last executing test programs: 2.952666481s ago: executing program 1 (id=1565): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r0, 0x4b3c, 0x0) 2.862607253s ago: executing program 1 (id=1566): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x401, r0, 0x0, 0xa002a0}, 0x38) mknod(0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESDEC=0x0]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141121) r2 = dup(r1) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) connect$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x0, 0x2, {0x1, 0x1, 0x1}, 0xfd}, 0x18) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000140)=0x9) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') getdents64(r3, &(0x7f0000002080)=""/4108, 0x100c) 2.853048408s ago: executing program 1 (id=1567): socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) r4 = open(0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000001c0)={r1}) sendmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 2.701633339s ago: executing program 2 (id=1569): openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x6, 0x10001, 0x34324152, 0x0, 0xb, [{}, {0x10}, {0x2}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000240)) lstat(&(0x7f00000000c0)='./file1\x00', 0x0) setgroups(0x0, &(0x7f0000000300)) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10000, 0x0, &(0x7f0000000140), 0x14) ftruncate(0xffffffffffffffff, 0x8800000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendto$packet(r3, &(0x7f0000000280)="0f30d9eec1935b7b88c7b9e794eed30b622f1045b921055c7647c4396d5163e532cee80669b376006dd76b9bd738da323548df98fc79d6f93ddeb57124416830e9e3307e1f0b265e1a5ebfd085281bc8169ec4976c84fb2f412c7610eb5773233ba2bc3190c6e71fc89ef6a2beb7856118b59e51e9d2f3f8128eda49531181e368413136b1b9d92068f049148c74afdcac45c8eb8c4365e0329b00d552a406c1d51262a2b2b015e10227fc7eeb03b26f23aeba362974ec2ec1202debd78dd5d388abd47708fde7941755f66aec1d", 0xce, 0x0, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="00000000008b", @ANYRES32=0x77359400, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000100000000000000000000005893df66bf3ce816"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newtfilter={0x48c8, 0x2c, 0x400, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd, 0x1}, {0xffff, 0x7}, {0x85933c529ccbaf37, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0x4894, 0x2, [@TCA_FW_POLICE={0x410, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0xb}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7ff, 0x8001, 0x0, 0x81, 0x99, 0x9, 0x8, 0x5, 0x4, 0x101, 0x2, 0xc, 0x8, 0x8, 0x5, 0x100, 0x9, 0x3, 0x1ec, 0x39, 0x5, 0xb58, 0xfffff153, 0x1, 0x3, 0x7, 0x0, 0x2, 0x0, 0x9, 0x4, 0xfff000, 0x5, 0x1ff, 0x5, 0x1, 0x23ac, 0x7, 0x7fff, 0x2, 0x7, 0x1, 0x1000, 0x2, 0xb9b, 0x6, 0x4, 0xffffffcc, 0x7ff, 0x6, 0x6, 0x2, 0x7fff, 0x6, 0xfffff171, 0x6, 0xffff, 0xd, 0x100, 0x8, 0x9, 0x9, 0x3, 0x9, 0xc1, 0x2, 0x1000, 0x619a, 0x2, 0x2, 0x2, 0x5, 0xffffffff, 0x6, 0x3, 0xffff, 0x784a, 0xb49a, 0xe, 0x6ca, 0xd, 0x1000, 0x9, 0x0, 0x8, 0xff, 0x8, 0x2, 0x4, 0xc6, 0x9, 0x6, 0x7, 0x6, 0x9, 0xdc, 0x0, 0xffffffff, 0x3, 0x9, 0xb8f, 0x7, 0x9, 0x40, 0xa4b5, 0x20000000, 0x10, 0x5, 0xffffff00, 0xa4, 0x4cab, 0x4, 0x7, 0x7fffffff, 0x9, 0x8, 0x4, 0x2, 0x4, 0x6, 0xc, 0x7fffffff, 0x3, 0x3, 0x40, 0x80, 0xce, 0x3f, 0x30000000, 0x9, 0x39a3fb83, 0x7, 0x7, 0xb1f, 0x0, 0x9, 0xb8a, 0x4, 0x0, 0x2, 0x8, 0x6, 0xce09, 0x2, 0x7fff, 0x9, 0x3, 0x7, 0x5, 0xb9, 0x2, 0x6, 0x7fffffff, 0x5183, 0x1, 0x8, 0x3, 0x8, 0x800, 0xfffffffa, 0x2, 0x1, 0x2, 0x8, 0x4, 0xffff0001, 0xb, 0x7, 0x5, 0x61c, 0x5, 0xb814, 0x3, 0x9, 0x1, 0x1000, 0x7, 0x8, 0x2, 0x6c, 0x10, 0x5, 0x99f3, 0x5, 0x2, 0x5, 0x8, 0xec, 0x80000001, 0x0, 0xff, 0x2, 0x257bd09a, 0xe079, 0x7fffffff, 0x0, 0xffff, 0xfff, 0x2, 0xff, 0x9, 0xf, 0xffffffff, 0x6, 0x8000, 0x80000001, 0xa, 0x80000000, 0x0, 0x101, 0x5, 0xe, 0x7000000, 0x5, 0x0, 0x704, 0x5, 0x8001, 0x1, 0x5, 0x5, 0x1, 0x7fff, 0x2, 0x1000, 0x3, 0x7, 0xc, 0x2, 0x80000000, 0x1000, 0x4, 0xb, 0x72f, 0x3, 0x401, 0x4, 0x9, 0x7, 0x9, 0xfcf2, 0xfed, 0x8001, 0x0, 0x4, 0xffff, 0xad, 0x10, 0x3, 0x4, 0x0, 0x4, 0x8, 0x9, 0x9]}]}, @TCA_FW_INDEV={0x14, 0x3, 'syzkaller0\x00'}, @TCA_FW_ACT={0x2d8c, 0x4, [@m_pedit={0x2c04, 0x3, 0x0, 0x0, {{0xa}, {0x2b24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x9f, 0x6, 0x1, 0x14}, 0x64, 0x7, [{0x6, 0x1, 0xaf, 0x9f6, 0x7, 0x4}]}, [{0x1, 0x40, 0x9, 0xe, 0x260, 0x8}, {0x3, 0x8, 0xf, 0x7, 0x4, 0x5}, {0x8f, 0x1, 0xf, 0xae, 0xf, 0x9}, {0x10001, 0x0, 0xd9, 0xfffffb4b, 0xf, 0x7}, {0x1, 0x2, 0x6, 0x10000, 0x80, 0x6}, {0x8000, 0x9, 0xf, 0x2, 0x7, 0x7}, {0x4, 0x9, 0x7, 0x7, 0x8000, 0x2}, {0x2, 0x10c, 0x3, 0xaa5, 0x0, 0x92}, {0xfd4, 0x8, 0x4a, 0x1, 0x8, 0x1}, {0x2, 0x76d, 0xf48, 0x200, 0x9}, {0xffffff7f, 0x6, 0x3ff, 0x3, 0xd, 0x4}, {0x4, 0x3, 0x2, 0x10, 0x9, 0x5a9d1231}, {0xc0000000, 0xdb76, 0x3, 0xfffffffb, 0x6, 0xa}, {0x6, 0x7, 0x7, 0x3, 0xffffffff, 0x114a}, {0x4, 0x6, 0xd, 0x7, 0x6, 0x5}, {0x5, 0x6, 0xae980, 0x4, 0x80000000, 0x3}, {0x7fd, 0x8, 0x200, 0x7f, 0x2, 0x6}, {0x0, 0x1e00000, 0x4, 0x2, 0x80, 0x9}, {0x5, 0x2f7, 0x0, 0x5, 0x1000, 0x1400000}, {0x5, 0x6, 0x3, 0x3, 0x3bfd, 0x9}, {0x7fffffff, 0x3, 0x2, 0x2, 0x0, 0xfff}, {0x9, 0x2, 0xb, 0xfffffffb, 0xfffffffa, 0x40}, {0x3, 0x4, 0x2, 0x5, 0xc, 0x5}, {0x101, 0x0, 0x1, 0x3, 0x4, 0x4}, {0x7, 0x4, 0xfffffff8, 0x40, 0x8, 0x120000}, {0x6, 0x8, 0x8, 0xd95b, 0x400, 0x9}, {0x3, 0xe1b3, 0x401, 0x48e, 0x10, 0x7f}, {0x7, 0x100, 0x8, 0x9, 0x3, 0x9}, {0x8001, 0x10000, 0x3, 0x0, 0x3}, {0x80000000, 0x8, 0x8, 0x7ec, 0x1ff, 0x2}, {0x4, 0x4, 0x10, 0x5, 0x8}, {0x7, 0x8001, 0x5, 0x517, 0x9}, {0x4, 0x4, 0x10, 0xffff, 0x1, 0x3}, {0x4, 0x40, 0x2, 0x8, 0xfff, 0x6}, {0x5, 0x25, 0x0, 0x80000000, 0x4, 0x2}, {0x7, 0x401, 0x5fb6, 0xff, 0x200, 0x100}, {0x1, 0x272f, 0xcc, 0x4, 0x10001, 0xf}, {0x9, 0x7cfa, 0xe0, 0x4, 0xfdf, 0x36f}, {0x95e3, 0x6, 0x7ff, 0x80, 0xc6, 0x1}, {0x1, 0xfffff764, 0x8000, 0x9, 0x7, 0x25eb}, {0x9, 0x5, 0x2, 0xfff, 0x6, 0xcb}, {0x8, 0x4, 0x40000000, 0x3ff, 0x23a, 0x3ff}, {0xd18, 0x3, 0xf5, 0x3, 0x100, 0x1ff}, {0x1, 0x7, 0x5, 0x3, 0x7, 0x1}, {0x8, 0x76de, 0x5, 0xb93, 0x8, 0x7}, {0x3, 0x2800000, 0x0, 0x5eb3, 0xfff, 0x8}, {0x0, 0x3, 0x7f, 0x3, 0xf86, 0x100}, {0x800, 0x1000, 0x1, 0x80000001, 0x5ac, 0x7}, {0x1, 0x0, 0x574, 0x2, 0x3, 0x8}, {0x10, 0x3, 0xfffffff9, 0x6, 0xa6a0, 0x2}, {0x45d, 0x7fff, 0x2, 0x9, 0x547ad826, 0x10001}, {0x1, 0x7, 0x9, 0x7, 0x6, 0x3}, {0xf44, 0x1ff, 0xfffffffe, 0xdc, 0x3, 0x9}, {0x9, 0x2, 0x10000, 0xa, 0x4800}, {0x2e8c, 0x8, 0x6, 0x8, 0x7f, 0x200}, {0x6, 0x6, 0x3, 0x10000, 0x0, 0x7}, {0x6, 0x9, 0x7fffffff, 0x5, 0x6802, 0x7}, {0x1, 0x6, 0x6, 0x25e, 0x8, 0x80000001}, {0x2, 0x4, 0x8, 0x4, 0xf2f, 0x3c3}, {0x6, 0x81, 0x80000001, 0x2, 0x4, 0x896}, {0xffffffff, 0xbc, 0x6, 0x400, 0xfffffffd, 0x7}, {0x541, 0x5, 0x80000001, 0xfe, 0x1, 0xa}, {0x1000, 0x5, 0x8, 0xc, 0x7710, 0xec0}, {0x0, 0x5, 0x6db, 0x7, 0x5f0, 0xfffffffd}, {0x72, 0x65b1609b, 0x1dc26148, 0x4, 0xbe0700, 0x9}, {0x3, 0x29b, 0x1c0000, 0x893, 0xc05, 0x3}, {0x6, 0x0, 0x0, 0x2, 0xf424, 0x3}, {0xc, 0x8, 0x2, 0x5, 0x7, 0x8000}, {0x3, 0x5, 0x1, 0x1, 0xee, 0xfffffffa}, {0x9, 0xc, 0x95b, 0x8000, 0x800, 0x8}, {0x3ff, 0x200, 0x4, 0x2, 0x3, 0x8}, {0x800, 0x1, 0x81, 0x0, 0x2, 0x43}, {0x7, 0x8, 0x8, 0x10001, 0x1}, {0x0, 0x6, 0x10000, 0x4, 0x2, 0x63}, {0x80, 0x5f45, 0x8, 0x6, 0x2, 0x9}, {0x7, 0x8, 0x7, 0x2, 0x5, 0x7}, {0x9, 0x80000001, 0x9, 0x80000001, 0x7, 0x9}, {0x10000, 0x5, 0x9, 0x200, 0x4, 0xfae8}, {0x4, 0x1, 0x7, 0x8, 0x2, 0x4f}, {0x40, 0x718, 0xe9, 0x6, 0x62f2, 0x7}, {0x4, 0xc0fc, 0xd0c, 0x401, 0x4, 0x7}, {0x9, 0xb, 0x4, 0x3, 0x0, 0xb6b}, {0x89e91454, 0x1d73, 0x6, 0x1, 0x401, 0x9}, {0xfffffff8, 0x4, 0x4, 0x9, 0xa0, 0x4}, {0x5, 0x3, 0xffff, 0x3, 0x9, 0xe4a}, {0x80, 0x7, 0x4, 0x0, 0x5, 0xd}, {0x3, 0x6, 0x7f, 0x9, 0x6, 0x7fffffff}, {0xd, 0x6, 0x8d85, 0xe357, 0x5f, 0x9723}, {0x4, 0x10001, 0x3a3, 0xa, 0x4, 0xfffffbff}, {0x5, 0x7f, 0xf9, 0xffffffbc, 0x1, 0x440b}, {0xffffffff, 0x7, 0x2, 0x3ff, 0x10000, 0x4}, {0xb5d7, 0x8001, 0x3, 0x80000001, 0x9, 0x16}, {0xee700, 0x4, 0x101, 0x0, 0xc2, 0x3}, {0x1, 0x100, 0x1, 0xb3, 0xfffffff7, 0xd302}, {0x4, 0x10, 0x2, 0x400, 0x24c1, 0xfffffff8}, {0x1, 0x2, 0x9, 0x2, 0xa, 0x400}, {0x7, 0x400, 0xfffffffb, 0x26, 0x8000, 0x9}, {0x8, 0x3, 0x9, 0x3ff, 0x8, 0x9}, {0x1919, 0xff, 0x10001, 0x0, 0xf, 0x3}, {0x4, 0x81, 0x9, 0x5, 0x6, 0x8}, {0x6, 0x1f66, 0xffffff99, 0x7, 0x3, 0x9}, {0x1, 0x3, 0xfffffff7, 0x7, 0x0, 0x3}, {0x4, 0xc61b, 0x6, 0x6, 0x0, 0x7}, {0x3, 0x9, 0x1, 0x100, 0x1, 0xfffff75c}, {0x8, 0x1c0, 0x5, 0xa2, 0x9, 0x1}, {0x294c115d, 0x3ff, 0x82, 0x8, 0x7fffffff, 0x1}, {0x80000000, 0x10000, 0x2, 0x9, 0x1, 0x2}, {0x2, 0xbfc, 0x6, 0x8, 0x1, 0x2}, {0x5, 0x1, 0x7, 0x79d4, 0x80000000, 0x8}, {0x1000000, 0x7, 0x8, 0x2, 0x0, 0xc}, {0x5, 0xd484, 0x7fff, 0x0, 0x80000001, 0x4}, {0x8, 0x2, 0x10, 0x1, 0x2, 0x769e}, {0xfffffffc, 0x10, 0x7ff, 0xc0e, 0xfff, 0x782}, {0x1, 0x8, 0x4, 0x3, 0x4, 0x1000}, {0x8, 0x1, 0x3, 0x1, 0x5, 0x7}, {0x8, 0x3, 0x3, 0x4, 0x3, 0xfffffffb}, {0x3, 0x7, 0x2a, 0x1ff, 0x4}, {0x5, 0x6, 0x0, 0x8, 0xf, 0x5}, {0xffffffff, 0x800, 0x6, 0x6, 0x4, 0x7}, {0xcd3c, 0x6, 0x769, 0x9, 0x3, 0x40}, {0x65b, 0xae, 0x3, 0xf, 0xffff5bd7, 0xfffffffa}, {0xab, 0x5, 0x10000, 0x1, 0x2, 0x80000001}, {0xb2, 0x6d4, 0x7, 0x1752, 0xb5e}, {0xf, 0x4, 0x6, 0x8, 0x3, 0x7}, {0x6, 0x65, 0x8e9f, 0x3, 0x4, 0xfffffffb}, {0x1, 0x2, 0x1, 0xe1, 0x10001, 0x7}, {0xe, 0xfffffc01, 0x3, 0x8, 0x8001, 0x51}, {0xc6c, 0x9, 0x2, 0xfffffffd, 0x1, 0x5}], [{}, {0x5}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {}, {0x4}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x3}, {0x1, 0x1}, {0x4}, {0x3}, {}, {0x4}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x5}, {0x1, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x5}, {}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {}, {0x2}, {}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x3}, {}, {0x2}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x2}, {0x2}, {0x4}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xe80, 0x2, {{{0x8001, 0xc617, 0x7, 0xa, 0x1}, 0x4, 0x6, [{0x4, 0x10, 0x3bee, 0x7, 0xffffffff, 0x2e}, {0x5, 0x6, 0x7, 0x3, 0x7, 0x6}, {0x9, 0xfffff001, 0x4, 0xefd4, 0x8, 0xffffff00}, {0xffffff7a, 0x0, 0x6, 0x401, 0x7fff, 0x4}]}, [{0x5, 0x1, 0x94b9, 0x9, 0x7, 0x7c61}, {0x7, 0x7, 0x0, 0xf9, 0xec5}, {0x6, 0x7, 0x9, 0x0, 0x3, 0xf8}, {0x6, 0x400, 0x1ff, 0xfffffff7, 0x31, 0x9}, {0x8001, 0x3a75c6f2, 0xffffffff, 0x7, 0x7, 0xffffff00}, {0x1fd, 0x5, 0x35, 0x8, 0x9, 0xffffffff}, {0x0, 0x7, 0xfffffff1, 0x2, 0x200, 0x8}, {0x1, 0x400, 0xffffffff, 0x80, 0x0, 0xfffffe00}, {0x8, 0x1, 0x200, 0x6, 0x9, 0x9}, {0x7, 0x80, 0x7, 0x80, 0x7, 0x6}, {0x4, 0x4, 0x1ea, 0x8, 0xffffffff, 0x8}, {0x8df3, 0x200, 0x4, 0x7, 0xa9, 0x400}, {0x1, 0x217, 0x5, 0x2, 0xffff, 0x80}, {0x0, 0x4, 0x4, 0x2, 0xfffffff8, 0x84}, {0x8, 0x9, 0x4, 0x1, 0x0, 0xfb}, {0x7fffffff, 0x4, 0x1, 0x6, 0x7fffffff, 0x4}, {0xfb, 0x1, 0x8001, 0x5, 0x7, 0x41a1cedf}, {0x9, 0x0, 0xfffffff9, 0xbb25, 0x80, 0x1000000}, {0x7, 0x24d, 0xfffff801, 0x2, 0x7}, {0x1, 0x1, 0xa, 0x3, 0x1, 0x10001}, {0x5, 0xf, 0x26, 0x1, 0x80000001, 0x59}, {0xfffffffd, 0x6, 0xa, 0x28, 0x3, 0x80000000}, {0x4e, 0xa, 0x8, 0x6, 0x4, 0x101}, {0xb2, 0x7fff, 0x9, 0x4b, 0xfff, 0x1}, {0x7, 0x1, 0x401, 0x8, 0xdcb9, 0x7}, {0x100, 0x4, 0x80000001, 0x303c, 0x89e8, 0x8}, {0xd, 0xb1, 0x2, 0xe, 0x10001, 0x3}, {0x1, 0x9, 0x1, 0xe81, 0xe, 0x9}, {0x0, 0xffff, 0x10000000, 0xff, 0x200, 0x5}, {0x8, 0xe, 0x3, 0x5, 0x66}, {0x2, 0x4, 0x3, 0x4, 0xffffffff, 0x8001}, {0x9, 0x7ff00, 0x4000, 0x6a30, 0x3, 0x7}, {0x9, 0x8, 0xffffffff, 0x7fff, 0xa, 0xffffffff}, {0x3, 0x0, 0x1, 0x80, 0x9, 0xf6}, {0x9, 0xccb8, 0x800000, 0x2, 0x1, 0x9e6}, {0x1, 0x81, 0x0, 0x40, 0x7fff, 0xc}, {0x9, 0x800, 0x4, 0x7, 0xffffff01, 0x5}, {0x7, 0x0, 0x7, 0x2, 0x6, 0x8}, {0x3, 0xf42, 0x95, 0x5, 0x4, 0x80000001}, {0x8, 0x62c, 0xfb05, 0x45, 0x4, 0x8}, {0x40, 0x7ff, 0x8, 0xfffffff7, 0x8, 0x40}, {0x5, 0x80000001, 0x0, 0x7, 0xe00000, 0x5}, {0x6, 0x9, 0x6, 0x5, 0x2}, {0xfffffff7, 0x7, 0x9b8, 0x0, 0x6, 0xd3}, {0xfffffffc, 0x9, 0x2, 0xdf, 0x3, 0x2}, {0xfffffffa, 0x356b, 0x8001, 0xff, 0xfffff001, 0xd}, {0x5, 0x8, 0x6, 0x81, 0xf34, 0x5}, {0x2, 0x1000, 0x5186234c, 0x1488ecb1, 0x9, 0x5}, {0x1, 0x8, 0x3, 0x1, 0x6, 0x2}, {0x0, 0x2, 0x3e, 0x3, 0x2}, {0x8000, 0x0, 0x0, 0x8000, 0x40, 0xcacd}, {0x6, 0x4, 0xfffff136, 0x1000, 0x101, 0x2}, {0x9, 0x9, 0x81, 0x9, 0x4}, {0x3aacff81, 0x81, 0x2, 0x8, 0x7, 0x4}, {0x6, 0x8, 0xfffffff7, 0x3, 0x9}, {0xff, 0x3, 0x21, 0x5, 0x9, 0x3}, {0x8, 0xfffffff7, 0x8, 0x9, 0xfffffffe, 0x8}, {0xeae1, 0x0, 0x7, 0x8, 0x1, 0xe06}, {0x7fffffff, 0x8, 0xfffffffb, 0x9, 0xb508, 0x7}, {0xfffff761, 0x1000, 0x80000, 0x3, 0x2, 0x5}, {0x6, 0x7, 0x9, 0x7fffffff, 0xe, 0x2}, {0x100, 0x1, 0x1, 0xffff0000, 0xf8699876, 0x1}, {0x200, 0x0, 0x3b, 0x9000, 0x3, 0xa}, {0x4, 0x7ff, 0x3, 0x3ff, 0x9, 0x3}, {0x10, 0xfffffff9, 0x1, 0x5fa6, 0x7, 0x5}, {0xf8, 0x8, 0x9, 0x4, 0x4, 0x8}, {0x3, 0x100, 0x4, 0x0, 0x6e, 0x7}, {0x3, 0x7, 0x0, 0x67c, 0x1, 0x2}, {0x8b2, 0x40, 0x1, 0x4, 0x4, 0x9}, {0x0, 0x1, 0x46a, 0x9, 0x69, 0x7fffffff}, {0x800, 0x584fdaa, 0x1, 0x7, 0x74c, 0xa}, {0x1, 0x7, 0x8, 0x5b0bd5c7, 0x7, 0xfffffff7}, {0xb83, 0x6, 0x7, 0x8, 0x2, 0x1}, {0x1, 0xffffffff, 0x0, 0x3, 0x9, 0x4}, {0xb, 0x2, 0x29e5, 0x80, 0x3ff, 0xe8000000}, {0x9, 0x6, 0x0, 0xbaac, 0xd, 0x2}, {0x9, 0x5, 0x1, 0x0, 0x401, 0xcdd9}, {0x4, 0x401, 0x1, 0xfffffffd, 0x800, 0xf}, {0xfff, 0x8, 0x0, 0x1, 0x80, 0x8}, {0x2, 0x7, 0x25, 0x27579b5c, 0x8001, 0x8}, {0xfffffff8, 0x2, 0x661, 0x1, 0x2, 0x9}, {0x200, 0x8, 0x4, 0xbb7d, 0x3, 0x1}, {0x63, 0x800, 0x9, 0x2, 0xfffffffc, 0xfffffffd}, {0x80000000, 0xe8, 0xfffff15c, 0x2, 0x1, 0xf}, {0x3, 0x4, 0x5, 0x0, 0x70, 0x7fffffff}, {0x2, 0x6, 0x9, 0x9, 0x2, 0xfffffff9}, {0xfe, 0x9, 0xf, 0xf6a3, 0xb7, 0x223c}, {0x3, 0x66686e69, 0x10001, 0x6, 0x5}, {0x9, 0x80, 0x4, 0x9, 0x98000000, 0xec}, {0x8, 0x521, 0x6, 0x9, 0x3, 0x1880000}, {0x8, 0x7, 0x4dec, 0x22, 0xe7f, 0x6be}, {0x81, 0xb2, 0xf1e, 0x8, 0x9, 0x277}, {0xfffffff8, 0x6, 0xa01, 0x0, 0x5, 0x5}, {0x7ff, 0x9, 0x400, 0xbdc6, 0x10, 0x4}, {0x4, 0x1c7, 0x3, 0x2, 0xdd99, 0xb}, {0xfffffbff, 0xffff, 0x9, 0x5, 0x5, 0x2}, {0x5, 0x5, 0x8, 0x1}, {0x1, 0x3, 0x0, 0x8, 0x0, 0x1}, {0x5a, 0x0, 0x4, 0x9, 0x4, 0x5f84}, {0x36eef5a0, 0xb, 0x0, 0x101, 0x7}, {0x7fffffff, 0x631, 0x8, 0x400, 0xb, 0x7}, {0x7, 0x230b, 0xffff, 0x80000001, 0xfffffffb, 0x177}, {0x0, 0x9, 0xfffffff0, 0x5, 0x1, 0xed8}, {0x4, 0x1, 0x5, 0x3, 0xa7f0, 0x4}, {0x5, 0x6, 0x1, 0x10, 0x8, 0xa9b7}, {0x0, 0xa, 0xfffffffa, 0xf905, 0x0, 0x1}, {0x2, 0x2, 0x8, 0xe, 0x0, 0x1ad7}, {0x40, 0xfffffff7, 0x2, 0x0, 0x2ad0, 0x985}, {0x6, 0x0, 0x5, 0x0, 0x1, 0xf87}, {0x7, 0x4, 0xae4c, 0x9, 0xe6, 0x6}, {0x3, 0x1, 0x6, 0x0, 0x81, 0x6}, {0x6, 0x5202, 0x1, 0xb, 0x190, 0x80000000}, {0xffff, 0x3, 0xffffb733, 0x9, 0x7, 0x90cf}, {0x0, 0x7fffffff, 0x2, 0x0, 0x497, 0x8}, {0xfffffffc, 0x7, 0xffffffff, 0x9, 0xd59, 0x1}, {0x0, 0x6, 0x2, 0x8f, 0x8, 0x80}, {0x0, 0xc, 0xb6, 0x1, 0xffff, 0x8}, {0x5, 0x1000, 0x100, 0x7, 0x4, 0x5382}, {0x7, 0xa3, 0x6, 0x3, 0x5, 0x10001}, {0x8000, 0x1, 0xb, 0xfff, 0x8000}, {0x1, 0x1f800, 0x5, 0x0, 0xffffffff, 0x1}, {0x91, 0x1, 0x3, 0x3, 0xc8, 0x5}, {0x8, 0xffff, 0x8, 0x6, 0x800, 0x9}, {0xff, 0xdc, 0x6, 0x8000, 0x400, 0x9}, {0x6, 0x7, 0x1, 0xffffffff, 0x4}, {0xfffffffd, 0x4, 0xedd, 0x40, 0x6f, 0x10000}, {0x401, 0x5, 0x0, 0x9, 0x1, 0x8}, {0x6, 0x0, 0x800, 0x1, 0x5, 0x6}], [{0x2}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x2}, {0x3}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x2}, {0x5}, {0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x1, 0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {}, {}, {0x3}, {0x3}, {0x3, 0x1}, {0x3}, {0x1}, {0x4}, {0x4, 0xc2cb8fa719b3d6b4}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x569f5b898147dd5e}, {0x2, 0x1}, {}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x5}, {0x1}, {}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x3}]}}, @TCA_PEDIT_PARMS={0xe68, 0x2, {{{0x8001, 0x8, 0x6, 0x6, 0x101}, 0x9, 0x6, [{0xc0000000, 0x5, 0x9, 0xff, 0x8}, {0x80000001, 0x2, 0x7, 0xf50, 0x2, 0x401}, {0x2, 0xffff, 0x0, 0x4, 0x9a95}]}, [{0x2c6, 0xc96d, 0xfffffff7, 0x80, 0x8, 0xfffffffb}, {0x5, 0x6, 0xe, 0x6, 0x6, 0x8001}, {0xc, 0xd0c5, 0x24b3d980, 0xfffff56a, 0x6, 0x8001}, {0x0, 0x5, 0x2, 0x2, 0x8}, {0x6, 0x3, 0x8, 0x0, 0x1, 0x8}, {0x4000, 0x9, 0x2, 0x3, 0x88d, 0x3ff}, {0x4, 0x9, 0x9, 0x5, 0xd23b, 0xf}, {0x7, 0x0, 0x1ff, 0x1, 0x0, 0x7ff}, {0x6, 0x5, 0x6, 0xfffffffd, 0x7f, 0x1}, {0xffffffff, 0x3ff, 0xa, 0x6, 0x144, 0xfffffffd}, {0x6, 0xf, 0x8, 0x1, 0x6, 0x4}, {0xa92, 0x9, 0xdcc, 0xfffffff8, 0x434, 0xcf1}, {0x800, 0xe64, 0x4, 0x8001, 0x4, 0xc}, {0xac, 0x7, 0x6, 0x7fff, 0x8, 0x1}, {0x6, 0x1, 0xe000000, 0x80000000, 0x6, 0x9}, {0x90, 0x0, 0x1, 0x6, 0x6fd, 0xfffffff8}, {0x2, 0xffffffff, 0x7, 0x8f59, 0x9, 0xff}, {0x9, 0x4, 0xf, 0x9, 0x5, 0x4}, {0x5, 0x2, 0x3, 0x8, 0xb, 0x800}, {0x3, 0x7, 0x13, 0x3, 0xf, 0x1}, {0x96, 0x3, 0x8000, 0x2, 0xb, 0x71bb66a5}, {0xcf, 0x1, 0x6, 0x10000, 0x9c9, 0x8}, {0x8, 0x4, 0x9, 0xf9, 0xb8, 0x7}, {0x6, 0x5, 0xfffffff7, 0x81, 0x3ff, 0x3}, {0x200, 0x7, 0x101, 0x400, 0x0, 0x203}, {0xf, 0x5, 0xabec0000, 0xfb3, 0x9, 0x7}, {0x5, 0x1, 0x3ff, 0x7, 0x400, 0x8}, {0x5, 0x82, 0x0, 0x6, 0xe, 0x4}, {0x10, 0x5, 0x1ff, 0x6, 0x9, 0x4}, {0x7, 0x2, 0x9, 0xfffffff7, 0x8661, 0x9e}, {0xda50, 0x4, 0xfffffffb, 0x1, 0x7, 0xba66}, {0x100, 0x3, 0x0, 0xa, 0x37, 0x200}, {0x80, 0xfffffff9, 0x8000, 0x2221400, 0x3, 0x6}, {0x6, 0x8001, 0x80, 0x2, 0x3, 0xce7c}, {0x6, 0x7e, 0x5, 0x4, 0xa, 0x5}, {0xa, 0xdc, 0x3ff, 0x3, 0x0, 0x101}, {0x7, 0x0, 0xfffffffa, 0x8, 0x8, 0x1}, {0xae, 0xff, 0x3ff, 0x6, 0x101, 0x7ff800}, {0x1, 0x401, 0x24000000, 0x8, 0xfc, 0x6}, {0xa09, 0xd072, 0x1c8, 0x1b8, 0x3ff, 0x81}, {0x1, 0xc, 0x2, 0x7, 0x2, 0x4}, {0x7, 0xfffffffb, 0xd, 0xe89, 0x8, 0x2}, {0x1, 0x1, 0x8000, 0x6, 0x6, 0x7fff}, {0x868, 0x2, 0xffffff72, 0x1ff, 0x8, 0x7}, {0x8000, 0x9, 0x0, 0x7, 0x6, 0x406}, {0xa, 0x9, 0x7, 0x0, 0x101, 0x3}, {0x6, 0x5, 0xc, 0x8, 0x5, 0x15c3}, {0x40, 0x5, 0x1ff, 0x100, 0x5, 0x17070b90}, {0x101, 0xf2, 0x65d, 0x0, 0x4, 0x8001}, {0x3, 0x9, 0x7ff, 0x3ff, 0x8000, 0x5}, {0xac13, 0x1, 0x5, 0xa678, 0x78f, 0x68}, {0x0, 0xeedb, 0x98, 0x80, 0xc, 0x4}, {0x806b, 0x5, 0x5, 0x5, 0x3}, {0xffffffff, 0xd601, 0x1c00000, 0x8c6, 0x1, 0xfffffe01}, {0x5, 0x6, 0x0, 0x0, 0x9, 0x7}, {0x3ac, 0xfffffffb, 0x9, 0x0, 0x4, 0x3}, {0x0, 0x8, 0x8, 0x4, 0x7fffffff, 0x2}, {0x1f5, 0x1, 0x7, 0xb, 0x4, 0xfffffffe}, {0x0, 0xfffff415, 0x6, 0x7000, 0x3, 0xff}, {0x9, 0x3, 0xad, 0xffff8000, 0x0, 0x7}, {0xa8a4, 0x2, 0x40, 0x7, 0x1, 0x8}, {0x5, 0x9, 0xaa44, 0x0, 0x3, 0x4}, {0x6, 0x99d, 0x6, 0x8, 0x7, 0x7}, {0x7, 0x7fffffff, 0x479, 0x8, 0x6, 0xe}, {0x6, 0x7cad, 0x9, 0xf5, 0x1, 0x7f}, {0x4, 0x6, 0x2, 0x2, 0x3, 0x3}, {0x800, 0x9, 0x208, 0x9, 0x8, 0xf5}, {0x2, 0x0, 0xdd7, 0x4, 0x40, 0x10000}, {0x9, 0x8, 0x40, 0x4, 0x5, 0xfa}, {0x6, 0x5, 0x2, 0x6a, 0xbb49, 0x4}, {0x5, 0x1, 0x7, 0x9, 0x9, 0x3}, {0x7fff, 0x7f, 0xfafc, 0xe23, 0x8001, 0x1}, {0x4, 0xc, 0x1, 0x8000, 0x8, 0xf}, {0x0, 0x1, 0xe0000000, 0x5, 0x9, 0x400}, {0x7f, 0x200, 0x4, 0x7, 0x3, 0x8}, {0xfffffe01, 0x6, 0x1fd0, 0xf5a5, 0x7, 0x6ce2}, {0x6, 0x2, 0x80000001, 0xbbb, 0xd, 0x6}, {0x4, 0x3, 0xe44a, 0x4, 0x6, 0x1ff}, {0x5, 0x10, 0x9, 0x400, 0x4, 0x5}, {0x6, 0x9, 0x0, 0x40, 0x7, 0x7}, {0x13, 0x9, 0xfffffff0, 0x7be7, 0x5, 0xfffffff9}, {0x8, 0x3, 0x2, 0x2, 0x2, 0xfffffffa}, {0x3ff, 0x400, 0x5, 0x9, 0x0, 0x80000000}, {0x8, 0x2, 0x5, 0x1, 0x0, 0x2}, {0xacd00000, 0x6, 0x3ff, 0x0, 0x265d22a0, 0xffffffff}, {0x5, 0xd1de, 0xfffffffa, 0x0, 0x4, 0xb}, {0x6, 0x2, 0x6e, 0x0, 0xffffffff, 0x200}, {0x7, 0x2, 0x100, 0x0, 0x9, 0x3}, {0xa, 0x2000, 0x7, 0x16, 0x7, 0x6}, {0x5, 0x1, 0x6, 0x6, 0x9, 0x86}, {0x5a057187, 0xfffffff9, 0x1000, 0xfffffffd, 0x5, 0x9}, {0x7fe0, 0x7, 0x7, 0x8, 0x1, 0x7fffffff}, {0x53, 0x27, 0xa, 0x7e, 0x9, 0x7}, {0xcec, 0x0, 0xff, 0x0, 0x5, 0x8}, {0x0, 0x2, 0x80, 0x8, 0x16182, 0xffffffff}, {0x4, 0x9, 0x1, 0xa69d, 0x10001, 0x1}, {0x9a, 0x4, 0xe, 0x80000000, 0x8, 0x3}, {0x1ff, 0x65, 0xc8c, 0x0, 0x81, 0x7fff}, {0xacf, 0x3, 0x9, 0x4, 0x8, 0x9}, {0x5, 0x3, 0x9ba, 0x72c, 0xffffff81}, {0x1ff, 0x81, 0x7a, 0x73, 0x1, 0xf}, {0x5, 0x3, 0x6, 0x200, 0x0, 0xfffff001}, {0x4, 0xa4e, 0x8, 0x3, 0xfffffffb, 0x6}, {0x3, 0x5, 0x6, 0x6, 0x9, 0x3}, {0x7, 0x25, 0xff, 0x2, 0x6, 0x6}, {0x56, 0x38092055, 0x0, 0x7, 0x6, 0x53}, {0x36, 0x8, 0x8, 0x3, 0x18, 0x10000}, {0xfffffff0, 0x7, 0x6, 0xffffffff, 0x200000, 0x7f}, {0x10, 0x101, 0xe7, 0x1, 0x738c, 0xe974}, {0xd, 0x4, 0xb, 0x9, 0x7ff, 0x2}, {0xfff, 0x3, 0x56, 0x0, 0x52d7d623, 0x4}, {0x7fffffff, 0xff, 0x4, 0x9, 0x6, 0x4}, {0x5, 0x9, 0xd, 0x10000, 0x3a5, 0x1000}, {0x6, 0x2, 0x4, 0xfffffff9, 0x8000, 0xf5}, {0xbc8, 0x3, 0x3, 0x8, 0x6, 0x4}, {0x5, 0x6, 0x800, 0x100, 0x6e98, 0x5}, {0x0, 0x5, 0x6c70, 0x7, 0xfffff90a, 0x3}, {0x1, 0x3, 0x9, 0x8, 0x9a60, 0xffff8001}, {0x155, 0x9, 0x0, 0x3, 0xfffffff9, 0x7}, {0x9, 0x10001, 0x2, 0x0, 0x9, 0x5}, {0x5, 0x8, 0x581, 0x6, 0x180, 0x4}, {0x8, 0xffff7fff, 0x7f, 0x9, 0x3, 0x5}, {0x1, 0x9, 0x0, 0x401, 0x2, 0x90}, {0xc69, 0x1, 0x9, 0x7f, 0x7, 0x9}, {0x9, 0x6, 0xdc51, 0x9, 0x4, 0x7}, {0x8, 0xbcd, 0x0, 0x8, 0x6, 0x8}, {0x80000001, 0x80, 0x5, 0xfffff238, 0x0, 0x2}, {0x9, 0x8, 0x6, 0x1ff, 0x1, 0x7ff}], [{0x1, 0x1}, {0x7, 0x545d73f2a32e9f1b}, {0x4, 0x1}, {0x1}, {}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x3}, {0x1}, {0x4}, {0x3}, {0x6, 0x1}, {0x4}, {0x2}, {0x4, 0x1}, {0x2}, {0x5}, {0x2}, {0x5, 0x1}, {0x2}, {0x1, 0xe3541f06385a599a}, {0x3}, {0x7, 0x1}, {0x3}, {0x1, 0x1}, {0x1}, {0x2}, {0x6, 0x1}, {0x1}, {0x1, 0x2}, {0x3}, {0x5}, {0x4, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {0x5}, {0x3}, {}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x4}, {0x2}, {0x1}, {}, {0x2}, {0x4}, {0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x5}, {0x5}, {0x7, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x2, 0x2}, {}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x53569449dcdb922d}, {0x3}, {0x1, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}]}}]}, {0xb7, 0x6, "cf128797d79ea4cfe3bd49198f278d7952a3a229069c54c4597281f2c4eb4857d2fc0d235cd4de798fc9286e4db030970a82f76518daae615c8ece91a30412b663a1a3c56627fc78e58101f0cd0e86d6863f9e3260f5a785d75e1db485892be19cb73db36932bb31b9e9117f21b65f75437674ad9b4ba564342aaed6de4e5c126e3b830db8326120d016ecabaae6923a68fc0a241ed18aa7d18b115275fc43fe338f2800fc11a7d7c5e2ab0409f6b21c89dbc3"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mirred={0x184, 0x6, 0x0, 0x0, {{0xb}, {0x124, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x400, 0x9, 0x5, 0x70000, 0x36b}, 0x4, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x1, 0x0, 0x6, 0x3}, 0x1, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x800, 0x1, 0x4, 0x6, 0xd6e4}, 0x4, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x877d, 0x1, 0x7, 0x1, 0x7}, 0x2, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x54, 0x4, 0x1, 0x6}, 0x1, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffff31, 0x9, 0x6, 0x6, 0x9}, 0x4, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x2, 0x7, 0x2, 0x7}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x73, 0xa, 0x3ff, 0x5}, 0x4, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xbf39, 0x7, 0x8, 0x60000000}, 0x1}}]}, {0x35, 0x6, "bd8c4175e8c04c3396dcace4fb1ba085eb745c6240396408fb91ca287e13897c6e4113654a34685423d1fa4be48abf9286"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x6}}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_to_hsr\x00'}, @TCA_FW_ACT={0x163c, 0x4, [@m_ct={0xa0, 0x9, 0x0, 0x0, {{0x7}, {0x4}, {0x75, 0x6, "e8b52bd62695d70716d06bc4daa33c4d4b488e8c19d7f3789e15f40f5ac3189ff8b537d1263f283c8903cd4a794a9c3258d4f74fd4d2de39f6b06f917f2dc279fc4758462999204d1e7f995889c9424806dc16025670a6abf2f42d4ee09dfc6097d5acb9060c3c64cb6051a573be6eaeca"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_police={0x950, 0x11, 0x0, 0x0, {{0xb}, {0x878, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x401, 0x9, 0x8, 0x3, 0x1, 0x8, 0x4, 0x8000, 0x1ee5, 0x9, 0x7, 0x300000, 0x9, 0x0, 0xfffffff7, 0x2, 0x5, 0xd7a, 0x2, 0xffff, 0x0, 0x6, 0x1, 0x1, 0x10000, 0x6, 0x1, 0x1, 0x4, 0x5, 0x6eef, 0xa30, 0xd, 0x100, 0x3, 0xfffffeff, 0x7, 0x62c, 0xf, 0xfff, 0xce64, 0x10, 0x7, 0xe, 0xf410, 0x200, 0x8, 0x9, 0x9, 0x6, 0x81, 0x2, 0x81, 0x2, 0x6, 0x8, 0x0, 0xfffffffd, 0x3d, 0xfffff8ed, 0xfffffffa, 0x6, 0x0, 0x80000000, 0x7, 0x4, 0xd, 0x289, 0xffff, 0x8, 0x1, 0x28, 0xfff, 0x7, 0xd0, 0x7, 0x3ff, 0xdde, 0x9cc2, 0xbec5, 0x5, 0x0, 0x0, 0x8, 0x800, 0xdd5, 0x6, 0x0, 0xfffffff7, 0x2, 0x4, 0xcde3, 0x80, 0xd, 0xfffffffa, 0x6, 0x5, 0x6, 0xfffff409, 0x80, 0x1c000000, 0x34d, 0x80, 0x7ff, 0x5, 0x8e9, 0x9, 0xcf3, 0x0, 0x7, 0x8b, 0x9, 0xffffffff, 0xdd, 0x2, 0x6, 0xa0, 0x10, 0x7, 0xec, 0x839, 0x7, 0xf9, 0x1ff, 0x7fff, 0x5, 0x5, 0x5, 0xa, 0xfffffff9, 0x2, 0x5, 0x1, 0x8ff, 0x7, 0xfff, 0x6, 0xd2, 0x4, 0x3, 0x1000, 0x8b, 0xa, 0x2e5, 0x40, 0xda7, 0x0, 0x6, 0x40, 0x1400000, 0x9, 0x1, 0x6, 0x2e25, 0x0, 0x9, 0xffffffe5, 0x800, 0x2, 0x40, 0xff, 0x3389, 0x4, 0x4, 0x150, 0x5, 0x10, 0x6, 0x1, 0x2, 0x9, 0x3, 0x5, 0xffff, 0x4, 0xfffffff8, 0x0, 0x1, 0x6, 0x2, 0x5, 0x54d9, 0x0, 0x5f2, 0x1000000, 0x10, 0x3cc9, 0x401, 0xf8, 0x101, 0xb5, 0x7, 0x9, 0x2, 0x6, 0xfffffa1f, 0x0, 0x0, 0x7, 0x10001, 0x5, 0xe10, 0x4, 0x8, 0x6, 0x7ff, 0x4, 0x8, 0x5e9c, 0x80000000, 0xfffffe00, 0x3, 0x3ff, 0x185, 0xfff, 0x6, 0x4, 0x8bc, 0x3, 0x1, 0x8, 0x9, 0x69f, 0xf2, 0x8, 0x7, 0x5, 0x4, 0x5, 0x5, 0x4, 0x8000, 0x2, 0xe5, 0x10, 0xc, 0xd, 0x1, 0x2, 0x8, 0x0, 0x6, 0x9, 0x6, 0xfff, 0x80, 0xffff88f4, 0x401, 0x8, 0x4, 0x35, 0x2c74, 0x5, 0x6, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7fffffff}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x7ff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x401}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x8e, 0x10001, 0x7dc, 0xfffffffe, 0x4, 0x5, 0x3ff, 0x2, 0x8, 0x8, 0x46b, 0xc, 0x9e41, 0x80, 0x2519, 0x1, 0x9, 0xb, 0x3ff, 0x40, 0x6, 0x3, 0x9, 0x6, 0xc, 0x3, 0x5, 0x3, 0xd39, 0x80000001, 0x2, 0x9, 0x7fffffff, 0x9, 0x110d, 0x9, 0x6f2, 0x18, 0x0, 0xd, 0x808, 0x8, 0x3, 0x7f0000, 0x4, 0x7, 0x10, 0x8, 0x3, 0x6, 0x4, 0x1, 0x0, 0x2, 0xfffffffb, 0x4, 0x4, 0xffffffff, 0x3, 0x1000, 0x2, 0x2, 0x9, 0x5, 0x0, 0xb4, 0x7, 0x7, 0x0, 0x8001, 0x9, 0x1, 0x8, 0x5, 0x80, 0x4, 0x8b7, 0x2, 0x8, 0xfff, 0xfffffbff, 0x2, 0x8, 0xbc, 0x2, 0x8, 0x7, 0x4, 0x10, 0x2, 0x863, 0xc90b, 0x9, 0x9be6, 0x51, 0x2, 0x2, 0x3ff, 0x8001, 0x0, 0x8, 0x1, 0x8, 0xff, 0x8000, 0x4, 0x9, 0x110d, 0xc, 0x3, 0x8, 0x6, 0x0, 0x2, 0xf7, 0x9, 0xff, 0x5, 0x8, 0x3, 0x8, 0x2, 0x5738, 0x1, 0x2fa4, 0x3, 0x1, 0x9, 0x7ff, 0x3, 0x4, 0x4, 0x4, 0x6, 0xffffffff, 0xad0, 0x8, 0x800, 0x8, 0x8000, 0x9, 0x7, 0x375, 0xfffffbff, 0x800, 0x80000000, 0xfff, 0x8000, 0x2, 0x4, 0x800, 0xfffffffb, 0x8, 0x100, 0x1, 0x8, 0x8, 0x3, 0x8552, 0x9, 0x9, 0x5, 0x8, 0xfffffffb, 0x101, 0x1, 0x9, 0x5, 0x3, 0x94a6, 0x4, 0x3, 0x887, 0xf4, 0x400, 0xd, 0x9, 0x9, 0xffff, 0x8, 0x80000000, 0x1, 0x0, 0x7fff, 0x1, 0x4, 0x67, 0x8, 0x3, 0x701, 0xaa8, 0x7, 0x7fff, 0x7, 0xfffffffc, 0x9, 0x8, 0xd, 0x1, 0x7, 0x5, 0x826, 0x100, 0x4, 0x1, 0x0, 0x1bf, 0x6, 0x9, 0x7, 0x3, 0x4, 0x7fff, 0x638, 0x80000000, 0xffa6, 0x2, 0x33fd, 0x7, 0x800, 0x1, 0xff, 0x2, 0x4, 0x9, 0x189b6b7e, 0x3, 0xf4, 0x1, 0x101, 0x9, 0x2, 0x6, 0x8, 0x6, 0x1, 0x0, 0x401, 0x6, 0x8000, 0x15, 0x7, 0x3, 0x200, 0x0, 0x9, 0x0, 0x2, 0x4, 0x2, 0x2, 0x3, 0x3, 0x80000000, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x6, 0xffff, 0x1ff, 0x200, {0xf1, 0x2, 0x2, 0x2, 0x1000, 0x4}, {0xd, 0x2, 0x1d, 0x1ed, 0x9f2, 0x40000000}, 0x200, 0x1, 0x6}}]]}, {0xad, 0x6, "78fd4ac9d87f28745844b9213e2a8a250effb7b2e75f0ce030108266e280cb51f059f9fcb9ae5ae9bb5245034341d83ab3242c1b557ce89c086355726ff7bdba38e5d7c70f41b3f00c4c3c483d2a75e625d88814e12d241deb8cf62688233b5ebf34a733f7521a064a0bd964d00ab7a480dacc84c6864221ebf218cbcf5aa45ea91acce74f301c09df5771bf397d3cba9f46a6c90dad948b89a2b1c2dcbafc9d5615180c18015f061e"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0x930, 0x15, 0x0, 0x0, {{0xb}, {0x8f4, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xb6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2b}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0xe08}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffe}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x10000}, @TCA_POLICE_RESULT={0x8, 0x5, 0x40000000}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80000000}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7f, 0x7, 0x7f, 0x6, 0x5, 0x28ff, 0x6, 0x101, 0x1, 0xcb, 0x6, 0x0, 0x5, 0x1, 0x400, 0xffff, 0x5, 0x4d, 0x1, 0x4, 0x2, 0xa0c, 0x0, 0x1, 0x7287, 0x4, 0x1ff, 0xc8, 0xf, 0xfffeffff, 0xffffffff, 0x0, 0x4, 0x0, 0xaa, 0x5, 0x8, 0x5, 0x420, 0x80, 0x4, 0x2, 0x1, 0x4, 0x4502, 0x400, 0x5, 0x1, 0x9, 0x0, 0xf9c, 0x1ff, 0x8, 0x3d, 0x2, 0xfffffffb, 0x8, 0x7, 0x7, 0xffff, 0x7ff, 0x4, 0xffffffff, 0xda9, 0x455, 0x2, 0x8001, 0x7ff, 0x3, 0x150, 0x9, 0x6, 0x53e625dc, 0x4, 0x8001, 0xa1b, 0x9, 0xb3f5, 0x800, 0x80000001, 0xffffffff, 0x8, 0x37e, 0x7, 0x15ca, 0x0, 0x6, 0xfffff001, 0x5000000, 0x5, 0x7f, 0x2, 0xcd2, 0xc4eb, 0x1, 0x6, 0x6, 0x80000001, 0x10000, 0x0, 0x19, 0xfffffff8, 0xffff, 0x6, 0xf92, 0xe, 0x4, 0x200e, 0x2, 0x10001, 0x3, 0x4, 0xfffffffe, 0x3, 0x9, 0xfffffff7, 0x9, 0x3, 0x10000, 0x94a, 0x1000, 0x9, 0x6, 0xffffffff, 0xfffffffc, 0x81, 0x5, 0x81, 0xfffffffa, 0x4, 0x2, 0x8e, 0x2, 0x1000, 0x2, 0xd5a2, 0x101, 0x8000, 0xd6, 0x5, 0x8, 0xbe, 0x3, 0x2, 0x5, 0x2, 0x8, 0xff, 0x37bc, 0x2, 0x5, 0x101, 0x1, 0x2, 0x3ff, 0x8, 0x5, 0x100, 0x1000, 0x5, 0x0, 0x4, 0x6, 0x4000000, 0x9, 0xffff, 0x4, 0x0, 0x0, 0x9, 0x7, 0x67e0, 0xfffffff7, 0x8001, 0xc7, 0x3, 0x7, 0x0, 0x40, 0x7, 0x1ff, 0x9, 0x80000001, 0x401, 0x3, 0x200, 0x2, 0x3294, 0x2, 0xfffffff8, 0x9f, 0x0, 0x2, 0x3, 0x8, 0x4, 0xfb, 0x7c, 0x4f49, 0x1, 0x9, 0x9, 0x0, 0x0, 0x400, 0x5, 0x1, 0x9, 0x400, 0x5, 0x8, 0x9, 0x6, 0x63cd, 0x4, 0x6, 0x3, 0x1, 0xc45, 0x0, 0x1, 0x8, 0x4, 0x9, 0x8, 0x7, 0x5f, 0x2, 0x0, 0x4, 0x4, 0x9, 0x0, 0x1, 0xfffffe01, 0x4, 0x400, 0xb, 0xb, 0x80000000, 0x4, 0x0, 0x2, 0xa, 0x7, 0x7fff, 0x10000, 0x9, 0xfb75, 0x1e, 0x1, 0x3ff, 0x0, 0x369b6481, 0x2361]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xc46b}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x101, 0x0, 0x6, 0xb32, 0x5, {0x40, 0x1, 0x0, 0x3, 0x52, 0x2}, {0xb8, 0x1, 0x10, 0xb29b, 0xfffe, 0x10000}, 0x3ff, 0x2, 0x80}}], [@TCA_POLICE_RATE={0x404, 0x2, [0xffff, 0x0, 0x9, 0x2, 0x200, 0xc8c3, 0x200, 0x10000, 0x9, 0x9, 0xffff5cd2, 0x6, 0xfffffff9, 0x9, 0x2, 0x2, 0x5, 0xe94, 0xfffffffa, 0x2, 0x5, 0xfffffffd, 0x10000, 0x4, 0x7, 0xfffff001, 0x7, 0xc, 0x9, 0x5d, 0xa, 0x0, 0x173c, 0x4, 0x1ff, 0xee40, 0x6, 0x7, 0x2ed, 0x800, 0xfffeffff, 0x1, 0xc3e, 0x9, 0x1, 0x8, 0x4, 0xfffffffb, 0x18, 0x1, 0x1, 0x10, 0x1000000, 0x6168, 0x2, 0x6, 0x7, 0x8d, 0xfffffff7, 0x10000, 0xfff, 0x7, 0x2, 0x7, 0x9, 0x9, 0x1, 0x3, 0x0, 0x2, 0x800, 0xffffffff, 0x1, 0xc, 0xb, 0xa9, 0x2, 0x8, 0x4, 0x6, 0x81, 0x0, 0x8, 0x0, 0xfffff76a, 0x75d, 0x0, 0x5, 0x7fffffff, 0x9, 0x4, 0x0, 0x8, 0x6, 0xff, 0x0, 0x4, 0x8, 0x4, 0x1, 0x84, 0x8, 0xfffffffc, 0x5, 0x81, 0x8, 0x5, 0xffffffff, 0x2, 0x8, 0x9, 0x10001, 0x6, 0x3, 0x3, 0x1, 0x0, 0x8, 0x2, 0x4, 0x7, 0x800, 0xc6, 0x2, 0x8, 0x1, 0xc0000, 0x6, 0x3, 0x9c, 0x9, 0xcd, 0xfffffffc, 0x0, 0xaf2, 0x5, 0xa7, 0x7, 0x400, 0xfffffeff, 0x7, 0x0, 0x4, 0x80000000, 0x6, 0x5, 0x0, 0x5, 0x1000, 0x7, 0x8, 0x8, 0x3, 0x5, 0x1000, 0x418, 0x3, 0x6, 0x5, 0x40, 0x5, 0xc, 0x890f, 0x39d, 0x80000001, 0xffffffff, 0x855, 0x5, 0x7f, 0x1, 0x9, 0x1, 0x4, 0x6, 0x1, 0x3, 0xfffffffa, 0xff, 0x8, 0xffff2cfd, 0x4, 0x7bae, 0xffff7fff, 0x7f, 0x9, 0x1, 0x80000001, 0x8a, 0x5, 0x6, 0xbe2, 0x8000, 0xfffffff3, 0xe, 0x2, 0x4, 0x10000, 0x7f, 0x7f, 0x9, 0x2, 0xd, 0x8, 0x7, 0x80, 0xf1, 0xffffff01, 0x8c6, 0xe, 0x3, 0x6, 0x78, 0x347, 0x200, 0xe6e, 0x0, 0x9, 0x1, 0x400, 0x401, 0x6, 0x9, 0x8, 0x6, 0x9, 0x2, 0x7, 0x6, 0x9, 0x98, 0x7c, 0xff, 0x6, 0x80, 0x400, 0x4, 0x0, 0xe, 0x6, 0xfffffff4, 0x80000000, 0x1000, 0x401, 0x200, 0x1, 0x7, 0x3, 0xffffffff, 0xfffffff9, 0xb, 0x100, 0x0, 0x1, 0x5, 0x10000, 0x4]}]]}, {0x14, 0x6, "6051dc35dc39e9653b2a92f26788dbb0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mpls={0x90, 0xd, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TC={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0xbc}, @TCA_MPLS_TTL={0x5, 0x7, 0xcf}]}, {0x42, 0x6, "de355c8483c7d6497128bea96132c4883581827d714f91c658678bf6260853b33c434ef588fe29835e9eca7d8b67f80d5e57db61e67eeb9cf6807f11df1b"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0x124, 0x0, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x54, 0x13e, 0x0, 0x0, 0x7}, 0x1}}]}, {0xdb, 0x6, "444ad175e369457a05237415d273df392926fdeef009416999ea4e56ca22b1830b6c9bf24946fb23a75a7d152d4e711d7f7ccd2d8f864ae92b5088249951f650be6a97ba3e33b0c3ecc2ea318d292519ed84998c6551eeb27ba55cccb2b9498cc9aa4c0e02a31057bbf13df632fd9c4b55c92256c22e8a89c787ebdc7c9a8d5e328aa560ef2f84eb124e689bb36dd010f80eefd0d7868cef267817921cee2e814f1fb413cc8e26a231a70c7be867559278d9803052c3965be83f6db4fd9571c767615af75d28374e2f60810e31f70490055d07488ccae1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x4}}}}, @m_xt={0x164, 0x4, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0x2b, 0x6, {0x9, 'mangle\x00', 0x4, 0xffff, 'y'}}]}, {0xe1, 0x6, "7b157c6aac29b1cb467b5f84baa4dd841ae4e71cab35933d2fcc4cfad8838f1fc1dbe986f3d055d270ad37021a558d7799ea6d2090606b794d522ccc97a094ff12cd8191a9eba3afc8f43c3f758a7fc04e4860162e7ff4628d7bd5c4e655155cc45b4a51e837abbd313bf8c0e393bf2dc160b64d8c1e57d31e741027e0e2087d67b3d8ce073606db9a7dc5158207af96b3104ab5c74c64a0580b27b18757a577b9f794b4823fd350fcc4e5debe3472a876ee0ae341f580391187da78971d9039d6aace4781625023fe72f2c3ce52e607ec9de1fc4c410acd86b7874b32"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_FW_ACT={0x80, 0x4, [@m_sample={0x7c, 0x2, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8001}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xe, 0x7ff, 0xffffffffffffffff, 0x6, 0x3}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}]}, {0x1f, 0x6, "64e7868571ad261acb5e8d65a09d74df5ba8654a303e41ac4d80e4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_FW_MASK={0x8, 0x5, 0xc}, @TCA_FW_MASK={0x8, 0x5, 0x7}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x48c8}, 0x1, 0x0, 0x0, 0x4000800}, 0x88) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x6}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x578410eb) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x9, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) 1.982500656s ago: executing program 2 (id=1571): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000140)="24000000010006", 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) chdir(&(0x7f0000000100)='./file0\x00') syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES64], 0x44}}, 0x0) 1.887510029s ago: executing program 1 (id=1573): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r0, 0x4b3c, 0x0) (fail_nth: 3) 1.884900062s ago: executing program 1 (id=1574): read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) r4 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0xf946, 0x80, 0x5, 0x1001}, &(0x7f0000000040), &(0x7f00000001c0)) r5 = eventfd2(0x58, 0x80801) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000000)=r5, 0x1) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000001ac0)=@raw={'raw\x00', 0x3c1, 0x3, 0x58c, 0x3b4, 0x9403, 0x0, 0x0, 0x2c0, 0x4c4, 0x3d8, 0x3d8, 0x4c4, 0x3d8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @mcast1, [0x0, 0x0, 0xffffff00, 0xff000000], [0xff000000, 0x0, 0x0, 0xff], 'veth1_to_bridge\x00', 'syzkaller0\x00', {}, {}, 0x2f, 0x0, 0x4}, 0x0, 0x28c, 0x3b4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x8000, 0x2, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x5fc, 0x1, 0x0, 'syz0\x00'}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xffffffff, 'system_u:object_r:devicekit_exec_t:s0\x00'}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private0, [0xff000000, 0x0, 0xffffffff, 0xff], [0xffffff00, 0x0, 0xff000000, 0xffffffff], 'ip_vti0\x00', 'erspan0\x00', {0xff}, {}, 0x6, 0xc, 0x7, 0x40}, 0x0, 0xc8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x1000, 0x0, 0x0, 'pptp\x00', {0x1000000}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5e8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000003e40)=@deltfilter={0x179c, 0x2d, 0x100, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x10, 0xfff3}, {0x9, 0x10019}, {0x4, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x4d, 0xc}}, @filter_kind_options=@f_cgroup={{0xb}, {0x124, 0x2, [@TCA_CGROUP_ACT={0x120, 0x1, [@m_xt={0x11c, 0x20, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}]}, {0xeb, 0x6, "5fc8a3db6244f5122b9ce36a823797db01f1c6ee2d84fa0b67eab441641e176d62401447c7a5294a81d2a851d2418f88fdfede4b02bada4578cd30a2ed06beeed83a365a363003134940a795af00d9cb7282cc1357972cec381f472858959841002b4e033a7381c513d00a67e0bbcc785eec74fb3592baf46c1b03f75daa981c226eb5c5e8caad1d0beea09d84058fd6a75eb8d1f18287c7a2c206b2d9f7ec4c9304147b93496f7b7153ca23a8eadcc64f224ede78b36de953f7d4e1b40430ceef89d3087db27052fd9f40a158c835799366aed8685db86741ff2bac77bc9008df66f1f89669f0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0x7f, 0x4}}, @filter_kind_options=@f_fw={{0x7}, {0x1600, 0x2, [@TCA_FW_ACT={0x15fc, 0x4, [@m_ct={0x188, 0x2, 0x0, 0x0, {{0x7}, {0x64, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "fc89712dca83c046a5e8a7778220538e"}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x80}, @TCA_CT_LABELS={0x14, 0x7, "97221620bc4bedcb1d8e9a0cc4d19187"}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @loopback}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "4ab143496001d9c48f7b7ec56fe950ed"}]}, {0xfe, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0x14c, 0x5, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x1, 0x10000000, 0x2b7, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x3, 0x5, 0x2, 0x200}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x2, 0x1, 0x10001, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0xa, 0xe7e, 0x20000000, 0xd, 0x1}}]}, {0xbe, 0x6, "fc0ebf89649c7de561aa8a151b960051d5ec01d0eae7f5f77f1370f7ee29357df741f15007d8d91185eb49c0479f9f9ea28dd508eb4cc685f45dd50da86dca91417bf363c3e70d04dbccc734c16d7c5933e20575365e1d0bd9ca6f89f2785458ab6a88dc892c75d79756475ed8e152cbe780a0768a753a04099446399461d0284d0511a4f0e6edf7b4f6506ceb28574c76c44552cc1ae389fba512fcab6249088b69532c166c8f1083c6005aed3a2e1bf45fd4793b334089d1ea"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0x1a0, 0x8, 0x0, 0x0, {{0x9}, {0xa0, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x175c, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x8e4d, 0x6, 0x8, 0x3c1e}}, @TCA_GACT_PARMS={0x18, 0x2, {0xd7d, 0x7ef, 0x6, 0x42, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1913, 0x10000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1a38, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0xd, 0x25db, 0x1, 0x1, 0x11e9}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x3b, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x21e4, 0x8000000000000005}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x19dd, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0xe3e969d5683fa653, 0x194c, 0x4}}]}, {0xd7, 0x6, "07c6b05a5dcec7ffe1e716f5a4fe6f1603042c4da8f15096a425dedefda2edf3a1b879e4e210a0e44d5fe8d2a20476ad4a2343027356fdc2c904b0d43f104121b4391cb5737a5f5da13bdb57d30046e926f6a8c191a00e6f52c1fd9f74c4c4419db77720927a5a7b5db6ef0bf222cc62b057cc33acb6224887df6020ed45cb517d302e388eefb67a95ba3a1b95f8c63e6041290925993066b2487d06e52e9015189e7e4d083a0d75eeb5c225fc7b15f23ff348f448d1db3126fea5ad7dd86c64df12140e00345dfeea8a1e432cfd60853a1b8f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_vlan={0x70, 0x1d, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0x21, 0x6, "3ebcd8ad33620dd644ff7e343ce29a6846bd93fb52056ba80f8282b208"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mirred={0x150, 0x1d, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0xffff, 0x20000000, 0x7, 0x5}, 0x3, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa, 0x8, 0x10000000, 0x5, 0x8}, 0x2, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x5, 0x2, 0xaa, 0x7f}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x5, 0x20000000, 0x6, 0x8}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x0, 0x6, 0x1dd}, 0x3}}]}, {0x82, 0x6, "d4d135d9d36a920d2e01faaef12729ca435b914fe1c5d4d77e6119e2cd32e844ca62bdd10db0dce62f57f248fe3a1c389e681786e35ec94fad4ad63f4063522474fc23eb6b9aadbdb09a8788522f317929b8053a38819f220fd1454b7423cf54a2e5fd32f77f2b4e472e8ecdef9e884fffd28aead91839012c45c92081d4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0xd60, 0xd, 0x0, 0x0, {{0xb}, {0xc78, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000000, 0x8, 0x6, 0x3, 0x4, 0xe, 0x91f, 0x7, 0x81, 0x9, 0xff, 0x726d, 0x4ed6, 0x9, 0xfffffffa, 0x9, 0x152f, 0x8, 0xd, 0x9, 0x7fffffff, 0x4d, 0x7fff, 0x7, 0x5, 0x401, 0x4, 0x2, 0x8, 0x4, 0x5, 0x2, 0x9, 0x4, 0x3, 0x93, 0x2c6, 0x3, 0xfffffff8, 0x800, 0x5, 0x8, 0x4b5da485, 0xf, 0x80, 0x2, 0xfff, 0x7, 0x0, 0x40, 0x5, 0x401, 0x6, 0x52, 0x2098, 0x3, 0x0, 0x0, 0x4, 0x8000, 0x0, 0x1, 0x800, 0x9, 0x9, 0x7fffffff, 0x10001, 0x5, 0x2, 0x7, 0x80000001, 0x5, 0x82a, 0x9, 0x0, 0x200, 0x2, 0x6, 0x7, 0x0, 0x8, 0x5, 0xb, 0x0, 0x4, 0x8, 0xb43, 0x37c, 0x9, 0xd06, 0x6, 0x6, 0xfffffffd, 0x5, 0x3, 0x7fff, 0x7b, 0x6000, 0x4, 0x4, 0x6, 0x4, 0x2bc6, 0x2, 0x4, 0xffff, 0x3, 0xffff0001, 0xa16, 0x200, 0xfffff341, 0xb, 0x0, 0x80000001, 0x1, 0xcba, 0x8, 0x7, 0x8, 0x3, 0x5, 0x3, 0x4, 0xfffffffa, 0xfffffffd, 0x7a86221d, 0xfe0000, 0x9, 0x4, 0x6, 0x93, 0x0, 0xffff7fff, 0xbe8, 0x8, 0xc, 0x1, 0xd355, 0x6, 0x40, 0x80000001, 0x1, 0x6, 0x7, 0x0, 0x6, 0x2, 0x2, 0x8, 0x2, 0x1, 0x80000000, 0x8001, 0x200, 0xd7, 0x8, 0x1, 0x7fffffff, 0x3, 0x2, 0x1, 0x1, 0x5, 0x6, 0x6, 0x3, 0x0, 0x800, 0x2, 0x80000000, 0x8, 0x4, 0x5, 0x9, 0x1, 0x5, 0x8, 0x3, 0x9, 0x8, 0x7fffffff, 0x8, 0x4, 0xffff, 0x7, 0x5f, 0x3, 0xb, 0x94, 0x6, 0x5, 0x80000000, 0x2, 0x2, 0x2, 0x4, 0x9, 0x1ff, 0x1, 0x5, 0x8, 0x3, 0x2, 0xc, 0x2, 0xfff, 0x5, 0x1, 0x0, 0x17, 0x62b1, 0x7f, 0x22, 0x5, 0x9, 0x7fffffff, 0x8, 0x4, 0x9, 0xfffffffa, 0x0, 0x0, 0x3, 0x71, 0x3ff, 0x11, 0x33, 0xffff2c46, 0x2, 0x401, 0x2, 0x58, 0x10001, 0x4, 0x6, 0x100, 0x497, 0x1, 0x2a0f, 0x10000, 0x9c1, 0x8, 0xb, 0x7, 0x0, 0x4, 0x32, 0x3, 0x9f, 0x5, 0x40, 0xffff, 0x7, 0x6, 0xfffffffd, 0x10001]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0xb, 0x1, 0xffc00000, 0x0, 0x1, {0x3, 0x1, 0x3961, 0x2, 0x9, 0x5}, {0x4, 0x0, 0x1ff, 0x5, 0x8, 0x5}, 0x0, 0x3, 0xffff2db6}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xfffffffd, 0x5, 0xc8, 0x7, 0x6, 0xc, 0x4, 0x1, 0x7, 0x8, 0xfffffff9, 0xff, 0x33, 0x9, 0xe, 0x3, 0x2, 0x5, 0x0, 0x1, 0x1, 0x85, 0x2ffc, 0x0, 0x100, 0x7, 0x7, 0x8, 0x4, 0x401, 0xfffffe44, 0x5, 0x9, 0x6, 0xc2b1, 0x6, 0x415, 0xa, 0x5fb, 0x0, 0x1, 0x17a, 0x8, 0x22, 0x4, 0x4, 0x245, 0x3897, 0x5, 0x5, 0x6, 0x2, 0x7ff, 0x9, 0x0, 0xd, 0x4, 0x6, 0x1, 0xfff, 0x9, 0x4, 0x40, 0x4f2, 0x9ef, 0xc, 0x8, 0x9, 0x1000, 0xffff6e3b, 0x1ff, 0x20000, 0x101, 0x7, 0x4, 0x401, 0x56, 0xfffffff1, 0x40, 0x3, 0xfffffeff, 0xd, 0x4, 0xa, 0x3, 0x9, 0x4, 0x8, 0xa8, 0x1000, 0x22, 0x8, 0x4, 0x0, 0x6, 0x800, 0x6, 0x4, 0x6, 0xf0, 0x1, 0x5, 0x1, 0x7ff, 0x2, 0x9d7, 0x1, 0x9, 0xe, 0x621, 0x7, 0x6, 0x6, 0x9, 0x8000, 0x0, 0x37, 0x4, 0x31e9, 0x2, 0x6, 0x4, 0x3, 0x0, 0x6, 0x3ff, 0x5, 0x1, 0xffffffff, 0x406d, 0x400, 0x7ff, 0x9, 0xd, 0x18e44a46, 0x501, 0xffffffff, 0x17, 0x2, 0xffff, 0xbb72, 0x2b, 0x80000001, 0x8, 0x4, 0x6, 0x8, 0x400, 0x1, 0xffffffff, 0x4, 0x1b, 0x8, 0x7fff, 0x200, 0x3, 0x3, 0x2, 0x2, 0x7ff, 0x5, 0xfffffff8, 0x2cf, 0x0, 0x0, 0x7, 0x0, 0x2, 0x10, 0xd92e, 0x7, 0x56, 0x9, 0x7, 0xffffff00, 0x4, 0x7ff, 0x4, 0x4, 0x4, 0x7, 0x4, 0x400, 0x9, 0xffff2b7a, 0x0, 0x6, 0x8, 0xfffffff3, 0xfff, 0x5, 0x1, 0x2, 0x4, 0x4, 0x5, 0x1, 0x8, 0x1ff, 0x5, 0x6, 0x48, 0x7fff, 0x0, 0x60dfaf2f, 0x5, 0x1, 0x0, 0x10, 0x5, 0x2, 0x8, 0xffff0000, 0xa, 0x4, 0x4, 0x100, 0xe, 0x8, 0xe, 0x5, 0xc, 0xba, 0x3, 0xffff0fee, 0x6, 0xfffffffe, 0x0, 0xfff80000, 0x0, 0xde, 0x0, 0x3, 0x9, 0x4, 0x1, 0xb, 0x5, 0x1, 0x1, 0x81, 0x6, 0x8, 0x3, 0x3f8000, 0x5, 0xfffeffff, 0x5f7, 0x82, 0x1, 0x6, 0x2, 0x0, 0x9, 0xff]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x200}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe, 0x5, 0x400, 0x4, 0x3, 0x80000001, 0x5, 0xb58, 0xd, 0x7f, 0x3ff, 0x81, 0x0, 0x6, 0x7, 0x0, 0x3, 0x9, 0x9, 0x9, 0x2b94, 0x4, 0x6, 0x5, 0x5, 0x6, 0x4, 0x6, 0xdb55, 0xea9, 0x9, 0x0, 0xff, 0x6, 0x7ff, 0x0, 0xa6d, 0x7ff, 0x1, 0x4, 0x5, 0x8000, 0x20000000, 0x4, 0x8, 0xe, 0x7, 0x2, 0x0, 0x2, 0xa, 0x4, 0x81, 0x5, 0x9, 0x6, 0x1, 0xa000, 0x8000, 0xffff, 0x6, 0x400, 0x800, 0x0, 0x2, 0x9, 0x7fffffff, 0x9, 0x1, 0x2, 0x6, 0xd0a00000, 0x7, 0xe, 0x6, 0xfffffeff, 0x6, 0x3, 0x0, 0x1ff, 0x7, 0x100, 0x8001, 0x13, 0xe7e, 0xc, 0x9, 0xcf, 0x8000, 0x5, 0x6, 0x1, 0x0, 0x7, 0x3, 0x6, 0x6, 0x81, 0x5, 0x0, 0x6d, 0x0, 0x9, 0x9, 0x2, 0x3, 0x7, 0xb, 0x8, 0x2, 0x2, 0x0, 0x3ed, 0x80000001, 0x7fff, 0x1, 0x3, 0xf8, 0x80000000, 0x3, 0x1, 0x4, 0x7fffffff, 0x143, 0x8, 0x3, 0x23, 0xab, 0x4, 0xad8d, 0x2, 0xa499, 0x5, 0x1, 0xfff, 0x6, 0x4, 0x8, 0xfffffffb, 0x2, 0x80e, 0x168, 0x8, 0x8, 0x9, 0x7ff, 0x400, 0x8, 0xff, 0x100, 0x8, 0x5, 0x7, 0xe, 0xcc, 0x200, 0x2, 0x7, 0x3, 0x10000, 0x3, 0x8, 0xfffffc00, 0x4, 0xe400, 0x9, 0x4, 0xe4, 0x6, 0x9, 0x7, 0x1ff, 0x6, 0x6, 0x10, 0x7fffffff, 0x1, 0xa2b0, 0x5, 0x2, 0xb408, 0x7, 0xc, 0x573, 0x3, 0x3, 0x0, 0x1800000, 0x6, 0xe, 0x7, 0x0, 0x50, 0x2, 0xf, 0x0, 0x3, 0x4, 0x5, 0x9, 0xfff, 0x4, 0x35a, 0x11f0, 0x0, 0x400, 0x5, 0x2, 0x756d, 0xffff, 0x749f, 0xe, 0x7, 0x0, 0xe1db, 0x9, 0x1, 0x1, 0x80, 0xffff696f, 0x401, 0xfffffff8, 0x0, 0x7, 0x6, 0xc0, 0x7, 0x5, 0xfffeffff, 0x6, 0x2, 0x6, 0xfffffffa, 0x3, 0x80000001, 0x9, 0x0, 0xb, 0x364adc5f, 0x0, 0x4, 0x10b2, 0x5, 0xfffffe01, 0x2, 0xd131, 0x1, 0x9, 0x1ff, 0x5, 0xcfd6, 0xffffffff, 0x7fff, 0x3, 0x8, 0x24]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfff}]]}, {0xbe, 0x6, "0d24f31f47b7223a7ab9453a64f896c01b5896beaed8c10415e35abb72f5ed7bde2940f19a0702082ece95dc2c416dd09d24a70972a9af1270ced0b4a5b32423fe42790b646977cfc6f8205e0a0071503bde6e4c167196a633135ef0f04305e75e4b1ef666714a8c1e2be50ebd9bfc09e06fa305f8def209a02453b63b9e4b757ff628a44e615034ce472055263c47d701952913e04aa937c13a83409205b68cfc88f8b6baa8839a126d58cd941fa6caa95527177b25dfd48159"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_gact={0x100, 0x17, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x7, 0x4, 0x2, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x180, 0x8, 0x0, 0x200, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x80, 0x0, 0x3, 0x401, 0x6}}]}, {0x8b, 0x6, "3565d40668fb83df9a7f3290bf8c795c05580ef982c72c2c228c95068928e8e9bc9d0c7234602b409687d030a536abd7ac1638ff9718cc3fa8b0bc40629cc56fdfed5a728f1b37be27897269c9953309484a339327dde8552c824c3c9429617eb5c7602b1e58875e38f92cdd8a17517b3a391dc4a30cd81fabfda5dce934f9b862cac98878675b"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mirred={0x9c, 0x14, 0x0, 0x0, {{0xb}, {0x4}, {0x6e, 0x6, "093a8232fc268325832f6bb0aa18db04e0e704e77990b634cc1be8a47bd2eaadd9c5ceb2843f5465c861abd290c8d9b7345b4aba74f63ba8da80ed80f4668d7ef1ddc821917c0d6bda712543c3b7d66c60ccc6de77c519cc6fcacc9c2817dc75582d0a52c3a25cb6c1ca"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0xc8, 0x1b, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x9}]}, {0x8b, 0x6, "21478c64c384fb272839f6023ef20bcf93b876cef175bc10188bcf48504c072d1d0241d8b8f105cf5068f0e65d5600683282a7e099a2f02b1add2ab3147ec60991a113537d6f21fee0ddc94ad6b7608fff428d6a117ea0bf6062f98c4f88606249a1e47decc7625e21e6d11c454a0eb9872531eee54c8eddd747f111c0e94e9f6396368015e21c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x2d188375}, @TCA_CHAIN={0x8, 0xb, 0x61a}, @TCA_RATE={0x6, 0x5, {0xf, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0xebb6}]}, 0x179c}}, 0x44080) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x9, 0x2}, {0xe}, {0x4, 0xa}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}}, 0x4000) io_uring_enter(r4, 0x3516, 0x3e44, 0x8, 0x0, 0x0) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r10, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0xc990, 0x3, 0x0, 0x0, 0xc07}}, 0x11c) readv(r10, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_DESTROY(r10, &(0x7f0000000200), 0x4) 1.772672323s ago: executing program 3 (id=1575): r0 = socket$inet6(0xa, 0x3, 0x7) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x8001, @mcast1, 0xc}, 0x1c) (fail_nth: 6) 1.629419448s ago: executing program 3 (id=1577): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = socket$packet(0x11, 0xa, 0x300) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000280)={@private1}, &(0x7f0000000380)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x1e, &(0x7f00000004c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xdf, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xff, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = getpid() clock_adjtime(0xffffffd3, &(0x7f0000000340)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) openat$cdrom(0xffffff9c, &(0x7f00000000c0), 0x1000, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r5 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) openat(r5, &(0x7f0000000340)='./file0\x00', 0x10000, 0x2) syz_open_dev$char_usb(0xc, 0xb4, 0x49fdf2b8) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaffffffff0800450000300000000000a799550c0bd7c3021414aa0300907803000000450000000000000000330000000000000000000005473d7877838e7f7a41c2f50bffd8dcc4162987dd5c36a18a00000000"], 0x0) 1.391891642s ago: executing program 0 (id=1579): r0 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port0\x00', 0x3eb, 0x21e2f, 0x7f, 0x1681bcd7, 0x0, 0x0, 0x400, 0x0, 0xb}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="bda033176eb146b36ef41f221a4e7ce4a02598d750606488520915c6806affc0a913781c7211ce1fcd59a12b5d5afdaf9d723f092ce9d1eed16e208f2e79831ca049e8979ad94621175c2c48c10e33b29f2def51498743b057efc21efe4be4d9f02e9d236f27190c29c5da0f3799452f5e3640340502fde4ae8c56b303e1b79b3d1842bf6277771bef544c745e7a80c9e7efdd1c619f69b9d01839aa326776d335689e4db7cb7e32fad8f4c40e943b43eb4ea173d720bf5998149625a731643636c8ddbe61e1d7d4736f8414a84acc40557012c82697d8a59c873424aefb3c7ff0dba302efaaf887a477b1ab7ea6c1def9db3514e444c1ef36c6cf42cde90d4bbb2e923a5d16a1bb191ad91cab867cd55037d507a12803f3df1b81f1857fad085dbc5c46aac14230d7a4f8b36d6bc63b4a16cd309b7697b421a662b83001b5ce5ab3ff80800243107df7aa6cae9a5db6a8f2a53ef7d6c6aeac76b83a15466c74a9cdbcde8505e3d14c0c3a47a36bf464168202dc88e25f4c1da57faf0eaa7ff16bdd751c2ae5778e169c8ffba57c9a20e24ad51e6e8e02b721e8ca94f131cc98e03b34b615a1db4080362de4ef215d5a0541aeb0c742a2636ac5af8538ceb3585ef9dca8037df55baa072096073b005b53eff0b899de59bc2b5d687d109520571eeacb30124c4012fe6cb9e3bf451be3d219206ddc35099101533cff5aee6c4783e00e6dd391f664052a6c66c62f62a49fde8fbe336543bf99b55e53b801e54c1d0a292da83db26a8a870ac1d8751c4bc0d495277295cd3a17f9e9a25d70214a17b981b62d5c75356ed025df3557a8b59648edd9d1dbdf169d91f9d85cfac11a57db0a14f03e8934a2cc98d389912a0d9942a40c3ee98d35da61d3bab1a32c9d788e9f74ee57012ca5bfd0dc090b591c64aae6a205fbd349fc372bbd7429983a69cae26ff8b5b019144d318ba225e46bc6cf8d7d3e5952333042542b2fd4fb4d88a3651dd8e14ecc2845d4e71f7dfd128e9e2ee2ab0062a3e701bb2477bfd73d7396ae522f11fa481078d1c7f7905e0846fb072dcf7c06102b3816ec4a3518514c7166d7385b680469f5184a93953258952554e68d93ea8f789c4f13982b65996d7d9cf19f0b39b72e1dc9079d84413bbc30d24fc481e24ef1beacb8bc15f50c2663d684d16a1c71b2c8a568481f4f1b254ccd66fbef4cacfc3e13f2c943a264e429824bef7297f93076aea55ed9cf12512ce3ac3df331695024bd1e53369a87caf6894fce811a64dad315402678de76", 0x390}, {&(0x7f0000000300)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x4048884) openat$sequencer2(0xffffff9c, &(0x7f0000000280), 0x4011, 0x0) 1.331324137s ago: executing program 0 (id=1580): socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610408000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x0) 1.280095275s ago: executing program 0 (id=1581): socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, 0x0, 0x0) r4 = open(0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000001c0)={r1}) sendmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 1.05269776s ago: executing program 2 (id=1582): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001640), 0x0, 0x80801) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000200)=""/76) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000c80)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x0, 0x610c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}]}}}]}, 0x38}}, 0x0) 1.052566462s ago: executing program 2 (id=1583): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00', 0x8}, 0x5, 0x0, 0x1, r1, 0x0, 0x8, 'syz1\x00', 0x0}) (fail_nth: 6) 1.002072461s ago: executing program 2 (id=1584): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = socket$packet(0x11, 0xa, 0x300) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000280)={@private1}, &(0x7f0000000380)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x1e, &(0x7f00000004c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xdf, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xff, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = getpid() clock_adjtime(0xffffffd3, &(0x7f0000000340)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) openat$cdrom(0xffffff9c, &(0x7f00000000c0), 0x1000, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r5 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, 0x0) openat(r5, &(0x7f0000000340)='./file0\x00', 0x10000, 0x2) syz_open_dev$char_usb(0xc, 0xb4, 0x49fdf2b8) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaffffffff0800450000300000000000a799550c0bd7c3021414aa0300907803000000450000000000000000330000000000000000000005473d7877838e7f7a41c2f50bffd8dcc4162987dd5c36a18a00000000"], 0x0) 782.476421ms ago: executing program 1 (id=1585): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = socket$packet(0x11, 0xa, 0x300) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000280)={@private1}, &(0x7f0000000380)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x1e, &(0x7f00000004c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xdf, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xff, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = getpid() clock_adjtime(0xffffffd3, &(0x7f0000000340)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) openat$cdrom(0xffffff9c, &(0x7f00000000c0), 0x1000, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r5 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, 0x0) openat(r5, &(0x7f0000000340)='./file0\x00', 0x10000, 0x2) syz_open_dev$char_usb(0xc, 0xb4, 0x49fdf2b8) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaffffffff0800450000300000000000a799550c0bd7c3021414aa0300907803000000450000000000000000330000000000000000000005473d7877838e7f7a41c2f50bffd8dcc4162987dd5c36a18a00000000"], 0x0) 306.71626ms ago: executing program 0 (id=1586): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xc00, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 306.464116ms ago: executing program 0 (id=1587): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000000)=0x2) ioctl$PIO_SCRNMAP(r0, 0x4b3c, 0x0) 300.726288ms ago: executing program 3 (id=1588): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040), 0x4) recvmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000180)=""/116, 0x74}, {&(0x7f00000003c0)=""/193, 0xc1}, {&(0x7f00000002c0)=""/83, 0x53}, {&(0x7f00000004c0)=""/137, 0x89}, {&(0x7f0000000580)=""/114, 0x72}, {&(0x7f0000000600)=""/212, 0xd4}, {&(0x7f0000000700)=""/196, 0xc4}, {&(0x7f0000000800)=""/248, 0xf8}, {&(0x7f0000000900)=""/4096, 0x1000}], 0x9, &(0x7f0000001980)=""/117, 0x75}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r2, 0x80000000) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x37, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x3}, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0xfff9}}}}}}, 0x0) 278.549592ms ago: executing program 0 (id=1589): socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd74) r2 = getpid() sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1, r2}}, 0x3c) clock_gettime(0x4, &(0x7f0000000180)) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000080)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioperm(0x0, 0x5, 0x6) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r1, 0xc0fc4111, &(0x7f0000000580)={0x7f5b, [0xad4, 0x9, 0xffff102b], [{0x1, 0x9, 0x0, 0x1}, {0x2, 0x8, 0x1, 0x0, 0x1, 0x1}, {0xad, 0x7, 0x0, 0x1, 0x0, 0x1}, {0x80000001, 0x2, 0x1, 0x1, 0x1}, {0x0, 0xa}, {0xfff, 0xbbe3, 0x0, 0x1, 0x0, 0x1}, {0x4c, 0x6, 0x0, 0x1, 0x1, 0x1}, {0x5f, 0x200, 0x0, 0x0, 0x1}, {0x5, 0x1, 0x0, 0x1, 0x1}, {0x0, 0xbf08, 0x1}, {0xdc5d, 0xffffffff, 0x1, 0x0, 0x1}, {0x101, 0xa325, 0x1}], 0x9}) fanotify_init(0x0, 0x400) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x24, 0x32, 0x400, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040810) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000304000000000000000000000400", @ANYRES32, @ANYBLOB="60bc010004a701003c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) creat(&(0x7f0000000000)='./file0\x00', 0x62) 171.55122ms ago: executing program 3 (id=1590): setuid(0xee00) r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x4000000000000103, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x806856e7, 0x0) clock_adjtime(0x2, &(0x7f0000000000)={0x7fffffff, 0x80, 0x7, 0x101, 0x6, 0x4cb, 0x6, 0xa488, 0x0, 0x1, 0x40a, 0x80, 0x32, 0x17aa, 0xfff, 0x8, 0x7fffffff, 0x1, 0x2, 0x101, 0xfffffffc, 0x6, 0x7, 0xdde2, 0x2, 0x7}) socket$inet_udp(0x2, 0x2, 0x0) 171.394086ms ago: executing program 3 (id=1591): syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x67b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f006, 0x6}) socket$inet6(0xa, 0x80000, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x8, 0x40) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x67b, 0x2) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f006, 0x6}) (async) socket$inet6(0xa, 0x80000, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000080), 0x8, 0x40) (async) 288.207µs ago: executing program 2 (id=1592): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = socket$packet(0x11, 0xa, 0x300) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000280)={@private1}, &(0x7f0000000380)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x1e, &(0x7f00000004c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xdf, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xff, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = getpid() clock_adjtime(0xffffffd3, &(0x7f0000000340)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r5 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) openat(r5, &(0x7f0000000340)='./file0\x00', 0x10000, 0x2) syz_open_dev$char_usb(0xc, 0xb4, 0x49fdf2b8) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaffffffff0800450000300000000000a799550c0bd7c3021414aa0300907803000000450000000000000000330000000000000000000005473d7877838e7f7a41c2f50bffd8dcc4162987dd5c36a18a00000000"], 0x0) 0s ago: executing program 3 (id=1593): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0xf, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a40800", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) gettid() mbind(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2, &(0x7f0000000000)=0x5, 0x4, 0x0) set_mempolicy_home_node(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x0, 0x0) mlock(&(0x7f0000ff5000/0x4000)=nil, 0x4000) open(&(0x7f0000000100)='./file0\x00', 0x103bff, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000900), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) keyctl$assume_authority(0x10, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fdatasync(0xffffffffffffffff) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x80700, 0x80) io_uring_enter(0xffffffffffffffff, 0x1e86, 0xd770, 0x61, &(0x7f0000000080)={[0x4, 0x101]}, 0x8) connect$unix(r2, 0x0, 0x0) kernel console output (not intermixed with test programs): 243][ T9822] ? __alloc_skb+0x200/0x380 [ 227.242257][ T9822] ? __pfx__copy_from_iter+0x10/0x10 [ 227.242270][ T9822] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 227.242289][ T9822] netlink_sendmsg+0x829/0xdd0 [ 227.242305][ T9822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.242320][ T9822] ? __import_iovec+0x1c8/0x660 [ 227.242336][ T9822] ____sys_sendmsg+0xa95/0xc70 [ 227.242344][ T9822] ? gfs2_rename+0xfb4/0x12c0 [ 227.242358][ T9822] ? __pfx_____sys_sendmsg+0x10/0x10 [ 227.242367][ T9822] ? get_compat_msghdr+0x11a/0x170 [ 227.242385][ T9822] ___sys_sendmsg+0x134/0x1d0 [ 227.242399][ T9822] ? __pfx____sys_sendmsg+0x10/0x10 [ 227.242428][ T9822] __sys_sendmsg+0x16d/0x220 [ 227.242441][ T9822] ? __pfx___sys_sendmsg+0x10/0x10 [ 227.242459][ T9822] ? rcu_is_watching+0x12/0xc0 [ 227.242471][ T9822] __do_fast_syscall_32+0x73/0x120 [ 227.242487][ T9822] do_fast_syscall_32+0x32/0x80 [ 227.242501][ T9822] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 227.242513][ T9822] RIP: 0023:0xf711e579 [ 227.242521][ T9822] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 227.242531][ T9822] RSP: 002b:00000000f510e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 227.242540][ T9822] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000000 [ 227.242546][ T9822] RDX: 0000000004000084 RSI: 0000000000000000 RDI: 0000000000000000 [ 227.242552][ T9822] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 227.242557][ T9822] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 227.242563][ T9822] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 227.242575][ T9822] [ 227.297347][ T9823] netlink: 'syz.2.1025': attribute type 16 has an invalid length. [ 227.312033][ T9823] netlink: 'syz.2.1025': attribute type 17 has an invalid length. [ 227.331012][ T9823] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 227.919456][ T9839] FAULT_INJECTION: forcing a failure. [ 227.919456][ T9839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.021476][ T9839] CPU: 3 UID: 0 PID: 9839 Comm: syz.2.1028 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 228.021492][ T9839] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 228.021498][ T9839] Call Trace: [ 228.021502][ T9839] [ 228.021506][ T9839] dump_stack_lvl+0x16c/0x1f0 [ 228.021537][ T9839] should_fail_ex+0x512/0x640 [ 228.021552][ T9839] _copy_from_iter+0x2a4/0x15b0 [ 228.021567][ T9839] ? __alloc_skb+0x200/0x380 [ 228.021580][ T9839] ? __pfx__copy_from_iter+0x10/0x10 [ 228.021598][ T9839] netlink_sendmsg+0x829/0xdd0 [ 228.021615][ T9839] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.021630][ T9839] ? __import_iovec+0x1c8/0x660 [ 228.021645][ T9839] ____sys_sendmsg+0xa95/0xc70 [ 228.021656][ T9839] ? __pfx_____sys_sendmsg+0x10/0x10 [ 228.021665][ T9839] ? get_compat_msghdr+0x11a/0x170 [ 228.021683][ T9839] ___sys_sendmsg+0x134/0x1d0 [ 228.021696][ T9839] ? __pfx____sys_sendmsg+0x10/0x10 [ 228.021725][ T9839] __sys_sendmsg+0x16d/0x220 [ 228.021738][ T9839] ? __pfx___sys_sendmsg+0x10/0x10 [ 228.021756][ T9839] ? rcu_is_watching+0x12/0xc0 [ 228.021772][ T9839] __do_fast_syscall_32+0x73/0x120 [ 228.021787][ T9839] do_fast_syscall_32+0x32/0x80 [ 228.021801][ T9839] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 228.021814][ T9839] RIP: 0023:0xf711e579 [ 228.021822][ T9839] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 228.021831][ T9839] RSP: 002b:00000000f50cc55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 228.021842][ T9839] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000240 [ 228.021848][ T9839] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 228.021854][ T9839] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 228.021859][ T9839] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 228.021864][ T9839] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 228.021877][ T9839] [ 228.131636][ T40] audit: type=1804 audit(1745055880.721:185): pid=9846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1031" name="/newroot/269/file0" dev="tmpfs" ino=1456 res=1 errno=0 [ 228.575447][ T9852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1032'. [ 228.824031][ T9856] netlink: 'syz.2.1034': attribute type 16 has an invalid length. [ 228.826627][ T9856] netlink: 'syz.2.1034': attribute type 17 has an invalid length. [ 228.831982][ T9856] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 228.989026][ T9863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1035'. [ 229.521334][ T9873] fuse: Bad value for 'rootmode' [ 230.178362][ T9887] netlink: 'syz.3.1042': attribute type 16 has an invalid length. [ 230.180864][ T9887] netlink: 'syz.3.1042': attribute type 17 has an invalid length. [ 230.189669][ T9887] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 230.227824][ T9894] FAULT_INJECTION: forcing a failure. [ 230.227824][ T9894] name failslab, interval 1, probability 0, space 0, times 0 [ 230.233181][ T9894] CPU: 1 UID: 0 PID: 9894 Comm: syz.3.1044 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 230.233196][ T9894] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 230.233202][ T9894] Call Trace: [ 230.233207][ T9894] [ 230.233211][ T9894] dump_stack_lvl+0x16c/0x1f0 [ 230.233229][ T9894] should_fail_ex+0x512/0x640 [ 230.233241][ T9894] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 230.233253][ T9894] should_failslab+0xc2/0x120 [ 230.233267][ T9894] __kmalloc_cache_noprof+0x6a/0x3e0 [ 230.233276][ T9894] ? __might_fault+0xe3/0x190 [ 230.233288][ T9894] ? __might_fault+0x13b/0x190 [ 230.233298][ T9894] ? proc_do_submiturb+0x1c68/0x3b20 [ 230.233315][ T9894] proc_do_submiturb+0x1c68/0x3b20 [ 230.233331][ T9894] ? get_urb32+0x2f7/0x3d0 [ 230.233346][ T9894] ? find_held_lock+0x2b/0x80 [ 230.233359][ T9894] usbdev_ioctl+0xad1/0x4070 [ 230.233375][ T9894] ? __pfx_usbdev_ioctl+0x10/0x10 [ 230.233388][ T9894] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 230.233404][ T9894] ? do_vfs_ioctl+0x512/0x1990 [ 230.233418][ T9894] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 230.233441][ T9894] ? find_held_lock+0x2b/0x80 [ 230.233450][ T9894] ? hook_file_ioctl_common+0x145/0x410 [ 230.233466][ T9894] ? __fget_files+0x20e/0x3c0 [ 230.233474][ T9894] ? __fput_deferred+0x370/0x370 [ 230.233488][ T9894] ? __pfx_usbdev_ioctl+0x10/0x10 [ 230.233502][ T9894] compat_ptr_ioctl+0x6b/0xa0 [ 230.233515][ T9894] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 230.233528][ T9894] __ia32_compat_sys_ioctl+0x24c/0x360 [ 230.233544][ T9894] __do_fast_syscall_32+0x73/0x120 [ 230.233560][ T9894] do_fast_syscall_32+0x32/0x80 [ 230.233574][ T9894] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 230.233586][ T9894] RIP: 0023:0xf7f52579 [ 230.233594][ T9894] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 230.233604][ T9894] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 230.233614][ T9894] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000802c550a [ 230.233620][ T9894] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 230.233626][ T9894] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 230.233631][ T9894] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 230.233637][ T9894] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 230.233649][ T9894] [ 230.285030][ T40] audit: type=1804 audit(1745055882.881:186): pid=9895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1045" name="/newroot/272/file0" dev="tmpfs" ino=1472 res=1 errno=0 [ 230.325292][ T9897] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 230.327476][ T9897] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 230.346603][ T9897] vhci_hcd vhci_hcd.0: Device attached [ 230.534341][ T9898] vhci_hcd: connection closed [ 230.537115][ T7662] vhci_hcd: stop threads [ 230.540418][ T7662] vhci_hcd: release socket [ 230.554328][ T7662] vhci_hcd: disconnect device [ 230.648358][ T9904] fuse: Bad value for 'rootmode' [ 230.688431][ T9908] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 232.519538][ T9943] fuse: Bad value for 'rootmode' [ 232.600676][ T40] audit: type=1804 audit(1745055885.191:187): pid=9949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1059" name="/newroot/271/file0" dev="tmpfs" ino=1443 res=1 errno=0 [ 233.130949][ T9957] FAULT_INJECTION: forcing a failure. [ 233.130949][ T9957] name failslab, interval 1, probability 0, space 0, times 0 [ 233.135048][ T9957] CPU: 2 UID: 0 PID: 9957 Comm: syz.3.1060 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 233.135062][ T9957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 233.135079][ T9957] Call Trace: [ 233.135083][ T9957] [ 233.135087][ T9957] dump_stack_lvl+0x16c/0x1f0 [ 233.135105][ T9957] should_fail_ex+0x512/0x640 [ 233.135117][ T9957] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 233.135130][ T9957] should_failslab+0xc2/0x120 [ 233.135144][ T9957] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 233.135155][ T9957] ? do_raw_spin_lock+0x12c/0x2b0 [ 233.135164][ T9957] ? getname_flags.part.0+0x4c/0x550 [ 233.135180][ T9957] getname_flags.part.0+0x4c/0x550 [ 233.135194][ T9957] getname_flags+0x93/0xf0 [ 233.135204][ T9957] user_path_at+0x24/0x60 [ 233.135214][ T9957] __ia32_compat_sys_truncate+0xf6/0x1e0 [ 233.135226][ T9957] ? __pfx___ia32_compat_sys_truncate+0x10/0x10 [ 233.135239][ T9957] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 233.135256][ T9957] do_int80_emulation+0x104/0x200 [ 233.135272][ T9957] asm_int80_emulation+0x1a/0x20 [ 233.135281][ T9957] RIP: 0023:0xf7f52579 [ 233.135289][ T9957] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 233.135299][ T9957] RSP: 002b:00000000f505555c EFLAGS: 00000296 ORIG_RAX: 000000000000005c [ 233.135308][ T9957] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000000000000 [ 233.135314][ T9957] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 233.135320][ T9957] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 233.135325][ T9957] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 233.135331][ T9957] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 233.135343][ T9957] [ 234.183200][ T9987] fuse: Bad value for 'rootmode' [ 234.813488][ T9990] lo speed is unknown, defaulting to 1000 [ 234.837700][ T9990] lo speed is unknown, defaulting to 1000 [ 235.155181][T10005] FAULT_INJECTION: forcing a failure. [ 235.155181][T10005] name failslab, interval 1, probability 0, space 0, times 0 [ 235.191852][T10005] CPU: 3 UID: 0 PID: 10005 Comm: syz.2.1072 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 235.191868][T10005] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 235.191874][T10005] Call Trace: [ 235.191878][T10005] [ 235.191883][T10005] dump_stack_lvl+0x16c/0x1f0 [ 235.191901][T10005] should_fail_ex+0x512/0x640 [ 235.191914][T10005] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 235.191928][T10005] should_failslab+0xc2/0x120 [ 235.191941][T10005] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 235.191953][T10005] ? __alloc_skb+0x2b2/0x380 [ 235.191966][T10005] ? bpf_lsm_capable+0x9/0x10 [ 235.191978][T10005] __alloc_skb+0x2b2/0x380 [ 235.191990][T10005] ? __pfx___alloc_skb+0x10/0x10 [ 235.192002][T10005] ? genl_rcv_msg+0x4a0/0x800 [ 235.192011][T10005] ? genl_rcv_msg+0x4bb/0x800 [ 235.192023][T10005] netlink_ack+0x15d/0xb80 [ 235.192037][T10005] ? __lock_acquire+0xaa4/0x1ba0 [ 235.192053][T10005] netlink_rcv_skb+0x347/0x440 [ 235.192067][T10005] ? __pfx_genl_rcv_msg+0x10/0x10 [ 235.192077][T10005] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 235.192097][T10005] ? __pfx_down_read+0x10/0x10 [ 235.192106][T10005] ? netlink_deliver_tap+0x1ae/0xd30 [ 235.192121][T10005] genl_rcv+0x28/0x40 [ 235.192135][T10005] netlink_unicast+0x53a/0x7f0 [ 235.192163][T10005] ? __pfx_netlink_unicast+0x10/0x10 [ 235.192181][T10005] netlink_sendmsg+0x8d1/0xdd0 [ 235.192197][T10005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.192212][T10005] ? __import_iovec+0x1c8/0x660 [ 235.192227][T10005] ____sys_sendmsg+0xa95/0xc70 [ 235.192238][T10005] ? __pfx_____sys_sendmsg+0x10/0x10 [ 235.192247][T10005] ? get_compat_msghdr+0x11a/0x170 [ 235.192266][T10005] ___sys_sendmsg+0x134/0x1d0 [ 235.192279][T10005] ? __pfx____sys_sendmsg+0x10/0x10 [ 235.192309][T10005] __sys_sendmsg+0x16d/0x220 [ 235.192322][T10005] ? __pfx___sys_sendmsg+0x10/0x10 [ 235.192338][T10005] ? rcu_is_watching+0x12/0xc0 [ 235.192350][T10005] ? rcu_is_watching+0x12/0xc0 [ 235.192361][T10005] __do_fast_syscall_32+0x73/0x120 [ 235.192376][T10005] do_fast_syscall_32+0x32/0x80 [ 235.192390][T10005] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 235.192403][T10005] RIP: 0023:0xf711e579 [ 235.192411][T10005] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 235.192421][T10005] RSP: 002b:00000000f510e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 235.192431][T10005] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 235.192437][T10005] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 235.192443][T10005] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 235.192448][T10005] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 235.192454][T10005] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 235.192466][T10005] [ 235.322570][ T40] audit: type=1804 audit(1745055887.911:188): pid=10009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1074" name="/newroot/278/file0" dev="tmpfs" ino=1504 res=1 errno=0 [ 235.474195][T10015] lo speed is unknown, defaulting to 1000 [ 235.477738][T10015] lo speed is unknown, defaulting to 1000 [ 235.647951][T10015] FAULT_INJECTION: forcing a failure. [ 235.647951][T10015] name failslab, interval 1, probability 0, space 0, times 0 [ 235.660908][T10015] CPU: 0 UID: 0 PID: 10015 Comm: syz.3.1076 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 235.660923][T10015] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 235.660929][T10015] Call Trace: [ 235.660933][T10015] [ 235.660937][T10015] dump_stack_lvl+0x16c/0x1f0 [ 235.660955][T10015] should_fail_ex+0x512/0x640 [ 235.660967][T10015] ? fs_reclaim_acquire+0xae/0x150 [ 235.660984][T10015] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 235.660998][T10015] should_failslab+0xc2/0x120 [ 235.661011][T10015] __kmalloc_noprof+0xd2/0x510 [ 235.661026][T10015] tomoyo_realpath_from_path+0xc2/0x6e0 [ 235.661042][T10015] ? tomoyo_profile+0x47/0x60 [ 235.661052][T10015] tomoyo_path_perm+0x274/0x460 [ 235.661063][T10015] ? tomoyo_path_perm+0x260/0x460 [ 235.661075][T10015] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 235.661086][T10015] ? kasan_quarantine_put+0x10a/0x240 [ 235.661102][T10015] ? current_check_access_path+0x33c/0x460 [ 235.661122][T10015] ? __pfx_autoremove_wake_function+0x10/0x10 [ 235.661137][T10015] ? mnt_get_write_access+0x20c/0x300 [ 235.661151][T10015] security_path_truncate+0x138/0x290 [ 235.661163][T10015] vfs_truncate+0x58e/0x6e0 [ 235.661175][T10015] ? __pfx_vfs_truncate+0x10/0x10 [ 235.661187][T10015] ? putname+0x154/0x1a0 [ 235.661200][T10015] __ia32_compat_sys_truncate+0x171/0x1e0 [ 235.661213][T10015] ? __pfx___ia32_compat_sys_truncate+0x10/0x10 [ 235.661224][T10015] ? rcu_is_watching+0x12/0xc0 [ 235.661235][T10015] ? rcu_is_watching+0x12/0xc0 [ 235.661246][T10015] __do_fast_syscall_32+0x73/0x120 [ 235.661262][T10015] do_fast_syscall_32+0x32/0x80 [ 235.661276][T10015] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 235.661288][T10015] RIP: 0023:0xf7f52579 [ 235.661296][T10015] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 235.661306][T10015] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 000000000000005c [ 235.661315][T10015] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000000000000 [ 235.661321][T10015] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 235.661327][T10015] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 235.661332][T10015] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 235.661338][T10015] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 235.661350][T10015] [ 235.661354][T10015] ERROR: Out of memory at tomoyo_realpath_from_path. [ 236.377709][T10040] fuse: Bad value for 'rootmode' [ 236.666868][T10045] FAULT_INJECTION: forcing a failure. [ 236.666868][T10045] name failslab, interval 1, probability 0, space 0, times 0 [ 236.672422][T10045] CPU: 0 UID: 0 PID: 10045 Comm: syz.1.1083 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 236.672444][T10045] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 236.672454][T10045] Call Trace: [ 236.672460][T10045] [ 236.672467][T10045] dump_stack_lvl+0x16c/0x1f0 [ 236.672493][T10045] should_fail_ex+0x512/0x640 [ 236.672517][T10045] should_failslab+0xc2/0x120 [ 236.672538][T10045] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 236.672558][T10045] ? skb_clone+0x190/0x3f0 [ 236.672584][T10045] skb_clone+0x190/0x3f0 [ 236.672606][T10045] netlink_deliver_tap+0xabd/0xd30 [ 236.672634][T10045] netlink_dump+0x638/0xd00 [ 236.672659][T10045] ? __pfx_netlink_dump+0x10/0x10 [ 236.672692][T10045] ? rcu_is_watching+0x12/0xc0 [ 236.672708][T10045] ? trace_contention_end+0xdd/0x130 [ 236.672744][T10045] __netlink_dump_start+0x6d6/0x990 [ 236.672770][T10045] ip_set_dump+0x17f/0x210 [ 236.672795][T10045] ? __pfx_ip_set_dump+0x10/0x10 [ 236.672818][T10045] ? __pfx_ip_set_dump_start+0x10/0x10 [ 236.672832][T10045] ? __pfx_ip_set_dump_do+0x10/0x10 [ 236.672847][T10045] ? __pfx_ip_set_dump_done+0x10/0x10 [ 236.672870][T10045] nfnetlink_rcv_msg+0x9f9/0x1200 [ 236.672905][T10045] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 236.672928][T10045] ? kmem_cache_free+0x2d4/0x4d0 [ 236.672978][T10045] netlink_rcv_skb+0x16a/0x440 [ 236.673002][T10045] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 236.673028][T10045] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 236.673049][T10045] ? __pfx_aa_get_newest_label+0x10/0x10 [ 236.673078][T10045] ? bpf_lsm_capable+0x9/0x10 [ 236.673096][T10045] ? security_capable+0x7e/0x260 [ 236.673114][T10045] ? ns_capable+0xd7/0x110 [ 236.673135][T10045] nfnetlink_rcv+0x1b3/0x430 [ 236.673160][T10045] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 236.673184][T10045] ? netlink_deliver_tap+0x1ae/0xd30 [ 236.673211][T10045] netlink_unicast+0x53a/0x7f0 [ 236.673237][T10045] ? __pfx_netlink_unicast+0x10/0x10 [ 236.673267][T10045] netlink_sendmsg+0x8d1/0xdd0 [ 236.673313][T10045] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.673340][T10045] ? __import_iovec+0x1c8/0x660 [ 236.673367][T10045] ____sys_sendmsg+0xa95/0xc70 [ 236.673385][T10045] ? __pfx_____sys_sendmsg+0x10/0x10 [ 236.673399][T10045] ? get_compat_msghdr+0x11a/0x170 [ 236.673431][T10045] ___sys_sendmsg+0x134/0x1d0 [ 236.673454][T10045] ? __pfx____sys_sendmsg+0x10/0x10 [ 236.673506][T10045] __sys_sendmsg+0x16d/0x220 [ 236.673529][T10045] ? __pfx___sys_sendmsg+0x10/0x10 [ 236.673561][T10045] ? rcu_is_watching+0x12/0xc0 [ 236.673581][T10045] __do_fast_syscall_32+0x73/0x120 [ 236.673606][T10045] do_fast_syscall_32+0x32/0x80 [ 236.673630][T10045] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 236.673651][T10045] RIP: 0023:0xf707e579 [ 236.673664][T10045] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 236.673679][T10045] RSP: 002b:00000000f506e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 236.673695][T10045] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 236.673705][T10045] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 236.673714][T10045] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 236.673728][T10045] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 236.673738][T10045] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 236.673760][T10045] [ 237.544602][T10067] process 'syz.0.1089' launched './file1' with NULL argv: empty string added [ 238.047622][ T40] audit: type=1804 audit(1745055890.641:189): pid=10069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1090" name="/newroot/281/file0" dev="tmpfs" ino=1523 res=1 errno=0 [ 238.918352][T10084] IPVS: length: 78 != 8 [ 239.210513][T10094] fuse: Bad value for 'rootmode' [ 239.970486][T10110] bridge1: entered promiscuous mode [ 240.125176][ T40] audit: type=1804 audit(1745055892.721:190): pid=10122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1104" name="/newroot/273/file0" dev="tmpfs" ino=1463 res=1 errno=0 [ 240.933514][T10139] fuse: Bad value for 'rootmode' [ 241.031687][T10143] lo speed is unknown, defaulting to 1000 [ 241.036424][T10143] lo speed is unknown, defaulting to 1000 [ 241.503744][ T40] audit: type=1804 audit(1745055894.091:191): pid=10152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1113" name="/newroot/288/file0/file0" dev="ramfs" ino=25155 res=1 errno=0 [ 241.613937][T10158] capability: warning: `syz.0.1116' uses 32-bit capabilities (legacy support in use) [ 241.854410][ T64] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 242.024562][ T64] usb 5-1: Using ep0 maxpacket: 16 [ 242.035754][ T64] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.040619][ T64] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.055753][ T64] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 242.061003][ T64] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 242.064695][ T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.074820][ T64] usb 5-1: config 0 descriptor?? [ 242.078118][ T40] audit: type=1804 audit(1745055894.671:192): pid=10168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1119" name="/newroot/287/file0" dev="tmpfs" ino=1526 res=1 errno=0 [ 242.081931][ T64] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input14 [ 242.095926][ T5351] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 242.101026][ T5351] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 242.115701][ T5351] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 242.124556][ T5351] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 242.144106][ T5351] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 242.149164][ T5351] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 242.159670][ T8522] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 242.166989][ T5351] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 242.174563][ T5351] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 242.293120][T10158] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 242.299185][ T10] usb 5-1: USB disconnect, device number 7 [ 242.507056][T10174] fuse: Bad value for 'rootmode' [ 243.112963][T10189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1126'. [ 243.127426][T10189] netlink: 'syz.2.1126': attribute type 7 has an invalid length. [ 243.213234][ T40] audit: type=1804 audit(1745055895.801:193): pid=10193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1135" name="/newroot/277/file0" dev="tmpfs" ino=1486 res=1 errno=0 [ 243.632514][T10203] fuse: Bad value for 'rootmode' [ 245.790237][T10241] fuse: Bad value for 'rootmode' [ 245.994139][ T40] audit: type=1804 audit(1745055898.581:194): pid=10246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1144" name="/newroot/297/file0" dev="tmpfs" ino=1579 res=1 errno=0 [ 246.140273][T10252] sp0: Synchronizing with TNC [ 246.215818][T10252] [U] è [ 248.936195][T10299] fuse: Bad value for 'rootmode' [ 249.001025][ T40] audit: type=1804 audit(1745055901.591:195): pid=10301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1157" name="/newroot/283/file0" dev="tmpfs" ino=1517 res=1 errno=0 [ 250.176133][T10323] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 250.562546][T10335] fuse: Bad value for 'rootmode' [ 251.056512][T10343] FAULT_INJECTION: forcing a failure. [ 251.056512][T10343] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.060652][T10343] CPU: 3 UID: 0 PID: 10343 Comm: syz.2.1171 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 251.060667][T10343] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 251.060673][T10343] Call Trace: [ 251.060677][T10343] [ 251.060680][T10343] dump_stack_lvl+0x16c/0x1f0 [ 251.060713][T10343] should_fail_ex+0x512/0x640 [ 251.060731][T10343] _copy_from_iter+0x2a4/0x15b0 [ 251.060746][T10343] ? __alloc_skb+0x200/0x380 [ 251.060759][T10343] ? __pfx__copy_from_iter+0x10/0x10 [ 251.060772][T10343] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 251.060790][T10343] netlink_sendmsg+0x829/0xdd0 [ 251.060810][T10343] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.060824][T10343] ? __import_iovec+0x1c8/0x660 [ 251.060840][T10343] ____sys_sendmsg+0xa95/0xc70 [ 251.060850][T10343] ? __pfx_____sys_sendmsg+0x10/0x10 [ 251.060859][T10343] ? get_compat_msghdr+0x11a/0x170 [ 251.060877][T10343] ___sys_sendmsg+0x134/0x1d0 [ 251.060890][T10343] ? __pfx____sys_sendmsg+0x10/0x10 [ 251.060917][T10343] __sys_sendmsg+0x16d/0x220 [ 251.060930][T10343] ? __pfx___sys_sendmsg+0x10/0x10 [ 251.060948][T10343] ? rcu_is_watching+0x12/0xc0 [ 251.060960][T10343] __do_fast_syscall_32+0x73/0x120 [ 251.060976][T10343] do_fast_syscall_32+0x32/0x80 [ 251.060990][T10343] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 251.061002][T10343] RIP: 0023:0xf711e579 [ 251.061010][T10343] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 251.061020][T10343] RSP: 002b:00000000f510e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 251.061029][T10343] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000100 [ 251.061036][T10343] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 251.061041][T10343] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 251.061046][T10343] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 251.061052][T10343] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 251.061064][T10343] [ 251.062940][T10343] netlink: 'syz.2.1171': attribute type 16 has an invalid length. [ 251.130551][T10343] netlink: 'syz.2.1171': attribute type 17 has an invalid length. [ 251.144720][T10343] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 251.309526][ T40] audit: type=1804 audit(1745055903.901:196): pid=10348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1173" name="/newroot/286/file0" dev="tmpfs" ino=1533 res=1 errno=0 [ 251.338058][T10352] FAULT_INJECTION: forcing a failure. [ 251.338058][T10352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.342120][T10352] CPU: 2 UID: 0 PID: 10352 Comm: syz.2.1175 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 251.342134][T10352] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 251.342140][T10352] Call Trace: [ 251.342144][T10352] [ 251.342148][T10352] dump_stack_lvl+0x16c/0x1f0 [ 251.342166][T10352] should_fail_ex+0x512/0x640 [ 251.342181][T10352] _copy_to_user+0x32/0xd0 [ 251.342195][T10352] rng_dev_read+0x1ea/0x810 [ 251.342207][T10352] ? __pfx_virtio_read+0x10/0x10 [ 251.342219][T10352] ? __pfx_rng_dev_read+0x10/0x10 [ 251.342231][T10352] ? bpf_lsm_file_permission+0x9/0x10 [ 251.342241][T10352] ? security_file_permission+0x71/0x210 [ 251.342255][T10352] ? rw_verify_area+0xcf/0x680 [ 251.342270][T10352] ? __pfx_rng_dev_read+0x10/0x10 [ 251.342281][T10352] vfs_readv+0x6bc/0x8a0 [ 251.342290][T10352] ? get_pid_task+0x106/0x250 [ 251.342307][T10352] ? __pfx_vfs_readv+0x10/0x10 [ 251.342317][T10352] ? find_held_lock+0x2b/0x80 [ 251.342335][T10352] ? __fget_files+0x20e/0x3c0 [ 251.342347][T10352] ? do_preadv+0x1af/0x270 [ 251.342355][T10352] do_preadv+0x1af/0x270 [ 251.342365][T10352] ? __pfx_do_preadv+0x10/0x10 [ 251.342374][T10352] ? rcu_is_watching+0x12/0xc0 [ 251.342387][T10352] __do_fast_syscall_32+0x73/0x120 [ 251.342403][T10352] do_fast_syscall_32+0x32/0x80 [ 251.342417][T10352] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 251.342429][T10352] RIP: 0023:0xf711e579 [ 251.342437][T10352] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 251.342447][T10352] RSP: 002b:00000000f510e55c EFLAGS: 00000296 ORIG_RAX: 000000000000014d [ 251.342457][T10352] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 251.342463][T10352] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 251.342468][T10352] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 251.342473][T10352] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 251.342479][T10352] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 251.342491][T10352] [ 251.594066][T10363] fuse: Bad value for 'rootmode' [ 251.768714][T10366] netlink: 'syz.2.1178': attribute type 16 has an invalid length. [ 251.771204][T10366] netlink: 'syz.2.1178': attribute type 17 has an invalid length. [ 251.777508][T10366] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 251.947779][T10375] input: syz0 as /devices/virtual/input/input15 [ 252.736463][T10393] FAULT_INJECTION: forcing a failure. [ 252.736463][T10393] name failslab, interval 1, probability 0, space 0, times 0 [ 252.740544][T10393] CPU: 3 UID: 0 PID: 10393 Comm: syz.2.1187 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 252.740557][T10393] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 252.740563][T10393] Call Trace: [ 252.740567][T10393] [ 252.740571][T10393] dump_stack_lvl+0x16c/0x1f0 [ 252.740589][T10393] should_fail_ex+0x512/0x640 [ 252.740602][T10393] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 252.740616][T10393] should_failslab+0xc2/0x120 [ 252.740629][T10393] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 252.740641][T10393] ? security_file_alloc+0x34/0x2b0 [ 252.740657][T10393] security_file_alloc+0x34/0x2b0 [ 252.740669][T10393] init_file+0x93/0x4c0 [ 252.740682][T10393] alloc_empty_file+0x73/0x1e0 [ 252.740696][T10393] alloc_file_pseudo+0x13a/0x230 [ 252.740710][T10393] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 252.740727][T10393] __shmem_file_setup+0x210/0x300 [ 252.740740][T10393] shmem_zero_setup+0x93/0x1a0 [ 252.740754][T10393] __mmap_region+0x2036/0x27c0 [ 252.740768][T10393] ? __pfx___mmap_region+0x10/0x10 [ 252.740805][T10393] ? mm_get_unmapped_area+0x95/0xe0 [ 252.740824][T10393] mmap_region+0x1ab/0x3f0 [ 252.740838][T10393] do_mmap+0xd8e/0x11b0 [ 252.740855][T10393] ? __pfx_do_mmap+0x10/0x10 [ 252.740870][T10393] ? __pfx_down_write_killable+0x10/0x10 [ 252.740889][T10393] vm_mmap_pgoff+0x281/0x450 [ 252.740906][T10393] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 252.740923][T10393] ? fput+0x70/0xf0 [ 252.740934][T10393] ? ksys_write+0x1b9/0x240 [ 252.740946][T10393] ksys_mmap_pgoff+0x7d/0x5c0 [ 252.740960][T10393] ? rcu_is_watching+0x12/0xc0 [ 252.740970][T10393] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 252.740986][T10393] __do_fast_syscall_32+0x73/0x120 [ 252.741001][T10393] do_fast_syscall_32+0x32/0x80 [ 252.741015][T10393] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 252.741027][T10393] RIP: 0023:0xf711e579 [ 252.741035][T10393] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 252.741045][T10393] RSP: 002b:00000000f510e55c EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 252.741054][T10393] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000b36000 [ 252.741060][T10393] RDX: 000000000200000d RSI: 0000000004008031 RDI: 00000000ffffffff [ 252.741066][T10393] RBP: 00000000f6c52000 R08: 0000000000000000 R09: 0000000000000000 [ 252.741072][T10393] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 252.741077][T10393] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 252.741089][T10393] [ 252.742915][T10394] netlink: 'syz.3.1185': attribute type 4 has an invalid length. [ 252.844836][T10394] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1185'. [ 252.858296][T10394] : renamed from bond0 (while UP) [ 254.812431][ T40] audit: type=1804 audit(1745055907.401:197): pid=10424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1194" name="/newroot/289/file0" dev="tmpfs" ino=1549 res=1 errno=0 [ 255.126735][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.128740][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.842680][T10459] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 259.591858][T10489] fuse: Bad value for 'rootmode' [ 260.106526][T10501] fuse: Bad value for 'rootmode' [ 260.444163][T10508] openvswitch: netlink: Missing key (keys=40, expected=100) [ 260.549363][ T40] audit: type=1800 audit(1745055913.141:198): pid=10499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1214" name="bus" dev="tmpfs" ino=1692 res=0 errno=0 [ 261.086602][T10522] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 261.093890][T10522] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.096334][T10522] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.101637][T10522] bridge0: entered allmulticast mode [ 261.154537][ T9] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 261.484634][ T9] usb 5-1: Invalid ep0 maxpacket: 16 [ 261.654770][ T9] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 261.814356][ T9] usb 5-1: Invalid ep0 maxpacket: 16 [ 261.817458][ T9] usb usb5-port1: attempt power cycle [ 262.164356][ T9] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 262.184779][ T9] usb 5-1: Invalid ep0 maxpacket: 16 [ 262.314387][ T9] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 262.335322][ T9] usb 5-1: Invalid ep0 maxpacket: 16 [ 262.337753][ T9] usb usb5-port1: unable to enumerate USB device [ 263.055799][ T40] audit: type=1804 audit(1745055915.651:199): pid=10545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1226" name="/newroot/322/file0" dev="tmpfs" ino=1708 res=1 errno=0 [ 263.432933][T10552] FAULT_INJECTION: forcing a failure. [ 263.432933][T10552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.437263][T10552] CPU: 1 UID: 0 PID: 10552 Comm: syz.3.1228 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 263.437288][T10552] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 263.437295][T10552] Call Trace: [ 263.437298][T10552] [ 263.437302][T10552] dump_stack_lvl+0x16c/0x1f0 [ 263.437320][T10552] should_fail_ex+0x512/0x640 [ 263.437334][T10552] _copy_from_user+0x2e/0xd0 [ 263.437348][T10552] get_compat_msghdr+0xa7/0x170 [ 263.437361][T10552] ? __pfx_get_compat_msghdr+0x10/0x10 [ 263.437374][T10552] ? __lock_acquire+0x5ca/0x1ba0 [ 263.437395][T10552] ___sys_recvmsg+0x191/0x1a0 [ 263.437409][T10552] ? __pfx____sys_recvmsg+0x10/0x10 [ 263.437428][T10552] ? lock_acquire+0xd0/0x350 [ 263.437441][T10552] ? __pfx___might_resched+0x10/0x10 [ 263.437456][T10552] do_recvmmsg+0x568/0x740 [ 263.437470][T10552] ? __pfx_do_recvmmsg+0x10/0x10 [ 263.437482][T10552] ? trace_sched_exit_tp+0xde/0x130 [ 263.437503][T10552] ? __pfx___schedule+0x10/0x10 [ 263.437515][T10552] ? __fget_files+0x20e/0x3c0 [ 263.437527][T10552] __sys_recvmmsg+0x21c/0x280 [ 263.437540][T10552] ? __pfx___sys_recvmmsg+0x10/0x10 [ 263.437557][T10552] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 263.437570][T10552] ? lockdep_hardirqs_on+0x7c/0x110 [ 263.437583][T10552] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 263.437597][T10552] __do_fast_syscall_32+0x73/0x120 [ 263.437612][T10552] do_fast_syscall_32+0x32/0x80 [ 263.437626][T10552] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 263.437639][T10552] RIP: 0023:0xf7f52579 [ 263.437647][T10552] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 263.437657][T10552] RSP: 002b:00000000f503455c EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 263.437666][T10552] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000b40 [ 263.437672][T10552] RDX: 00000000000005df RSI: 0000000000000002 RDI: 0000000000000000 [ 263.437678][T10552] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 263.437683][T10552] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 263.437688][T10552] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 263.437700][T10552] [ 263.906645][T10554] syz.0.1229: attempt to access beyond end of device [ 263.906645][T10554] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 263.911414][T10554] SQUASHFS error: Failed to read block 0x0: -5 [ 263.913435][T10554] unable to read squashfs_super_block [ 264.093632][T10563] 9pnet_rdma: rdma_create_trans (10563): problem binding to privport: 13 [ 265.325051][T10585] fuse: Bad value for 'rootmode' [ 265.547294][T10592] netlink: 'syz.3.1238': attribute type 4 has an invalid length. [ 265.945260][T10606] netlink: 'syz.0.1242': attribute type 4 has an invalid length. [ 265.975226][T10606] netlink: 'syz.0.1242': attribute type 4 has an invalid length. [ 265.977803][T10606] FAULT_INJECTION: forcing a failure. [ 265.977803][T10606] name failslab, interval 1, probability 0, space 0, times 0 [ 265.982243][T10606] CPU: 3 UID: 0 PID: 10606 Comm: syz.0.1242 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 265.982256][T10606] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 265.982262][T10606] Call Trace: [ 265.982266][T10606] [ 265.982270][T10606] dump_stack_lvl+0x16c/0x1f0 [ 265.982288][T10606] should_fail_ex+0x512/0x640 [ 265.982300][T10606] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 265.982312][T10606] should_failslab+0xc2/0x120 [ 265.982325][T10606] __kmalloc_cache_noprof+0x6a/0x3e0 [ 265.982335][T10606] ? inetdev_init+0x66/0x5a0 [ 265.982352][T10606] inetdev_init+0x66/0x5a0 [ 265.982370][T10606] inetdev_event+0x4c0/0x18a0 [ 265.982385][T10606] ? ib_netdevice_event+0xfc/0x330 [ 265.982397][T10606] ? __pfx_inetdev_event+0x10/0x10 [ 265.982411][T10606] ? wext_netdev_notifier_call+0xe/0x20 [ 265.982425][T10606] ? cfg802154_netdev_notifier_call+0x391/0xa00 [ 265.982439][T10606] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 265.982456][T10606] notifier_call_chain+0xb9/0x410 [ 265.982468][T10606] ? __pfx_inetdev_event+0x10/0x10 [ 265.982484][T10606] call_netdevice_notifiers_info+0xbe/0x140 [ 265.982496][T10606] netif_set_mtu_ext+0x3bf/0x5c0 [ 265.982510][T10606] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 265.982522][T10606] ? __up_console_sem+0x8f/0xe0 [ 265.982538][T10606] ? __pfx_validate_linkmsg+0x10/0x10 [ 265.982551][T10606] ? tick_nohz_tick_stopped+0x6c/0xa0 [ 265.982562][T10606] ? __irq_work_queue_local+0xdb/0x450 [ 265.982579][T10606] do_setlink.constprop.0+0xa96/0x44b0 [ 265.982597][T10606] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 265.982615][T10606] ? __mutex_trylock_common+0xe9/0x250 [ 265.982630][T10606] ? __pfx___mutex_trylock_common+0x10/0x10 [ 265.982644][T10606] ? __pfx___might_resched+0x10/0x10 [ 265.982657][T10606] ? rcu_is_watching+0x12/0xc0 [ 265.982667][T10606] ? trace_contention_end+0xdd/0x130 [ 265.982681][T10606] ? __mutex_lock+0x1ca/0xb90 [ 265.982694][T10606] ? __pfx_aa_get_newest_label+0x10/0x10 [ 265.982705][T10606] ? rcu_is_watching+0x12/0xc0 [ 265.982714][T10606] ? rtnl_setlink+0x2b0/0x770 [ 265.982727][T10606] ? __pfx___mutex_lock+0x10/0x10 [ 265.982749][T10606] rtnl_setlink+0x3cb/0x770 [ 265.982764][T10606] ? __pfx_rtnl_setlink+0x10/0x10 [ 265.982776][T10606] ? __kasan_slab_free+0x51/0x70 [ 265.982788][T10606] ? dev_hard_start_xmit+0x93/0x740 [ 265.982798][T10606] ? __dev_queue_xmit+0x7eb/0x43e0 [ 265.982808][T10606] ? netlink_deliver_tap+0xa87/0xd30 [ 265.982820][T10606] ? netlink_unicast+0x5df/0x7f0 [ 265.982855][T10606] ? __lock_acquire+0x5ca/0x1ba0 [ 265.982870][T10606] ? rcu_is_watching+0x12/0xc0 [ 265.982879][T10606] ? trace_cap_capable+0x18d/0x200 [ 265.982893][T10606] ? find_held_lock+0x2b/0x80 [ 265.982903][T10606] ? __pfx_rtnl_setlink+0x10/0x10 [ 265.982915][T10606] ? __pfx_rtnl_setlink+0x10/0x10 [ 265.982927][T10606] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 265.982941][T10606] ? __pfx_rtnl_setlink+0x10/0x10 [ 265.982954][T10606] rtnetlink_rcv_msg+0x95b/0xe90 [ 265.982968][T10606] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 265.982988][T10606] netlink_rcv_skb+0x16a/0x440 [ 265.983001][T10606] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 265.983016][T10606] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 265.983037][T10606] ? netlink_deliver_tap+0x1ae/0xd30 [ 265.983074][T10606] netlink_unicast+0x53a/0x7f0 [ 265.983091][T10606] ? __pfx_netlink_unicast+0x10/0x10 [ 265.983108][T10606] netlink_sendmsg+0x8d1/0xdd0 [ 265.983124][T10606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.983143][T10606] sock_write_iter+0x4fc/0x5b0 [ 265.983153][T10606] ? __pfx_sock_write_iter+0x10/0x10 [ 265.983167][T10606] ? __lock_acquire+0x5ca/0x1ba0 [ 265.983182][T10606] do_iter_readv_writev+0x654/0x950 [ 265.983193][T10606] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 265.983211][T10606] ? bpf_lsm_file_permission+0x9/0x10 [ 265.983220][T10606] ? security_file_permission+0x71/0x210 [ 265.983234][T10606] ? rw_verify_area+0xcf/0x680 [ 265.983249][T10606] vfs_writev+0x353/0xdc0 [ 265.983262][T10606] ? __pfx_vfs_writev+0x10/0x10 [ 265.983280][T10606] ? __fget_files+0x20e/0x3c0 [ 265.983289][T10606] ? __fget_files+0x140/0x3c0 [ 265.983301][T10606] ? do_writev+0x295/0x330 [ 265.983309][T10606] do_writev+0x295/0x330 [ 265.983318][T10606] ? __pfx_do_writev+0x10/0x10 [ 265.983328][T10606] ? rcu_is_watching+0x12/0xc0 [ 265.983339][T10606] __do_fast_syscall_32+0x73/0x120 [ 265.983358][T10606] do_fast_syscall_32+0x32/0x80 [ 265.983372][T10606] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 265.983385][T10606] RIP: 0023:0xf704e579 [ 265.983393][T10606] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 265.983403][T10606] RSP: 002b:00000000f503e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000092 [ 265.983412][T10606] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000140 [ 265.983418][T10606] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 265.983423][T10606] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 265.983429][T10606] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 265.983434][T10606] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 265.983446][T10606] [ 266.142184][ T34] lo speed is unknown, defaulting to 1000 [ 266.144365][ T34] lo speed is unknown, defaulting to 1000 [ 266.853432][T10622] fuse: Bad value for 'rootmode' [ 267.710575][T10633] netlink: 'syz.1.1251': attribute type 4 has an invalid length. [ 268.172681][T10642] netlink: 'syz.1.1253': attribute type 4 has an invalid length. [ 268.175578][T10642] netlink: 'syz.1.1253': attribute type 4 has an invalid length. [ 269.408707][T10664] kvm: apic: phys broadcast and lowest prio [ 269.494965][T10666] netlink: 'syz.3.1261': attribute type 4 has an invalid length. [ 270.690688][T10696] syzkaller0: entered promiscuous mode [ 270.692471][T10696] syzkaller0: entered allmulticast mode [ 273.488344][T10712] sch_fq: defrate 8 ignored. [ 273.814843][ T835] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 274.968579][T10748] FAULT_INJECTION: forcing a failure. [ 274.968579][T10748] name failslab, interval 1, probability 0, space 0, times 0 [ 274.972575][T10748] CPU: 2 UID: 0 PID: 10748 Comm: syz.3.1283 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 274.972589][T10748] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 274.972595][T10748] Call Trace: [ 274.972599][T10748] [ 274.972603][T10748] dump_stack_lvl+0x16c/0x1f0 [ 274.972620][T10748] should_fail_ex+0x512/0x640 [ 274.972632][T10748] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 274.972644][T10748] should_failslab+0xc2/0x120 [ 274.972657][T10748] __kmalloc_cache_noprof+0x6a/0x3e0 [ 274.972667][T10748] ? _raw_spin_unlock+0x28/0x50 [ 274.972678][T10748] ? snd_rawmidi_open+0x3c3/0xbf0 [ 274.972692][T10748] snd_rawmidi_open+0x3c3/0xbf0 [ 274.972706][T10748] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 274.972719][T10748] ? kobject_get_unless_zero+0x156/0x1e0 [ 274.972736][T10748] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 274.972747][T10748] snd_open+0x1fe/0x450 [ 274.972761][T10748] ? __pfx_snd_open+0x10/0x10 [ 274.972775][T10748] chrdev_open+0x231/0x6a0 [ 274.972786][T10748] ? __pfx_apparmor_file_open+0x10/0x10 [ 274.972799][T10748] ? __pfx_chrdev_open+0x10/0x10 [ 274.972812][T10748] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 274.972829][T10748] do_dentry_open+0x741/0x1c10 [ 274.972841][T10748] ? __pfx_chrdev_open+0x10/0x10 [ 274.972854][T10748] vfs_open+0x82/0x3f0 [ 274.972869][T10748] path_openat+0x1e5e/0x2d40 [ 274.972884][T10748] ? __pfx_path_openat+0x10/0x10 [ 274.972897][T10748] do_filp_open+0x20b/0x470 [ 274.972908][T10748] ? __pfx_do_filp_open+0x10/0x10 [ 274.972927][T10748] ? alloc_fd+0x471/0x7d0 [ 274.972940][T10748] do_sys_openat2+0x11b/0x1d0 [ 274.972953][T10748] ? __pfx_do_sys_openat2+0x10/0x10 [ 274.972968][T10748] ? __fget_files+0x20e/0x3c0 [ 274.972979][T10748] __ia32_compat_sys_openat+0x16d/0x210 [ 274.972994][T10748] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 274.973008][T10748] ? ksys_write+0x1b9/0x240 [ 274.973019][T10748] ? rcu_is_watching+0x12/0xc0 [ 274.973032][T10748] __do_fast_syscall_32+0x73/0x120 [ 274.973047][T10748] do_fast_syscall_32+0x32/0x80 [ 274.973061][T10748] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 274.973073][T10748] RIP: 0023:0xf7f52579 [ 274.973081][T10748] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 274.973091][T10748] RSP: 002b:00000000f5076100 EFLAGS: 00000293 ORIG_RAX: 0000000000000127 [ 274.973100][T10748] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5076150 [ 274.973106][T10748] RDX: 0000000000141101 RSI: 0000000000000000 RDI: 00000000f73e2ff4 [ 274.973112][T10748] RBP: 0000000000141101 R08: 0000000000000000 R09: 0000000000000000 [ 274.973117][T10748] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 274.973123][T10748] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 274.973135][T10748] [ 275.464515][T10760] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 275.472722][T10760] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 275.565760][T10764] netlink: 'syz.2.1289': attribute type 4 has an invalid length. [ 276.246038][T10778] overlay: ./file0 is not a directory [ 276.251843][ T40] audit: type=1804 audit(1745055928.841:200): pid=10778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1292" name="/newroot/328/file0/file0" dev="ramfs" ino=27464 res=1 errno=0 [ 276.355328][T10777] bridge0: port 3(netdevsim0) entered blocking state [ 276.357676][T10777] bridge0: port 3(netdevsim0) entered disabled state [ 276.360044][T10777] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 276.363789][T10777] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 276.367877][T10777] bridge0: port 3(netdevsim0) entered blocking state [ 276.370142][T10777] bridge0: port 3(netdevsim0) entered forwarding state [ 277.114820][T10796] mmap: syz.2.1298 (10796) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 277.965845][T10823] FAULT_INJECTION: forcing a failure. [ 277.965845][T10823] name failslab, interval 1, probability 0, space 0, times 0 [ 277.989933][T10823] CPU: 1 UID: 0 PID: 10823 Comm: syz.1.1308 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 277.989950][T10823] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 277.989956][T10823] Call Trace: [ 277.989960][T10823] [ 277.989964][T10823] dump_stack_lvl+0x16c/0x1f0 [ 277.989983][T10823] should_fail_ex+0x512/0x640 [ 277.989995][T10823] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 277.990009][T10823] should_failslab+0xc2/0x120 [ 277.990022][T10823] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 277.990034][T10823] ? __alloc_skb+0x2b2/0x380 [ 277.990048][T10823] __alloc_skb+0x2b2/0x380 [ 277.990060][T10823] ? __pfx___alloc_skb+0x10/0x10 [ 277.990072][T10823] ? __pfx_get_page_from_freelist+0x10/0x10 [ 277.990083][T10823] ? should_fail_alloc_page+0xee/0x130 [ 277.990096][T10823] ? aa_label_sk_perm+0x19b/0x5a0 [ 277.990110][T10823] tcp_stream_alloc_skb+0x34/0x570 [ 277.990122][T10823] tcp_sendmsg_locked+0xec1/0x3930 [ 277.990140][T10823] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 277.990151][T10823] ? do_raw_spin_lock+0x12c/0x2b0 [ 277.990161][T10823] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 277.990178][T10823] ? __local_bh_enable_ip+0xa4/0x120 [ 277.990193][T10823] tcp_sendmsg+0x2e/0x50 [ 277.990201][T10823] ? __pfx_tcp_sendmsg+0x10/0x10 [ 277.990209][T10823] inet_sendmsg+0xb9/0x140 [ 277.990219][T10823] ____sys_sendmsg+0x973/0xc70 [ 277.990230][T10823] ? __pfx_____sys_sendmsg+0x10/0x10 [ 277.990238][T10823] ? get_compat_msghdr+0x11a/0x170 [ 277.990257][T10823] ___sys_sendmsg+0x134/0x1d0 [ 277.990270][T10823] ? __pfx____sys_sendmsg+0x10/0x10 [ 277.990299][T10823] __sys_sendmsg+0x16d/0x220 [ 277.990312][T10823] ? __pfx___sys_sendmsg+0x10/0x10 [ 277.990330][T10823] ? rcu_is_watching+0x12/0xc0 [ 277.990342][T10823] __do_fast_syscall_32+0x73/0x120 [ 277.990362][T10823] do_fast_syscall_32+0x32/0x80 [ 277.990377][T10823] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 277.990389][T10823] RIP: 0023:0xf707e579 [ 277.990398][T10823] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 277.990407][T10823] RSP: 002b:00000000f506e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 277.990417][T10823] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800008c0 [ 277.990423][T10823] RDX: 00000000000088d4 RSI: 0000000000000000 RDI: 0000000000000000 [ 277.990429][T10823] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 277.990435][T10823] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 277.990440][T10823] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 277.990452][T10823] [ 278.168715][T10832] FAULT_INJECTION: forcing a failure. [ 278.168715][T10832] name failslab, interval 1, probability 0, space 0, times 0 [ 278.173794][T10832] CPU: 2 UID: 0 PID: 10832 Comm: syz.1.1312 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 278.173808][T10832] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 278.173814][T10832] Call Trace: [ 278.173818][T10832] [ 278.173822][T10832] dump_stack_lvl+0x16c/0x1f0 [ 278.173840][T10832] should_fail_ex+0x512/0x640 [ 278.173854][T10832] should_failslab+0xc2/0x120 [ 278.173867][T10832] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 278.173881][T10832] ? skb_clone+0x190/0x3f0 [ 278.173896][T10832] skb_clone+0x190/0x3f0 [ 278.173909][T10832] netlink_deliver_tap+0xabd/0xd30 [ 278.173926][T10832] netlink_dump+0x638/0xd00 [ 278.173941][T10832] ? __pfx_netlink_dump+0x10/0x10 [ 278.173960][T10832] ? __inet_diag_dump_start+0x434/0x7f0 [ 278.173977][T10832] __netlink_dump_start+0x6d6/0x990 [ 278.173993][T10832] inet_diag_rcv_msg_compat+0x275/0x2d0 [ 278.174006][T10832] ? __pfx_inet_diag_rcv_msg_compat+0x10/0x10 [ 278.174020][T10832] ? __pfx_inet_diag_dump_start_compat+0x10/0x10 [ 278.174032][T10832] ? __pfx_inet_diag_dump_compat+0x10/0x10 [ 278.174044][T10832] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 278.174059][T10832] ? sock_diag_rcv_msg+0x33a/0x790 [ 278.174073][T10832] sock_diag_rcv_msg+0x36f/0x790 [ 278.174085][T10832] netlink_rcv_skb+0x16a/0x440 [ 278.174099][T10832] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 278.174111][T10832] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 278.174132][T10832] ? netlink_deliver_tap+0x1ae/0xd30 [ 278.174147][T10832] netlink_unicast+0x53a/0x7f0 [ 278.174163][T10832] ? __pfx_netlink_unicast+0x10/0x10 [ 278.174180][T10832] netlink_sendmsg+0x8d1/0xdd0 [ 278.174196][T10832] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.174215][T10832] __sys_sendto+0x495/0x510 [ 278.174226][T10832] ? __pfx___sys_sendto+0x10/0x10 [ 278.174248][T10832] ? ksys_write+0x1b9/0x240 [ 278.174259][T10832] ? __pfx_ksys_write+0x10/0x10 [ 278.174283][T10832] __ia32_sys_sendto+0xdd/0x1b0 [ 278.174294][T10832] ? lockdep_hardirqs_on+0x7c/0x110 [ 278.174308][T10832] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 278.174322][T10832] __do_fast_syscall_32+0x73/0x120 [ 278.174337][T10832] do_fast_syscall_32+0x32/0x80 [ 278.174355][T10832] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 278.174368][T10832] RIP: 0023:0xf707e579 [ 278.174376][T10832] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 278.174386][T10832] RSP: 002b:00000000f506e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 278.174395][T10832] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 278.174401][T10832] RDX: 000000000000004c RSI: 0000000000000000 RDI: 0000000000000000 [ 278.174407][T10832] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 278.174413][T10832] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 278.174418][T10832] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 278.174430][T10832] [ 278.265539][ C2] vkms_vblank_simulate: vblank timer overrun [ 278.323108][ T5306] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 278.325407][T10835] PKCS8: Unsupported PKCS#8 version [ 278.326756][ T5306] CPU: 0 UID: 0 PID: 5306 Comm: kworker/u33:1 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 278.326772][ T5306] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 278.326779][ T5306] Workqueue: hci1 hci_rx_work [ 278.326795][ T5306] Call Trace: [ 278.326800][ T5306] [ 278.326804][ T5306] dump_stack_lvl+0x16c/0x1f0 [ 278.326820][ T5306] sysfs_warn_dup+0x7f/0xa0 [ 278.326830][ T5306] sysfs_create_dir_ns+0x24b/0x2b0 [ 278.326841][ T5306] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 278.326850][ T5306] ? find_held_lock+0x2b/0x80 [ 278.326865][ T5306] ? do_raw_spin_unlock+0x172/0x230 [ 278.326875][ T5306] kobject_add_internal+0x2c4/0x9b0 [ 278.326892][ T5306] kobject_add+0x16e/0x240 [ 278.326901][ T5306] ? __pfx_kobject_add+0x10/0x10 [ 278.326911][ T5306] ? do_raw_spin_unlock+0x172/0x230 [ 278.326922][ T5306] ? kobject_put+0xab/0x5a0 [ 278.326961][ T5306] device_add+0x288/0x1a70 [ 278.326975][ T5306] ? __pfx_dev_set_name+0x10/0x10 [ 278.326988][ T5306] ? __pfx_device_add+0x10/0x10 [ 278.327000][ T5306] ? mgmt_send_event_skb+0x2fb/0x460 [ 278.327015][ T5306] hci_conn_add_sysfs+0x17e/0x230 [ 278.327029][ T5306] le_conn_complete_evt+0x1075/0x1d70 [ 278.327043][ T5306] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 278.327053][ T5306] ? hci_event_packet+0x43c/0x1190 [ 278.327068][ T5306] hci_le_conn_complete_evt+0x23c/0x370 [ 278.327082][ T5306] hci_le_meta_evt+0x2f3/0x5e0 [ 278.327094][ T5306] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 278.327107][ T5306] hci_event_packet+0x669/0x1190 [ 278.327117][ T5306] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 278.327128][ T5306] ? __pfx_hci_event_packet+0x10/0x10 [ 278.327139][ T5306] ? kcov_remote_start+0x3c9/0x6d0 [ 278.327153][ T5306] ? lockdep_hardirqs_on+0x7c/0x110 [ 278.327168][ T5306] hci_rx_work+0x2c5/0x16b0 [ 278.327181][ T5306] ? rcu_is_watching+0x12/0xc0 [ 278.327193][ T5306] process_one_work+0x9cc/0x1b70 [ 278.327208][ T5306] ? __pfx_process_one_work+0x10/0x10 [ 278.327221][ T5306] ? assign_work+0x1a0/0x250 [ 278.327244][ T5306] worker_thread+0x6c8/0xf10 [ 278.327259][ T5306] ? __pfx_worker_thread+0x10/0x10 [ 278.327268][ T5306] kthread+0x3c2/0x780 [ 278.327282][ T5306] ? __pfx_kthread+0x10/0x10 [ 278.327295][ T5306] ? __pfx_kthread+0x10/0x10 [ 278.327308][ T5306] ? __pfx_kthread+0x10/0x10 [ 278.327321][ T5306] ? __pfx_kthread+0x10/0x10 [ 278.327335][ T5306] ? rcu_is_watching+0x12/0xc0 [ 278.327350][ T5306] ? __pfx_kthread+0x10/0x10 [ 278.327364][ T5306] ret_from_fork+0x45/0x80 [ 278.327373][ T5306] ? __pfx_kthread+0x10/0x10 [ 278.327387][ T5306] ret_from_fork_asm+0x1a/0x30 [ 278.327411][ T5306] [ 278.327426][ T5306] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 278.413682][ T5306] Bluetooth: hci1: failed to register connection device [ 278.437691][T10841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1316'. [ 278.455025][T10843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1318'. [ 279.647390][T10895] x_tables: duplicate underflow at hook 2 [ 279.660273][ T5306] Bluetooth: hci3: adv larger than maximum supported [ 280.617687][T10918] FAULT_INJECTION: forcing a failure. [ 280.617687][T10918] name failslab, interval 1, probability 0, space 0, times 0 [ 280.623826][T10918] CPU: 1 UID: 0 PID: 10918 Comm: syz.3.1344 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 280.623852][T10918] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 280.623859][T10918] Call Trace: [ 280.623863][T10918] [ 280.623867][T10918] dump_stack_lvl+0x16c/0x1f0 [ 280.623885][T10918] should_fail_ex+0x512/0x640 [ 280.623898][T10918] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 280.623911][T10918] should_failslab+0xc2/0x120 [ 280.623925][T10918] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 280.623937][T10918] ? security_file_alloc+0x34/0x2b0 [ 280.623951][T10918] security_file_alloc+0x34/0x2b0 [ 280.623964][T10918] init_file+0x93/0x4c0 [ 280.623977][T10918] alloc_empty_file+0x73/0x1e0 [ 280.623991][T10918] alloc_file_pseudo+0x13a/0x230 [ 280.624005][T10918] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 280.624018][T10918] ? do_raw_spin_unlock+0x172/0x230 [ 280.624030][T10918] __anon_inode_getfile+0xf7/0x370 [ 280.624043][T10918] anon_inode_getfd+0x52/0xb0 [ 280.624053][T10918] __ia32_sys_fsopen+0x18f/0x240 [ 280.624066][T10918] __do_fast_syscall_32+0x73/0x120 [ 280.624081][T10918] do_fast_syscall_32+0x32/0x80 [ 280.624095][T10918] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 280.624107][T10918] RIP: 0023:0xf7f52579 [ 280.624115][T10918] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 280.624125][T10918] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 00000000000001ae [ 280.624134][T10918] RAX: ffffffffffffffda RBX: 00000000800000c0 RCX: 0000000000000000 [ 280.624140][T10918] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 280.624146][T10918] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 280.624151][T10918] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 280.624157][T10918] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 280.624169][T10918] [ 280.764968][T10921] syzkaller0: entered promiscuous mode [ 280.766843][T10921] syzkaller0: entered allmulticast mode [ 282.050233][T10929] FAULT_INJECTION: forcing a failure. [ 282.050233][T10929] name failslab, interval 1, probability 0, space 0, times 0 [ 282.054373][T10929] CPU: 0 UID: 0 PID: 10929 Comm: syz.2.1348 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 282.054389][T10929] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 282.054396][T10929] Call Trace: [ 282.054400][T10929] [ 282.054404][T10929] dump_stack_lvl+0x16c/0x1f0 [ 282.054422][T10929] should_fail_ex+0x512/0x640 [ 282.054436][T10929] should_failslab+0xc2/0x120 [ 282.054450][T10929] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 282.054463][T10929] ? skb_clone+0x190/0x3f0 [ 282.054479][T10929] skb_clone+0x190/0x3f0 [ 282.054492][T10929] netlink_deliver_tap+0xabd/0xd30 [ 282.054509][T10929] netlink_unicast+0x6b2/0x7f0 [ 282.054524][T10929] ? __pfx_netlink_unicast+0x10/0x10 [ 282.054556][T10929] netlink_ack+0x696/0xb80 [ 282.054574][T10929] netlink_rcv_skb+0x347/0x440 [ 282.054587][T10929] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 282.054603][T10929] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 282.054624][T10929] ? netlink_deliver_tap+0x1ae/0xd30 [ 282.054639][T10929] netlink_unicast+0x53a/0x7f0 [ 282.054654][T10929] ? __pfx_netlink_unicast+0x10/0x10 [ 282.054672][T10929] netlink_sendmsg+0x8d1/0xdd0 [ 282.054688][T10929] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.054703][T10929] ? __import_iovec+0x1c8/0x660 [ 282.054719][T10929] ____sys_sendmsg+0xa95/0xc70 [ 282.054730][T10929] ? __pfx_____sys_sendmsg+0x10/0x10 [ 282.054738][T10929] ? get_compat_msghdr+0x11a/0x170 [ 282.054756][T10929] ___sys_sendmsg+0x134/0x1d0 [ 282.054770][T10929] ? __pfx____sys_sendmsg+0x10/0x10 [ 282.054800][T10929] __sys_sendmsg+0x16d/0x220 [ 282.054812][T10929] ? __pfx___sys_sendmsg+0x10/0x10 [ 282.054831][T10929] ? rcu_is_watching+0x12/0xc0 [ 282.054843][T10929] __do_fast_syscall_32+0x73/0x120 [ 282.054859][T10929] do_fast_syscall_32+0x32/0x80 [ 282.054873][T10929] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 282.054885][T10929] RIP: 0023:0xf711e579 [ 282.054894][T10929] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 282.054920][T10929] RSP: 002b:00000000f510e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 282.054930][T10929] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000300 [ 282.054937][T10929] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 282.054942][T10929] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 282.054947][T10929] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 282.054953][T10929] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 282.054965][T10929] [ 282.421968][T10945] 9pnet_virtio: no channels available for device 127.0.0.1 [ 283.401573][ T40] audit: type=1804 audit(1745055935.991:201): pid=10964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1358" name="/newroot/332/file0" dev="tmpfs" ino=1755 res=1 errno=0 [ 284.751152][T10987] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1363'. [ 284.756301][T10987] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1363'. [ 285.532640][T11017] FAULT_INJECTION: forcing a failure. [ 285.532640][T11017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.536867][T11017] CPU: 0 UID: 0 PID: 11017 Comm: syz.3.1370 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 285.536881][T11017] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 285.536898][T11017] Call Trace: [ 285.536903][T11017] [ 285.536907][T11017] dump_stack_lvl+0x16c/0x1f0 [ 285.536924][T11017] should_fail_ex+0x512/0x640 [ 285.536939][T11017] _copy_from_user+0x2e/0xd0 [ 285.536953][T11017] get_compat_msghdr+0xa7/0x170 [ 285.536966][T11017] ? __pfx_get_compat_msghdr+0x10/0x10 [ 285.536980][T11017] ? __lock_acquire+0x5ca/0x1ba0 [ 285.536996][T11017] ___sys_recvmsg+0x191/0x1a0 [ 285.537010][T11017] ? __pfx____sys_recvmsg+0x10/0x10 [ 285.537029][T11017] ? get_pid_task+0xb0/0x250 [ 285.537043][T11017] ? __pfx___might_resched+0x10/0x10 [ 285.537058][T11017] do_recvmmsg+0x568/0x740 [ 285.537072][T11017] ? __pfx_do_recvmmsg+0x10/0x10 [ 285.537094][T11017] ? __fget_files+0x20e/0x3c0 [ 285.537106][T11017] __sys_recvmmsg+0x21c/0x280 [ 285.537120][T11017] ? __pfx___sys_recvmmsg+0x10/0x10 [ 285.537133][T11017] ? __pfx_ksys_write+0x10/0x10 [ 285.537146][T11017] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 285.537159][T11017] ? lockdep_hardirqs_on+0x7c/0x110 [ 285.537174][T11017] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 285.537188][T11017] __do_fast_syscall_32+0x73/0x120 [ 285.537203][T11017] do_fast_syscall_32+0x32/0x80 [ 285.537217][T11017] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 285.537229][T11017] RIP: 0023:0xf7f52579 [ 285.537241][T11017] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 285.537251][T11017] RSP: 002b:00000000f503455c EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 285.537261][T11017] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080002940 [ 285.537267][T11017] RDX: 000000000000f000 RSI: 0000000000010002 RDI: 0000000000000000 [ 285.537272][T11017] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 285.537278][T11017] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 285.537283][T11017] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 285.537295][T11017] [ 285.684519][T11020] cgroup: Bad value for 'name' [ 286.031015][ T40] audit: type=1804 audit(1745055938.621:202): pid=11027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1373" name="/newroot/344/file0" dev="tmpfs" ino=1858 res=1 errno=0 [ 288.924521][T11074] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1385'. [ 288.928330][T11074] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1385'. [ 290.175992][T11098] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1398'. [ 292.209623][ T40] audit: type=1804 audit(1745055944.801:203): pid=11125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1400" name="/newroot/353/file0" dev="tmpfs" ino=1905 res=1 errno=0 [ 292.546166][T11138] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1404'. [ 293.628754][T11165] input: syz1 as /devices/virtual/input/input16 [ 294.027667][ T5306] Bluetooth: hci0: unexpected event for opcode 0x0c56 [ 294.098629][ T40] audit: type=1804 audit(1745055946.691:204): pid=11177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1419" name="/newroot/351/file0" dev="tmpfs" ino=1854 res=1 errno=0 [ 294.217893][T11173] ALSA: mixer_oss: invalid OSS volume 'u' [ 295.269747][T11206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1426'. [ 295.645915][T11213] lo speed is unknown, defaulting to 1000 [ 295.648351][T11213] lo speed is unknown, defaulting to 1000 [ 295.691641][T11219] FAULT_INJECTION: forcing a failure. [ 295.691641][T11219] name failslab, interval 1, probability 0, space 0, times 0 [ 295.695634][T11219] CPU: 3 UID: 0 PID: 11219 Comm: syz.0.1428 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 295.695648][T11219] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 295.695655][T11219] Call Trace: [ 295.695658][T11219] [ 295.695662][T11219] dump_stack_lvl+0x16c/0x1f0 [ 295.695679][T11219] should_fail_ex+0x512/0x640 [ 295.695691][T11219] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 295.695703][T11219] should_failslab+0xc2/0x120 [ 295.695717][T11219] __kmalloc_cache_noprof+0x6a/0x3e0 [ 295.695726][T11219] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 295.695738][T11219] ? lockdep_hardirqs_on+0x7c/0x110 [ 295.695752][T11219] ? __request_module+0x2ad/0x690 [ 295.695768][T11219] __request_module+0x2ad/0x690 [ 295.695782][T11219] ? __pfx___request_module+0x10/0x10 [ 295.695795][T11219] ? aa_get_newest_label+0x375/0x680 [ 295.695807][T11219] ? __pfx_aa_get_newest_label+0x10/0x10 [ 295.695821][T11219] ? find_held_lock+0x2b/0x80 [ 295.695833][T11219] ? tcp_ca_find_autoload+0xec/0x2f0 [ 295.695846][T11219] tcp_ca_find_autoload+0x10d/0x2f0 [ 295.695858][T11219] tcp_set_congestion_control+0xdb/0xa20 [ 295.695872][T11219] mptcp_setsockopt+0x187b/0x30e0 [ 295.695885][T11219] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 295.695895][T11219] ? __lock_acquire+0x5ca/0x1ba0 [ 295.695908][T11219] ? __pfx_aa_sk_perm+0x10/0x10 [ 295.695919][T11219] ? find_held_lock+0x2b/0x80 [ 295.695930][T11219] ? sock_common_setsockopt+0x2e/0xf0 [ 295.695946][T11219] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 295.695961][T11219] do_sock_setsockopt+0x221/0x470 [ 295.695976][T11219] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 295.695998][T11219] __sys_setsockopt+0x120/0x1a0 [ 295.696013][T11219] __ia32_sys_setsockopt+0xbc/0x160 [ 295.696024][T11219] ? lockdep_hardirqs_on+0x7c/0x110 [ 295.696037][T11219] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 295.696051][T11219] __do_fast_syscall_32+0x73/0x120 [ 295.696066][T11219] do_fast_syscall_32+0x32/0x80 [ 295.696080][T11219] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 295.696093][T11219] RIP: 0023:0xf704e579 [ 295.696101][T11219] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 295.696110][T11219] RSP: 002b:00000000f503e55c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 295.696120][T11219] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000006 [ 295.696125][T11219] RDX: 000000000000000d RSI: 0000000080000000 RDI: 0000000000000004 [ 295.696131][T11219] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 295.696136][T11219] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 295.696142][T11219] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 295.696154][T11219] [ 295.803491][T11223] FAULT_INJECTION: forcing a failure. [ 295.803491][T11223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.809797][T11223] CPU: 2 UID: 0 PID: 11223 Comm: syz.0.1431 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 295.809811][T11223] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 295.809817][T11223] Call Trace: [ 295.809821][T11223] [ 295.809825][T11223] dump_stack_lvl+0x16c/0x1f0 [ 295.809843][T11223] should_fail_ex+0x512/0x640 [ 295.809857][T11223] _copy_to_user+0x32/0xd0 [ 295.809871][T11223] simple_read_from_buffer+0xcb/0x170 [ 295.809887][T11223] proc_fail_nth_read+0x197/0x270 [ 295.809903][T11223] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 295.809918][T11223] ? rw_verify_area+0xcf/0x680 [ 295.809933][T11223] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 295.809948][T11223] vfs_read+0x1de/0xc70 [ 295.809959][T11223] ? __pfx___mutex_lock+0x10/0x10 [ 295.809973][T11223] ? __pfx_vfs_read+0x10/0x10 [ 295.809986][T11223] ? __fget_files+0x20e/0x3c0 [ 295.809999][T11223] ksys_read+0x12a/0x240 [ 295.810009][T11223] ? __pfx_ksys_read+0x10/0x10 [ 295.810019][T11223] ? rcu_is_watching+0x12/0xc0 [ 295.810032][T11223] __do_fast_syscall_32+0x73/0x120 [ 295.810047][T11223] do_fast_syscall_32+0x32/0x80 [ 295.810061][T11223] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 295.810073][T11223] RIP: 0023:0xf704e579 [ 295.810081][T11223] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 295.810091][T11223] RSP: 002b:00000000f503e590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 295.810100][T11223] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f503e620 [ 295.810106][T11223] RDX: 000000000000000f RSI: 00000000f73b2ff4 RDI: 0000000000000000 [ 295.810111][T11223] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 295.810122][T11223] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 295.810128][T11223] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 295.810140][T11223] [ 296.278976][ T40] audit: type=1804 audit(1745055948.871:205): pid=11234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1433" name="/newroot/343/file0" dev="tmpfs" ino=1834 res=1 errno=0 [ 296.560655][T11245] netlink: zone id is out of range [ 296.563198][T11245] netlink: zone id is out of range [ 296.564875][T11245] netlink: zone id is out of range [ 296.612964][T11244] input: syz1 as /devices/virtual/input/input18 [ 296.981660][ T40] audit: type=1326 audit(1745055949.571:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11246 comm="syz.2.1436" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x0 [ 298.064667][T11273] syzkaller0: entered promiscuous mode [ 298.066519][T11273] syzkaller0: entered allmulticast mode [ 298.604307][ T40] audit: type=1804 audit(1745055951.191:207): pid=11285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1447" name="/newroot/347/file0" dev="tmpfs" ino=1855 res=1 errno=0 [ 299.570967][T11298] FAULT_INJECTION: forcing a failure. [ 299.570967][T11298] name failslab, interval 1, probability 0, space 0, times 0 [ 299.574955][T11298] CPU: 1 UID: 0 PID: 11298 Comm: syz.3.1449 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 299.574980][T11298] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 299.574986][T11298] Call Trace: [ 299.574991][T11298] [ 299.574995][T11298] dump_stack_lvl+0x16c/0x1f0 [ 299.575014][T11298] should_fail_ex+0x512/0x640 [ 299.575026][T11298] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 299.575038][T11298] should_failslab+0xc2/0x120 [ 299.575051][T11298] __kmalloc_cache_noprof+0x6a/0x3e0 [ 299.575061][T11298] ? ip6_setup_cork+0x23a/0x15d0 [ 299.575078][T11298] ip6_setup_cork+0x23a/0x15d0 [ 299.575094][T11298] ip6_append_data+0x255/0x4c0 [ 299.575112][T11298] ? __pfx_raw6_getfrag+0x10/0x10 [ 299.575127][T11298] rawv6_sendmsg+0x175a/0x4890 [ 299.575146][T11298] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 299.575163][T11298] ? __lock_acquire+0x5ca/0x1ba0 [ 299.575182][T11298] ? __pfx___might_resched+0x10/0x10 [ 299.575200][T11298] ? __pfx_aa_sk_perm+0x10/0x10 [ 299.575213][T11298] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 299.575226][T11298] ? inet_sendmsg+0x119/0x140 [ 299.575236][T11298] inet_sendmsg+0x119/0x140 [ 299.575246][T11298] ____sys_sendmsg+0x973/0xc70 [ 299.575257][T11298] ? __pfx_____sys_sendmsg+0x10/0x10 [ 299.575266][T11298] ? get_compat_msghdr+0x11a/0x170 [ 299.575281][T11298] ? __lock_acquire+0x5ca/0x1ba0 [ 299.575296][T11298] ___sys_sendmsg+0x134/0x1d0 [ 299.575310][T11298] ? __pfx____sys_sendmsg+0x10/0x10 [ 299.575330][T11298] ? find_held_lock+0x2b/0x80 [ 299.575348][T11298] __sys_sendmmsg+0x2f9/0x420 [ 299.575363][T11298] ? __pfx___sys_sendmmsg+0x10/0x10 [ 299.575387][T11298] ? fput+0x70/0xf0 [ 299.575399][T11298] ? ksys_write+0x1b9/0x240 [ 299.575413][T11298] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 299.575426][T11298] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 299.575441][T11298] __do_fast_syscall_32+0x73/0x120 [ 299.575456][T11298] do_fast_syscall_32+0x32/0x80 [ 299.575470][T11298] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 299.575482][T11298] RIP: 0023:0xf7f52579 [ 299.575490][T11298] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 299.575500][T11298] RSP: 002b:00000000f503455c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 299.575510][T11298] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080002940 [ 299.575517][T11298] RDX: 0000000000000062 RSI: 0000000000000000 RDI: 0000000000000000 [ 299.575522][T11298] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 299.575528][T11298] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 299.575533][T11298] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 299.575546][T11298] [ 300.805951][ T836] hid-generic 0007:0000:0000.0004: unknown main item tag 0x0 [ 300.810116][ T836] hid-generic 0007:0000:0000.0004: unknown main item tag 0x0 [ 300.812700][ T836] hid-generic 0007:0000:0000.0004: unknown main item tag 0x0 [ 300.815214][ T836] hid-generic 0007:0000:0000.0004: unknown main item tag 0x0 [ 300.817585][ T836] hid-generic 0007:0000:0000.0004: unknown main item tag 0x0 [ 300.819942][ T836] hid-generic 0007:0000:0000.0004: unknown main item tag 0x0 [ 300.822251][ T836] hid-generic 0007:0000:0000.0004: unknown main item tag 0x0 [ 300.824893][ T836] hid-generic 0007:0000:0000.0004: unknown main item tag 0x0 [ 300.827247][ T836] hid-generic 0007:0000:0000.0004: unknown main item tag 0x0 [ 300.829557][ T836] hid-generic 0007:0000:0000.0004: unknown main item tag 0x0 [ 300.831855][ T836] hid-generic 0007:0000:0000.0004: unknown main item tag 0x0 [ 300.834162][ T836] hid-generic 0007:0000:0000.0004: unknown main item tag 0x0 [ 300.837130][ T836] hid-generic 0007:0000:0000.0004: unknown main item tag 0x0 [ 300.839574][ T836] hid-generic 0007:0000:0000.0004: unknown main item tag 0x0 [ 300.841996][ T836] hid-generic 0007:0000:0000.0004: unknown main item tag 0x0 [ 300.844695][ T836] hid-generic 0007:0000:0000.0004: unknown main item tag 0x0 [ 300.847253][ T836] hid-generic 0007:0000:0000.0004: unknown main item tag 0x0 [ 300.849642][ T836] hid-generic 0007:0000:0000.0004: unknown main item tag 0x0 [ 300.852015][ T836] hid-generic 0007:0000:0000.0004: unknown main item tag 0x0 [ 300.854799][ T836] hid-generic 0007:0000:0000.0004: unknown main item tag 0x0 [ 300.857262][ T836] hid-generic 0007:0000:0000.0004: unknown main item tag 0x0 [ 300.859635][ T836] hid-generic 0007:0000:0000.0004: unknown main item tag 0x0 [ 300.861998][ T836] hid-generic 0007:0000:0000.0004: unknown main item tag 0x0 [ 300.864698][ T836] hid-generic 0007:0000:0000.0004: unknown main item tag 0x0 [ 300.867143][ T836] hid-generic 0007:0000:0000.0004: unknown main item tag 0x0 [ 300.869477][ T836] hid-generic 0007:0000:0000.0004: unknown main item tag 0x0 [ 300.871888][ T836] hid-generic 0007:0000:0000.0004: unknown main item tag 0x0 [ 300.874186][ T836] hid-generic 0007:0000:0000.0004: unknown main item tag 0x0 [ 300.876889][ T836] hid-generic 0007:0000:0000.0004: unknown main item tag 0x0 [ 300.879207][ T836] hid-generic 0007:0000:0000.0004: unknown main item tag 0x0 [ 300.881495][ T836] hid-generic 0007:0000:0000.0004: unknown main item tag 0x0 [ 300.883797][ T836] hid-generic 0007:0000:0000.0004: unknown main item tag 0x0 [ 300.889007][ T836] hid-generic 0007:0000:0000.0004: hidraw1: HID vffffff.ff Device [syz0] on syz0 [ 301.054511][ T5984] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 301.250394][T11330] 9pnet_fd: Insufficient options for proto=fd [ 301.315192][ T40] audit: type=1804 audit(1745055953.911:208): pid=11334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1458" name="/newroot/363/file0" dev="tmpfs" ino=1916 res=1 errno=0 [ 301.376631][ T5984] usb 7-1: config 0 has no interfaces? [ 301.379025][ T5984] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 301.381960][ T5984] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.387100][ T5984] usb 7-1: config 0 descriptor?? [ 302.544407][ T5984] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 302.574378][ T34] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 302.704347][ T5984] usb 8-1: Using ep0 maxpacket: 8 [ 302.707393][ T5984] usb 8-1: config 0 has no interfaces? [ 302.710851][ T5984] usb 8-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 302.713759][ T5984] usb 8-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 302.716374][ T5984] usb 8-1: Product: syz [ 302.717747][ T5984] usb 8-1: Manufacturer: syz [ 302.719285][ T5984] usb 8-1: SerialNumber: syz [ 302.722291][ T5984] usb 8-1: config 0 descriptor?? [ 302.903104][ T34] usb 5-1: unable to get BOS descriptor or descriptor too short [ 302.915680][ T34] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 302.918091][ T34] usb 5-1: can't read configurations, error -71 [ 302.926069][ T5306] Bluetooth: hci0: Unable to find connection for big 0xb3 [ 303.852724][ T6015] usb 7-1: USB disconnect, device number 7 [ 304.878877][ T40] audit: type=1804 audit(1745055957.471:209): pid=11385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1475" name="/newroot/375/file0" dev="tmpfs" ino=1984 res=1 errno=0 [ 305.476905][ T6082] usb 8-1: USB disconnect, device number 11 [ 305.663200][T11408] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1482'. [ 305.667335][T11408] MTD: Couldn't look up '': -2 [ 305.670644][T11408] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1482'. [ 305.826742][T11414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1485'. [ 305.896523][T11419] macsec1: entered allmulticast mode [ 305.899875][T11420] FAULT_INJECTION: forcing a failure. [ 305.899875][T11420] name failslab, interval 1, probability 0, space 0, times 0 [ 305.907779][T11419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1487'. [ 305.909500][T11420] CPU: 1 UID: 0 PID: 11420 Comm: syz.2.1488 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 305.909515][T11420] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 305.909521][T11420] Call Trace: [ 305.909524][T11420] [ 305.909528][T11420] dump_stack_lvl+0x16c/0x1f0 [ 305.909546][T11420] should_fail_ex+0x512/0x640 [ 305.909558][T11420] ? __kmalloc_node_noprof+0xc5/0x500 [ 305.909573][T11420] should_failslab+0xc2/0x120 [ 305.909586][T11420] __kmalloc_node_noprof+0xd8/0x500 [ 305.909598][T11420] ? __vmalloc_node_range_noprof+0x3eb/0x1540 [ 305.909611][T11420] __vmalloc_node_range_noprof+0x3eb/0x1540 [ 305.909620][T11420] ? __mod_memcg_lruvec_state+0x533/0x760 [ 305.909633][T11420] ? mod_objcg_state+0x5eb/0xa50 [ 305.909644][T11420] ? vhost_task_create+0x1d2/0x2e0 [ 305.909662][T11420] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 305.909687][T11420] ? rcu_is_watching+0x12/0xc0 [ 305.909700][T11420] ? vhost_task_create+0x1d2/0x2e0 [ 305.909714][T11420] __vmalloc_node_noprof+0x74/0xa0 [ 305.909725][T11420] ? vhost_task_create+0x1d2/0x2e0 [ 305.909740][T11420] copy_process+0x2ead/0x91a0 [ 305.909752][T11420] ? kasan_save_track+0x14/0x30 [ 305.909763][T11420] ? __kasan_kmalloc+0xaa/0xb0 [ 305.909772][T11420] ? vhost_task_create+0xe5/0x2e0 [ 305.909786][T11420] ? kvm_mmu_post_init_vm+0x1b7/0x370 [ 305.909795][T11420] ? kvm_arch_vcpu_ioctl_run+0x66/0x18c0 [ 305.909810][T11420] ? kvm_vcpu_ioctl+0x5e9/0x1680 [ 305.909824][T11420] ? kvm_vcpu_compat_ioctl+0x20f/0x3d0 [ 305.909838][T11420] ? __ia32_compat_sys_ioctl+0x24c/0x360 [ 305.909852][T11420] ? __do_fast_syscall_32+0x73/0x120 [ 305.909865][T11420] ? do_fast_syscall_32+0x32/0x80 [ 305.909878][T11420] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 305.909897][T11420] ? __pfx_copy_process+0x10/0x10 [ 305.909917][T11420] ? lockdep_init_map_type+0x5c/0x280 [ 305.909932][T11420] ? lockdep_init_map_type+0x5c/0x280 [ 305.909946][T11420] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 305.909958][T11420] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 305.909972][T11420] vhost_task_create+0x1d2/0x2e0 [ 305.909987][T11420] ? __pfx_vhost_task_create+0x10/0x10 [ 305.910001][T11420] ? register_lock_class+0x41/0x4c0 [ 305.910021][T11420] ? __pfx_vhost_task_fn+0x10/0x10 [ 305.910037][T11420] ? kvm_vcpu_ioctl+0x27e/0x1680 [ 305.910056][T11420] kvm_mmu_post_init_vm+0x1b7/0x370 [ 305.910067][T11420] kvm_arch_vcpu_ioctl_run+0x66/0x18c0 [ 305.910082][T11420] ? kvm_vcpu_ioctl+0x14c2/0x1680 [ 305.910099][T11420] kvm_vcpu_ioctl+0x5e9/0x1680 [ 305.910116][T11420] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 305.910131][T11420] ? tomoyo_path_number_perm+0x18d/0x580 [ 305.910145][T11420] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 305.910156][T11420] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 305.910172][T11420] ? do_vfs_ioctl+0x512/0x1990 [ 305.910186][T11420] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 305.910211][T11420] kvm_vcpu_compat_ioctl+0x20f/0x3d0 [ 305.910227][T11420] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 305.910242][T11420] ? __fget_files+0x20e/0x3c0 [ 305.910251][T11420] ? __fput_deferred+0x370/0x370 [ 305.910266][T11420] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 305.910282][T11420] __ia32_compat_sys_ioctl+0x24c/0x360 [ 305.910297][T11420] __do_fast_syscall_32+0x73/0x120 [ 305.910313][T11420] do_fast_syscall_32+0x32/0x80 [ 305.910327][T11420] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 305.910338][T11420] RIP: 0023:0xf711e579 [ 305.910346][T11420] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 305.910356][T11420] RSP: 002b:00000000f510e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 305.910365][T11420] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 305.910372][T11420] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 305.910377][T11420] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 305.910382][T11420] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 305.910388][T11420] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 305.910400][T11420] [ 305.910496][T11420] warn_alloc: 1 callbacks suppressed [ 305.910503][T11420] syz.2.1488: vmalloc error: size 32768, failed to allocated page array size 64, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 306.054453][T11420] CPU: 2 UID: 0 PID: 11420 Comm: syz.2.1488 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 306.054469][T11420] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 306.054476][T11420] Call Trace: [ 306.054480][T11420] [ 306.054484][T11420] dump_stack_lvl+0x16c/0x1f0 [ 306.054502][T11420] warn_alloc+0x248/0x3a0 [ 306.054515][T11420] ? __pfx_warn_alloc+0x10/0x10 [ 306.054526][T11420] ? dump_stack_lvl+0x1a1/0x1f0 [ 306.054543][T11420] ? rcu_is_watching+0x12/0xc0 [ 306.054554][T11420] ? __kmalloc_node_noprof+0x23b/0x500 [ 306.054582][T11420] __vmalloc_node_range_noprof+0x1110/0x1540 [ 306.054592][T11420] ? __mod_memcg_lruvec_state+0x533/0x760 [ 306.054607][T11420] ? vhost_task_create+0x1d2/0x2e0 [ 306.054625][T11420] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 306.054638][T11420] ? rcu_is_watching+0x12/0xc0 [ 306.054648][T11420] ? vhost_task_create+0x1d2/0x2e0 [ 306.054662][T11420] __vmalloc_node_noprof+0x74/0xa0 [ 306.054672][T11420] ? vhost_task_create+0x1d2/0x2e0 [ 306.054711][T11420] copy_process+0x2ead/0x91a0 [ 306.054724][T11420] ? kasan_save_track+0x14/0x30 [ 306.054735][T11420] ? __kasan_kmalloc+0xaa/0xb0 [ 306.054744][T11420] ? vhost_task_create+0xe5/0x2e0 [ 306.054757][T11420] ? kvm_mmu_post_init_vm+0x1b7/0x370 [ 306.054767][T11420] ? kvm_arch_vcpu_ioctl_run+0x66/0x18c0 [ 306.054782][T11420] ? kvm_vcpu_ioctl+0x5e9/0x1680 [ 306.054797][T11420] ? kvm_vcpu_compat_ioctl+0x20f/0x3d0 [ 306.054811][T11420] ? __ia32_compat_sys_ioctl+0x24c/0x360 [ 306.054825][T11420] ? __do_fast_syscall_32+0x73/0x120 [ 306.054839][T11420] ? do_fast_syscall_32+0x32/0x80 [ 306.054852][T11420] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 306.054871][T11420] ? __pfx_copy_process+0x10/0x10 [ 306.054891][T11420] ? lockdep_init_map_type+0x5c/0x280 [ 306.054907][T11420] ? lockdep_init_map_type+0x5c/0x280 [ 306.054920][T11420] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 306.054932][T11420] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 306.054946][T11420] vhost_task_create+0x1d2/0x2e0 [ 306.054961][T11420] ? __pfx_vhost_task_create+0x10/0x10 [ 306.054975][T11420] ? register_lock_class+0x41/0x4c0 [ 306.054991][T11420] ? __pfx_vhost_task_fn+0x10/0x10 [ 306.055007][T11420] ? kvm_vcpu_ioctl+0x27e/0x1680 [ 306.055026][T11420] kvm_mmu_post_init_vm+0x1b7/0x370 [ 306.055036][T11420] kvm_arch_vcpu_ioctl_run+0x66/0x18c0 [ 306.055051][T11420] ? kvm_vcpu_ioctl+0x14c2/0x1680 [ 306.055068][T11420] kvm_vcpu_ioctl+0x5e9/0x1680 [ 306.055087][T11420] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 306.055115][T11420] ? tomoyo_path_number_perm+0x18d/0x580 [ 306.055131][T11420] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 306.055143][T11420] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 306.055158][T11420] ? do_vfs_ioctl+0x512/0x1990 [ 306.055172][T11420] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 306.055198][T11420] kvm_vcpu_compat_ioctl+0x20f/0x3d0 [ 306.055213][T11420] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 306.055229][T11420] ? __fget_files+0x20e/0x3c0 [ 306.055237][T11420] ? __fput_deferred+0x370/0x370 [ 306.055252][T11420] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 306.055268][T11420] __ia32_compat_sys_ioctl+0x24c/0x360 [ 306.055284][T11420] __do_fast_syscall_32+0x73/0x120 [ 306.055299][T11420] do_fast_syscall_32+0x32/0x80 [ 306.055313][T11420] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 306.055325][T11420] RIP: 0023:0xf711e579 [ 306.055333][T11420] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 306.055343][T11420] RSP: 002b:00000000f510e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 306.055354][T11420] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 306.055361][T11420] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 306.055366][T11420] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 306.055372][T11420] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 306.055377][T11420] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 306.055390][T11420] [ 306.055422][T11420] Mem-Info: [ 306.194446][T11420] active_anon:8333 inactive_anon:112 isolated_anon:0 [ 306.194446][T11420] active_file:3656 inactive_file:44319 isolated_file:0 [ 306.194446][T11420] unevictable:1768 dirty:227 writeback:0 [ 306.194446][T11420] slab_reclaimable:7771 slab_unreclaimable:58535 [ 306.194446][T11420] mapped:27689 shmem:5217 pagetables:957 [ 306.194446][T11420] sec_pagetables:314 bounce:0 [ 306.194446][T11420] kernel_misc_reclaimable:0 [ 306.194446][T11420] free:40122 free_pcp:5753 free_cma:0 [ 306.234339][T11420] Node 0 active_anon:1236kB inactive_anon:52kB active_file:40kB inactive_file:80kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:184kB dirty:4kB writeback:0kB shmem:4456kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9628kB pagetables:1412kB sec_pagetables:1144kB all_unreclaimable? no Balloon:0kB [ 306.254462][T11420] Node 1 active_anon:32228kB inactive_anon:396kB active_file:14584kB inactive_file:177200kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:111108kB dirty:908kB writeback:0kB shmem:16508kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3100kB pagetables:2536kB sec_pagetables:112kB all_unreclaimable? no Balloon:0kB [ 306.265583][T11420] Node 0 DMA free:2956kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 306.273949][T11420] lowmem_reserve[]: 0 290 290 290 290 [ 306.284368][T11420] Node 0 DMA32 free:18544kB boost:0kB min:13336kB low:16668kB high:20000kB reserved_highatomic:2048KB active_anon:1288kB inactive_anon:52kB active_file:40kB inactive_file:80kB unevictable:3536kB writepending:4kB present:1032196kB managed:297564kB mlocked:0kB bounce:0kB free_pcp:6524kB local_pcp:784kB free_cma:0kB [ 306.285452][T11426] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1490'. [ 306.294347][T11420] lowmem_reserve[]: 0 0 0 0 0 [ 306.297656][T11420] Node 1 DMA32 free:137752kB boost:0kB min:47148kB low:58932kB high:70716kB reserved_highatomic:2048KB active_anon:32428kB inactive_anon:396kB active_file:14584kB inactive_file:177200kB unevictable:3536kB writepending:908kB present:1048432kB managed:948284kB mlocked:0kB bounce:0kB free_pcp:16612kB local_pcp:5144kB free_cma:0kB [ 306.315523][T11420] lowmem_reserve[]: 0 0 0 0 0 [ 306.326397][T11420] Node 0 DMA: 55*4kB (U) 50*8kB (U) 30*16kB (U) 8*32kB (U) 3*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 2956kB [ 306.331957][T11420] Node 0 DMA32: 101*4kB (UE) 103*8kB (UME) 42*16kB (UMH) 92*32kB (UMEH) 42*64kB (UMEH) 24*128kB (UMEH) 9*256kB (UME) 5*512kB (MEH) 3*1024kB (UMH) 0*2048kB 0*4096kB = 18540kB [ 306.337858][T11420] Node 1 DMA32: 394*4kB (UM) 363*8kB (UMEH) 141*16kB (UMEH) 84*32kB (UEH) 207*64kB (UEH) 105*128kB (UMEH) 72*256kB (UMEH) 35*512kB (UMEH) 16*1024kB (UM) 8*2048kB (UM) 8*4096kB (UM) = 138000kB [ 306.343968][T11420] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 306.354522][T11420] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 306.357415][T11420] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 306.360339][T11420] Node 1 hugepages_total=6 hugepages_free=1 hugepages_surp=4 hugepages_size=2048kB [ 306.365116][T11420] 53435 total pagecache pages [ 306.366651][T11420] 164 pages in swap cache [ 306.384329][T11420] Free swap = 122188kB [ 306.394434][T11420] Total swap = 124996kB [ 306.397723][T11420] 524155 pages RAM [ 306.398931][T11420] 0 pages HighMem/MovableOnly [ 306.400458][T11420] 208853 pages reserved [ 306.401761][T11420] 0 pages cma reserved [ 306.418135][ T40] audit: type=1804 audit(1745055959.011:210): pid=11432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1491" name="/newroot/384/file0" dev="tmpfs" ino=2070 res=1 errno=0 [ 306.683760][T11449] FAULT_INJECTION: forcing a failure. [ 306.683760][T11449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.687988][T11449] CPU: 1 UID: 0 PID: 11449 Comm: syz.3.1492 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 306.688002][T11449] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 306.688020][T11449] Call Trace: [ 306.688024][T11449] [ 306.688028][T11449] dump_stack_lvl+0x16c/0x1f0 [ 306.688046][T11449] should_fail_ex+0x512/0x640 [ 306.688064][T11449] _copy_from_user+0x2e/0xd0 [ 306.688077][T11449] get_compat_msghdr+0xa7/0x170 [ 306.688090][T11449] ? __pfx_get_compat_msghdr+0x10/0x10 [ 306.688104][T11449] ? __lock_acquire+0x5ca/0x1ba0 [ 306.688120][T11449] ___sys_sendmsg+0x1ae/0x1d0 [ 306.688135][T11449] ? __pfx____sys_sendmsg+0x10/0x10 [ 306.688154][T11449] ? find_held_lock+0x2b/0x80 [ 306.688172][T11449] __sys_sendmmsg+0x2f9/0x420 [ 306.688187][T11449] ? __pfx___sys_sendmmsg+0x10/0x10 [ 306.688210][T11449] ? fput+0x70/0xf0 [ 306.688223][T11449] ? ksys_write+0x1b9/0x240 [ 306.688236][T11449] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 306.688249][T11449] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 306.688264][T11449] __do_fast_syscall_32+0x73/0x120 [ 306.688279][T11449] do_fast_syscall_32+0x32/0x80 [ 306.688297][T11449] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 306.688310][T11449] RIP: 0023:0xf7f52579 [ 306.688318][T11449] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 306.688328][T11449] RSP: 002b:00000000f503455c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 306.688337][T11449] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080002940 [ 306.688343][T11449] RDX: 0000000000000062 RSI: 0000000000000000 RDI: 0000000000000000 [ 306.688349][T11449] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 306.688354][T11449] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 306.688359][T11449] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 306.688371][T11449] [ 307.220063][T11471] FAULT_INJECTION: forcing a failure. [ 307.220063][T11471] name failslab, interval 1, probability 0, space 0, times 0 [ 307.223981][T11471] CPU: 3 UID: 0 PID: 11471 Comm: syz.1.1496 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 307.223995][T11471] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 307.224001][T11471] Call Trace: [ 307.224005][T11471] [ 307.224008][T11471] dump_stack_lvl+0x16c/0x1f0 [ 307.224026][T11471] should_fail_ex+0x512/0x640 [ 307.224039][T11471] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 307.224052][T11471] should_failslab+0xc2/0x120 [ 307.224065][T11471] __kmalloc_cache_noprof+0x6a/0x3e0 [ 307.224075][T11471] ? __genradix_ptr_alloc+0x340/0x5f0 [ 307.224088][T11471] ? sctp_auth_shkey_create+0x9e/0x210 [ 307.224107][T11471] sctp_auth_shkey_create+0x9e/0x210 [ 307.224122][T11471] sctp_auth_asoc_copy_shkeys+0x1f2/0x360 [ 307.224141][T11471] sctp_association_new+0x19ad/0x2a00 [ 307.224155][T11471] sctp_connect_new_asoc+0x1b6/0x790 [ 307.224167][T11471] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 307.224179][T11471] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 307.224196][T11471] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 307.224208][T11471] sctp_sendmsg+0x15f9/0x1ee0 [ 307.224222][T11471] ? __pfx_sctp_sendmsg+0x10/0x10 [ 307.224243][T11471] ? __might_fault+0xe3/0x190 [ 307.224256][T11471] ? __pfx_aa_sk_perm+0x10/0x10 [ 307.224282][T11471] ? __pfx_sctp_sendmsg+0x10/0x10 [ 307.224294][T11471] inet_sendmsg+0x119/0x140 [ 307.224304][T11471] __sys_sendto+0x431/0x510 [ 307.224318][T11471] ? __pfx___sys_sendto+0x10/0x10 [ 307.224341][T11471] ? ksys_write+0x1b9/0x240 [ 307.224352][T11471] ? __pfx_ksys_write+0x10/0x10 [ 307.224363][T11471] __ia32_sys_sendto+0xdd/0x1b0 [ 307.224374][T11471] ? lockdep_hardirqs_on+0x7c/0x110 [ 307.224388][T11471] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 307.224402][T11471] __do_fast_syscall_32+0x73/0x120 [ 307.224418][T11471] do_fast_syscall_32+0x32/0x80 [ 307.224432][T11471] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 307.224445][T11471] RIP: 0023:0xf707e579 [ 307.224453][T11471] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 307.224462][T11471] RSP: 002b:00000000f506e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 307.224472][T11471] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 307.224478][T11471] RDX: 0000000000034000 RSI: 0000000000000000 RDI: 0000000080000480 [ 307.224484][T11471] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 307.224489][T11471] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 307.224495][T11471] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 307.224507][T11471] [ 307.599950][T11485] ubi31: attaching mtd0 [ 307.604381][ T5306] Bluetooth: hci3: command 0x0406 tx timeout [ 307.660529][T11490] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1503'. [ 307.723289][T11492] FAULT_INJECTION: forcing a failure. [ 307.723289][T11492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.728856][T11492] CPU: 2 UID: 0 PID: 11492 Comm: syz.2.1504 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 307.728871][T11492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 307.728877][T11492] Call Trace: [ 307.728881][T11492] [ 307.728885][T11492] dump_stack_lvl+0x16c/0x1f0 [ 307.728903][T11492] should_fail_ex+0x512/0x640 [ 307.728918][T11492] _copy_to_user+0x32/0xd0 [ 307.728932][T11492] simple_read_from_buffer+0xcb/0x170 [ 307.728949][T11492] proc_fail_nth_read+0x197/0x270 [ 307.728964][T11492] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 307.728980][T11492] ? rw_verify_area+0xcf/0x680 [ 307.728995][T11492] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 307.729010][T11492] vfs_read+0x1de/0xc70 [ 307.729021][T11492] ? __pfx___mutex_lock+0x10/0x10 [ 307.729035][T11492] ? __pfx_vfs_read+0x10/0x10 [ 307.729048][T11492] ? __fget_files+0x20e/0x3c0 [ 307.729062][T11492] ksys_read+0x12a/0x240 [ 307.729071][T11492] ? __pfx_ksys_read+0x10/0x10 [ 307.729082][T11492] ? rcu_is_watching+0x12/0xc0 [ 307.729102][T11492] __do_fast_syscall_32+0x73/0x120 [ 307.729117][T11492] do_fast_syscall_32+0x32/0x80 [ 307.729131][T11492] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 307.729144][T11492] RIP: 0023:0xf711e579 [ 307.729152][T11492] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 307.729162][T11492] RSP: 002b:00000000f510e590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 307.729172][T11492] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f510e620 [ 307.729178][T11492] RDX: 000000000000000f RSI: 00000000f7482ff4 RDI: 0000000000000000 [ 307.729183][T11492] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 307.729188][T11492] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 307.729194][T11492] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 307.729206][T11492] [ 307.818453][T11496] netlink: 'syz.2.1506': attribute type 1 has an invalid length. [ 307.835604][T11496] 8021q: adding VLAN 0 to HW filter on device bond2 [ 307.841859][T11496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1506'. [ 308.507769][ T40] audit: type=1804 audit(1745055961.101:211): pid=11506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1508" name="/newroot/386/file0" dev="tmpfs" ino=2082 res=1 errno=0 [ 308.938709][T11510] FAULT_INJECTION: forcing a failure. [ 308.938709][T11510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.942808][T11510] CPU: 1 UID: 0 PID: 11510 Comm: syz.1.1509 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 308.942822][T11510] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 308.942829][T11510] Call Trace: [ 308.942833][T11510] [ 308.942837][T11510] dump_stack_lvl+0x16c/0x1f0 [ 308.942858][T11510] should_fail_ex+0x512/0x640 [ 308.942873][T11510] _copy_from_iter+0x2a4/0x15b0 [ 308.942887][T11510] ? __alloc_skb+0x200/0x380 [ 308.942900][T11510] ? __pfx__copy_from_iter+0x10/0x10 [ 308.942913][T11510] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 308.942932][T11510] netlink_sendmsg+0x829/0xdd0 [ 308.942948][T11510] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.942962][T11510] ? __import_iovec+0x1c8/0x660 [ 308.942978][T11510] ____sys_sendmsg+0xa95/0xc70 [ 308.942989][T11510] ? __pfx_____sys_sendmsg+0x10/0x10 [ 308.942997][T11510] ? get_compat_msghdr+0x11a/0x170 [ 308.943015][T11510] ___sys_sendmsg+0x134/0x1d0 [ 308.943029][T11510] ? __pfx____sys_sendmsg+0x10/0x10 [ 308.943057][T11510] __sys_sendmsg+0x16d/0x220 [ 308.943070][T11510] ? __pfx___sys_sendmsg+0x10/0x10 [ 308.943092][T11510] ? rcu_is_watching+0x12/0xc0 [ 308.943105][T11510] __do_fast_syscall_32+0x73/0x120 [ 308.943120][T11510] do_fast_syscall_32+0x32/0x80 [ 308.943134][T11510] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 308.943147][T11510] RIP: 0023:0xf707e579 [ 308.943154][T11510] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 308.943168][T11510] RSP: 002b:00000000f504d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 308.943177][T11510] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000100 [ 308.943183][T11510] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 308.943191][T11510] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 308.943198][T11510] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 308.943204][T11510] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 308.943216][T11510] [ 309.278407][T11520] FAULT_INJECTION: forcing a failure. [ 309.278407][T11520] name failslab, interval 1, probability 0, space 0, times 0 [ 309.282796][T11520] CPU: 3 UID: 0 PID: 11520 Comm: syz.3.1512 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 309.282811][T11520] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 309.282818][T11520] Call Trace: [ 309.282822][T11520] [ 309.282826][T11520] dump_stack_lvl+0x16c/0x1f0 [ 309.282844][T11520] should_fail_ex+0x512/0x640 [ 309.282857][T11520] ? __kmalloc_noprof+0xbf/0x510 [ 309.282870][T11520] ? ovl_get_index_name_fh+0x55/0x190 [ 309.282885][T11520] should_failslab+0xc2/0x120 [ 309.282899][T11520] __kmalloc_noprof+0xd2/0x510 [ 309.282910][T11520] ? __pfx_ovl_encode_real_fh+0x10/0x10 [ 309.282926][T11520] ovl_get_index_name_fh+0x55/0x190 [ 309.282942][T11520] ovl_lookup_index+0x10f/0x810 [ 309.282959][T11520] ? __pfx_ovl_lookup_index+0x10/0x10 [ 309.282978][T11520] ovl_lookup+0xa7f/0x2270 [ 309.282992][T11520] ? __pfx_ovl_lookup+0x10/0x10 [ 309.283002][T11520] ? d_alloc_parallel+0x6ae/0x12e0 [ 309.283018][T11520] ? mark_lock+0x32d/0x610 [ 309.283034][T11520] ? __pfx_d_alloc_parallel+0x10/0x10 [ 309.283050][T11520] ? lockdep_init_map_type+0x5c/0x280 [ 309.283067][T11520] __lookup_slow+0x24e/0x460 [ 309.283080][T11520] ? __pfx___lookup_slow+0x10/0x10 [ 309.283102][T11520] ? lookup_fast+0x156/0x610 [ 309.283118][T11520] walk_component+0x353/0x5b0 [ 309.283135][T11520] path_lookupat+0x17e/0x780 [ 309.283146][T11520] filename_lookup+0x224/0x5f0 [ 309.283157][T11520] ? __pfx_filename_lookup+0x10/0x10 [ 309.283178][T11520] ? getname_flags.part.0+0x1c5/0x550 [ 309.283191][T11520] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 309.283208][T11520] user_path_at+0x3a/0x60 [ 309.283218][T11520] do_fchownat+0xf9/0x200 [ 309.283231][T11520] ? __pfx_do_fchownat+0x10/0x10 [ 309.283245][T11520] ? __pfx_ksys_write+0x10/0x10 [ 309.283254][T11520] ? rcu_is_watching+0x12/0xc0 [ 309.283266][T11520] __ia32_sys_lchown16+0xe6/0x120 [ 309.283277][T11520] __do_fast_syscall_32+0x73/0x120 [ 309.283292][T11520] do_fast_syscall_32+0x32/0x80 [ 309.283307][T11520] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 309.283325][T11520] RIP: 0023:0xf7f52579 [ 309.283334][T11520] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 309.283344][T11520] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000010 [ 309.283354][T11520] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000000 [ 309.283360][T11520] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 309.283365][T11520] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 309.283370][T11520] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 309.283376][T11520] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 309.283388][T11520] [ 309.585580][T11530] 9pnet_fd: Insufficient options for proto=fd [ 309.697438][ T5306] Bluetooth: hci3: command 0x0406 tx timeout [ 310.794432][ T836] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 310.844704][ T9] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 310.919487][ T5306] Bluetooth: hci3: unexpected cc 0x0c2d length: 5 > 4 [ 310.921653][ T5306] Bluetooth: hci3: unexpected event for opcode 0x0c2d [ 310.964340][ T836] usb 5-1: Using ep0 maxpacket: 16 [ 310.971466][ T836] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 310.974570][ T836] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 310.977107][ T836] usb 5-1: Product: syz [ 310.978421][ T836] usb 5-1: Manufacturer: syz [ 310.979886][ T836] usb 5-1: SerialNumber: syz [ 310.982533][ T836] usb 5-1: config 0 descriptor?? [ 311.005503][ T9] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 311.008548][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 311.012078][ T9] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 311.014994][ T9] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 311.017510][ T9] usb 8-1: Product: syz [ 311.018836][ T9] usb 8-1: Manufacturer: syz [ 311.020286][ T9] usb 8-1: SerialNumber: syz [ 311.026873][ T9] usb 8-1: config 0 descriptor?? [ 311.033521][ T9] usb 8-1: selecting invalid altsetting 0 [ 311.191758][T11548] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 311.196857][ T9] usb 5-1: USB disconnect, device number 14 [ 311.230238][ T836] usb 8-1: USB disconnect, device number 12 [ 311.401834][T11565] lo speed is unknown, defaulting to 1000 [ 311.406215][T11565] lo speed is unknown, defaulting to 1000 [ 311.474116][ T40] audit: type=1800 audit(1745055964.061:212): pid=11566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1525" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 311.661581][ T40] audit: type=1804 audit(1745055964.251:213): pid=11572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1534" name="/newroot/365/file0" dev="tmpfs" ino=1952 res=1 errno=0 [ 312.266373][T11586] --map-set only usable from mangle table [ 313.530691][ T5306] Bluetooth: hci2: unexpected event for opcode 0x202d [ 313.657247][T11614] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1540'. [ 313.666771][ T7665] tipc: Subscription rejected, illegal request [ 313.770286][T11619] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1542'. [ 313.773487][T11619] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1542'. [ 314.194394][ T836] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 314.364527][ T836] usb 5-1: Using ep0 maxpacket: 8 [ 314.369436][ T836] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 314.373059][ T836] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 314.376892][ T836] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 314.380073][ T836] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 314.384112][ T836] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 314.388779][ T836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.570471][ T40] audit: type=1804 audit(1745055967.161:214): pid=11631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1545" name="/newroot/398/file0" dev="tmpfs" ino=2112 res=1 errno=0 [ 314.596973][ T836] usb 5-1: GET_CAPABILITIES returned 0 [ 314.598806][ T836] usbtmc 5-1:16.0: can't read capabilities [ 314.942501][ T24] usb 5-1: USB disconnect, device number 15 [ 315.183687][T11642] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1548'. [ 315.186638][T11642] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1548'. [ 315.189473][T11642] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1548'. [ 315.192301][T11642] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1548'. [ 315.444419][ T34] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 315.604443][ T34] usb 8-1: Using ep0 maxpacket: 16 [ 315.606587][ T34] usb 8-1: too many configurations: 51, using maximum allowed: 8 [ 315.610533][ T34] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 315.612979][ T34] usb 8-1: can't read configurations, error -61 [ 315.745151][ T34] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 315.914350][ T34] usb 8-1: Using ep0 maxpacket: 16 [ 315.917047][ T34] usb 8-1: too many configurations: 51, using maximum allowed: 8 [ 315.921174][ T34] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 315.923672][ T34] usb 8-1: can't read configurations, error -61 [ 315.926578][ T34] usb usb8-port1: attempt power cycle [ 315.973544][T11663] lo speed is unknown, defaulting to 1000 [ 315.979575][T11663] lo speed is unknown, defaulting to 1000 [ 316.274348][ T34] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 316.334877][ T34] usb 8-1: Using ep0 maxpacket: 16 [ 316.337386][ T34] usb 8-1: too many configurations: 51, using maximum allowed: 8 [ 316.341158][ T34] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 316.343703][ T34] usb 8-1: can't read configurations, error -61 [ 316.474349][ T34] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 316.494822][ T34] usb 8-1: Using ep0 maxpacket: 16 [ 316.496960][ T34] usb 8-1: too many configurations: 51, using maximum allowed: 8 [ 316.500703][ T34] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 316.503077][ T34] usb 8-1: can't read configurations, error -61 [ 316.505541][ T34] usb usb8-port1: unable to enumerate USB device [ 316.576574][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.579037][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.036484][ T40] audit: type=1326 audit(1745055969.631:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11694 comm="syz.1.1564" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 317.054784][ T40] audit: type=1326 audit(1745055969.631:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11694 comm="syz.1.1564" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 317.062824][ T40] audit: type=1326 audit(1745055969.631:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11694 comm="syz.1.1564" exe="/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 317.070801][ T40] audit: type=1326 audit(1745055969.631:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11694 comm="syz.1.1564" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 317.077905][ T40] audit: type=1326 audit(1745055969.631:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11694 comm="syz.1.1564" exe="/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 317.084741][ T40] audit: type=1326 audit(1745055969.631:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11694 comm="syz.1.1564" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 317.091913][ T40] audit: type=1326 audit(1745055969.631:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11694 comm="syz.1.1564" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 317.100245][ T40] audit: type=1326 audit(1745055969.631:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11694 comm="syz.1.1564" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 317.108032][ T40] audit: type=1326 audit(1745055969.631:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11694 comm="syz.1.1564" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 317.115152][ T40] audit: type=1326 audit(1745055969.631:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11694 comm="syz.1.1564" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 317.391649][T11710] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1569'. [ 318.098827][T11718] FAULT_INJECTION: forcing a failure. [ 318.098827][T11718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.104331][T11718] CPU: 1 UID: 0 PID: 11718 Comm: syz.1.1573 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 318.104346][T11718] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 318.104352][T11718] Call Trace: [ 318.104356][T11718] [ 318.104360][T11718] dump_stack_lvl+0x16c/0x1f0 [ 318.104378][T11718] should_fail_ex+0x512/0x640 [ 318.104393][T11718] _copy_to_user+0x32/0xd0 [ 318.104407][T11718] simple_read_from_buffer+0xcb/0x170 [ 318.104424][T11718] proc_fail_nth_read+0x197/0x270 [ 318.104439][T11718] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 318.104454][T11718] ? rw_verify_area+0xcf/0x680 [ 318.104469][T11718] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 318.104483][T11718] vfs_read+0x1de/0xc70 [ 318.104495][T11718] ? __pfx___mutex_lock+0x10/0x10 [ 318.104510][T11718] ? __pfx_vfs_read+0x10/0x10 [ 318.104523][T11718] ? __fget_files+0x20e/0x3c0 [ 318.104536][T11718] ksys_read+0x12a/0x240 [ 318.104546][T11718] ? __pfx_ksys_read+0x10/0x10 [ 318.104557][T11718] ? rcu_is_watching+0x12/0xc0 [ 318.104570][T11718] __do_fast_syscall_32+0x73/0x120 [ 318.104585][T11718] do_fast_syscall_32+0x32/0x80 [ 318.104599][T11718] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 318.104611][T11718] RIP: 0023:0xf707e579 [ 318.104620][T11718] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 318.104629][T11718] RSP: 002b:00000000f506e590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 318.104639][T11718] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f506e620 [ 318.104645][T11718] RDX: 000000000000000f RSI: 00000000f73e2ff4 RDI: 0000000000000000 [ 318.104651][T11718] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 318.104656][T11718] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 318.104662][T11718] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 318.104674][T11718] [ 318.106771][T11720] fuse: Unknown parameter 'rootiode' [ 318.180836][T11720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1572'. [ 318.288318][T11727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1571'. [ 318.293834][T11726] FAULT_INJECTION: forcing a failure. [ 318.293834][T11726] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.300136][T11726] CPU: 3 UID: 0 PID: 11726 Comm: syz.3.1575 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 318.300151][T11726] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 318.300157][T11726] Call Trace: [ 318.300161][T11726] [ 318.300165][T11726] dump_stack_lvl+0x16c/0x1f0 [ 318.300183][T11726] should_fail_ex+0x512/0x640 [ 318.300198][T11726] _copy_to_user+0x32/0xd0 [ 318.300212][T11726] simple_read_from_buffer+0xcb/0x170 [ 318.300229][T11726] proc_fail_nth_read+0x197/0x270 [ 318.300245][T11726] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 318.300260][T11726] ? rw_verify_area+0xcf/0x680 [ 318.300274][T11726] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 318.300289][T11726] vfs_read+0x1de/0xc70 [ 318.300301][T11726] ? __pfx___mutex_lock+0x10/0x10 [ 318.300315][T11726] ? __pfx_vfs_read+0x10/0x10 [ 318.300328][T11726] ? __fget_files+0x20e/0x3c0 [ 318.300341][T11726] ksys_read+0x12a/0x240 [ 318.300351][T11726] ? __pfx_ksys_read+0x10/0x10 [ 318.300362][T11726] ? rcu_is_watching+0x12/0xc0 [ 318.300375][T11726] __do_fast_syscall_32+0x73/0x120 [ 318.300390][T11726] do_fast_syscall_32+0x32/0x80 [ 318.300404][T11726] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 318.300416][T11726] RIP: 0023:0xf7f52579 [ 318.300424][T11726] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 318.300434][T11726] RSP: 002b:00000000f5076590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 318.300443][T11726] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5076620 [ 318.300449][T11726] RDX: 000000000000000f RSI: 00000000f73e2ff4 RDI: 0000000000000000 [ 318.300454][T11726] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 318.300460][T11726] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 318.300465][T11726] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 318.300478][T11726] [ 318.549955][ T10] hid-generic C990:0003:0000.0005: unknown main item tag 0x0 [ 318.552306][ T10] hid-generic C990:0003:0000.0005: unknown main item tag 0x0 [ 318.565149][ T10] hid-generic C990:0003:0000.0005: hidraw1: HID v0.00 Device [syz0] on syz1 [ 319.000593][T11749] FAULT_INJECTION: forcing a failure. [ 319.000593][T11749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.004744][T11749] CPU: 1 UID: 0 PID: 11749 Comm: syz.2.1583 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 319.004758][T11749] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 319.004764][T11749] Call Trace: [ 319.004768][T11749] [ 319.004772][T11749] dump_stack_lvl+0x16c/0x1f0 [ 319.004790][T11749] should_fail_ex+0x512/0x640 [ 319.004805][T11749] _copy_to_user+0x32/0xd0 [ 319.004819][T11749] simple_read_from_buffer+0xcb/0x170 [ 319.004837][T11749] proc_fail_nth_read+0x197/0x270 [ 319.004852][T11749] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 319.004868][T11749] ? rw_verify_area+0xcf/0x680 [ 319.004882][T11749] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 319.004897][T11749] vfs_read+0x1de/0xc70 [ 319.004909][T11749] ? __pfx___mutex_lock+0x10/0x10 [ 319.004923][T11749] ? __pfx_vfs_read+0x10/0x10 [ 319.004936][T11749] ? __fget_files+0x20e/0x3c0 [ 319.004949][T11749] ksys_read+0x12a/0x240 [ 319.004959][T11749] ? __pfx_ksys_read+0x10/0x10 [ 319.004973][T11749] ? rcu_is_watching+0x12/0xc0 [ 319.004986][T11749] __do_fast_syscall_32+0x73/0x120 [ 319.005001][T11749] do_fast_syscall_32+0x32/0x80 [ 319.005015][T11749] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 319.005028][T11749] RIP: 0023:0xf711e579 [ 319.005036][T11749] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 319.005045][T11749] RSP: 002b:00000000f510e590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 319.005054][T11749] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f510e620 [ 319.005061][T11749] RDX: 000000000000000f RSI: 00000000f7482ff4 RDI: 0000000000000000 [ 319.005066][T11749] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 319.005071][T11749] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 319.005077][T11749] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 319.005089][T11749] [ 320.419091][T11788] overlay: ./file0 is not a directory [ 320.741532][T11790] ================================================================== [ 320.744069][T11790] BUG: KASAN: vmalloc-out-of-bounds in vrealloc_noprof+0x132/0x320 [ 320.746498][T11790] Write of size 4064 at addr ffffc9000fa39020 by task syz.3.1593/11790 [ 320.750387][T11790] [ 320.751428][T11790] CPU: 1 UID: 0 PID: 11790 Comm: syz.3.1593 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 320.751441][T11790] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 320.751447][T11790] Call Trace: [ 320.751451][T11790] [ 320.751455][T11790] dump_stack_lvl+0x116/0x1f0 [ 320.751472][T11790] print_report+0xc3/0x670 [ 320.751485][T11790] ? __virt_addr_valid+0x5e/0x590 [ 320.751499][T11790] ? vrealloc_noprof+0x132/0x320 [ 320.751509][T11790] kasan_report+0xe0/0x110 [ 320.751521][T11790] ? vrealloc_noprof+0x132/0x320 [ 320.751531][T11790] kasan_check_range+0xef/0x1a0 [ 320.751546][T11790] __asan_memset+0x23/0x50 [ 320.751555][T11790] vrealloc_noprof+0x132/0x320 [ 320.751565][T11790] push_insn_history+0x2ae/0x6c0 [ 320.751577][T11790] do_check_common+0xbd3/0xc2a0 [ 320.751594][T11790] ? __pfx_do_check_common+0x10/0x10 [ 320.751605][T11790] ? lockdep_hardirqs_on+0x7c/0x110 [ 320.751618][T11790] ? kfree+0x2b6/0x4d0 [ 320.751627][T11790] ? bpf_check+0x6c86/0xb460 [ 320.751637][T11790] ? bpf_check+0x7b2f/0xb460 [ 320.751648][T11790] bpf_check+0x7f51/0xb460 [ 320.751663][T11790] ? __pfx_bpf_check+0x10/0x10 [ 320.751673][T11790] ? pcpu_alloc_noprof+0x949/0x1470 [ 320.751687][T11790] ? __lock_acquire+0xaa4/0x1ba0 [ 320.751703][T11790] ? find_held_lock+0x2b/0x80 [ 320.751714][T11790] ? __asan_memset+0x23/0x50 [ 320.751723][T11790] ? bpf_obj_name_cpy+0x14a/0x1a0 [ 320.751738][T11790] bpf_prog_load+0xe41/0x2490 [ 320.751752][T11790] ? __pfx_bpf_prog_load+0x10/0x10 [ 320.751770][T11790] ? bpf_lsm_bpf+0x9/0x10 [ 320.751781][T11790] __sys_bpf+0x433c/0x4d80 [ 320.751795][T11790] ? __pfx_futex_wake+0x10/0x10 [ 320.751808][T11790] ? __pfx___sys_bpf+0x10/0x10 [ 320.751823][T11790] ? lock_acquire+0x179/0x350 [ 320.751836][T11790] ? do_futex+0x122/0x350 [ 320.751847][T11790] ? __pfx_do_futex+0x10/0x10 [ 320.751860][T11790] ? xfd_validate_state+0x5d/0x180 [ 320.751870][T11790] ? rcu_is_watching+0x12/0xc0 [ 320.751880][T11790] __ia32_sys_bpf+0x76/0xe0 [ 320.751889][T11790] __do_fast_syscall_32+0x73/0x120 [ 320.751908][T11790] do_fast_syscall_32+0x32/0x80 [ 320.751922][T11790] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 320.751934][T11790] RIP: 0023:0xf7f52579 [ 320.751942][T11790] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 320.751953][T11790] RSP: 002b:00000000f505555c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 320.751962][T11790] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800017c0 [ 320.751969][T11790] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 320.751974][T11790] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 320.751980][T11790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.751986][T11790] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 320.751994][T11790] [ 320.751997][T11790] [ 320.841476][T11790] The buggy address belongs to the virtual mapping at [ 320.841476][T11790] [ffffc9000fa19000, ffffc9000fa3b000) created by: [ 320.841476][T11790] kvrealloc_noprof+0x7d/0xd0 [ 320.846818][T11790] [ 320.847589][T11790] The buggy address belongs to the physical page: [ 320.849560][T11790] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888055826fc0 pfn:0x55826 [ 320.852627][T11790] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 320.854848][T11790] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 320.857479][T11790] raw: ffff888055826fc0 0000000000000000 00000001ffffffff 0000000000000000 [ 320.860107][T11790] page dumped because: kasan: bad access detected [ 320.862078][T11790] page_owner tracks the page as allocated [ 320.863832][T11790] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102cc2(GFP_HIGHUSER|__GFP_NOWARN), pid 11790, tgid 11787 (syz.3.1593), ts 320741441224, free_ts 319364781243 [ 320.869129][T11790] post_alloc_hook+0x181/0x1b0 [ 320.870626][T11790] get_page_from_freelist+0x135c/0x3920 [ 320.872334][T11790] __alloc_frozen_pages_noprof+0x5a8/0x23a0 [ 320.874159][T11790] alloc_pages_mpol+0x1fb/0x550 [ 320.875685][T11790] alloc_pages_noprof+0x131/0x390 [ 320.877262][T11790] __vmalloc_node_range_noprof+0x732/0x1540 [ 320.879106][T11790] __kvmalloc_node_noprof+0x2ff/0x600 [ 320.880765][T11790] kvrealloc_noprof+0x7d/0xd0 [ 320.882233][T11790] push_insn_history+0x2ae/0x6c0 [ 320.883906][T11790] do_check_common+0xbd3/0xc2a0 [ 320.885423][T11790] bpf_check+0x7f51/0xb460 [ 320.886838][T11790] bpf_prog_load+0xe41/0x2490 [ 320.888321][T11790] __sys_bpf+0x433c/0x4d80 [ 320.889718][T11790] __ia32_sys_bpf+0x76/0xe0 [ 320.891254][T11790] __do_fast_syscall_32+0x73/0x120 [ 320.892892][T11790] do_fast_syscall_32+0x32/0x80 [ 320.894410][T11790] page last free pid 28 tgid 28 stack trace: [ 320.896266][T11790] __free_frozen_pages+0x69d/0xff0 [ 320.897853][T11790] rcu_core+0x799/0x14e0 [ 320.899179][T11790] handle_softirqs+0x216/0x8e0 [ 320.900671][T11790] run_ksoftirqd+0x3a/0x60 [ 320.902067][T11790] smpboot_thread_fn+0x3f4/0xae0 [ 320.903615][T11790] kthread+0x3c2/0x780 [ 320.904907][T11790] ret_from_fork+0x45/0x80 [ 320.906304][T11790] ret_from_fork_asm+0x1a/0x30 [ 320.907815][T11790] [ 320.908580][T11790] Memory state around the buggy address: [ 320.910312][T11790] ffffc9000fa38f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 320.912773][T11790] ffffc9000fa38f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 320.915236][T11790] >ffffc9000fa39000: 00 00 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 320.917716][T11790] ^ [ 320.919308][T11790] ffffc9000fa39080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 320.921753][T11790] ffffc9000fa39100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 320.924214][T11790] ================================================================== [ 320.927188][T11790] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 320.929481][T11790] CPU: 0 UID: 0 PID: 11790 Comm: syz.3.1593 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 320.933295][T11790] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 320.936751][T11790] Call Trace: [ 320.937815][T11790] [ 320.938766][T11790] dump_stack_lvl+0x3d/0x1f0 [ 320.940233][T11790] panic+0x71c/0x800 [ 320.941504][T11790] ? __pfx_panic+0x10/0x10 [ 320.942922][T11790] ? rcu_is_watching+0x12/0xc0 [ 320.944431][T11790] ? preempt_schedule_thunk+0x16/0x30 [ 320.946217][T11790] ? vrealloc_noprof+0x132/0x320 [ 320.947810][T11790] ? preempt_schedule_common+0x44/0xc0 [ 320.949553][T11790] ? vrealloc_noprof+0x132/0x320 [ 320.951251][T11790] check_panic_on_warn+0xab/0xb0 [ 320.952811][T11790] end_report+0x107/0x170 [ 320.954177][T11790] kasan_report+0xee/0x110 [ 320.955845][T11790] ? vrealloc_noprof+0x132/0x320 [ 320.957429][T11790] kasan_check_range+0xef/0x1a0 [ 320.958974][T11790] __asan_memset+0x23/0x50 [ 320.960381][T11790] vrealloc_noprof+0x132/0x320 [ 320.961879][T11790] push_insn_history+0x2ae/0x6c0 [ 320.963443][T11790] do_check_common+0xbd3/0xc2a0 [ 320.965013][T11790] ? __pfx_do_check_common+0x10/0x10 [ 320.966824][T11790] ? lockdep_hardirqs_on+0x7c/0x110 [ 320.968472][T11790] ? kfree+0x2b6/0x4d0 [ 320.969763][T11790] ? bpf_check+0x6c86/0xb460 [ 320.971240][T11790] ? bpf_check+0x7b2f/0xb460 [ 320.972698][T11790] bpf_check+0x7f51/0xb460 [ 320.974117][T11790] ? __pfx_bpf_check+0x10/0x10 [ 320.975901][T11790] ? pcpu_alloc_noprof+0x949/0x1470 [ 320.977544][T11790] ? __lock_acquire+0xaa4/0x1ba0 [ 320.979122][T11790] ? find_held_lock+0x2b/0x80 [ 320.980599][T11790] ? __asan_memset+0x23/0x50 [ 320.982196][T11790] ? bpf_obj_name_cpy+0x14a/0x1a0 [ 320.983782][T11790] bpf_prog_load+0xe41/0x2490 [ 320.985273][T11790] ? __pfx_bpf_prog_load+0x10/0x10 [ 320.986902][T11790] ? bpf_lsm_bpf+0x9/0x10 [ 320.988268][T11790] __sys_bpf+0x433c/0x4d80 [ 320.989679][T11790] ? __pfx_futex_wake+0x10/0x10 [ 320.991228][T11790] ? __pfx___sys_bpf+0x10/0x10 [ 320.992738][T11790] ? lock_acquire+0x179/0x350 [ 320.994226][T11790] ? do_futex+0x122/0x350 [ 320.995795][T11790] ? __pfx_do_futex+0x10/0x10 [ 320.997429][T11790] ? xfd_validate_state+0x5d/0x180 [ 320.999043][T11790] ? rcu_is_watching+0x12/0xc0 [ 321.000551][T11790] __ia32_sys_bpf+0x76/0xe0 [ 321.001983][T11790] __do_fast_syscall_32+0x73/0x120 [ 321.003598][T11790] do_fast_syscall_32+0x32/0x80 [ 321.005185][T11790] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 321.007444][T11790] RIP: 0023:0xf7f52579 [ 321.008725][T11790] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 321.014824][T11790] RSP: 002b:00000000f505555c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 321.017954][T11790] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800017c0 [ 321.020415][T11790] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 321.022870][T11790] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 321.025502][T11790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 321.028153][T11790] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 321.030605][T11790] [ 321.032291][T11790] Kernel Offset: disabled [ 321.033647][T11790] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:46:13 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffffff8e3bf440 RCX=0000000000000002 RDX=0000000000000000 RSI=ffffffff8bf44d80 RDI=ffffffff8bf44dc0 RBP=0000000000000002 RSP=ffffc9000137f050 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8b6efb70 RFL=00000087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977bf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000ff874950 CR3=0000000050852000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854ade35 RDI=ffffffff9ae0cb80 RBP=ffffffff9ae0cb40 RSP=ffffc9000f16ef00 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000074697257 R12=0000000000000000 R13=0000000000000033 R14=ffffffff9ae0cb40 R15=ffffffff854addd0 RIP=ffffffff854ade5f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880978bf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000005792f448 CR3=0000000069386000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000039c41d RBX=0000000000000002 RCX=ffffffff8b6ef3e9 RDX=0000000000000000 RSI=ffffffff8dbe9821 RDI=ffffffff8bf44e00 RBP=ffffed1003b59910 RSP=ffffc9000047fdf8 R8 =0000000000000001 R9 =ffffed10056865bd R10=ffff88802b432deb R11=ffffffff9adebd00 R12=0000000000000002 R13=ffff88801dacc880 R14=ffffffff90866410 R15=0000000000000000 RIP=ffffffff8b6edc7f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880979bf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000081000000 CR3=0000000069386000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 EAX=ffffffff EBX=f73e2ff4 ECX=00000000 EDX=ffffffd4 ESI=00000000 EDI=00000000 EBP=00000000 ESP=f5055550 EIP=f70a49c3 EFL=00000286 [--S--P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA] SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 00000000 ffffffff 00c00000 GS =0063 f5055b40 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 00000000 ffffffff 00c00000 TR =0040 000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000800017c0 CR3=0000000022f74000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e7467117a3ad2d5 6d0f050365463872 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 38c269cf5eba6d69 bbf4494f7c35057c ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ee9d93c7b18dfd7b f1d8944df936e604 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a09fe947ad073556 40a625721a641535 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000007d00 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 35cffc4c35ed0bd4 000000c335fe02f0 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0080010000800100 008001003606e89a