606] ubi0: mtd0 is detached [ 217.754567][T10614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1237'. [ 217.755228][ T5983] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 217.905173][ T5983] usb 7-1: Using ep0 maxpacket: 8 [ 217.908134][ T5983] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 217.912147][ T5983] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 217.915946][ T5983] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.919500][ T5983] usb 7-1: config 0 descriptor?? [ 218.018512][T10627] trusted_key: encrypted_key: master key parameter 'defa' is invalid [ 218.128743][ T5983] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 218.332714][T10604] nbd: must specify an index to disconnect [ 218.419177][T10633] [U]  [ 218.572786][T10639] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1233'. [ 218.831300][T10648] FAULT_INJECTION: forcing a failure. [ 218.831300][T10648] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.836502][T10648] CPU: 1 UID: 0 PID: 10648 Comm: syz.3.1249 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 218.840248][T10648] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 218.844415][T10648] Call Trace: [ 218.845787][T10648] [ 218.846769][T10648] dump_stack_lvl+0x16c/0x1f0 [ 218.848133][T10648] should_fail_ex+0x497/0x5b0 [ 218.849599][T10648] _copy_from_user+0x2e/0xd0 [ 218.850955][T10648] kvm_vm_ioctl_set_pmu_event_filter+0x25d/0xb00 [ 218.852861][T10648] ? lockdep_hardirqs_on+0x7c/0x110 [ 218.854426][T10648] ? __pfx_kvm_vm_ioctl_set_pmu_event_filter+0x10/0x10 [ 218.856512][T10648] ? kvm_arch_vm_ioctl+0x132/0x1ca0 [ 218.858077][T10648] kvm_arch_vm_ioctl+0xd1b/0x1ca0 [ 218.859518][T10648] ? __perf_event_task_sched_in+0x219/0x6f0 [ 218.861300][T10648] ? __pfx_mark_lock+0x10/0x10 [ 218.862831][T10648] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 218.864699][T10648] ? hlock_class+0x4e/0x130 [ 218.866570][T10648] ? mark_lock+0xb5/0xc60 [ 218.868342][T10648] ? finish_task_switch.isra.0+0x212/0xcc0 [ 218.870176][T10648] ? hlock_class+0x4e/0x130 [ 218.871732][T10648] ? mark_lock+0xb5/0xc60 [ 218.873165][T10648] ? mark_held_locks+0x9f/0xe0 [ 218.874900][T10648] ? __pfx_mark_lock+0x10/0x10 [ 218.876389][T10648] ? finish_task_switch.isra.0+0x217/0xcc0 [ 218.878168][T10648] ? lockdep_hardirqs_on+0x7c/0x110 [ 218.879768][T10648] ? finish_task_switch.isra.0+0x217/0xcc0 [ 218.881513][T10648] ? __switch_to+0x749/0x1190 [ 218.882934][T10648] ? hlock_class+0x4e/0x130 [ 218.884273][T10648] ? __lock_acquire+0xcc5/0x3c40 [ 218.885807][T10648] ? hlock_class+0x4e/0x130 [ 218.887643][T10648] ? __pfx___lock_acquire+0x10/0x10 [ 218.889231][T10648] ? find_held_lock+0x2d/0x110 [ 218.890732][T10648] ? find_held_lock+0x2d/0x110 [ 218.892247][T10648] ? is_bpf_text_address+0x8a/0x1a0 [ 218.893810][T10648] ? __pfx_lock_release+0x10/0x10 [ 218.895308][T10648] ? trace_lock_acquire+0x14e/0x1f0 [ 218.897120][T10648] ? lock_acquire+0x2f/0xb0 [ 218.898846][T10648] ? is_bpf_text_address+0x30/0x1a0 [ 218.900620][T10648] ? bpf_ksym_find+0x124/0x1c0 [ 218.902068][T10648] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 218.903903][T10648] ? is_bpf_text_address+0x94/0x1a0 [ 218.905492][T10648] ? kernel_text_address+0x8d/0x100 [ 218.907010][T10648] ? __kernel_text_address+0xd/0x40 [ 218.908651][T10648] kvm_vm_ioctl+0x1a87/0x3df0 [ 218.910074][T10648] ? stack_trace_save+0x95/0xd0 [ 218.911559][T10648] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 218.913080][T10648] ? __pfx_mark_lock+0x10/0x10 [ 218.914611][T10648] ? stack_depot_save_flags+0x28/0x9e0 [ 218.916315][T10648] ? kasan_save_stack+0x42/0x60 [ 218.917889][T10648] ? kasan_save_stack+0x33/0x60 [ 218.919325][T10648] ? kasan_save_track+0x14/0x30 [ 218.920814][T10648] ? kasan_save_free_info+0x3b/0x60 [ 218.922427][T10648] ? __kasan_slab_free+0x51/0x70 [ 218.923944][T10648] ? kfree+0x14f/0x4b0 [ 218.925139][T10648] ? tomoyo_path_number_perm+0x46d/0x5b0 [ 218.926906][T10648] ? security_file_ioctl_compat+0x9b/0x240 [ 218.928649][T10648] ? __do_compat_sys_ioctl+0x4e/0x2c0 [ 218.930821][T10648] ? __do_fast_syscall_32+0x73/0x120 [ 218.932632][T10648] ? do_fast_syscall_32+0x32/0x80 [ 218.934146][T10648] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 218.936144][T10648] ? kvm_arch_vm_compat_ioctl+0x2d1/0x480 [ 218.937922][T10648] ? hlock_class+0x4e/0x130 [ 218.939272][T10648] ? mark_lock+0xb5/0xc60 [ 218.940686][T10648] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 218.942586][T10648] ? __pfx_mark_lock+0x10/0x10 [ 218.944068][T10648] ? find_held_lock+0x2d/0x110 [ 218.945559][T10648] ? tomoyo_path_number_perm+0x298/0x5b0 [ 218.947240][T10648] ? __pfx_lock_release+0x10/0x10 [ 218.948774][T10648] ? tomoyo_path_number_perm+0x46d/0x5b0 [ 218.950593][T10648] ? tomoyo_path_number_perm+0x190/0x5b0 [ 218.952274][T10648] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 218.953941][T10648] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 218.955600][T10648] ? do_vfs_ioctl+0x513/0x1950 [ 218.956817][T10648] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 218.958273][T10648] kvm_vm_compat_ioctl+0x399/0x440 [ 218.959761][T10648] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 218.961803][T10648] ? __pfx_lock_release+0x10/0x10 [ 218.963850][T10648] ? trace_lock_acquire+0x14e/0x1f0 [ 218.965384][T10648] ? __fget_files+0x206/0x3a0 [ 218.966834][T10648] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 218.968494][T10648] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 218.970056][T10648] __do_fast_syscall_32+0x73/0x120 [ 218.971653][T10648] do_fast_syscall_32+0x32/0x80 [ 218.973160][T10648] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 218.975040][T10648] RIP: 0023:0xf7fc8579 [ 218.976232][T10648] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 218.981840][T10648] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 218.984355][T10648] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000004020aeb2 [ 218.986796][T10648] RDX: 0000000020000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 218.989206][T10648] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 218.991572][T10648] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 218.994398][T10648] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 218.997193][T10648] [ 219.062343][T10651] input: syz0 as /devices/virtual/input/input25 [ 220.175178][ T39] audit: type=1800 audit(1737147097.242:5013): pid=10672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1257" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 220.339096][T10672] lo speed is unknown, defaulting to 1000 [ 220.624053][T10694] [U]  [ 221.046865][ T1460] usb 7-1: USB disconnect, device number 8 [ 221.733727][T10723] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1265'. [ 221.740434][T10723] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1265'. [ 221.763816][T10714] lo speed is unknown, defaulting to 1000 [ 221.924477][ T39] audit: type=1326 audit(1737147098.992:5014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10729 comm="syz.2.1267" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 221.933623][ T39] audit: type=1326 audit(1737147098.992:5015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10729 comm="syz.2.1267" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 221.939976][ T39] audit: type=1326 audit(1737147099.002:5016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10729 comm="syz.2.1267" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 221.946301][ T39] audit: type=1326 audit(1737147099.002:5017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10729 comm="syz.2.1267" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 221.953012][ T39] audit: type=1326 audit(1737147099.002:5018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10729 comm="syz.2.1267" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 221.961078][ T39] audit: type=1326 audit(1737147099.002:5019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10729 comm="syz.2.1267" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 221.967735][ T39] audit: type=1326 audit(1737147099.002:5020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10729 comm="syz.2.1267" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 221.973921][ T39] audit: type=1326 audit(1737147099.002:5021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10729 comm="syz.2.1267" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 221.980437][ T39] audit: type=1326 audit(1737147099.002:5022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10729 comm="syz.2.1267" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 221.981410][T10730] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1267'. [ 222.138843][T10736] lo speed is unknown, defaulting to 1000 [ 222.339702][T10752] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 222.358392][T10743] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 222.361308][T10743] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 222.363947][T10743] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 222.366635][T10743] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 222.424578][T10743] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 222.427451][T10743] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 222.430926][T10743] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 222.433547][T10743] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 222.437750][T10743] geneve2: entered promiscuous mode [ 222.439232][T10743] geneve2: entered allmulticast mode [ 222.531353][T10755] [U]  [ 223.165907][T10775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1277'. [ 223.401661][T10786] netlink: 1256 bytes leftover after parsing attributes in process `syz.3.1279'. [ 223.405311][T10786] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 223.523336][T10796] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1285'. [ 223.709576][T10809] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1288'. [ 224.161370][T10814] [U]  [ 225.176897][T10837] lo speed is unknown, defaulting to 1000 [ 225.651559][T10854] [U]  [ 226.019198][T10860] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1304'. [ 226.325179][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 226.344807][T10877] netlink: 'syz.1.1309': attribute type 10 has an invalid length. [ 226.475589][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 226.481839][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 226.485922][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 226.488912][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 226.491806][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 226.497889][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 226.500676][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.530348][T10884] nvme_fabrics: missing parameter 'transport=%s' [ 226.536457][T10884] nvme_fabrics: missing parameter 'nqn=%s' [ 226.710172][ T9] usb 5-1: usb_control_msg returned -32 [ 226.712348][ T9] usbtmc 5-1:16.0: can't read capabilities [ 227.357285][T10896] lo speed is unknown, defaulting to 1000 [ 227.563915][T10907] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 227.565886][T10907] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 227.568687][T10907] vhci_hcd vhci_hcd.0: Device attached [ 227.755539][ T9] vhci_hcd: vhci_device speed not set [ 227.815861][ T9] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 228.712735][T10908] vhci_hcd: connection reset by peer [ 228.717332][ T217] vhci_hcd: stop threads [ 228.718589][ T217] vhci_hcd: release socket [ 228.719930][ T217] vhci_hcd: disconnect device [ 228.837847][T10926] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 228.839756][T10926] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 228.844837][T10926] vhci_hcd vhci_hcd.0: Device attached [ 228.924026][ T1460] usb 5-1: USB disconnect, device number 12 [ 228.964122][T10931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1325'. [ 228.970851][T10931] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1325'. [ 229.237595][T10938] lo speed is unknown, defaulting to 1000 [ 229.768225][T10943] can0: slcan on ttyS3. [ 230.124206][T10927] vhci_hcd: connection closed [ 230.125861][ T1141] vhci_hcd: stop threads [ 230.128924][ T1141] vhci_hcd: release socket [ 230.130935][ T1141] vhci_hcd: disconnect device [ 230.265499][T10973] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1334'. [ 230.268528][T10973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1334'. [ 230.422890][T10977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.426252][T10977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.576274][ T5985] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 230.695372][ T25] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 230.855241][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 230.859445][ T25] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 230.863346][ T25] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 230.871344][ T25] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 230.874233][ T25] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 230.878202][ T25] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 230.881070][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.976702][T10935] can0 (unregistered): slcan off ttyS3. [ 231.087329][ T25] usb 6-1: usb_control_msg returned -32 [ 231.089181][ T25] usbtmc 6-1:16.0: can't read capabilities [ 231.306311][T10995] lo speed is unknown, defaulting to 1000 [ 231.525209][ T5929] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 231.675222][ T5929] usb 5-1: Using ep0 maxpacket: 32 [ 231.678189][ T5929] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 231.680520][ T5929] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 231.683586][ T5929] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 231.686836][ T5929] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 231.690540][ T5929] usb 5-1: config 0 interface 0 has no altsetting 0 [ 231.694083][ T5929] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 231.696798][ T5929] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 231.699207][ T5929] usb 5-1: Product: syz [ 231.700430][ T5929] usb 5-1: Manufacturer: syz [ 231.701783][ T5929] usb 5-1: SerialNumber: syz [ 231.704053][ T5929] usb 5-1: config 0 descriptor?? [ 231.708039][ T5929] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 231.712330][ T5929] ldusb 5-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 232.133740][T11004] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1342'. [ 232.191067][T11005] netlink: 'syz.2.1342': attribute type 4 has an invalid length. [ 232.193715][T11005] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1342'. [ 232.194696][ T30] usb 5-1: USB disconnect, device number 13 [ 232.201254][T11005] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1342'. [ 232.209493][ T30] ldusb 5-1:0.0: LD USB Device #1 now disconnected [ 232.447439][T11005] lo speed is unknown, defaulting to 1000 [ 232.928587][T11009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1343'. [ 232.945208][ T9] vhci_hcd: vhci_device speed not set [ 233.059108][T11023] FAULT_INJECTION: forcing a failure. [ 233.059108][T11023] name failslab, interval 1, probability 0, space 0, times 0 [ 233.064296][T11023] CPU: 3 UID: 0 PID: 11023 Comm: syz.0.1347 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 233.067387][T11023] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 233.070460][T11023] Call Trace: [ 233.071440][T11023] [ 233.072307][T11023] dump_stack_lvl+0x16c/0x1f0 [ 233.073676][T11023] should_fail_ex+0x497/0x5b0 [ 233.075040][T11023] ? fs_reclaim_acquire+0xae/0x150 [ 233.076544][T11023] should_failslab+0xc2/0x120 [ 233.077912][T11023] __kmalloc_node_noprof+0xd1/0x520 [ 233.079417][T11023] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 233.080995][T11023] __kvmalloc_node_noprof+0xad/0x1a0 [ 233.082516][T11023] alloc_fdtable+0x158/0x2b0 [ 233.083856][T11023] dup_fd+0x92b/0xca0 [ 233.085024][T11023] ? apparmor_task_alloc+0x2c2/0x3b0 [ 233.086661][T11023] copy_process+0x2217/0x6f20 [ 233.088035][T11023] ? get_pid_task+0xfc/0x250 [ 233.089544][T11023] ? __pfx_copy_process+0x10/0x10 [ 233.091052][T11023] ? find_held_lock+0x2d/0x110 [ 233.092452][T11023] kernel_clone+0xfd/0x960 [ 233.093750][T11023] ? __pfx_kernel_clone+0x10/0x10 [ 233.095219][T11023] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 233.096970][T11023] __do_compat_sys_ia32_clone+0xb7/0x100 [ 233.098588][T11023] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 233.100415][T11023] __do_fast_syscall_32+0x73/0x120 [ 233.101873][T11023] do_fast_syscall_32+0x32/0x80 [ 233.103294][T11023] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 233.105129][T11023] RIP: 0023:0xf705e579 [ 233.106325][T11023] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 233.111809][T11023] RSP: 002b:00000000f505050c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 233.114196][T11023] RAX: ffffffffffffffda RBX: 0000000062000000 RCX: 0000000000000000 [ 233.116466][T11023] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 233.118734][T11023] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 233.120989][T11023] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 233.123238][T11023] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 233.125504][T11023] [ 233.170277][ T30] usb 6-1: USB disconnect, device number 22 [ 233.241303][T11029] qnx6: unable to read the first superblock [ 233.245974][T11029] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1349'. [ 233.256992][T11028] lo speed is unknown, defaulting to 1000 [ 233.480112][ T6009] lo speed is unknown, defaulting to 1000 [ 233.523200][T11043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1352'. [ 234.465219][ T5983] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 234.617145][ T5983] usb 7-1: Using ep0 maxpacket: 8 [ 234.619977][ T5983] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 234.622931][ T5983] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 234.626216][ T5983] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 234.629192][ T5983] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 234.633116][ T5983] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 234.636866][ T5983] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.447995][ T5983] usb 7-1: usb_control_msg returned -32 [ 236.450225][ T5983] usbtmc 7-1:16.0: can't read capabilities [ 236.514369][T11083] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 236.840603][T11094] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 237.195190][T11104] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1369'. [ 237.476471][T11114] [U]  [ 237.602315][T11121] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 237.718416][T11128] openvswitch: netlink: Key type 233 is out of range max 32 [ 237.727603][T11128] loop9: detected capacity change from 0 to 7 [ 237.735924][T11128] Dev loop9: unable to read RDB block 7 [ 237.737912][T11128] loop9: unable to read partition table [ 237.739695][T11128] loop9: partition table beyond EOD, truncated [ 237.741640][T11128] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 237.741640][T11128] ) failed (rc=-5) [ 237.833078][T11130] x_tables: (null)_tables: DNAT target: only valid in nat table, not syz0 [ 237.913144][T11135] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1380'. [ 237.916097][T11135] netlink: 'syz.1.1380': attribute type 1 has an invalid length. [ 238.171436][T11153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1382'. [ 238.281755][T11156] input: syz0 as /devices/virtual/input/input26 [ 238.647048][T11162] can0: slcan on ttyS3. [ 238.651503][T11162] 9pnet_fd: Insufficient options for proto=fd [ 238.957038][T11177] FAULT_INJECTION: forcing a failure. [ 238.957038][T11177] name failslab, interval 1, probability 0, space 0, times 0 [ 238.961051][T11177] CPU: 1 UID: 0 PID: 11177 Comm: syz.0.1392 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 238.964242][T11177] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 238.967406][T11177] Call Trace: [ 238.968516][T11177] [ 238.969799][T11177] dump_stack_lvl+0x16c/0x1f0 [ 238.971342][T11177] should_fail_ex+0x497/0x5b0 [ 238.972786][T11177] ? fs_reclaim_acquire+0xae/0x150 [ 238.974331][T11177] should_failslab+0xc2/0x120 [ 238.975787][T11177] __kmalloc_noprof+0xce/0x4f0 [ 238.977266][T11177] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 238.978973][T11177] ? tomoyo_realpath_from_path+0xbf/0x710 [ 238.980710][T11177] tomoyo_realpath_from_path+0xbf/0x710 [ 238.982396][T11177] ? tomoyo_path_number_perm+0x235/0x5b0 [ 238.984095][T11177] tomoyo_path_number_perm+0x248/0x5b0 [ 238.985774][T11177] ? tomoyo_path_number_perm+0x235/0x5b0 [ 238.987478][T11177] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 238.989319][T11177] ? __pfx_lock_release+0x10/0x10 [ 238.990853][T11177] ? trace_lock_acquire+0x14e/0x1f0 [ 238.992444][T11177] ? lock_acquire+0x2f/0xb0 [ 238.993825][T11177] ? __fget_files+0x40/0x3a0 [ 238.995246][T11177] ? __fget_files+0x206/0x3a0 [ 238.996711][T11177] security_file_ioctl_compat+0x9b/0x240 [ 238.998412][T11177] __do_compat_sys_ioctl+0x4e/0x2c0 [ 238.999997][T11177] __do_fast_syscall_32+0x73/0x120 [ 239.001560][T11177] do_fast_syscall_32+0x32/0x80 [ 239.003043][T11177] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 239.004970][T11177] RIP: 0023:0xf705e579 [ 239.006262][T11177] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 239.012056][T11177] RSP: 002b:00000000f505055c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 239.014708][T11177] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004601 [ 239.017152][T11177] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 239.019559][T11177] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 239.021974][T11177] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 239.024368][T11177] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 239.026783][T11177] [ 239.028144][T11177] ERROR: Out of memory at tomoyo_realpath_from_path. [ 239.366104][T11159] can0 (unregistered): slcan off ttyS3. [ 239.537801][T11200] mkiss: ax0: crc mode is auto. [ 239.882972][T11202] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1396'. [ 240.136973][T11216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1397'. [ 241.555340][T11066] usbtmc 7-1:16.0: usbtmc_ioctl_request failed -110 [ 241.594034][ T5983] usb 7-1: USB disconnect, device number 9 [ 242.029013][T11260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1410'. [ 242.440640][T11269] lo speed is unknown, defaulting to 1000 [ 243.851078][T11308] lo speed is unknown, defaulting to 1000 [ 243.922931][T11308] 9pnet_fd: Insufficient options for proto=fd [ 244.042596][T11316] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 244.119168][T11320] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1430'. [ 244.848987][T11337] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 245.685008][T11355] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1441'. [ 246.004547][T11371] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 246.105816][ T30] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 246.275209][ T30] usb 8-1: Using ep0 maxpacket: 16 [ 246.282844][ T30] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.287905][ T30] usb 8-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 246.293714][ T30] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.307477][T11378] [U]  [ 246.336881][ T30] usb 8-1: config 0 descriptor?? [ 246.752863][ T30] hid-steam 0003:28DE:1102.0008: unknown main item tag 0x0 [ 246.755409][ T30] hid-steam 0003:28DE:1102.0008: unknown main item tag 0x0 [ 246.757897][ T30] hid-steam 0003:28DE:1102.0008: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 246.815436][ T30] hid-steam 0003:28DE:1102.0008: Steam Controller 'XXXXXXXXXX' connected [ 246.824460][ T30] input: Steam Controller as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:28DE:1102.0008/input/input27 [ 246.844614][ T30] hid-steam 0003:28DE:1102.0009: unknown main item tag 0x0 [ 246.846961][ T30] hid-steam 0003:28DE:1102.0009: unknown main item tag 0x0 [ 246.855030][ T30] hid-steam 0003:28DE:1102.0009: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 247.028874][ T9] usb 8-1: USB disconnect, device number 17 [ 247.060918][ T9] hid-steam 0003:28DE:1102.0008: Steam Controller 'XXXXXXXXXX' disconnected [ 247.070029][T11380] lo speed is unknown, defaulting to 1000 [ 247.150168][T11380] 9pnet_fd: Insufficient options for proto=fd [ 247.579135][T11401] 9pnet: Unknown protocol version 9p200 [ 248.175649][T11414] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 249.022515][T11436] fuse: Bad value for 'source' [ 249.044423][T11434] [U]  [ 249.454043][T11450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1467'. [ 249.557927][T11454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1464'. [ 249.558893][T11453] syz.2.1468: vmalloc error: size 16384, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 249.566460][T11453] CPU: 3 UID: 0 PID: 11453 Comm: syz.2.1468 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 249.570462][T11453] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 249.574179][T11453] Call Trace: [ 249.575480][T11453] [ 249.576673][T11453] dump_stack_lvl+0x16c/0x1f0 [ 249.578505][T11453] warn_alloc+0x24d/0x3a0 [ 249.580063][T11453] ? __pfx_warn_alloc+0x10/0x10 [ 249.581947][T11453] ? policy_nodemask+0xea/0x4e0 [ 249.583825][T11453] ? alloc_pages_mpol_noprof+0x327/0x620 [ 249.585793][T11453] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 249.587689][T11453] ? trace_kmalloc+0x2d/0xd0 [ 249.589087][T11453] ? __pfx___might_resched+0x10/0x10 [ 249.590872][T11453] __vmalloc_node_range_noprof+0x12c0/0x1530 [ 249.592978][T11453] ? kernel_clone+0xfd/0x960 [ 249.594621][T11453] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 249.596997][T11453] ? rcu_is_watching+0x12/0xc0 [ 249.598756][T11453] ? trace_kmem_cache_alloc+0x2d/0xd0 [ 249.600703][T11453] ? kmem_cache_alloc_node_noprof+0x219/0x3b0 [ 249.602948][T11453] ? copy_process+0x49c/0x6f20 [ 249.604473][T11453] ? kernel_clone+0xfd/0x960 [ 249.605872][T11453] copy_process+0x29b3/0x6f20 [ 249.607284][T11453] ? kernel_clone+0xfd/0x960 [ 249.608892][T11453] ? get_pid_task+0xfc/0x250 [ 249.610535][T11453] ? __pfx_lock_release+0x10/0x10 [ 249.612477][T11453] ? trace_lock_acquire+0x14e/0x1f0 [ 249.614490][T11453] ? __pfx_copy_process+0x10/0x10 [ 249.616362][T11453] ? find_held_lock+0x2d/0x110 [ 249.617950][T11453] kernel_clone+0xfd/0x960 [ 249.619362][T11453] ? __pfx_kernel_clone+0x10/0x10 [ 249.620882][T11453] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 249.622613][T11453] __do_compat_sys_ia32_clone+0xb7/0x100 [ 249.624249][T11453] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 249.626114][T11453] __do_fast_syscall_32+0x73/0x120 [ 249.627841][T11453] do_fast_syscall_32+0x32/0x80 [ 249.629759][T11453] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 249.632194][T11453] RIP: 0023:0xf7fb1579 [ 249.633782][T11453] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 249.640714][T11453] RSP: 002b:00000000f50e550c EFLAGS: 00000202 ORIG_RAX: 0000000000000078 [ 249.643342][T11453] RAX: ffffffffffffffda RBX: 0000000000001000 RCX: 0000000000000000 [ 249.645779][T11453] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 249.648826][T11453] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 249.651863][T11453] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 249.654922][T11453] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 249.657932][T11453] [ 249.662092][T11453] Mem-Info: [ 249.663094][T11453] active_anon:18071 inactive_anon:70 isolated_anon:0 [ 249.663094][T11453] active_file:15622 inactive_file:1290 isolated_file:0 [ 249.663094][T11453] unevictable:1768 dirty:274 writeback:0 [ 249.663094][T11453] slab_reclaimable:6116 slab_unreclaimable:61022 [ 249.663094][T11453] mapped:30400 shmem:12097 pagetables:935 [ 249.663094][T11453] sec_pagetables:300 bounce:0 [ 249.663094][T11453] kernel_misc_reclaimable:0 [ 249.663094][T11453] free:70381 free_pcp:3053 free_cma:0 [ 249.677845][T11453] Node 0 active_anon:6056kB inactive_anon:280kB active_file:5908kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:4776kB dirty:0kB writeback:0kB shmem:5224kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9740kB pagetables:768kB sec_pagetables:1140kB all_unreclaimable? yes [ 249.686868][T11453] Node 1 active_anon:66228kB inactive_anon:0kB active_file:56580kB inactive_file:5160kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:116824kB dirty:1096kB writeback:0kB shmem:43164kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3172kB pagetables:2972kB sec_pagetables:60kB all_unreclaimable? no [ 249.697728][T11453] Node 0 DMA free:2984kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:244kB inactive_anon:72kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:756kB local_pcp:212kB free_cma:0kB [ 249.706304][T11453] lowmem_reserve[]: 0 273 0 0 0 [ 249.707872][T11453] Node 0 DMA32 free:27096kB boost:12288kB min:26192kB low:29668kB high:33144kB reserved_highatomic:4096KB active_anon:5812kB inactive_anon:208kB active_file:5908kB inactive_file:0kB unevictable:3536kB writepending:0kB present:1032196kB managed:306308kB mlocked:0kB bounce:0kB free_pcp:120kB local_pcp:4kB free_cma:0kB [ 249.716248][T11453] lowmem_reserve[]: 0 0 0 0 0 [ 249.717649][T11453] Node 1 DMA32 free:243580kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB active_anon:66228kB inactive_anon:0kB active_file:56580kB inactive_file:5160kB unevictable:3536kB writepending:1096kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:13360kB local_pcp:5112kB free_cma:0kB [ 249.726125][T11453] lowmem_reserve[]: 0 0 0 0 0 [ 249.727492][T11453] Node 0 DMA: 36*4kB (UME) 13*8kB (UME) 29*16kB (UME) 37*32kB (UME) 11*64kB (UME) 3*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2984kB [ 249.731765][T11453] Node 0 DMA32: 670*4kB (UMEH) 178*8kB (UMEH) 31*16kB (UME) 149*32kB (UMEH) 65*64kB (UMEH) 26*128kB (UMEH) 12*256kB (UMEH) 2*512kB (M) 4*1024kB (MH) 1*2048kB (M) 0*4096kB = 27096kB [ 249.736897][T11453] Node 1 DMA32: 5*4kB (E) 255*8kB (UE) 317*16kB (UME) 372*32kB (UME) 477*64kB (UME) 177*128kB (UME) 69*256kB (UME) 52*512kB (UME) 44*1024kB (UME) 14*2048kB (UM) 13*4096kB (UM) = 243484kB [ 249.742063][T11453] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 249.744707][T11453] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 249.747449][T11453] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 249.750136][T11453] Node 1 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 249.752748][T11453] 27359 total pagecache pages [ 249.754061][T11453] 0 pages in swap cache [ 249.755276][T11453] Free swap = 124476kB [ 249.756468][T11453] Total swap = 124996kB [ 249.757743][T11453] 524155 pages RAM [ 249.758797][T11453] 0 pages HighMem/MovableOnly [ 249.760162][T11453] 206675 pages reserved [ 249.761344][T11453] 0 pages cma reserved [ 249.853428][T11459] lo speed is unknown, defaulting to 1000 [ 249.903327][T11459] 9pnet_fd: Insufficient options for proto=fd [ 250.178030][T11483] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 250.255335][T11484] [U]  [ 250.335235][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 250.506754][ T9] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 250.509459][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.513324][ T9] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 250.516315][ T9] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 250.518840][ T9] usb 5-1: Manufacturer: syz [ 250.524582][ T9] usb 5-1: config 0 descriptor?? [ 250.565201][ T9] rc_core: IR keymap rc-hauppauge not found [ 250.567159][ T9] Registered IR keymap rc-empty [ 250.569454][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 250.573060][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input28 [ 250.731283][ T9] usb 5-1: USB disconnect, device number 14 [ 251.167191][T11505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1484'. [ 251.482488][T11514] netlink: 'syz.0.1486': attribute type 12 has an invalid length. [ 252.226789][T11550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1491'. [ 252.249780][T11551] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 252.265204][T11552] netlink: 'syz.1.1493': attribute type 10 has an invalid length. [ 252.272273][T11552] netlink: 'syz.1.1493': attribute type 10 has an invalid length. [ 252.312933][T11552] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 253.024592][T11562] lo speed is unknown, defaulting to 1000 [ 253.092858][T11568] FAULT_INJECTION: forcing a failure. [ 253.092858][T11568] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 253.098014][T11568] CPU: 3 UID: 0 PID: 11568 Comm: syz.1.1498 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 253.102130][T11568] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 253.106246][T11568] Call Trace: [ 253.107560][T11568] [ 253.108722][T11568] dump_stack_lvl+0x16c/0x1f0 [ 253.110578][T11568] should_fail_ex+0x497/0x5b0 [ 253.112498][T11568] ? fs_reclaim_acquire+0xae/0x150 [ 253.114528][T11568] should_fail_alloc_page+0xe7/0x130 [ 253.116687][T11568] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 253.119069][T11568] ? mark_lock+0xb5/0xc60 [ 253.120756][T11568] ? __pfx_mark_lock+0x10/0x10 [ 253.122627][T11568] __alloc_pages_noprof+0x190/0x25b0 [ 253.124671][T11568] ? __pfx_mark_lock+0x10/0x10 [ 253.126575][T11568] ? hlock_class+0x4e/0x130 [ 253.128356][T11568] ? mark_lock+0xb5/0xc60 [ 253.130033][T11568] ? __pfx_mark_lock+0x10/0x10 [ 253.131908][T11568] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 253.134116][T11568] ? hlock_class+0x4e/0x130 [ 253.135934][T11568] ? mark_lock+0xb5/0xc60 [ 253.137730][T11568] ? hlock_class+0x4e/0x130 [ 253.139489][T11568] ? __lock_acquire+0xcc5/0x3c40 [ 253.141534][T11568] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 253.144025][T11568] ? policy_nodemask+0xea/0x4e0 [ 253.145966][T11568] alloc_pages_mpol_noprof+0x2c8/0x620 [ 253.148094][T11568] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 253.150418][T11568] ? hlock_class+0x4e/0x130 [ 253.152244][T11568] folio_alloc_mpol_noprof+0x36/0xd0 [ 253.154313][T11568] vma_alloc_folio_noprof+0xee/0x1b0 [ 253.156378][T11568] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 253.158679][T11568] ? find_held_lock+0x2d/0x110 [ 253.160583][T11568] do_pte_missing+0x2017/0x3e00 [ 253.162535][T11568] __handle_mm_fault+0x103c/0x2a40 [ 253.164585][T11568] ? find_held_lock+0x2d/0x110 [ 253.166585][T11568] ? __pfx___handle_mm_fault+0x10/0x10 [ 253.168837][T11568] ? follow_page_pte+0x3c3/0x1b20 [ 253.170936][T11568] ? __pfx_lock_release+0x10/0x10 [ 253.173018][T11568] ? follow_page_pte+0x3f7/0x1b20 [ 253.175083][T11568] handle_mm_fault+0x3fa/0xaa0 [ 253.176642][T11568] __get_user_pages+0x8d9/0x3b50 [ 253.178082][T11568] ? __pfx___get_user_pages+0x10/0x10 [ 253.179638][T11568] ? down_read_killable+0xcc/0x380 [ 253.181194][T11568] ? __pfx_down_read_killable+0x10/0x10 [ 253.182793][T11568] ? find_held_lock+0x2d/0x110 [ 253.184167][T11568] __gup_longterm_locked+0x211/0x1870 [ 253.185805][T11568] ? __pfx_lock_release+0x10/0x10 [ 253.187271][T11568] ? trace_lock_acquire+0x14e/0x1f0 [ 253.188799][T11568] ? __pfx___gup_longterm_locked+0x10/0x10 [ 253.190502][T11568] ? gup_fast_fallback+0x84c/0x2690 [ 253.192077][T11568] ? __pfx_lock_release+0x10/0x10 [ 253.193523][T11568] ? try_get_folio+0x517/0x800 [ 253.194899][T11568] ? sanity_check_pinned_pages+0x3ab/0x11e0 [ 253.196583][T11568] gup_fast_fallback+0x1802/0x2690 [ 253.198051][T11568] ? __pfx_gup_fast_fallback+0x10/0x10 [ 253.199616][T11568] pin_user_pages_fast+0xa8/0x100 [ 253.201124][T11568] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 253.202789][T11568] ? __kmalloc_noprof+0x23b/0x4f0 [ 253.204293][T11568] ? rds_info_getsockopt+0x376/0x4f0 [ 253.205887][T11568] rds_info_getsockopt+0x39a/0x4f0 [ 253.207347][T11568] ? __might_fault+0x13b/0x190 [ 253.208760][T11568] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 253.210404][T11568] ? trace_lock_acquire+0x14e/0x1f0 [ 253.211944][T11568] ? lock_acquire+0x2f/0xb0 [ 253.213260][T11568] ? __might_fault+0xe3/0x190 [ 253.214582][T11568] ? __might_fault+0xe3/0x190 [ 253.216043][T11568] rds_getsockopt+0x173/0x2d0 [ 253.217418][T11568] ? __pfx_rds_getsockopt+0x10/0x10 [ 253.218920][T11568] do_sock_getsockopt+0x3fe/0x870 [ 253.220361][T11568] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 253.221931][T11568] ? lock_acquire+0x2f/0xb0 [ 253.223216][T11568] ? __fget_files+0x40/0x3a0 [ 253.224520][T11568] ? __fget_files+0x206/0x3a0 [ 253.225971][T11568] __sys_getsockopt+0x12f/0x260 [ 253.227369][T11568] __ia32_sys_getsockopt+0xbc/0x160 [ 253.228852][T11568] ? lockdep_hardirqs_on+0x7c/0x110 [ 253.230344][T11568] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 253.232213][T11568] __do_fast_syscall_32+0x73/0x120 [ 253.233666][T11568] do_fast_syscall_32+0x32/0x80 [ 253.235098][T11568] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 253.237381][T11568] RIP: 0023:0xf7fe1579 [ 253.239085][T11568] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 253.246434][T11568] RSP: 002b:00000000f513655c EFLAGS: 00000296 ORIG_RAX: 000000000000016d [ 253.249768][T11568] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000114 [ 253.253048][T11568] RDX: 000000000000271c RSI: 0000000020000580 RDI: 0000000020000000 [ 253.256384][T11568] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 253.259697][T11568] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 253.262921][T11568] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 253.266159][T11568] [ 253.633514][T11579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1499'. [ 254.603616][T11605] lo speed is unknown, defaulting to 1000 [ 255.078319][ T1412] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.106019][T11631] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 255.142551][T11633] netlink: 'syz.1.1516': attribute type 10 has an invalid length. [ 255.153648][T11633] bond0: (slave netdevsim0): Releasing backup interface [ 255.440663][T11642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1515'. [ 255.871360][T11648] lo speed is unknown, defaulting to 1000 [ 256.140817][T11667] netlink: 'syz.3.1523': attribute type 4 has an invalid length. [ 256.202259][T11669] netlink: 'syz.3.1523': attribute type 4 has an invalid length. [ 256.699558][T11692] macvlan1: entered promiscuous mode [ 256.950361][T11712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1529'. [ 257.503209][T11691] macvlan1: left promiscuous mode [ 257.608949][T11721] lo speed is unknown, defaulting to 1000 [ 257.861046][T11736] [U]  [ 258.179070][T11754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1541'. [ 258.182540][T11754] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1541'. [ 258.219545][ T5955] Bluetooth: hci2: unexpected event for opcode 0x080e [ 258.684184][T11765] syz.3.1544 (11765): drop_caches: 2 [ 258.691848][ T39] kauditd_printk_skb: 85 callbacks suppressed [ 258.691857][ T39] audit: type=1326 audit(1737147135.762:5108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11764 comm="syz.3.1544" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc8579 code=0x0 [ 258.855328][T11769] lo speed is unknown, defaulting to 1000 [ 259.089897][ T39] audit: type=1804 audit(1737147136.162:5109): pid=11778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1547" name="/newroot/413/file0/file0" dev="9p" ino=38928602 res=1 errno=0 [ 260.320804][T11808] lo speed is unknown, defaulting to 1000 [ 260.339493][T11815] [U]  [ 260.522139][T11818] lo speed is unknown, defaulting to 1000 [ 260.635032][T11825] netlink: 'syz.1.1553': attribute type 4 has an invalid length. [ 260.644262][T11825] netlink: 'syz.1.1553': attribute type 4 has an invalid length. [ 261.694234][T11851] lo speed is unknown, defaulting to 1000 [ 262.005175][ T30] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 262.167078][T11874] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 262.264814][T11872] lo speed is unknown, defaulting to 1000 [ 262.315204][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 262.319094][ T30] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 262.323045][ T30] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 262.327487][ T30] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 262.331687][ T30] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 262.337212][ T30] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 262.341186][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.555319][ T30] usb 5-1: usb_control_msg returned -32 [ 262.558519][ T30] usbtmc 5-1:16.0: can't read capabilities [ 263.063397][T11890] lo speed is unknown, defaulting to 1000 [ 263.108755][ T832] usb 5-1: USB disconnect, device number 15 [ 263.195408][T11896] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 263.339274][T11900] netlink: 'syz.2.1576': attribute type 5 has an invalid length. [ 263.499621][T11909] vivid-002: disconnect [ 263.501573][T11908] vivid-002: reconnect [ 263.555266][T11915] 9pnet_fd: Insufficient options for proto=fd [ 263.615783][T11916] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1581'. [ 263.666971][T11916] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1581'. [ 263.670765][T11916] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1581'. [ 263.782940][T11921] lo speed is unknown, defaulting to 1000 [ 264.651958][ T6734] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 264.767118][T11957] [U]  [ 264.825271][ T6734] usb 5-1: Using ep0 maxpacket: 8 [ 264.831397][ T6734] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 264.841508][ T6734] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 264.850044][ T6734] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 264.856681][ T6734] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 264.864947][ T6734] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 264.872210][ T6734] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.090412][ T6734] usb 5-1: usb_control_msg returned -32 [ 265.092279][ T6734] usbtmc 5-1:16.0: can't read capabilities [ 265.119744][T11963] lo speed is unknown, defaulting to 1000 [ 265.193453][T11968] netlink: 'syz.3.1598': attribute type 1 has an invalid length. [ 265.206529][T11968] infiniband syz0: set active [ 265.208393][T11968] infiniband syz0: set active [ 265.272007][T11969] [U]  [ 265.644536][ T5983] usb 5-1: USB disconnect, device number 16 [ 266.053351][T11984] lo speed is unknown, defaulting to 1000 [ 266.312618][T11997] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1606'. [ 266.377653][T12000] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1607'. [ 266.559950][T12017] overlayfs: upper fs does not support file handles, falling back to index=off. [ 266.839184][T12023] nbd3: detected capacity change from 0 to 22 [ 266.845208][ T6734] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 266.864638][T12029] [ 266.865423][T12029] ====================================================== [ 266.867457][T12029] WARNING: possible circular locking dependency detected [ 266.869531][T12029] 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 Not tainted [ 266.872763][T12029] ------------------------------------------------------ [ 266.875666][T12029] syz.2.1612/12029 is trying to acquire lock: [ 266.877483][T12029] ffffe8ffac238ff0 (&per_cpu_ptr(pool->acomp_ctx, cpu)->mutex){+.+.}-{4:4}, at: zswap_store+0x910/0x2600 [ 266.880766][T12029] [ 266.880766][T12029] but task is already holding lock: [ 266.882968][T12029] ffffffff8df4f160 (fs_reclaim){+.+.}-{0:0}, at: __alloc_pages_noprof+0xa8b/0x25b0 [ 266.886803][T12029] [ 266.886803][T12029] which lock already depends on the new lock. [ 266.886803][T12029] [ 266.889850][T12029] [ 266.889850][T12029] the existing dependency chain (in reverse order) is: [ 266.892758][T12029] [ 266.892758][T12029] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 266.895198][T12029] fs_reclaim_acquire+0x102/0x150 [ 266.896826][T12029] __kmalloc_cache_node_noprof+0x55/0x3f0 [ 266.898659][T12029] zswap_cpu_comp_prepare+0xc9/0x470 [ 266.900378][T12029] cpuhp_invoke_callback+0x20c/0xa10 [ 266.902181][T12029] cpuhp_issue_call+0x1c0/0x980 [ 266.903869][T12029] __cpuhp_state_add_instance_cpuslocked+0x1a4/0x3c0 [ 266.906561][T12029] __cpuhp_state_add_instance+0xd7/0x2e0 [ 266.906849][T12030] block nbd3: shutting down sockets [ 266.908388][T12029] zswap_pool_create+0x41c/0x710 [ 266.908400][T12029] zswap_setup+0x402/0x810 [ 266.908409][T12029] zswap_init+0x2c/0x40 [ 266.908419][T12029] do_one_initcall+0x128/0x630 [ 266.916550][T12029] kernel_init_freeable+0x58f/0x8b0 [ 266.918227][T12029] kernel_init+0x1c/0x2b0 [ 266.920120][T12029] ret_from_fork+0x45/0x80 [ 266.921717][T12029] ret_from_fork_asm+0x1a/0x30 [ 266.923374][T12029] [ 266.923374][T12029] -> #0 (&per_cpu_ptr(pool->acomp_ctx, cpu)->mutex){+.+.}-{4:4}: [ 266.926245][T12029] __lock_acquire+0x249e/0x3c40 [ 266.927833][T12029] lock_acquire.part.0+0x11b/0x380 [ 266.929510][T12029] __mutex_lock+0x19b/0xa60 [ 266.931029][T12029] zswap_store+0x910/0x2600 [ 266.932583][T12029] swap_writepage+0x3b6/0x1120 [ 266.934151][T12029] pageout+0x3b2/0xaa0 [ 266.935523][T12029] shrink_folio_list+0x3025/0x42d0 [ 266.937175][T12029] evict_folios+0x6e7/0x1a50 [ 266.938701][T12029] try_to_shrink_lruvec+0x61e/0xa80 [ 266.941051][T12029] shrink_one+0x3e3/0x7b0 [ 266.943039][T12029] shrink_node+0xbf0/0x3f20 [ 266.944968][T12029] do_try_to_free_pages+0x35f/0x1a30 [ 266.947331][T12029] try_to_free_pages+0x2ae/0x6b0 [ 266.949566][T12029] __alloc_pages_noprof+0xb0c/0x25b0 [ 266.951790][T12029] __folio_alloc_noprof+0x11/0x90 [ 266.953961][T12029] alloc_buddy_hugetlb_folio.isra.0+0xbe/0x330 [ 266.956710][T12029] alloc_fresh_hugetlb_folio+0x14b/0x190 [ 266.958913][T12029] alloc_hugetlb_folio_nodemask+0x14c/0x3c0 [ 266.960804][T12029] alloc_migration_target+0x579/0x6d0 [ 266.962705][T12029] migrate_pages+0x694/0x21f0 [ 266.964256][T12029] move_pages_and_store_status+0xf2/0x230 [ 266.966846][T12029] kernel_move_pages+0xd5a/0x1560 [ 266.969062][T12029] __ia32_sys_move_pages+0xdd/0x1b0 [ 266.971414][T12029] __do_fast_syscall_32+0x73/0x120 [ 266.973751][T12029] do_fast_syscall_32+0x32/0x80 [ 266.975958][T12029] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 266.978723][T12029] [ 266.978723][T12029] other info that might help us debug this: [ 266.978723][T12029] [ 266.982920][T12029] Possible unsafe locking scenario: [ 266.982920][T12029] [ 266.985754][T12029] CPU0 CPU1 [ 266.987882][T12029] ---- ---- [ 266.990103][T12029] lock(fs_reclaim); [ 266.991775][T12029] lock(&per_cpu_ptr(pool->acomp_ctx, cpu)->mutex); [ 266.995545][T12029] lock(fs_reclaim); [ 266.998224][T12029] lock(&per_cpu_ptr(pool->acomp_ctx, cpu)->mutex); [ 267.000967][T12029] [ 267.000967][T12029] *** DEADLOCK *** [ 267.000967][T12029] [ 267.004244][T12029] 1 lock held by syz.2.1612/12029: [ 267.006367][T12029] #0: ffffffff8df4f160 (fs_reclaim){+.+.}-{0:0}, at: __alloc_pages_noprof+0xa8b/0x25b0 [ 267.010391][T12029] [ 267.010391][T12029] stack backtrace: [ 267.012852][T12029] CPU: 0 UID: 0 PID: 12029 Comm: syz.2.1612 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 267.016772][T12029] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 267.019939][T12029] Call Trace: [ 267.020939][T12029] [ 267.021958][T12029] dump_stack_lvl+0x116/0x1f0 [ 267.023391][T12029] print_circular_bug+0x41c/0x610 [ 267.024902][T12029] check_noncircular+0x31a/0x400 [ 267.026376][T12029] ? __pfx_check_noncircular+0x10/0x10 [ 267.027993][T12029] ? lock_acquire.part.0+0x11b/0x380 [ 267.029556][T12029] ? lockdep_lock+0xc6/0x200 [ 267.030945][T12029] ? __pfx_lockdep_lock+0x10/0x10 [ 267.032684][T12029] __lock_acquire+0x249e/0x3c40 [ 267.034359][T12029] ? __pfx___lock_acquire+0x10/0x10 [ 267.035939][T12029] ? kasan_save_stack+0x42/0x60 [ 267.037409][T12029] ? kasan_save_stack+0x33/0x60 [ 267.038807][T12029] ? kasan_save_track+0x14/0x30 [ 267.040274][T12029] ? __kasan_slab_alloc+0x89/0x90 [ 267.041786][T12029] lock_acquire.part.0+0x11b/0x380 [ 267.043344][T12029] ? zswap_store+0x910/0x2600 [ 267.044771][T12029] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 267.046451][T12029] ? rcu_is_watching+0x12/0xc0 [ 267.047876][T12029] ? trace_lock_acquire+0x14e/0x1f0 [ 267.049430][T12029] ? zswap_store+0x910/0x2600 [ 267.050852][T12029] ? lock_acquire+0x2f/0xb0 [ 267.052281][T12029] ? zswap_store+0x910/0x2600 [ 267.053707][T12029] __mutex_lock+0x19b/0xa60 [ 267.055068][T12029] ? zswap_store+0x910/0x2600 [ 267.056487][T12029] ? zswap_store+0x910/0x2600 [ 267.057901][T12029] ? __pfx___mutex_lock+0x10/0x10 [ 267.059412][T12029] ? trace_kmem_cache_alloc+0x2d/0xd0 [ 267.061023][T12029] ? kmem_cache_alloc_node_noprof+0x219/0x3b0 [ 267.062920][T12029] ? zswap_store+0x862/0x2600 [ 267.064326][T12029] ? zswap_store+0x910/0x2600 [ 267.065733][T12029] zswap_store+0x910/0x2600 [ 267.067098][T12029] ? in_gate_area_no_mm+0x51/0x70 [ 267.068600][T12029] ? __pfx_zswap_store+0x10/0x10 [ 267.070083][T12029] ? swap_swapcount+0x13c/0x220 [ 267.071550][T12029] ? __pfx_swp_swap_info+0x10/0x10 [ 267.073466][T12029] swap_writepage+0x3b6/0x1120 [ 267.074904][T12029] pageout+0x3b2/0xaa0 [ 267.076153][T12029] ? __pfx_pageout+0x10/0x10 [ 267.077549][T12029] ? __pfx_try_to_unmap_one+0x10/0x10 [ 267.079144][T12029] ? __pfx_folio_not_mapped+0x10/0x10 [ 267.080766][T12029] ? __pfx_folio_lock_anon_vma_read+0x10/0x10 [ 267.082646][T12029] ? folio_mark_dirty+0xd8/0x150 [ 267.084097][T12029] shrink_folio_list+0x3025/0x42d0 [ 267.085642][T12029] ? __pfx_shrink_folio_list+0x10/0x10 [ 267.087251][T12029] ? finish_task_switch.isra.0+0x217/0xcc0 [ 267.089021][T12029] ? lockdep_hardirqs_on+0x7c/0x110 [ 267.090591][T12029] ? finish_task_switch.isra.0+0x130/0xcc0 [ 267.092317][T12029] ? __switch_to+0x749/0x1190 [ 267.093718][T12029] ? __schedule+0xe60/0x5ad0 [ 267.095113][T12029] ? __pfx_mark_lock+0x10/0x10 [ 267.096559][T12029] ? hlock_class+0x4e/0x130 [ 267.097925][T12029] ? preempt_schedule_common+0x44/0xc0 [ 267.099541][T12029] ? preempt_schedule_thunk+0x1a/0x30 [ 267.101133][T12029] evict_folios+0x6e7/0x1a50 [ 267.102542][T12029] ? __pfx_evict_folios+0x10/0x10 [ 267.104032][T12029] ? hlock_class+0x4e/0x130 [ 267.105398][T12029] ? __lock_acquire+0x15a9/0x3c40 [ 267.106972][T12029] ? mem_cgroup_get_nr_swap_pages+0x20/0x120 [ 267.108765][T12029] ? sc_swappiness+0xd4/0x190 [ 267.110176][T12029] try_to_shrink_lruvec+0x61e/0xa80 [ 267.111735][T12029] ? find_held_lock+0x2d/0x110 [ 267.113194][T12029] ? __pfx_try_to_shrink_lruvec+0x10/0x10 [ 267.114876][T12029] ? shrink_node+0xbd0/0x3f20 [ 267.115149][ T6734] usb 6-1: Using ep0 maxpacket: 8 [ 267.116270][T12029] shrink_one+0x3e3/0x7b0 [ 267.119358][T12029] ? shrink_node+0xbd0/0x3f20 [ 267.120787][T12029] shrink_node+0xbf0/0x3f20 [ 267.122231][T12029] ? __pfx___schedule+0x10/0x10 [ 267.124181][T12029] ? lockdep_hardirqs_on+0x7c/0x110 [ 267.126239][T12029] ? shrink_node+0x93e/0x3f20 [ 267.128126][T12029] ? __pfx_shrink_node+0x10/0x10 [ 267.130143][T12029] ? irqentry_exit+0x3b/0x90 [ 267.132128][T12029] ? do_try_to_free_pages+0x35f/0x1a30 [ 267.134415][T12029] do_try_to_free_pages+0x35f/0x1a30 [ 267.136640][T12029] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 267.139011][T12029] ? __pfx_lock_release+0x10/0x10 [ 267.141131][T12029] try_to_free_pages+0x2ae/0x6b0 [ 267.142885][T12029] ? __pfx_try_to_free_pages+0x10/0x10 [ 267.144851][T12029] ? lock_acquire+0x2f/0xb0 [ 267.146771][T12029] ? fs_reclaim_acquire+0xae/0x150 [ 267.148929][T12029] ? fs_reclaim_acquire+0xae/0x150 [ 267.151048][T12029] __alloc_pages_noprof+0xb0c/0x25b0 [ 267.153273][T12029] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 267.155683][T12029] ? __pfx___schedule+0x10/0x10 [ 267.157727][T12029] ? lockdep_hardirqs_on+0x7c/0x110 [ 267.159787][T12029] ? irqentry_exit+0x3b/0x90 [ 267.161712][T12029] __folio_alloc_noprof+0x11/0x90 [ 267.163804][T12029] alloc_buddy_hugetlb_folio.isra.0+0xbe/0x330 [ 267.166362][T12029] alloc_fresh_hugetlb_folio+0x14b/0x190 [ 267.168721][T12029] alloc_hugetlb_folio_nodemask+0x14c/0x3c0 [ 267.171184][T12029] alloc_migration_target+0x579/0x6d0 [ 267.173408][T12029] ? finish_task_switch.isra.0+0x217/0xcc0 [ 267.175804][T12029] ? lockdep_hardirqs_on+0x7c/0x110 [ 267.177991][T12029] migrate_pages+0x694/0x21f0 [ 267.180000][T12029] ? __pfx_alloc_migration_target+0x10/0x10 [ 267.182335][T12029] ? __pfx_migrate_pages+0x10/0x10 [ 267.183876][T12029] ? __pfx___schedule+0x10/0x10 [ 267.185332][T12029] ? irqentry_exit+0x3b/0x90 [ 267.186716][T12029] ? find_held_lock+0x2d/0x110 [ 267.188160][T12029] move_pages_and_store_status+0xf2/0x230 [ 267.189849][T12029] ? __pfx_move_pages_and_store_status+0x10/0x10 [ 267.191738][T12029] ? preempt_schedule_thunk+0x1a/0x30 [ 267.193618][T12029] kernel_move_pages+0xd5a/0x1560 [ 267.195141][T12029] ? __pfx_kernel_move_pages+0x10/0x10 [ 267.196785][T12029] ? rcu_is_watching+0x12/0xc0 [ 267.198219][T12029] __ia32_sys_move_pages+0xdd/0x1b0 [ 267.199769][T12029] ? lockdep_hardirqs_on+0x7c/0x110 [ 267.201910][T12029] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 267.204687][T12029] __do_fast_syscall_32+0x73/0x120 [ 267.206859][T12029] do_fast_syscall_32+0x32/0x80 [ 267.208404][T12029] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 267.210273][T12029] RIP: 0023:0xf7fb1579 [ 267.211511][T12029] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 267.217700][T12029] RSP: 002b:00000000f50c455c EFLAGS: 00000296 ORIG_RAX: 000000000000013d [ 267.220164][T12029] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000001 [ 267.222524][T12029] RDX: 0000000020000140 RSI: 0000000020000000 RDI: 0000000000000000 [ 267.224857][T12029] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 267.227214][T12029] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 267.229557][T12029] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 267.231932][T12029] [ 267.242885][ T6734] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 267.249222][ T8491] blk_print_req_error: 25 callbacks suppressed [ 267.249232][ T8491] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 267.250316][ T6734] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 267.251475][ T8491] buffer_io_error: 25 callbacks suppressed [ 267.251483][ T8491] Buffer I/O error on dev nbd3, logical block 0, async page read [ 267.260473][ T6734] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 267.265303][T12032] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 267.270808][T12032] Buffer I/O error on dev nbd3, logical block 0, async page read [ 267.273879][T12032] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 267.280428][ T6734] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 267.285224][ T6734] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 267.293183][ T6734] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.296248][T12032] Buffer I/O error on dev nbd3, logical block 0, async page read [ 267.299358][T12032] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 267.310392][T12032] Buffer I/O error on dev nbd3, logical block 0, async page read [ 267.314014][T12032] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 267.329583][T12032] Buffer I/O error on dev nbd3, logical block 0, async page read [ 267.333737][T12032] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 267.337242][T12032] Buffer I/O error on dev nbd3, logical block 0, async page read [ 267.340431][T12032] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 267.344032][T12032] Buffer I/O error on dev nbd3, logical block 0, async page read [ 267.347160][T12032] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 267.350451][T12032] Buffer I/O error on dev nbd3, logical block 0, async page read [ 267.353301][T12032] ldm_validate_partition_table(): Disk read failed. [ 267.356087][T12032] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 267.359487][T12032] Buffer I/O error on dev nbd3, logical block 0, async page read [ 267.362560][T12032] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 267.366026][T12032] Buffer I/O error on dev nbd3, logical block 0, async page read [ 267.369397][T12032] Dev nbd3: unable to read RDB block 0 [ 267.372553][T12032] nbd3: unable to read partition table [ 267.375299][T12032] nbd3: partition table beyond EOD, truncated [ 267.404070][T12032] ldm_validate_partition_table(): Disk read failed. [ 267.407621][T12032] Dev nbd3: unable to read RDB block 0 [ 267.410443][T12032] nbd3: unable to read partition table [ 267.413770][T12032] nbd3: partition table beyond EOD, truncated [ 267.509629][ T6734] usb 6-1: usb_control_msg returned -32 [ 267.511410][ T6734] usbtmc 6-1:16.0: can't read capabilities [ 268.091859][ T9] usb 6-1: USB disconnect, device number 23 VM DIAGNOSIS: 20:48:08 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85145dd5 RDI=ffffffff9a66a200 RBP=ffffffff9a66a1c0 RSP=ffffc9000314de20 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e33312e36 R12=0000000000000000 R13=0000000000000061 R14=ffffffff85145d70 R15=0000000000000000 RIP=ffffffff85145dff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f4ca1da4 CR3=0000000069cda000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000008c8ecc RBX=0000000000000001 RCX=ffffffff8b1a8889 RDX=ffffed10056a6fee RSI=ffffffff8bb17280 RDI=ffffffff81703079 RBP=ffffed1003a54910 RSP=ffffc9000047fe08 R8 =0000000000000000 R9 =ffffed10056a6fed R10=ffff88802b537f6b R11=0000000000000001 R12=0000000000000001 R13=ffff88801d2a4880 R14=ffffffff901cf7d0 R15=0000000000000000 RIP=ffffffff8b1a9c6f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002001c9d8 CR3=0000000069cda000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000003370fc RBX=0000000000000002 RCX=ffffffff8b1a8889 RDX=ffffed10056c6fee RSI=ffffffff8bb17280 RDI=ffffffff81703079 RBP=ffffed1003a57000 RSP=ffffc9000048fe08 R8 =0000000000000000 R9 =ffffed10056c6fed R10=ffff88802b637f6b R11=0000000000000001 R12=0000000000000002 R13=ffff88801d2b8000 R14=ffffffff901cf7d0 R15=0000000000000000 RIP=ffffffff8b1a9c6f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005617cb57d000 CR3=0000000044474000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f73a3ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=ffff88802b446740 RCX=ffffffff818d54cc RDX=ffff888024e18000 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90006b17998 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed1005688ce9 R13=0000000000000001 R14=ffff88802b446748 R15=ffff88802b73ff80 RIP=ffffffff81994e58 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005582bbe4a4c8 CR3=000000000db7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000