last executing test programs: 5.645414802s ago: executing program 0 (id=339): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = socket(0x2a, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000005f00), 0x0, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r3, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{0x0, 0x94}], 0x1}, 0x1}], 0x1, 0x10001, 0x0) syz_emit_ethernet(0x88, &(0x7f00000005c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}, {0x0, 0x4e20, 0x66, 0x0, @opaque="a3ffa1b54f8762104fc0f5ac8d6d82e567fdc879bcf995036a485e78337231fbee0937f5aa523d1c7b2022c221b6d91707f510eb0145a2e935bc5631cfb162baff0b52ea21518dc1b4146db11b202e4afb3a9991bf7480dceaf255e0c1cb"}}}}}, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x0) read$FUSE(r4, &(0x7f0000002440)={0x2020}, 0x2020) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc044560f, &(0x7f0000000540)=@mmap={0x0, 0x2, 0x4, 0x100, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2063569a"}}) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtclass={0x24, 0x28, 0x200, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x2, 0x8}, {0x3, 0x9}, {0xfff2}}}, 0x24}}, 0x4000) r6 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) read(r6, 0x0, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x2, 0x2016, 0x4, 0x0, 0x3, 0x2, 0x1}}) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) 5.428070989s ago: executing program 0 (id=341): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000340)="07000000010001", 0x7) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56561, 0x4, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xc}]}}]}, 0x40}}, 0x0) openat$cdrom(0xffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000080001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r6 = openat$uhid(0xffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_INPUT(r6, &(0x7f0000000580)={0x8, {"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", 0x1000}}, 0x1006) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) recvmmsg(r3, 0x0, 0x0, 0x140, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x10042, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) sendfile(r9, r9, 0x0, 0x101) fdatasync(r8) mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 4.449928052s ago: executing program 0 (id=348): capset(&(0x7f0000000000)={0x20080522}, &(0x7f00000001c0)={0x0, 0x10, 0x0, 0x40}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) syz_clone(0x28280000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) (async) fsmount(0xffffffffffffffff, 0x0, 0x0) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0x3) pwritev(r0, &(0x7f0000000540)=[{&(0x7f0000000180)='\x00!G', 0x3}], 0x1, 0x295e, 0x0) 4.32982865s ago: executing program 0 (id=349): syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) fsopen(0x0, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x20000108, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000180)=0x3eee) recvmmsg(r4, &(0x7f0000000c40)=[{{&(0x7f0000000380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/193, 0xc1}], 0x1, &(0x7f0000000500)=""/119, 0x77}, 0x4}, {{&(0x7f0000000580)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000600)}], 0x1, &(0x7f0000000680)=""/153, 0x99}, 0x3}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000740)=""/25, 0x19}, {&(0x7f0000000780)=""/28, 0x1c}, {&(0x7f00000007c0)=""/20, 0x14}], 0x3}, 0x10000}, {{&(0x7f0000000840)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f00000008c0)=""/196, 0xc4}, {&(0x7f00000009c0)=""/111, 0x6f}, {&(0x7f0000000a40)=""/190, 0xbe}, {&(0x7f0000000b00)=""/38, 0x26}], 0x5, &(0x7f0000000b80)=""/145, 0x91}, 0x3}], 0x4, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) shutdown(r0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x4c) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x2282, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000240)=r7) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x1, r7}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x3, 0x1, 0x0, &(0x7f00000000c0)=""/73, &(0x7f0000000300)=""/74}) 2.331980665s ago: executing program 3 (id=371): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000001280)=0x478d, 0x4) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r2, &(0x7f0000000040)=[{0x41, 0x0, 0x0, 0xfd, @tick, {}, {0xf}, @addr={0x1b}}], 0x1c) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) rt_sigaction(0x40007, 0x0, 0x0, 0x8, &(0x7f0000000300)) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r3) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r4, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xd801}, 0x4040004) r5 = openat$mice(0xffffff9c, &(0x7f0000000180), 0x10000) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)={0x18, 0x140c, 0x335, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004081}, 0xc810) getresuid(&(0x7f00000002c0)=0x0, &(0x7f0000000340), &(0x7f0000000380)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000440)={0x0, 0x1, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x7, 0x9}) r10 = socket$packet(0x11, 0x3, 0x300) time(&(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'geneve1\x00', 0x0}) bind$packet(r10, &(0x7f0000000000)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$packet(r10, &(0x7f0000000280)={0x11, 0x3, 0x0, 0x1, 0x45, 0x6, @remote}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0}, &(0x7f00000004c0)=0xc) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xa00040, &(0x7f0000000500)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x2d}}], [{@fowner_lt={'fowner<', r9}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@euid_eq={'euid', 0x3d, r12}}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x37, 0x34, 0x64, 0x35, 0x61, 0x62, 0x62], 0x2d, [0x62, 0x34, 0x31, 0x66], 0x2d, [0x66, 0x55, 0x63, 0x31], 0x2d, [0x61, 0x37, 0x37, 0x31], 0x2d, [0x34, 0x39, 0x34, 0x63, 0x33, 0x38, 0x66, 0x32]}}}, {@subj_type={'subj_type', 0x3d, ',^:)#'}}, {@subj_type={'subj_type', 0x3d, '*+-..^g{-:^[)/\x13'}}, {@flag='dirsync'}, {@smackfshat}, {@dont_appraise}]}}) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r4, 0x300, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) 2.331578915s ago: executing program 3 (id=372): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x34}}, 0x0) 2.259758831s ago: executing program 3 (id=373): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/ip6_tables_names\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0x10d}], 0x1, 0x4b5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002c40)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ce"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x24040004}, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000080)=0x8, &(0x7f00000000c0)=0x2) 2.259104101s ago: executing program 3 (id=374): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)={0x1c, r1, 0x701, 0x70bd2b, 0x0, {0x19}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0xffa6}, 0x0) 2.189896111s ago: executing program 3 (id=376): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@gettaction={0x14, 0x32, 0xc16, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xf, 0x6, &(0x7f0000000580)=ANY=[@ANYRESOCT, @ANYBLOB="820df01b11ce5958b8e6ea047b4dca3f8a628e77e3353fd4a4bd999cec8c2d982e5d41e7398f8ec9f0fb5cd6305f2c16e3d296d6f786e0500254ee63922bfbc83111b4b7a90040d1236164350100", @ANYRESHEX=r1], 0x0, 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmmsg$inet6(r4, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)}], 0x1}}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = dup(0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r5) sendmsg$TIPC_CMD_SET_LINK_PRI(r6, 0x0, 0x44000) ioctl$UI_DEV_CREATE(r6, 0x5501) sendmsg$NFT_BATCH(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES64=r2], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x4081) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) r8 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) ftruncate(r8, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1.359828439s ago: executing program 1 (id=381): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000001280)=0x478d, 0x4) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r2, &(0x7f0000000040)=[{0x41, 0x0, 0x0, 0xfd, @tick, {}, {0xf}, @addr={0x1b}}], 0x1c) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) rt_sigaction(0x40007, 0x0, 0x0, 0x8, &(0x7f0000000300)) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r3) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r4, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xd801}, 0x4040004) r5 = openat$mice(0xffffff9c, &(0x7f0000000180), 0x10000) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)={0x18, 0x140c, 0x335, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004081}, 0xc810) getresuid(&(0x7f00000002c0)=0x0, &(0x7f0000000340), &(0x7f0000000380)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000440)={0x0, 0x1, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x7, 0x9}) r10 = socket$packet(0x11, 0x3, 0x300) time(&(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'geneve1\x00', 0x0}) bind$packet(r10, &(0x7f0000000000)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$packet(r10, &(0x7f0000000280)={0x11, 0x3, 0x0, 0x1, 0x45, 0x6, @remote}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0}, &(0x7f00000004c0)=0xc) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xa00040, &(0x7f0000000500)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x2d}}], [{@fowner_lt={'fowner<', r9}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@euid_eq={'euid', 0x3d, r12}}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x37, 0x34, 0x64, 0x35, 0x61, 0x62, 0x62], 0x2d, [0x62, 0x34, 0x31, 0x66], 0x2d, [0x66, 0x55, 0x63, 0x31], 0x2d, [0x61, 0x37, 0x37, 0x31], 0x2d, [0x34, 0x39, 0x34, 0x63, 0x33, 0x38, 0x66, 0x32]}}}, {@subj_type={'subj_type', 0x3d, ',^:)#'}}, {@subj_type={'subj_type', 0x3d, '*+-..^g{-:^[)/\x13'}}, {@flag='dirsync'}, {@smackfshat}, {@dont_appraise}]}}) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r4, 0x300, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) 1.227189316s ago: executing program 2 (id=382): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x34}}, 0x0) 1.21968884s ago: executing program 1 (id=383): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x1f00, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) 1.219452255s ago: executing program 0 (id=384): munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000300)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0xd931d3864d39ddd8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r3) ioctl(r1, 0x8b32, &(0x7f0000000040)) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000bfd000/0x400000)=nil, &(0x7f0000bd1000/0x2000)=nil, 0x400000, 0x3}) 1.149530397s ago: executing program 1 (id=385): syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2002) fsopen(&(0x7f0000000200)='tracefs\x00', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x84e8, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r2, 0x2dec, 0x3ffe, 0x6, 0x0, 0x0) userfaultfd(0x80801) socket$tipc(0x1e, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = socket$netlink(0x10, 0x3, 0x14) socket$kcm(0x10, 0x2, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000040), 0x40a100, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x41}}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = io_uring_setup(0x3458, &(0x7f0000000080)={0x0, 0xffffeffb, 0x18, 0x2, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) socket$packet(0x11, 0x2, 0x300) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800008846b84d00dfffffff", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0x3100, 0x11, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000000314010000010000000000000900020073797a3100000000080041007278650014003300626f6e645f736c6176655f310000000062ba"], 0x38}}, 0x0) 1.149067111s ago: executing program 2 (id=386): syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2002) fsopen(&(0x7f0000000200)='tracefs\x00', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x84e8, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r2, 0x2dec, 0x3ffe, 0x6, 0x0, 0x0) userfaultfd(0x80801) socket$tipc(0x1e, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = socket$netlink(0x10, 0x3, 0x14) socket$kcm(0x10, 0x2, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000040), 0x40a100, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x41}}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = io_uring_setup(0x3458, &(0x7f0000000080)={0x0, 0xffffeffb, 0x18, 0x2, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) socket$packet(0x11, 0x2, 0x300) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800008846b84d00dfffffff", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0x3100, 0x11, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000000314010000010000000000000900020073797a3100000000080041007278650014003300626f6e645f736c6176655f310000000062ba"], 0x38}}, 0x0) 1.148771241s ago: executing program 0 (id=387): syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004d42d820a61b01008849010203010902120001000000000904"], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r1, 0xe4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x10, &(0x7f0000000480)=ANY=[@ANYRESDEC], &(0x7f0000000300)='syzkaller\x00', 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x3, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f00000003c0)={0x28, 0x2, 0x0, {0x1, 0x9, 0x8c9a}}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f00000000c0)={0x10000015}) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c80)=ANY=[@ANYRES16=0x0, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, 0x0, 0x20048080) 1.093234893s ago: executing program 3 (id=388): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x48, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000200)='contention_begin\x00'}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6d8a, &(0x7f0000000300)={0x0, 0x10037b2, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_emit_ethernet(0x36, &(0x7f0000000a40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa241222f61daaaaaa86dd606410a600000000fc020000000000000000000000000000fe05000000020000000000"], 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, {0xf601}}) io_uring_enter(r4, 0x2def, 0x4000, 0x0, 0x0, 0x0) userfaultfd(0x80801) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB="2c726f6f746d6f64653d3030303030300e303030303030303030303034303030302c757365725f69643d31d906da3aebb04b6c2392ed3f5cd0f607c9ffc0005c1b6dbb1614aa2230b1dc78af3f536674b9b7d3ef5f9ad4d538282e8a3cca2e5c8e44ddb1ad41d8a9f4d40b7616d7bd6c579db060dcb3a935772be8bdc47375fd19725c40fe121b626d5ca526ca5af7f9c0551ba96aa318f7a14e15dbc4286a3cc4e7dd5fb6fcd286fe98fc3c3d1f1be2772628da03ed9cabf7aa0fa767e352113985997da660542aba6338ffd0f7e31554c0c865a0956550e779092cd2a727203019e034b3a0bb9ac3a111d0548f7f0f601f1fdd04b5d821", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r8, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffffe, 0x3, {0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, {0x3, 0x2000000000, 0x1000400000000000, 0x2, 0x0, 0x0, 0x4, 0x0, 0x4, 0xa000, 0x7, r9, 0x0, 0x8, 0xfffffffe}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f00000004c0)={0x78, 0xffffffffffffffda, 0x0, {0xecc4, 0xa, 0x0, {0x4, 0x9, 0x5a, 0x8, 0x2, 0x6, 0xc5, 0xa81, 0x8, 0x1000, 0x9, r9, r10, 0x120, 0x2ad}}}, 0x78) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r11) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="8b3700000000000000000500000008000300", @ANYRES32=r13], 0x28}}, 0x97d771e457bad63a) 870.175841ms ago: executing program 1 (id=389): fanotify_init(0x87, 0x0) r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x4}) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) socket$kcm(0xa, 0x2, 0x73) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="02"], 0x10) socket$kcm(0xa, 0x2, 0x73) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) setsockopt$netrom_NETROM_N2(r6, 0x103, 0x3, &(0x7f0000000100)=0x2, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000580)={&(0x7f0000000140)=[0x0, 0x0], 0x2, r7}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x1d, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000004000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000007b702000014000000b7030000000000008500000083220000bf09000600000000550901000000000095000000000000008510000008000000b7080000000000007b8af8ff00000000b7082000010000007b8af0ff00001200bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823000076638c3f423c5630aedb257eab1b9bad5fc6a4835b8df08da78e9aa87d716ae88f36f382c973756f90e223902871850cc073a9ebd2b2daaf798f23a05f3334237c8e62e5c3cd3c1def7693c4ca993b22d4bea3ccb2f048275ae900f952b0dc334059486c6fc8b8", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0xd9, 0x2e, &(0x7f0000000240)=""/46, 0x41100, 0x7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x7, 0x1, 0x6e6a}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000300)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000340)=[{0x3, 0x5, 0x6}, {0x204, 0x1, 0xa, 0x7}, {0x5, 0x1, 0x1, 0x3}, {0x5, 0x5, 0x6, 0x6}, {0x5, 0x1, 0xa, 0x6}, {0x4, 0x5, 0x2, 0x1}, {0x4, 0x2, 0xd, 0x2}], 0x10, 0x1, @void, @value}, 0xffffffffffffff89) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0, {r5}}, './file0\x00'}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x800, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x804}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r9}, @IFLA_XDP_FLAGS={0x8}]}, @IFLA_CARRIER_CHANGES={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x40010) 869.638488ms ago: executing program 1 (id=390): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000e75fcc08c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300021007c109050c04400006030f07059acbf5"], 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x58, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x1, 0x1, 0x8, 0x20, 0x3, [{{0x9, 0x4, 0x0, 0xd3, 0x3, 0x2, 0x6, 0x0, 0x6, {{0x7, 0x24, 0x6, 0x0, 0x0, "5613"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x401, 0x8, 0xfff9}}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x2, 0xb}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x0, 0xa}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x2, 0x3, 0xe}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x110, 0x1, 0x8, 0x81, 0x10, 0x9}, 0x55, &(0x7f0000000280)={0x5, 0xf, 0x55, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "3e385754f43942ba3dbc5ed4c9bd3d95"}, @ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x9, 0xf00, 0x4, [0x30, 0x0, 0x0, 0xc0]}, @ssp_cap={0xc, 0x10, 0xa, 0x9, 0x0, 0xffff, 0xf00, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "b2b0e423ff2b3284ddb8fe7eb36174c7"}]}, 0x2, [{0xe0, &(0x7f0000000300)=@string={0xe0, 0x3, "a0caa7b53145b415c7cd9f504193b11ec9eead7fd52dec95a563567d5584e5285d1c4bf808c2f30fde52bb6058c9333af27bc9f7eabfbe3b867408adf4e6fcdb8172b2c89263656605a5a7929921e7f51f656a27c5d922356e47090932703c7dd26cfad483a7eaa0046ae1257067a2f429639effbc3fb0fd7d782a98bb1db30f32db88c2a6b0d7d796c1daa33cd9039c4a77bbf212d49e5ddabe5048dccc4b2ce1575a5cc9cd0baa7dacc9146f405e6ea2bf2028ff3b462b6789babb836f6a76f4163dd79f6f59c5ab1e424b469b8a7f9e34e3efce7b513afd9c16bcc92d"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x438}}]}) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, r2, 0x0, '\x00', 0x0, r1, 0x3, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xd, 0x4, 0x4, 0xa4, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r4, &(0x7f0000000140)="932db3348a9e", 0xf5) 559.729286ms ago: executing program 1 (id=391): socket$packet(0x11, 0x2, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000040), 0x10) recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0x0, 0x0}, 0xca8}], 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x18, 0x4) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [], 0xa, "f68f7601f97fe9825c0c7c203c8d329c50a3ea82f38e86d0b7c1802c8528eef16c2f9229b10ddc05e272e616aee6d97367254de9ed0e3f943a04adc597a99398b0411c43550ac578cc5b9c096d5e8cff5c9da0d5caff00f375cb7d5500dd5444d5e9189b0722c14aa2cf284836417d8636e2ae2962a5dc64bcb401fc668d46352bbbfdfe9deea82a63888d49f34000b1c5c7633d257a8f580e1043ab"}, 0xa7) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r2, r0, 0x0, 0x8010002b) 223.479785ms ago: executing program 2 (id=392): r0 = openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x400600, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000080)={0x1, 0x1}) ioctl$SNDCTL_MIDI_INFO(r0, 0xc074510c, &(0x7f0000000040)={"37cbada54f964be52d890325b3eaa1af923b27833f07a843b34a30085038", 0x3, 0x9, 0x2, [0x401, 0x4, 0x8ef, 0x800, 0x8, 0x7, 0xc, 0xfffffff8, 0xba, 0x5, 0x7, 0x3ff, 0x456a, 0x7, 0x4, 0x4, 0x5, 0x79c]}) syz_emit_ethernet(0x2b, &(0x7f0000024140)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x1d, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @echo={0x8, 0x0, 0x0, 0xf, 0x7, '>'}}}}}, 0x0) 79.536563ms ago: executing program 2 (id=393): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x60, &(0x7f0000000340)=[{&(0x7f0000000440)="5c00000013006bcc9e3be35c6e17aa31076b876c1d00001f7ea60864160af3653c000cc00800190007000200060018c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 79.21327ms ago: executing program 2 (id=394): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x34}}, 0x0) 0s ago: executing program 2 (id=395): r0 = memfd_secret(0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x11, &(0x7f0000000000)="12ef78ca", 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x803, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_ifreq(r5, 0x89a2, &(0x7f0000000280)={'bridge0\x00', @ifru_settings={0x43, 0x0, @sync=0x0}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) mknodat$null(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x2000, 0x103) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000006c0)=ANY=[@ANYRES8=r4, @ANYRES32=0x0, @ANYBLOB="005e8f2c1c38ff2de5ab14040000000000001678b47eddcf9d52e433", @ANYRES64, @ANYRES64=r6], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2022) syz_fuse_handle_req(r7, &(0x7f0000004300)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x90, 0x0, 0x3, {0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x4, 0x0, 0x6000, 0x0, r8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$tcp_congestion(r3, &(0x7f0000000600)='reno\x00', 0x5) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0186405, &(0x7f0000000380)={0xa6, 0x669a, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x7, 0x3}) getresuid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f00000004c0)=0x0) mount$afs(&(0x7f0000000100)=ANY=[@ANYBLOB='#syonly\x00'/20], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340), 0x1000, &(0x7f0000000500)={[{@flock_write}, {@flock_write}, {}, {@flock_openafs}, {@flock_local}, {}, {@flock_write}], [{@flag='rw'}, {@smackfsroot={'smackfsroot', 0x3d, 'nbd\x00'}}, {@permit_directio}, {@appraise}, {@subj_type={'subj_type', 0x3d, 'syz0:'}}, {@uid_eq={'uid', 0x3d, r9}}, {@subj_type}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYRES16=r12, @ANYRESHEX=r10, @ANYBLOB="010000000000ffdbdf25010000000c00040002000000000000000c0006000100000000003f000c00020007000000000000000c00080001000000000000001c0007"], 0x60}}, 0x0) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x1, 0xc}, &(0x7f00000001c0)='R\x10susp\x03n\x00\x00\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000ae00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:62601' (ED25519) to the list of known hosts. [ 42.038059][ T5865] cgroup: Unknown subsys name 'net' [ 42.239001][ T5865] cgroup: Unknown subsys name 'cpuset' [ 42.243186][ T5865] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.161135][ T5865] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.104562][ T5951] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.107545][ T5951] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.110265][ T5951] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.113322][ T5951] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.116457][ T5951] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.123380][ T5954] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.127163][ T5954] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.130890][ T5956] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.131718][ T5954] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.134469][ T5956] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.137771][ T5954] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.140491][ T5956] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.142633][ T5954] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.146469][ T5956] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.147851][ T5954] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.149982][ T5956] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.152418][ T5954] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.156307][ T5956] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.158117][ T5954] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.161739][ T5956] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.403167][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 47.590599][ T5958] chnl_net:caif_netlink_parms(): no params data found [ 47.601877][ T5953] chnl_net:caif_netlink_parms(): no params data found [ 47.612431][ T5957] chnl_net:caif_netlink_parms(): no params data found [ 47.617819][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.621149][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.624081][ T5949] bridge_slave_0: entered allmulticast mode [ 47.627828][ T5949] bridge_slave_0: entered promiscuous mode [ 47.662771][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.665793][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.669136][ T5949] bridge_slave_1: entered allmulticast mode [ 47.673118][ T5949] bridge_slave_1: entered promiscuous mode [ 47.815195][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.863230][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.041500][ T5953] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.044664][ T5953] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.047772][ T5953] bridge_slave_0: entered allmulticast mode [ 48.051668][ T5953] bridge_slave_0: entered promiscuous mode [ 48.055823][ T5958] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.059067][ T5958] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.062237][ T5958] bridge_slave_0: entered allmulticast mode [ 48.068142][ T5958] bridge_slave_0: entered promiscuous mode [ 48.098327][ T5949] team0: Port device team_slave_0 added [ 48.101705][ T5953] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.104935][ T5953] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.108792][ T5953] bridge_slave_1: entered allmulticast mode [ 48.113614][ T5953] bridge_slave_1: entered promiscuous mode [ 48.117154][ T5958] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.120045][ T5958] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.123084][ T5958] bridge_slave_1: entered allmulticast mode [ 48.126939][ T5958] bridge_slave_1: entered promiscuous mode [ 48.130317][ T5957] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.133307][ T5957] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.136363][ T5957] bridge_slave_0: entered allmulticast mode [ 48.140464][ T5957] bridge_slave_0: entered promiscuous mode [ 48.146474][ T5949] team0: Port device team_slave_1 added [ 48.215351][ T5957] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.218394][ T5957] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.220858][ T5957] bridge_slave_1: entered allmulticast mode [ 48.223833][ T5957] bridge_slave_1: entered promiscuous mode [ 48.341825][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.344685][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.355310][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.361724][ T5953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.370170][ T5958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.375598][ T5957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.379402][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.382615][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.392427][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.398699][ T5953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.404586][ T5958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.436271][ T5957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.559367][ T5958] team0: Port device team_slave_0 added [ 48.566176][ T5957] team0: Port device team_slave_0 added [ 48.573033][ T5957] team0: Port device team_slave_1 added [ 48.577363][ T5953] team0: Port device team_slave_0 added [ 48.581753][ T5958] team0: Port device team_slave_1 added [ 48.618385][ T5953] team0: Port device team_slave_1 added [ 48.721139][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.723720][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.732078][ T5958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.740463][ T5949] hsr_slave_0: entered promiscuous mode [ 48.744028][ T5949] hsr_slave_1: entered promiscuous mode [ 48.748398][ T5957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.751368][ T5957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.763217][ T5957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.768942][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.771612][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.780626][ T5953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.784595][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.787131][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.795223][ T5958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.806358][ T5957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.809514][ T5957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.820797][ T5957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.825926][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.828226][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.837448][ T5953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.963654][ T5953] hsr_slave_0: entered promiscuous mode [ 48.966800][ T5953] hsr_slave_1: entered promiscuous mode [ 48.969080][ T5953] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.971639][ T5953] Cannot create hsr debugfs directory [ 48.978053][ T5958] hsr_slave_0: entered promiscuous mode [ 48.980547][ T5958] hsr_slave_1: entered promiscuous mode [ 48.982645][ T5958] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.985145][ T5958] Cannot create hsr debugfs directory [ 49.042022][ T5957] hsr_slave_0: entered promiscuous mode [ 49.045596][ T5957] hsr_slave_1: entered promiscuous mode [ 49.049469][ T5957] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.052277][ T5957] Cannot create hsr debugfs directory [ 49.155660][ T5956] Bluetooth: hci0: command tx timeout [ 49.226311][ T5956] Bluetooth: hci1: command tx timeout [ 49.226337][ T5306] Bluetooth: hci3: command tx timeout [ 49.226398][ T68] Bluetooth: hci2: command tx timeout [ 49.529978][ T5949] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.538805][ T5949] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.570517][ T5949] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.583057][ T5949] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.613695][ T5958] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.621023][ T5958] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.629156][ T5958] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.633920][ T5958] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.693247][ T5957] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.699286][ T5957] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.710383][ T5957] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.725190][ T5957] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.785158][ T5953] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.793902][ T5953] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.801337][ T5953] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.810630][ T5953] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.850092][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.887357][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.900068][ T5958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.912806][ T85] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.916150][ T85] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.946859][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.949506][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.959038][ T5958] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.978461][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.981263][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.985471][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.987681][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.026851][ T5957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.043799][ T5953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.088148][ T5953] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.096911][ T5957] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.114777][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.117732][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.121914][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.124918][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.138043][ T1177] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.140784][ T1177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.153071][ T1177] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.156485][ T1177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.240167][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.248382][ T5958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.288330][ T5949] veth0_vlan: entered promiscuous mode [ 50.299808][ T5958] veth0_vlan: entered promiscuous mode [ 50.303590][ T5949] veth1_vlan: entered promiscuous mode [ 50.321822][ T5958] veth1_vlan: entered promiscuous mode [ 50.339505][ T5957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.348715][ T5949] veth0_macvtap: entered promiscuous mode [ 50.353359][ T5949] veth1_macvtap: entered promiscuous mode [ 50.361165][ T5953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.381497][ T5958] veth0_macvtap: entered promiscuous mode [ 50.397930][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.403307][ T5958] veth1_macvtap: entered promiscuous mode [ 50.417404][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.430109][ T5949] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.434086][ T5949] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.438207][ T5949] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.441288][ T5949] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.458480][ T5957] veth0_vlan: entered promiscuous mode [ 50.468840][ T5958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.475037][ T5958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.480304][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.492767][ T5957] veth1_vlan: entered promiscuous mode [ 50.501658][ T5953] veth0_vlan: entered promiscuous mode [ 50.510068][ T5958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.513504][ T5958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.518640][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.527832][ T5953] veth1_vlan: entered promiscuous mode [ 50.532621][ T5958] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.536618][ T5958] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.539707][ T5958] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.543309][ T5958] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.585323][ T5957] veth0_macvtap: entered promiscuous mode [ 50.602646][ T5957] veth1_macvtap: entered promiscuous mode [ 50.618818][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.621654][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.633437][ T5957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.638326][ T5957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.641581][ T5957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.645192][ T5957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.652403][ T5957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.656862][ T5953] veth0_macvtap: entered promiscuous mode [ 50.675851][ T5953] veth1_macvtap: entered promiscuous mode [ 50.679294][ T5957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.682913][ T5957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.687124][ T5957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.690521][ T5957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.694555][ T5957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.698038][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.700730][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.701130][ T5957] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.706290][ T5957] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.709065][ T5957] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.712120][ T5957] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.730217][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.733856][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.750106][ T1177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.753431][ T1177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.754937][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.760346][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.763222][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.767261][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.770560][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.773913][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.779266][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.789689][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.793099][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.796594][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.799992][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.803463][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.807681][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.812634][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.829885][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.833558][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.841317][ T5953] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.844435][ T5953] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.846102][ T5949] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.847732][ T5953] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.857055][ T5953] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.883419][ T1177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.889184][ T1177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.941385][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.962561][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.996953][ T1177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.000289][ T1177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.216879][ T68] Bluetooth: hci0: command tx timeout [ 51.266892][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.267668][ T6030] Cannot find add_set index 3 as target [ 51.295714][ T68] Bluetooth: hci2: command tx timeout [ 51.295914][ T5306] Bluetooth: hci3: command tx timeout [ 51.301308][ T5956] Bluetooth: hci1: command tx timeout [ 51.351513][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 51.355240][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 51.359360][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 51.363027][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 51.509908][ T6046] Bluetooth: MGMT ver 1.23 [ 51.516948][ T6028] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 51.534466][ T6036] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2'. [ 51.556115][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 51.583630][ T6036] xt_CT: You must specify a L4 protocol and not use inversions on it [ 51.760850][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 51.863290][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 52.143193][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 52.147484][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 52.641540][ T6074] can0: slcan on ptm0. [ 52.830358][ T6079] nbd: must specify a size in bytes for the device [ 52.860992][ T6079] netlink: 'syz.3.6': attribute type 10 has an invalid length. [ 52.864565][ T6079] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6'. [ 52.930054][ T6079] team0: Port device geneve0 added [ 53.378336][ T5306] Bluetooth: hci1: command tx timeout [ 53.378519][ T68] Bluetooth: hci3: command tx timeout [ 53.380699][ T5306] Bluetooth: hci2: command tx timeout [ 53.440144][ T6085] IPv6: NLM_F_REPLACE set, but no existing node found! [ 53.538567][ T5956] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 53.631413][ T6094] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 53.664635][ T6094] capability: warning: `syz.0.9' uses 32-bit capabilities (legacy support in use) [ 53.956049][ T6073] can0 (unregistered): slcan off ptm0. [ 54.189775][ T6106] syz.1.10 uses obsolete (PF_INET,SOCK_PACKET) [ 54.398280][ T40] audit: type=1800 audit(1744856591.636:2): pid=6122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.14" name="cgroup.controllers" dev="overlay" ino=33 res=0 errno=0 [ 54.826439][ T64] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 54.998979][ T64] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 55.002282][ T64] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 55.031718][ T64] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 55.036031][ T64] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 55.040025][ T64] usb 6-1: Product: syz [ 55.042000][ T64] usb 6-1: Manufacturer: syz [ 55.044153][ T64] usb 6-1: SerialNumber: syz [ 55.056249][ T64] usb 6-1: config 0 descriptor?? [ 55.456133][ T5956] Bluetooth: hci3: command tx timeout [ 55.456238][ T5306] Bluetooth: hci1: command tx timeout [ 55.465652][ T5956] Bluetooth: hci2: command tx timeout [ 56.228830][ T6146] ======================================================= [ 56.228830][ T6146] WARNING: The mand mount option has been deprecated and [ 56.228830][ T6146] and is ignored by this kernel. Remove the mand [ 56.228830][ T6146] option from the mount to silence this warning. [ 56.228830][ T6146] ======================================================= [ 56.240529][ T6146] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 56.673569][ T58] usb 6-1: USB disconnect, device number 2 [ 57.087628][ T6167] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.095318][ T6168] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 57.098714][ T6168] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 57.674137][ T6181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28'. [ 57.864056][ T6184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.26'. [ 58.909756][ T6188] netlink: 80 bytes leftover after parsing attributes in process `syz.2.29'. [ 58.912717][ T6188] netlink: 80 bytes leftover after parsing attributes in process `syz.2.29'. [ 58.962234][ T6191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30'. [ 58.965528][ T6191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.30'. [ 58.968869][ T6191] netlink: 'syz.0.30': attribute type 7 has an invalid length. [ 59.500255][ T6207] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.554142][ T6207] pim6reg: entered allmulticast mode [ 59.569921][ T6207] pim6reg: left allmulticast mode [ 61.477027][ T6240] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 61.481001][ T6240] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 62.382217][ T6246] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 62.697386][ T6251] ALSA: mixer_oss: invalid OSS volume 'DIG¨TAL1' [ 63.824831][ T6250] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 64.012618][ T6012] IPVS: starting estimator thread 0... [ 64.105742][ T6272] IPVS: using max 44 ests per chain, 105600 per kthread [ 64.739684][ T6282] mmap: syz.2.48 (6282) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 64.871495][ T6290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.49'. [ 64.878389][ T6290] netlink: 277 bytes leftover after parsing attributes in process `syz.1.49'. [ 64.881330][ T6290] netlink: 277 bytes leftover after parsing attributes in process `syz.1.49'. [ 65.057050][ T40] audit: type=1326 audit(1744856601.976:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.1.49" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 65.065495][ T40] audit: type=1326 audit(1744856601.976:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.1.49" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 65.075044][ T40] audit: type=1326 audit(1744856601.986:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.1.49" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 65.087389][ T40] audit: type=1326 audit(1744856601.986:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.1.49" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 65.095582][ T40] audit: type=1326 audit(1744856601.986:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.1.49" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 65.102668][ T40] audit: type=1326 audit(1744856601.986:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.1.49" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 65.111391][ T40] audit: type=1326 audit(1744856601.986:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.1.49" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 65.119956][ T40] audit: type=1326 audit(1744856601.986:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.1.49" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 65.130784][ T40] audit: type=1326 audit(1744856601.986:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.1.49" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 65.140474][ T40] audit: type=1326 audit(1744856601.986:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.1.49" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 65.957182][ T6321] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 65.974195][ T6321] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 65.977423][ T6321] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 65.995365][ T6321] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 66.008423][ T6321] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 66.015638][ T6321] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 66.021034][ T6321] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 66.030500][ T6321] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 66.034068][ T6321] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 66.045847][ T6321] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 66.062195][ T6333] netlink: 9 bytes leftover after parsing attributes in process `syz.0.65'. [ 66.069298][ T6333] gretap0: entered promiscuous mode [ 66.327554][ T5981] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 66.366862][ T6350] xt_CT: You must specify a L4 protocol and not use inversions on it [ 66.399270][ T6347] syz_tun: entered allmulticast mode [ 66.455789][ T5981] usb 5-1: device descriptor read/64, error -71 [ 66.597849][ T6303] syz_tun: left allmulticast mode [ 66.695606][ T5981] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 66.835587][ T5981] usb 5-1: device descriptor read/64, error -71 [ 66.946551][ T5981] usb usb5-port1: attempt power cycle [ 66.958918][ T6363] bridge0: port 3(netdevsim0) entered blocking state [ 66.965720][ T6363] bridge0: port 3(netdevsim0) entered disabled state [ 66.968684][ T6363] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 66.985692][ T6363] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 66.989825][ T6363] bridge0: port 3(netdevsim0) entered blocking state [ 66.992987][ T6363] bridge0: port 3(netdevsim0) entered forwarding state [ 67.167088][ T6361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.72'. [ 67.285564][ T5981] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 67.317824][ T5981] usb 5-1: device descriptor read/8, error -71 [ 67.555787][ T5981] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 67.576406][ T5981] usb 5-1: device descriptor read/8, error -71 [ 67.678157][ T836] IPVS: starting estimator thread 0... [ 67.686591][ T5981] usb usb5-port1: unable to enumerate USB device [ 67.767073][ T6373] IPVS: using max 43 ests per chain, 103200 per kthread [ 68.015681][ T5306] Bluetooth: hci1: command 0x0c1a tx timeout [ 68.018262][ T5956] Bluetooth: hci3: command 0x0c1a tx timeout [ 68.095581][ T5956] Bluetooth: hci2: command 0x0c1a tx timeout [ 68.341029][ T6382] program syz.3.77 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.975888][ T6399] Zero length message leads to an empty skb [ 70.095644][ T5306] Bluetooth: hci1: command 0x0c1a tx timeout [ 70.099124][ T5956] Bluetooth: hci3: command 0x0c1a tx timeout [ 70.175695][ T5956] Bluetooth: hci2: command 0x0c1a tx timeout [ 70.893983][ T6429] befs: (nullb0): No write support. Marking filesystem read-only [ 70.900005][ T6429] befs: (nullb0): invalid magic header [ 70.990373][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.993352][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.496449][ T6436] [U] : [ 71.497524][ T6436] [U] [ 71.498473][ T6436] [U] [ 71.499407][ T6436] [U] [ 71.500295][ T6436] [U] [ 71.501179][ T6436] [U] [ 71.502181][ T6436] [U] [ 71.503112][ T6436] [U] [ 71.504278][ T6436] [U] [ 71.505384][ T6436] [U] [ 71.506787][ T6436] [U] [ 71.507903][ T6436] [U] [ 71.508976][ T6436] [U] [ 71.509902][ T6436] [U] [ 71.510954][ T6436] [U] [ 71.512172][ T6436] [U] [ 71.513760][ T6436] [U] [ 71.515282][ T6436] [U] [ 71.516465][ T6436] [U] [ 71.517903][ T6436] [U] [ 71.519425][ T6436] [U] [ 71.520521][ T6436] [U] [ 71.521569][ T6436] [U] [ 71.522481][ T6436] [U] [ 71.524814][ T6436] [U] [ 71.525766][ T6436] [U] [ 71.526700][ T6436] [U] [ 71.527596][ T6436] [U] [ 71.528525][ T6436] [U] [ 71.529465][ T6436] [U] [ 71.530545][ T6436] [U] [ 71.531724][ T6436] [U] [ 71.533662][ T6436] [U] [ 71.534578][ T6436] [U] [ 71.535866][ T6436] [U] [ 71.537192][ T6436] [U] [ 71.538340][ T6436] [U] [ 71.539521][ T6436] [U] [ 71.540763][ T6436] [U] [ 71.542092][ T6436] [U] [ 71.544162][ T6436] [U] [ 71.545539][ T6436] [U] [ 71.546867][ T6436] [U] [ 71.548169][ T6436] [U] [ 71.549419][ T6436] [U] [ 71.550426][ T6436] [U] [ 71.551338][ T6436] [U] [ 71.552238][ T6436] [U] [ 71.565622][ T6436] [U] [ 71.566789][ T6436] [U] [ 71.567880][ T6436] [U] [ 71.568996][ T6436] [U] [ 71.570088][ T6436] [U] [ 71.571188][ T6436] [U] [ 71.572289][ T6436] [U] [ 71.573287][ T6436] [U] [ 71.574257][ T6436] [U] [ 71.575205][ T6436] [U] [ 71.576201][ T6436] [U] [ 71.577161][ T6436] [U] [ 71.578120][ T6436] [U] [ 71.579129][ T6436] [U] [ 71.580025][ T6436] [U] [ 71.580936][ T6436] [U] [ 71.582727][ T6436] [U] [ 71.583640][ T6436] [U] [ 71.584541][ T6436] [U] [ 71.585451][ T6436] [U] [ 71.586369][ T6436] [U] [ 71.587310][ T6436] [U] [ 71.588259][ T6436] [U] [ 71.589216][ T6443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.93'. [ 71.589377][ T6436] [U] [ 71.595172][ T6436] [U] [ 71.596101][ T6436] [U] [ 71.596991][ T6436] [U] [ 71.597898][ T6436] [U] [ 71.598876][ T6436] [U] [ 71.599785][ T6436] [U] [ 71.600723][ T6436] [U] [ 71.601681][ T6436] [U] [ 71.603118][ T6436] [U] [ 71.604015][ T6436] [U] [ 71.604942][ T6436] [U] [ 71.605925][ T6436] [U] [ 71.606918][ T6436] [U] [ 71.607893][ T6436] [U] [ 71.608947][ T6436] [U] [ 71.609964][ T6436] [U] [ 71.612444][ T6436] [U] [ 71.613492][ T6436] [U] [ 71.614435][ T6436] [U] [ 71.615352][ T6436] [U] [ 71.616250][ T6436] [U] [ 71.617149][ T6436] [U] [ 71.618042][ T6436] [U] [ 71.619050][ T6436] [U] [ 71.625185][ T6444] overlay: Bad value for 'metacopy' [ 71.627581][ T6436] [U] [ 71.628808][ T6436] [U] [ 71.630318][ T6436] [U] [ 71.631872][ T6436] [U] [ 71.633430][ T6436] [U] [ 71.634633][ T6436] [U] [ 71.635696][ T6436] [U] [ 71.636614][ T6436] [U] [ 71.638662][ T6436] [U] [ 71.639688][ T6436] [U] [ 71.640638][ T6436] [U] [ 71.641689][ T6436] [U] [ 71.642848][ T6436] [U] [ 71.643950][ T6436] [U] [ 71.645022][ T6436] [U] [ 71.645964][ T6436] [U] [ 71.647733][ T6436] [U] [ 71.648821][ T6436] [U] [ 71.649748][ T6436] [U] [ 71.650716][ T6436] [U] [ 71.651863][ T6436] [U] [ 71.653150][ T6436] [U] [ 71.654820][ T6436] [U] [ 71.656276][ T6436] [U] [ 71.659289][ T6436] [U] [ 71.660556][ T6436] [U] [ 71.661629][ T6436] [U] [ 71.662839][ T6436] [U] [ 71.664031][ T6436] [U] [ 71.665200][ T6436] [U] [ 71.666358][ T6436] [U] [ 71.749235][ T6444] [U] [ 72.175528][ T5956] Bluetooth: hci3: command 0x0c1a tx timeout [ 72.178560][ T5306] Bluetooth: hci1: command 0x0c1a tx timeout [ 72.255596][ T5306] Bluetooth: hci2: command 0x0c1a tx timeout [ 72.373198][ T6451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.96'. [ 72.670643][ T6464] pim6reg: entered allmulticast mode [ 72.677894][ T6464] pim6reg: left allmulticast mode [ 72.969958][ T5306] Bluetooth: hci3: unexpected event for opcode 0x042c [ 73.490897][ T6481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.102'. [ 73.640475][ T6479] warning: `syz.0.101' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 73.720234][ T6493] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 73.929353][ T6509] FAULT_INJECTION: forcing a failure. [ 73.929353][ T6509] name failslab, interval 1, probability 0, space 0, times 1 [ 73.933923][ T6509] CPU: 1 UID: 0 PID: 6509 Comm: syz.2.103 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 73.933941][ T6509] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.933948][ T6509] Call Trace: [ 73.933954][ T6509] [ 73.933960][ T6509] dump_stack_lvl+0x16c/0x1f0 [ 73.933984][ T6509] should_fail_ex+0x512/0x640 [ 73.933998][ T6509] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 73.934019][ T6509] should_failslab+0xc2/0x120 [ 73.934032][ T6509] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 73.934048][ T6509] ? alloc_empty_file+0x55/0x1e0 [ 73.934062][ T6509] alloc_empty_file+0x55/0x1e0 [ 73.934073][ T6509] path_openat+0xe0/0x2d40 [ 73.934089][ T6509] ? __ia32_compat_sys_openat+0x16d/0x210 [ 73.934101][ T6509] ? __do_fast_syscall_32+0x73/0x120 [ 73.934123][ T6509] ? do_fast_syscall_32+0x32/0x80 [ 73.934138][ T6509] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 73.934157][ T6509] ? __pfx_path_openat+0x10/0x10 [ 73.934175][ T6509] do_filp_open+0x20b/0x470 [ 73.934191][ T6509] ? __pfx_do_filp_open+0x10/0x10 [ 73.934215][ T6509] ? alloc_fd+0x471/0x7d0 [ 73.934235][ T6509] do_sys_openat2+0x11b/0x1d0 [ 73.934246][ T6509] ? __pfx_do_sys_openat2+0x10/0x10 [ 73.934259][ T6509] ? __fget_files+0x20e/0x3c0 [ 73.934276][ T6509] __ia32_compat_sys_openat+0x16d/0x210 [ 73.934288][ T6509] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 73.934300][ T6509] ? ksys_write+0x1b9/0x240 [ 73.934316][ T6509] ? rcu_is_watching+0x12/0xc0 [ 73.934333][ T6509] __do_fast_syscall_32+0x73/0x120 [ 73.934350][ T6509] do_fast_syscall_32+0x32/0x80 [ 73.934365][ T6509] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 73.934378][ T6509] RIP: 0023:0xf7f57579 [ 73.934388][ T6509] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 73.934398][ T6509] RSP: 002b:00000000f503455c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 73.934409][ T6509] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000080 [ 73.934415][ T6509] RDX: 0000000000000000 RSI: 00000000000000d5 RDI: 0000000000000000 [ 73.934421][ T6509] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 73.934427][ T6509] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 73.934432][ T6509] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 73.934444][ T6509] [ 74.182697][ T6520] sp0: Synchronizing with TNC [ 74.396372][ T6531] syz.1.109: attempt to access beyond end of device [ 74.396372][ T6531] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 74.401187][ T6531] isofs_fill_super: bread failed, dev=nbd1, iso_blknum=16, block=32 [ 74.484878][ T5992] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 74.496405][ T5992] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 74.502027][ T5992] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 74.505555][ T5992] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 74.510990][ T5992] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 74.515941][ T5992] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 74.519307][ T5992] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 74.523254][ T5992] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 74.527912][ T5992] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 74.532594][ T5992] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 74.536066][ T5992] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 74.539203][ T5992] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 74.541736][ T5992] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 74.544773][ T5992] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 74.547559][ T5992] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 74.550067][ T5992] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 74.552474][ T5992] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 74.555143][ T5992] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 74.558687][ T5992] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 74.562595][ T5992] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 74.566237][ T5992] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 74.570243][ T5992] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 74.572710][ T5992] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 74.576758][ T5992] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 74.579854][ T5992] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 74.582628][ T5992] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 74.585238][ T5992] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 74.588311][ T5992] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 74.590826][ T5992] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 74.593331][ T5992] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 74.595944][ T5992] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 74.598454][ T5992] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 74.604629][ T5992] hid-generic 0004:FFFFFFFF:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz0 [ 74.765668][ T6014] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 74.928062][ T6014] usb 6-1: config 0 has no interfaces? [ 74.930069][ T6014] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 74.932874][ T6014] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.944118][ T6014] usb 6-1: config 0 descriptor?? [ 75.171561][ T5992] usb 6-1: USB disconnect, device number 3 [ 75.248786][ T6547] IPVS: length: 246 != 24 [ 75.440853][ T40] kauditd_printk_skb: 103 callbacks suppressed [ 75.440866][ T40] audit: type=1800 audit(1744856612.676:116): pid=6551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.114" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 75.852228][ T6555] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 75.861687][ T6555] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 77.072187][ T6571] FAULT_INJECTION: forcing a failure. [ 77.072187][ T6571] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 77.080509][ T6571] CPU: 0 UID: 0 PID: 6571 Comm: syz.3.121 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 77.080541][ T6571] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.080553][ T6571] Call Trace: [ 77.080561][ T6571] [ 77.080571][ T6571] dump_stack_lvl+0x16c/0x1f0 [ 77.080610][ T6571] should_fail_ex+0x512/0x640 [ 77.080640][ T6571] _copy_from_user+0x2e/0xd0 [ 77.080669][ T6571] bpf_prog_load+0x1a8d/0x2490 [ 77.080698][ T6571] ? __pfx_bpf_prog_load+0x10/0x10 [ 77.080742][ T6571] ? bpf_lsm_bpf+0x9/0x10 [ 77.080772][ T6571] __sys_bpf+0x433c/0x4d80 [ 77.080798][ T6571] ? __pfx___sys_bpf+0x10/0x10 [ 77.080821][ T6571] ? ksys_write+0x190/0x240 [ 77.080867][ T6571] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 77.080917][ T6571] ? fput+0x70/0xf0 [ 77.080938][ T6571] ? ksys_write+0x1b9/0x240 [ 77.080963][ T6571] ? __pfx_ksys_write+0x10/0x10 [ 77.080997][ T6571] __ia32_sys_bpf+0x76/0xe0 [ 77.081022][ T6571] __do_fast_syscall_32+0x73/0x120 [ 77.081052][ T6571] do_fast_syscall_32+0x32/0x80 [ 77.081081][ T6571] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 77.081107][ T6571] RIP: 0023:0xf7fe1579 [ 77.081124][ T6571] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 77.081140][ T6571] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 77.081156][ T6571] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000440 [ 77.081165][ T6571] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 77.081174][ T6571] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 77.081182][ T6571] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 77.081191][ T6571] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 77.081209][ T6571] [ 77.193981][ T6574] FAULT_INJECTION: forcing a failure. [ 77.193981][ T6574] name failslab, interval 1, probability 0, space 0, times 0 [ 77.201662][ T6574] CPU: 2 UID: 0 PID: 6574 Comm: syz.3.122 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 77.201680][ T6574] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.201686][ T6574] Call Trace: [ 77.201691][ T6574] [ 77.201696][ T6574] dump_stack_lvl+0x16c/0x1f0 [ 77.201717][ T6574] should_fail_ex+0x512/0x640 [ 77.201733][ T6574] should_failslab+0xc2/0x120 [ 77.201745][ T6574] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 77.201763][ T6574] ? __alloc_skb+0x2b2/0x380 [ 77.201779][ T6574] __alloc_skb+0x2b2/0x380 [ 77.201792][ T6574] ? __pfx___alloc_skb+0x10/0x10 [ 77.201805][ T6574] ? __alloc_skb+0x200/0x380 [ 77.201817][ T6574] ? __pfx___alloc_skb+0x10/0x10 [ 77.201832][ T6574] create_monitor_ctrl_event+0x3b/0x450 [ 77.201847][ T6574] mgmt_cmd_complete+0x2de/0x550 [ 77.201860][ T6574] user_pairing_resp+0x511/0x560 [ 77.201875][ T6574] ? __pfx_user_pairing_resp+0x10/0x10 [ 77.201887][ T6574] ? do_raw_read_unlock+0x44/0xe0 [ 77.201900][ T6574] ? _raw_read_unlock+0x28/0x50 [ 77.201914][ T6574] ? __pfx_mgmt_init_hdev+0x10/0x10 [ 77.201929][ T6574] hci_sock_sendmsg+0x151f/0x25e0 [ 77.201944][ T6574] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 77.201960][ T6574] sock_write_iter+0x4fc/0x5b0 [ 77.201976][ T6574] ? __pfx_sock_write_iter+0x10/0x10 [ 77.201991][ T6574] ? bpf_lsm_file_permission+0x9/0x10 [ 77.202004][ T6574] ? security_file_permission+0x71/0x210 [ 77.202019][ T6574] ? rw_verify_area+0xcf/0x680 [ 77.202034][ T6574] vfs_write+0x5ba/0x1180 [ 77.202049][ T6574] ? __pfx_sock_write_iter+0x10/0x10 [ 77.202060][ T6574] ? __pfx_vfs_write+0x10/0x10 [ 77.202073][ T6574] ? find_held_lock+0x2b/0x80 [ 77.202095][ T6574] ksys_write+0x205/0x240 [ 77.202109][ T6574] ? __pfx_ksys_write+0x10/0x10 [ 77.202124][ T6574] ? rcu_is_watching+0x12/0xc0 [ 77.202140][ T6574] __do_fast_syscall_32+0x73/0x120 [ 77.202158][ T6574] do_fast_syscall_32+0x32/0x80 [ 77.202174][ T6574] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 77.202187][ T6574] RIP: 0023:0xf7fe1579 [ 77.202196][ T6574] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 77.202206][ T6574] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 77.202216][ T6574] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000000 [ 77.202222][ T6574] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 77.202228][ T6574] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 77.202233][ T6574] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 77.202239][ T6574] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 77.202252][ T6574] [ 77.315585][ C2] hpet: Lost 6 RTC interrupts [ 77.824810][ T6591] netlink: 28 bytes leftover after parsing attributes in process `syz.3.125'. [ 77.842445][ T5306] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 77.874788][ T6591] wireguard0: entered promiscuous mode [ 77.877459][ T6591] wireguard0: entered allmulticast mode [ 77.954281][ T6600] overlay: Unknown parameter 'obj_user' [ 78.712557][ T6606] infiniband syz1: set active [ 78.715608][ T6606] infiniband syz1: added bond_slave_1 [ 78.752139][ T6606] RDS/IB: syz1: added [ 78.753935][ T6606] smc: adding ib device syz1 with port count 1 [ 78.756362][ T6606] smc: ib device syz1 port 1 has pnetid [ 79.179093][ T6620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.135'. [ 80.455754][ T40] audit: type=1326 audit(1744856617.656:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6642 comm="syz.0.142" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 80.475817][ T6650] netlink: 28 bytes leftover after parsing attributes in process `syz.0.142'. [ 80.476049][ T40] audit: type=1326 audit(1744856617.656:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6642 comm="syz.0.142" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 80.478828][ T6650] netlink: 28 bytes leftover after parsing attributes in process `syz.0.142'. [ 80.503725][ T40] audit: type=1326 audit(1744856617.666:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6642 comm="syz.0.142" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 80.512199][ T40] audit: type=1326 audit(1744856617.666:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6642 comm="syz.0.142" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 80.520495][ T40] audit: type=1326 audit(1744856617.666:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6642 comm="syz.0.142" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 80.525011][ T6650] netlink: 28 bytes leftover after parsing attributes in process `syz.0.142'. [ 80.528930][ T40] audit: type=1326 audit(1744856617.666:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6642 comm="syz.0.142" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 80.531067][ T6650] netlink: 28 bytes leftover after parsing attributes in process `syz.0.142'. [ 80.538047][ T40] audit: type=1326 audit(1744856617.666:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6642 comm="syz.0.142" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 80.550708][ T40] audit: type=1326 audit(1744856617.666:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6642 comm="syz.0.142" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 80.558617][ T40] audit: type=1326 audit(1744856617.676:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6642 comm="syz.0.142" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 80.567422][ T6655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.144'. [ 80.571582][ T40] audit: type=1326 audit(1744856617.676:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6642 comm="syz.0.142" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 80.578888][ T5306] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 81.238351][ T66] cfg80211: failed to load regulatory.db [ 81.330042][ T6665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.147'. [ 81.400607][ T6665] usb usb4: usbfs: process 6665 (syz.2.147) did not claim interface 0 before use [ 81.436675][ T6665] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 81.448333][ T6666] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 81.463606][ T6665] netlink: 84 bytes leftover after parsing attributes in process `syz.2.147'. [ 81.465180][ T6666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.148'. [ 81.932045][ T6684] FAULT_INJECTION: forcing a failure. [ 81.932045][ T6684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.937604][ T6684] CPU: 1 UID: 0 PID: 6684 Comm: syz.0.151 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 81.937619][ T6684] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.937626][ T6684] Call Trace: [ 81.937630][ T6684] [ 81.937634][ T6684] dump_stack_lvl+0x16c/0x1f0 [ 81.937654][ T6684] should_fail_ex+0x512/0x640 [ 81.937669][ T6684] _copy_to_iter+0x477/0x15a0 [ 81.937686][ T6684] ? __pfx__copy_to_iter+0x10/0x10 [ 81.937698][ T6684] ? __pfx___might_resched+0x10/0x10 [ 81.937715][ T6684] ? rcu_is_watching+0x12/0xc0 [ 81.937731][ T6684] ? __lock_acquire+0xaa4/0x1ba0 [ 81.937749][ T6684] simple_copy_to_iter+0x46/0x90 [ 81.937761][ T6684] __skb_datagram_iter+0x5a9/0x8c0 [ 81.937771][ T6684] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 81.937786][ T6684] skb_copy_datagram_iter+0x40/0x50 [ 81.937798][ T6684] unix_stream_read_actor+0x7b/0xc0 [ 81.937815][ T6684] unix_stream_read_generic+0xe15/0x28b0 [ 81.937834][ T6684] ? __pfx_unix_stream_read_generic+0x10/0x10 [ 81.937849][ T6684] ? __pfx_autoremove_wake_function+0x10/0x10 [ 81.937866][ T6684] ? trace_mm_page_alloc+0x11f/0x1a0 [ 81.937882][ T6684] unix_stream_recvmsg+0x190/0x1c0 [ 81.937892][ T6684] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 81.937902][ T6684] ? __pfx_aa_sk_perm+0x10/0x10 [ 81.937915][ T6684] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 81.937935][ T6684] sock_recvmsg+0x1f6/0x250 [ 81.937952][ T6684] ____sys_recvmsg+0x218/0x6b0 [ 81.937978][ T6684] ? __pfx_____sys_recvmsg+0x10/0x10 [ 81.937994][ T6684] ? import_iovec+0x109/0x140 [ 81.938011][ T6684] ? __lock_acquire+0x5ca/0x1ba0 [ 81.938029][ T6684] ___sys_recvmsg+0x114/0x1a0 [ 81.938044][ T6684] ? __pfx____sys_recvmsg+0x10/0x10 [ 81.938064][ T6684] ? get_pid_task+0xe0/0x250 [ 81.938077][ T6684] do_recvmmsg+0x568/0x740 [ 81.938092][ T6684] ? __pfx_do_recvmmsg+0x10/0x10 [ 81.938115][ T6684] ? __fget_files+0x20e/0x3c0 [ 81.938133][ T6684] __sys_recvmmsg+0x21c/0x280 [ 81.938147][ T6684] ? __pfx___sys_recvmmsg+0x10/0x10 [ 81.938185][ T6684] ? __pfx_ksys_write+0x10/0x10 [ 81.938203][ T6684] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 81.938218][ T6684] ? lockdep_hardirqs_on+0x7c/0x110 [ 81.938234][ T6684] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 81.938249][ T6684] __do_fast_syscall_32+0x73/0x120 [ 81.938266][ T6684] do_fast_syscall_32+0x32/0x80 [ 81.938283][ T6684] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 81.938300][ T6684] RIP: 0023:0xf7fd8579 [ 81.938312][ T6684] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 81.938324][ T6684] RSP: 002b:00000000f50f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 81.938338][ T6684] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000800034c0 [ 81.938346][ T6684] RDX: 000000000000013c RSI: 0000000000000700 RDI: 0000000000000000 [ 81.938353][ T6684] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 81.938360][ T6684] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 81.938369][ T6684] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 81.938387][ T6684] [ 82.846916][ T6700] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 83.239930][ T1018] hid-generic 0000:0000:0000.0003: item fetching failed at offset 0/1 [ 83.243928][ T1018] hid-generic 0000:0000:0000.0003: probe with driver hid-generic failed with error -22 [ 83.265987][ T6707] syzkaller1: entered promiscuous mode [ 83.275703][ T6707] syzkaller1: entered allmulticast mode [ 83.458772][ T6719] netlink: 56 bytes leftover after parsing attributes in process `syz.3.160'. [ 83.486278][ T6719] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 83.500242][ T6719] batman_adv: batadv0: Adding interface: ip6gretap1 [ 83.502709][ T6719] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.523753][ T6719] batman_adv: batadv0: Interface activated: ip6gretap1 [ 84.448744][ T6734] netlink: 100 bytes leftover after parsing attributes in process `syz.3.164'. [ 85.729570][ T6748] syz.1.167 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 85.736587][ T6748] sg_write: data in/out 209/17 bytes for SCSI command 0x0-- guessing data in; [ 85.736587][ T6748] program syz.1.167 not setting count and/or reply_len properly [ 85.999084][ T6017] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 86.195479][ T6017] usb 6-1: Using ep0 maxpacket: 16 [ 86.202695][ T6756] netlink: 244 bytes leftover after parsing attributes in process `syz.2.170'. [ 86.235889][ T6017] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 86.241176][ T6017] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 86.243782][ T6017] usb 6-1: Product: syz [ 86.250645][ T6017] usb 6-1: Manufacturer: syz [ 86.252305][ T6017] usb 6-1: SerialNumber: syz [ 86.346002][ T6017] usb 6-1: config 0 descriptor?? [ 87.375333][ T6770] IPVS: set_ctl: invalid protocol: 110 10.1.1.2:20002 [ 88.366606][ T6782] Bluetooth: MGMT ver 1.23 [ 88.615227][ T6017] usb 6-1: USB disconnect, device number 4 [ 89.136047][ T6802] netlink: 56 bytes leftover after parsing attributes in process `syz.1.185'. [ 89.160284][ T6802] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 89.169470][ T6802] batman_adv: batadv0: Adding interface: ip6gretap1 [ 89.172119][ T6802] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 89.179998][ T6802] batman_adv: batadv0: Interface activated: ip6gretap1 [ 89.290155][ T6784] dccp_close: ABORT with 28 bytes unread [ 89.455622][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 89.455636][ T40] audit: type=1800 audit(1744856626.686:146): pid=6808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.187" name="bus" dev="overlay" ino=242 res=0 errno=0 [ 90.015559][ T5956] Bluetooth: hci4: command 0xfc11 tx timeout [ 90.015953][ T5306] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 90.054859][ T6774] sp0: Synchronizing with TNC [ 90.235113][ T6817] FAULT_INJECTION: forcing a failure. [ 90.235113][ T6817] name failslab, interval 1, probability 0, space 0, times 0 [ 90.239338][ T6817] CPU: 1 UID: 0 PID: 6817 Comm: syz.1.189 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 90.239365][ T6817] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.239373][ T6817] Call Trace: [ 90.239379][ T6817] [ 90.239385][ T6817] dump_stack_lvl+0x16c/0x1f0 [ 90.239408][ T6817] should_fail_ex+0x512/0x640 [ 90.239421][ T6817] ? fs_reclaim_acquire+0xae/0x150 [ 90.239435][ T6817] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 90.239451][ T6817] should_failslab+0xc2/0x120 [ 90.239462][ T6817] __kmalloc_noprof+0xd2/0x510 [ 90.239482][ T6817] tomoyo_realpath_from_path+0xc2/0x6e0 [ 90.239497][ T6817] ? tomoyo_profile+0x47/0x60 [ 90.239515][ T6817] tomoyo_path_number_perm+0x245/0x580 [ 90.239526][ T6817] ? tomoyo_path_number_perm+0x237/0x580 [ 90.239538][ T6817] ? finish_task_switch.isra.0+0x1a4/0xc10 [ 90.239554][ T6817] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 90.239566][ T6817] ? rcu_is_watching+0x12/0xc0 [ 90.239580][ T6817] ? lockdep_hardirqs_on+0x7c/0x110 [ 90.239608][ T6817] ? find_held_lock+0x2b/0x80 [ 90.239622][ T6817] ? hook_file_ioctl_common+0x145/0x410 [ 90.239637][ T6817] ? __fget_files+0x20e/0x3c0 [ 90.239654][ T6817] security_file_ioctl_compat+0x9b/0x240 [ 90.239670][ T6817] __do_compat_sys_ioctl+0x4e/0x2c0 [ 90.239685][ T6817] __do_fast_syscall_32+0x73/0x120 [ 90.239702][ T6817] do_fast_syscall_32+0x32/0x80 [ 90.239717][ T6817] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 90.239731][ T6817] RIP: 0023:0xf7fc1579 [ 90.239740][ T6817] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 90.239750][ T6817] RSP: 002b:00000000f50a455c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 90.239760][ T6817] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000000005411 [ 90.239766][ T6817] RDX: 0000000080001c80 RSI: 0000000000000000 RDI: 0000000000000000 [ 90.239772][ T6817] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 90.239777][ T6817] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 90.239783][ T6817] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 90.239795][ T6817] [ 90.239823][ T6817] ERROR: Out of memory at tomoyo_realpath_from_path. [ 90.538262][ T6823] netlink: 24 bytes leftover after parsing attributes in process `syz.2.190'. [ 91.565750][ T6842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.195'. [ 92.285798][ T6836] dccp_close: ABORT with 28 bytes unread [ 92.482291][ T6857] netlink: 132 bytes leftover after parsing attributes in process `syz.1.198'. [ 92.590791][ T5306] Bluetooth: hci1: unexpected event for opcode 0x040e [ 92.841427][ T6873] tmpfs: Bad value for 'mpol' [ 92.971071][ T6875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.203'. [ 92.980416][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.204'. [ 92.983859][ T6877] netlink: 12 bytes leftover after parsing attributes in process `syz.0.204'. [ 93.110871][ T6878] lo: entered promiscuous mode [ 93.115461][ T6878] lo: entered allmulticast mode [ 93.119491][ T6878] tunl0: entered promiscuous mode [ 93.121600][ T6878] tunl0: entered allmulticast mode [ 93.126310][ T6878] gre0: entered promiscuous mode [ 93.128014][ T6878] gre0: entered allmulticast mode [ 93.133267][ T6878] gretap0: entered promiscuous mode [ 93.134959][ T6878] gretap0: entered allmulticast mode [ 93.139718][ T6878] erspan0: entered promiscuous mode [ 93.141314][ T6878] erspan0: entered allmulticast mode [ 93.144784][ T6878] ip_vti0: entered promiscuous mode [ 93.146794][ T6878] ip_vti0: entered allmulticast mode [ 93.149827][ T6878] ip6_vti0: entered promiscuous mode [ 93.151516][ T6878] ip6_vti0: entered allmulticast mode [ 93.154887][ T6878] sit0: entered promiscuous mode [ 93.157988][ T6878] sit0: entered allmulticast mode [ 93.161595][ T6878] ip6tnl0: entered promiscuous mode [ 93.163977][ T6878] ip6tnl0: entered allmulticast mode [ 93.170537][ T6881] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 93.178272][ T6878] ip6gre0: entered promiscuous mode [ 93.180058][ T6878] ip6gre0: entered allmulticast mode [ 93.187642][ T6878] syz_tun: entered promiscuous mode [ 93.189527][ T6878] syz_tun: entered allmulticast mode [ 93.194597][ T6878] ip6gretap0: entered promiscuous mode [ 93.196978][ T6878] ip6gretap0: entered allmulticast mode [ 93.203336][ T6878] bridge0: port 3(netdevsim0) entered disabled state [ 93.206836][ T6878] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.209931][ T6878] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.214595][ T6878] bridge0: entered promiscuous mode [ 93.217478][ T6878] bridge0: entered allmulticast mode [ 93.221151][ T6878] vcan0: entered promiscuous mode [ 93.222803][ T6878] vcan0: entered allmulticast mode [ 93.226237][ T6878] bond0: entered promiscuous mode [ 93.228799][ T6878] bond_slave_0: entered promiscuous mode [ 93.230699][ T6878] bond_slave_1: entered promiscuous mode [ 93.232552][ T6878] bond0: entered allmulticast mode [ 93.234178][ T6878] bond_slave_0: entered allmulticast mode [ 93.236533][ T6878] bond_slave_1: entered allmulticast mode [ 93.249222][ T6878] team0: entered promiscuous mode [ 93.251429][ T6878] team_slave_0: entered promiscuous mode [ 93.254071][ T6878] team_slave_1: entered promiscuous mode [ 93.256576][ T6878] geneve0: entered promiscuous mode [ 93.259670][ T6878] team0: entered allmulticast mode [ 93.261848][ T6878] team_slave_0: entered allmulticast mode [ 93.264300][ T6878] team_slave_1: entered allmulticast mode [ 93.267384][ T6878] geneve0: entered allmulticast mode [ 93.272563][ T6878] dummy0: entered promiscuous mode [ 93.276066][ T6878] dummy0: entered allmulticast mode [ 93.284269][ T6878] nlmon0: entered promiscuous mode [ 93.287216][ T6878] nlmon0: entered allmulticast mode [ 93.291471][ T6878] caif0: entered promiscuous mode [ 93.293657][ T6878] caif0: entered allmulticast mode [ 93.298171][ T6878] batadv0: entered promiscuous mode [ 93.300072][ T6878] batadv0: entered allmulticast mode [ 93.304178][ T6878] vxcan0: entered promiscuous mode [ 93.306927][ T6878] vxcan0: entered allmulticast mode [ 93.310461][ T6878] vxcan1: entered promiscuous mode [ 93.312137][ T6878] vxcan1: entered allmulticast mode [ 93.314935][ T6878] veth0: entered promiscuous mode [ 93.316870][ T6878] veth0: entered allmulticast mode [ 93.321321][ T6878] veth1: entered promiscuous mode [ 93.322964][ T6878] veth1: entered allmulticast mode [ 93.328262][ T6878] wg0: entered promiscuous mode [ 93.330818][ T6878] wg0: entered allmulticast mode [ 93.334785][ T6878] wg1: entered promiscuous mode [ 93.337641][ T6878] wg1: entered allmulticast mode [ 93.342184][ T6878] wg2: entered promiscuous mode [ 93.344502][ T6878] wg2: entered allmulticast mode [ 93.349475][ T6878] veth0_to_bridge: entered promiscuous mode [ 93.352067][ T6878] veth0_to_bridge: entered allmulticast mode [ 93.359290][ T6878] veth1_to_bridge: entered promiscuous mode [ 93.361438][ T6878] veth1_to_bridge: entered allmulticast mode [ 93.370638][ T6878] veth0_to_bond: entered promiscuous mode [ 93.372939][ T6878] veth0_to_bond: entered allmulticast mode [ 93.377887][ T6878] veth1_to_bond: entered promiscuous mode [ 93.380498][ T6878] veth1_to_bond: entered allmulticast mode [ 93.385823][ T6878] veth0_to_team: entered promiscuous mode [ 93.388107][ T6878] veth0_to_team: entered allmulticast mode [ 93.394977][ T6878] veth1_to_team: entered promiscuous mode [ 93.397863][ T6878] veth1_to_team: entered allmulticast mode [ 93.403932][ T6878] veth0_to_batadv: entered promiscuous mode [ 93.406305][ T6878] veth0_to_batadv: entered allmulticast mode [ 93.409784][ T6878] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.412864][ T6878] batadv_slave_0: entered promiscuous mode [ 93.415780][ T6878] batadv_slave_0: entered allmulticast mode [ 93.420644][ T6878] veth1_to_batadv: entered promiscuous mode [ 93.423280][ T6878] veth1_to_batadv: entered allmulticast mode [ 93.427796][ T6878] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.431608][ T6878] batadv_slave_1: entered promiscuous mode [ 93.433742][ T6878] batadv_slave_1: entered allmulticast mode [ 93.437660][ T6878] xfrm0: entered promiscuous mode [ 93.439711][ T6878] xfrm0: entered allmulticast mode [ 93.444229][ T6878] veth0_to_hsr: entered promiscuous mode [ 93.447191][ T6878] veth0_to_hsr: entered allmulticast mode [ 93.452295][ T6878] hsr_slave_0: entered allmulticast mode [ 93.456669][ T6878] veth1_to_hsr: entered promiscuous mode [ 93.458806][ T6878] veth1_to_hsr: entered allmulticast mode [ 93.463565][ T6878] hsr_slave_1: entered allmulticast mode [ 93.467779][ T6878] hsr0: entered promiscuous mode [ 93.469453][ T6878] hsr0: entered allmulticast mode [ 93.476533][ T6878] veth1_virt_wifi: entered promiscuous mode [ 93.478629][ T6878] veth1_virt_wifi: entered allmulticast mode [ 93.484184][ T6878] veth0_virt_wifi: entered promiscuous mode [ 93.486653][ T6878] veth0_virt_wifi: entered allmulticast mode [ 93.490081][ T6878] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 93.492405][ T6878] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 93.496407][ T6878] veth1_macvtap: entered allmulticast mode [ 93.500667][ T6878] veth0_macvtap: entered allmulticast mode [ 93.505951][ T6878] macvtap0: entered promiscuous mode [ 93.507994][ T6878] macvtap0: entered allmulticast mode [ 93.513791][ T6878] macsec0: entered promiscuous mode [ 93.516214][ T6878] macsec0: entered allmulticast mode [ 93.521524][ T6878] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.524345][ T6878] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.526166][ T6017] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 93.528065][ T6878] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.533726][ T6878] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.538901][ T6878] geneve1: entered promiscuous mode [ 93.540964][ T6878] geneve1: entered allmulticast mode [ 93.549043][ T6878] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 93.551629][ T6878] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 93.557289][ T6878] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 93.561225][ T6878] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 93.567281][ T6878] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 93.569997][ T6878] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 93.575966][ T6878] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 93.578188][ T6878] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 93.580496][ T6878] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 93.582682][ T6878] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 93.585000][ T6878] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 93.587952][ T6878] ip6gretap1: entered promiscuous mode [ 93.590188][ T6878] ip6gretap1: entered allmulticast mode [ 93.685542][ T6017] usb 5-1: Using ep0 maxpacket: 8 [ 93.691849][ T6017] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 93.694612][ T6017] usb 5-1: config 0 has no interface number 0 [ 93.697520][ T6017] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 93.701381][ T6017] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 93.706651][ T6017] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 93.710368][ T6017] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.728042][ T6017] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 93.731695][ T6017] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.734917][ T6017] usb 5-1: Product: syz [ 93.736457][ T6017] usb 5-1: Manufacturer: syz [ 93.737943][ T6017] usb 5-1: SerialNumber: syz [ 93.746487][ T6017] usb 5-1: config 0 descriptor?? [ 93.870381][ T6908] FAULT_INJECTION: forcing a failure. [ 93.870381][ T6908] name failslab, interval 1, probability 0, space 0, times 0 [ 93.875522][ T6908] CPU: 0 UID: 0 PID: 6908 Comm: syz.3.215 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 93.875537][ T6908] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 93.875556][ T6908] Call Trace: [ 93.875561][ T6908] [ 93.875566][ T6908] dump_stack_lvl+0x16c/0x1f0 [ 93.875598][ T6908] should_fail_ex+0x512/0x640 [ 93.875611][ T6908] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 93.875629][ T6908] should_failslab+0xc2/0x120 [ 93.875639][ T6908] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 93.875654][ T6908] ? __asan_memcpy+0x3c/0x60 [ 93.875668][ T6908] ? __kernfs_new_node+0xd2/0x8a0 [ 93.875687][ T6908] __kernfs_new_node+0xd2/0x8a0 [ 93.875706][ T6908] ? __pfx___kernfs_new_node+0x10/0x10 [ 93.875727][ T6908] ? find_held_lock+0x2b/0x80 [ 93.875743][ T6908] ? kernfs_root+0xee/0x2a0 [ 93.875762][ T6908] kernfs_new_node+0x13c/0x1e0 [ 93.875777][ T6908] kernfs_create_dir_ns+0x4c/0x1a0 [ 93.875790][ T6908] cgroup_mkdir+0x50f/0x1160 [ 93.875803][ T6908] ? __pfx_cgroup_mkdir+0x10/0x10 [ 93.875829][ T6908] kernfs_iop_mkdir+0x108/0x190 [ 93.875843][ T6908] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 93.875859][ T6908] vfs_mkdir+0x590/0x8c0 [ 93.875874][ T6908] do_mkdirat+0x304/0x3e0 [ 93.875891][ T6908] ? __pfx_do_mkdirat+0x10/0x10 [ 93.875907][ T6908] ? getname_flags.part.0+0x123/0x550 [ 93.875921][ T6908] __ia32_sys_mkdirat+0x82/0xb0 [ 93.875937][ T6908] __do_fast_syscall_32+0x73/0x120 [ 93.875954][ T6908] do_fast_syscall_32+0x32/0x80 [ 93.875982][ T6908] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 93.875997][ T6908] RIP: 0023:0xf7fe1579 [ 93.876005][ T6908] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 93.876016][ T6908] RSP: 002b:00000000f50e555c EFLAGS: 00000296 ORIG_RAX: 0000000000000128 [ 93.876026][ T6908] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 93.876032][ T6908] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000000 [ 93.876038][ T6908] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 93.876043][ T6908] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 93.876049][ T6908] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 93.876068][ T6908] [ 93.970129][ C0] vkms_vblank_simulate: vblank timer overrun [ 94.052725][ T6887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.077739][ T6887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.114765][ T6017] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 94.127509][ T6900] infiniband syz1: set active [ 94.129223][ T6900] infiniband syz1: added bond_slave_1 [ 94.177159][ T6900] RDS/IB: syz1: added [ 94.179109][ T6900] smc: adding ib device syz1 with port count 1 [ 94.181655][ T6900] smc: ib device syz1 port 1 has pnetid [ 94.323434][ T6017] usb 5-1: USB disconnect, device number 6 [ 94.714343][ T6913] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 94.718846][ T6913] overlayfs: failed to set xattr on upper [ 94.720751][ T6913] overlayfs: ...falling back to redirect_dir=nofollow. [ 94.724604][ T6913] overlayfs: ...falling back to index=off. [ 94.727144][ T6913] overlayfs: ...falling back to uuid=null. [ 94.729378][ T6913] overlayfs: conflicting lowerdir path [ 94.759705][ T6915] FAULT_INJECTION: forcing a failure. [ 94.759705][ T6915] name failslab, interval 1, probability 0, space 0, times 0 [ 94.763767][ T6915] CPU: 0 UID: 0 PID: 6915 Comm: syz.3.217 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 94.763786][ T6915] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 94.763793][ T6915] Call Trace: [ 94.763798][ T6915] [ 94.763802][ T6915] dump_stack_lvl+0x16c/0x1f0 [ 94.763823][ T6915] should_fail_ex+0x512/0x640 [ 94.763836][ T6915] ? fs_reclaim_acquire+0xae/0x150 [ 94.763851][ T6915] ? tomoyo_encode2+0x100/0x3e0 [ 94.763865][ T6915] should_failslab+0xc2/0x120 [ 94.763876][ T6915] __kmalloc_noprof+0xd2/0x510 [ 94.763892][ T6915] ? d_absolute_path+0x136/0x1a0 [ 94.763907][ T6915] tomoyo_encode2+0x100/0x3e0 [ 94.763923][ T6915] tomoyo_encode+0x29/0x50 [ 94.763936][ T6915] tomoyo_realpath_from_path+0x18f/0x6e0 [ 94.763954][ T6915] tomoyo_path_number_perm+0x245/0x580 [ 94.763966][ T6915] ? tomoyo_path_number_perm+0x237/0x580 [ 94.763979][ T6915] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 94.763992][ T6915] ? find_held_lock+0x2b/0x80 [ 94.764018][ T6915] ? find_held_lock+0x2b/0x80 [ 94.764036][ T6915] ? hook_file_ioctl_common+0x145/0x410 [ 94.764053][ T6915] ? __fget_files+0x20e/0x3c0 [ 94.764071][ T6915] security_file_ioctl_compat+0x9b/0x240 [ 94.764086][ T6915] __do_compat_sys_ioctl+0x4e/0x2c0 [ 94.764101][ T6915] __do_fast_syscall_32+0x73/0x120 [ 94.764119][ T6915] do_fast_syscall_32+0x32/0x80 [ 94.764134][ T6915] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 94.764148][ T6915] RIP: 0023:0xf7fe1579 [ 94.764157][ T6915] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 94.764167][ T6915] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 94.764178][ T6915] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0386105 [ 94.764184][ T6915] RDX: 0000000080000480 RSI: 0000000000000000 RDI: 0000000000000000 [ 94.764190][ T6915] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 94.764195][ T6915] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 94.764201][ T6915] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 94.764213][ T6915] [ 94.764224][ T6915] ERROR: Out of memory at tomoyo_realpath_from_path. [ 94.815723][ T6916] netlink: 40 bytes leftover after parsing attributes in process `syz.2.216'. [ 94.993034][ T6932] netlink: 224 bytes leftover after parsing attributes in process `syz.0.223'. [ 95.053767][ T6927] netlink: 'syz.1.221': attribute type 10 has an invalid length. [ 95.059885][ T6927] bond0: (slave wlan1): Opening slave failed [ 96.120006][ T40] audit: type=1326 audit(1744856633.356:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6965 comm="syz.3.232" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe1579 code=0x0 [ 96.198144][ T6967] s: rxe_newlink: already configured on bond_slave_1 [ 97.237900][ T6017] libceph: connect (1)[c::]:6789 error -22 [ 97.245348][ T6017] libceph: mon0 (1)[c::]:6789 connect error [ 97.256896][ T6017] libceph: connect (1)[c::]:6789 error -22 [ 97.268602][ T6017] libceph: mon0 (1)[c::]:6789 connect error [ 97.438094][ T40] audit: type=1326 audit(1744856634.676:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.1.240" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 97.465489][ T40] audit: type=1326 audit(1744856634.676:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.1.240" exe="/syz-executor" sig=0 arch=40000003 syscall=424 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 97.474347][ T40] audit: type=1326 audit(1744856634.676:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.1.240" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 97.525516][ T40] audit: type=1326 audit(1744856634.676:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.1.240" exe="/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 97.533093][ T40] audit: type=1326 audit(1744856634.676:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.1.240" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 97.541399][ T6017] libceph: connect (1)[c::]:6789 error -22 [ 97.543711][ T6017] libceph: mon0 (1)[c::]:6789 connect error [ 97.552722][ T40] audit: type=1326 audit(1744856634.676:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.1.240" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 97.660787][ T7009] fuse: Bad value for 'user_id' [ 97.662480][ T7009] fuse: Bad value for 'user_id' [ 97.843938][ T6995] ceph: No mds server is up or the cluster is laggy [ 98.143648][ T7023] netlink: 68 bytes leftover after parsing attributes in process `syz.2.247'. [ 98.178816][ T7020] s: rxe_newlink: already configured on bond_slave_1 [ 98.425174][ T40] audit: type=1326 audit(1744856635.656:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7029 comm="syz.1.249" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x0 [ 98.531124][ T7033] xt_hashlimit: max too large, truncated to 1048576 [ 98.617883][ T7036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.250'. [ 98.622101][ T7036] netlink: 50 bytes leftover after parsing attributes in process `syz.0.250'. [ 98.625180][ T7036] netlink: 50 bytes leftover after parsing attributes in process `syz.0.250'. [ 98.897559][ T7045] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 98.899835][ T7045] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 98.908868][ T7045] vhci_hcd vhci_hcd.0: Device attached [ 98.957708][ T7048] vhci_hcd: connection closed [ 98.972966][ T6679] vhci_hcd: stop threads [ 98.983416][ T6679] vhci_hcd: release socket [ 98.985040][ T6679] vhci_hcd: disconnect device [ 99.286482][ T7029] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 99.320608][ T7066] s: rxe_newlink: already configured on bond_slave_1 [ 99.966526][ T7070] ALSA: mixer_oss: invalid index 40000 [ 99.975941][ T7070] syz.1.257: attempt to access beyond end of device [ 99.975941][ T7070] nbd1: rw=0, sector=6, nr_sectors = 2 limit=0 [ 99.980034][ T7070] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 100.231242][ T7093] CIFS mount error: No usable UNC path provided in device string! [ 100.231242][ T7093] [ 100.235286][ T7093] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 100.282047][ T7095] Driver unsupported XDP return value 0 on prog (id 45) dev N/A, expect packet loss! [ 100.495680][ T5306] Bluetooth: hci0: unexpected event for opcode 0x0411 [ 100.500158][ T7101] program syz.2.266 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.503976][ T7101] netlink: 6 bytes leftover after parsing attributes in process `syz.2.266'. [ 100.972123][ T7108] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 101.181216][ T7117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.270'. [ 102.007675][ T7138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.273'. [ 102.010783][ T7138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.273'. [ 102.013740][ T7138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.273'. [ 102.225528][ T6014] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 102.390305][ T6014] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 102.393443][ T6014] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 102.407954][ T6014] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.416567][ T6014] usb 7-1: New USB device found, idVendor=0548, idProduct=a4a8, bcdDevice= 0.40 [ 102.422601][ T6014] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.425186][ T6014] usb 7-1: Product: syz [ 102.439021][ T6014] usb 7-1: Manufacturer: syz [ 102.440779][ T6014] usb 7-1: SerialNumber: syz [ 102.654293][ T6014] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0548 pid 0xA4A8 [ 102.962149][ T7137] usblp0:failed reading printer status (-71) [ 102.964676][ T6014] usb 7-1: USB disconnect, device number 2 [ 102.978875][ T6014] usblp0: removed [ 103.979263][ T7176] netfs: Couldn't get user pages (rc=-14) [ 104.038531][ T7177] overlayfs: failed to resolve './file1': -2 [ 104.315745][ T6014] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 104.331422][ T7181] netlink: 216 bytes leftover after parsing attributes in process `syz.3.286'. [ 104.335113][ T7181] netlink: 216 bytes leftover after parsing attributes in process `syz.3.286'. [ 104.399898][ T7182] fuse: Unknown parameter 't' [ 104.485516][ T6014] usb 6-1: Using ep0 maxpacket: 8 [ 104.494467][ T6014] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 104.510957][ T6014] usb 6-1: config 0 has no interface number 0 [ 104.517827][ T6014] usb 6-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 104.531562][ T6014] usb 6-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 104.547844][ T6014] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 104.559826][ T6014] usb 6-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.577995][ T6014] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 104.582035][ T6014] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.586954][ T66] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 104.591006][ T6014] usb 6-1: Product: syz [ 104.596473][ T6014] usb 6-1: Manufacturer: syz [ 104.604201][ T6014] usb 6-1: SerialNumber: syz [ 104.611198][ T6014] usb 6-1: config 0 descriptor?? [ 104.826200][ T6014] iowarrior 6-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 104.893333][ T7201] netlink: 28 bytes leftover after parsing attributes in process `syz.0.293'. [ 104.897563][ T7201] netlink: 'syz.0.293': attribute type 7 has an invalid length. [ 104.901089][ T7201] netlink: 20 bytes leftover after parsing attributes in process `syz.0.293'. [ 105.030840][ T6014] usb 6-1: USB disconnect, device number 5 [ 105.601337][ T7205] FAULT_INJECTION: forcing a failure. [ 105.601337][ T7205] name failslab, interval 1, probability 0, space 0, times 0 [ 105.607111][ T7205] CPU: 0 UID: 0 PID: 7205 Comm: syz.2.296 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 105.607129][ T7205] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 105.607137][ T7205] Call Trace: [ 105.607142][ T7205] [ 105.607148][ T7205] dump_stack_lvl+0x16c/0x1f0 [ 105.607172][ T7205] should_fail_ex+0x512/0x640 [ 105.607187][ T7205] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 105.607207][ T7205] should_failslab+0xc2/0x120 [ 105.607220][ T7205] __kmalloc_cache_noprof+0x6a/0x3e0 [ 105.607237][ T7205] ? alloc_netdev_mqs+0xf3a/0x1570 [ 105.607258][ T7205] alloc_netdev_mqs+0xf3a/0x1570 [ 105.607279][ T7205] ip6_tnl_locate+0x3d1/0x7a0 [ 105.607294][ T7205] ? __might_fault+0xe3/0x190 [ 105.607315][ T7205] ? __pfx_ip6_tnl_locate+0x10/0x10 [ 105.607335][ T7205] ip6_tnl_siocdevprivate+0x339/0x720 [ 105.607354][ T7205] ? __pfx_ip6_tnl_siocdevprivate+0x10/0x10 [ 105.607380][ T7205] ? full_name_hash+0xbc/0x110 [ 105.607393][ T7205] ? netdev_name_node_lookup+0x127/0x180 [ 105.607411][ T7205] dev_ifsioc+0x8eb/0x1f70 [ 105.607428][ T7205] ? __pfx_dev_ifsioc+0x10/0x10 [ 105.607443][ T7205] ? __pfx___mutex_lock+0x10/0x10 [ 105.607467][ T7205] ? dev_load+0x8e/0x240 [ 105.607484][ T7205] dev_ioctl+0x1b2/0x10e0 [ 105.607500][ T7205] sock_ioctl+0x5b3/0x6b0 [ 105.607512][ T7205] ? __pfx_sock_ioctl+0x10/0x10 [ 105.607523][ T7205] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 105.607546][ T7205] compat_sock_ioctl+0x5ff/0x7c0 [ 105.607559][ T7205] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 105.607571][ T7205] ? hook_file_ioctl_common+0x145/0x410 [ 105.607588][ T7205] ? __fget_files+0x20e/0x3c0 [ 105.607609][ T7205] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 105.607622][ T7205] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 105.607639][ T7205] __do_fast_syscall_32+0x73/0x120 [ 105.607664][ T7205] do_fast_syscall_32+0x32/0x80 [ 105.607686][ T7205] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 105.607701][ T7205] RIP: 0023:0xf7f57579 [ 105.607712][ T7205] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 105.607725][ T7205] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 105.607737][ T7205] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000089f1 [ 105.607744][ T7205] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 105.607751][ T7205] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 105.607757][ T7205] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 105.607764][ T7205] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 105.607778][ T7205] [ 105.711089][ C0] vkms_vblank_simulate: vblank timer overrun [ 105.949604][ T7214] tmpfs: Unknown parameter 'usrquotaòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿ [ 106.488917][ T7221] infiniband syz0: set down [ 106.521461][ T7221] infiniband syz0: added bond0 [ 106.590375][ T7221] RDS/IB: syz0: added [ 106.591822][ T7221] smc: adding ib device syz0 with port count 1 [ 106.593823][ T7221] smc: ib device syz0 port 1 has pnetid [ 107.353019][ T6014] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 107.517585][ T6014] usb 8-1: Using ep0 maxpacket: 8 [ 107.522444][ T6014] usb 8-1: config 0 has an invalid interface number: 186 but max is 0 [ 107.525908][ T7240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.305'. [ 107.526603][ T6014] usb 8-1: config 0 has no interface number 0 [ 107.533139][ T6014] usb 8-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 107.536616][ T6014] usb 8-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 107.540356][ T6014] usb 8-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 107.543955][ T6014] usb 8-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.558244][ T6014] usb 8-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 107.561198][ T6014] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.563726][ T6014] usb 8-1: Product: syz [ 107.565070][ T6014] usb 8-1: Manufacturer: syz [ 107.569701][ T6014] usb 8-1: SerialNumber: syz [ 107.572360][ T6014] usb 8-1: config 0 descriptor?? [ 107.625883][ T40] audit: type=1326 audit(1744856644.866:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.1.306" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 107.633809][ T40] audit: type=1326 audit(1744856644.866:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.1.306" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 107.645601][ T40] audit: type=1326 audit(1744856644.876:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.1.306" exe="/syz-executor" sig=0 arch=40000003 syscall=143 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 107.653222][ T40] audit: type=1326 audit(1744856644.876:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.1.306" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 107.661455][ T40] audit: type=1326 audit(1744856644.876:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.1.306" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 107.668998][ T40] audit: type=1326 audit(1744856644.876:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.1.306" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 107.744536][ T40] audit: type=1326 audit(1744856644.976:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.1.306" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 107.755939][ T40] audit: type=1326 audit(1744856644.986:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.1.306" exe="/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 107.762772][ T40] audit: type=1326 audit(1744856644.986:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.1.306" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 107.769635][ T40] audit: type=1326 audit(1744856644.986:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.1.306" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 107.779768][ T7236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.782985][ T7236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.815704][ T6014] iowarrior 8-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 108.014324][ T6012] usb 8-1: USB disconnect, device number 2 [ 108.436230][ T7270] openvswitch: netlink: Message has 3 unknown bytes. [ 108.439183][ T7270] openvswitch: netlink: Actions may not be safe on all matching packets [ 109.465639][ T66] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 109.618059][ T66] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 109.622558][ T66] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 109.627925][ T66] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 109.631007][ T66] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 109.635276][ T66] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 109.639052][ T66] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.647518][ T66] usb 5-1: config 0 descriptor?? [ 109.745353][ T7283] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 109.796180][ T7287] Cannot find set identified by id 0 to match [ 109.803487][ T7287] netlink: 76 bytes leftover after parsing attributes in process `syz.3.320'. [ 110.283892][ T7297] ptrace attach of "/syz-executor exec"[5957] was attempted by ""[7297] [ 110.297801][ T7295] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 110.432819][ T66] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 110.462692][ T66] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 110.494721][ T7296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.497706][ T7296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.889369][ T7306] syz1: rxe_newlink: already configured on bond_slave_1 [ 111.393214][ T7320] netlink: 28 bytes leftover after parsing attributes in process `syz.1.328'. [ 111.736273][ T7329] FAULT_INJECTION: forcing a failure. [ 111.736273][ T7329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.740638][ T7329] CPU: 3 UID: 0 PID: 7329 Comm: syz.3.331 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 111.740661][ T7329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 111.740670][ T7329] Call Trace: [ 111.740677][ T7329] [ 111.740683][ T7329] dump_stack_lvl+0x16c/0x1f0 [ 111.740705][ T7329] should_fail_ex+0x512/0x640 [ 111.740721][ T7329] _copy_from_iter+0x2a4/0x15b0 [ 111.740737][ T7329] ? __alloc_skb+0x200/0x380 [ 111.740751][ T7329] ? __pfx__copy_from_iter+0x10/0x10 [ 111.740765][ T7329] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 111.740785][ T7329] netlink_sendmsg+0x829/0xdd0 [ 111.740803][ T7329] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.740819][ T7329] ? __import_iovec+0x1c8/0x660 [ 111.740835][ T7329] ____sys_sendmsg+0xa95/0xc70 [ 111.740847][ T7329] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.740856][ T7329] ? get_compat_msghdr+0x11a/0x170 [ 111.740875][ T7329] ___sys_sendmsg+0x134/0x1d0 [ 111.740889][ T7329] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.740918][ T7329] __sys_sendmsg+0x16d/0x220 [ 111.740948][ T7329] ? __pfx___sys_sendmsg+0x10/0x10 [ 111.740970][ T7329] ? rcu_is_watching+0x12/0xc0 [ 111.740986][ T7329] __do_fast_syscall_32+0x73/0x120 [ 111.741004][ T7329] do_fast_syscall_32+0x32/0x80 [ 111.741019][ T7329] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 111.741032][ T7329] RIP: 0023:0xf7fe1579 [ 111.741040][ T7329] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 111.741050][ T7329] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 111.741061][ T7329] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 111.741067][ T7329] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 111.741073][ T7329] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 111.741078][ T7329] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 111.741084][ T7329] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 111.741097][ T7329] [ 111.746130][ T66] usb 5-1: reset high-speed USB device number 7 using dummy_hcd [ 111.968229][ T66] usb 5-1: device descriptor read/64, error -32 [ 112.215558][ T66] usb 5-1: reset high-speed USB device number 7 using dummy_hcd [ 112.355608][ T66] usb 5-1: device descriptor read/64, error -32 [ 112.605597][ T66] usb 5-1: reset high-speed USB device number 7 using dummy_hcd [ 112.626887][ T66] usb 5-1: device descriptor read/8, error -32 [ 112.885779][ T66] usb 5-1: reset high-speed USB device number 7 using dummy_hcd [ 112.907598][ T66] usb 5-1: device descriptor read/8, error -32 [ 113.018942][ T66] raw-gadget.0 gadget.0: failed to queue suspend event [ 113.031064][ T24] usb 5-1: USB disconnect, device number 7 [ 113.043628][ T7297] raw-gadget.0 gadget.0: failed to queue disconnect event [ 113.356471][ T7359] /dev/nullb0: Can't open blockdev [ 113.423812][ T7366] process 'syz.1.343' launched './file1' with NULL argv: empty string added [ 113.517283][ T7366] "syz.1.343" (7366) uses obsolete ecb(arc4) skcipher [ 113.661571][ T7378] netlink: 72 bytes leftover after parsing attributes in process `syz.1.346'. [ 113.665121][ T7378] netlink: 72 bytes leftover after parsing attributes in process `syz.1.346'. [ 113.815831][ T7374] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 114.380349][ T7383] netlink: 'syz.3.347': attribute type 10 has an invalid length. [ 114.383123][ T7383] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 114.385305][ T7383] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 114.389441][ T7383] bond0: (slave wlan1): Opening slave failed [ 114.555045][ T5306] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 114.558021][ T7392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.350'. [ 114.720444][ T7401] FAULT_INJECTION: forcing a failure. [ 114.720444][ T7401] name failslab, interval 1, probability 0, space 0, times 0 [ 114.726710][ T7401] CPU: 0 UID: 0 PID: 7401 Comm: syz.3.353 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 114.726726][ T7401] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 114.726732][ T7401] Call Trace: [ 114.726736][ T7401] [ 114.726741][ T7401] dump_stack_lvl+0x16c/0x1f0 [ 114.726762][ T7401] should_fail_ex+0x512/0x640 [ 114.726775][ T7401] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 114.726793][ T7401] should_failslab+0xc2/0x120 [ 114.726803][ T7401] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 114.726820][ T7401] ? __kernfs_new_node+0xd2/0x8a0 [ 114.726839][ T7401] __kernfs_new_node+0xd2/0x8a0 [ 114.726856][ T7401] ? kernfs_add_one+0x37d/0x840 [ 114.726867][ T7401] ? __pfx___kernfs_new_node+0x10/0x10 [ 114.726887][ T7401] ? find_held_lock+0x2b/0x80 [ 114.726901][ T7401] ? kernfs_root+0xee/0x2a0 [ 114.726920][ T7401] kernfs_new_node+0x13c/0x1e0 [ 114.726933][ T7401] __kernfs_create_file+0x53/0x350 [ 114.726950][ T7401] sysfs_add_file_mode_ns+0x207/0x3c0 [ 114.726969][ T7401] sysfs_create_file_ns+0x13d/0x1d0 [ 114.726985][ T7401] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 114.726999][ T7401] ? down_read+0x13d/0x480 [ 114.727009][ T7401] ? __pfx___up_read+0x10/0x10 [ 114.727021][ T7401] ? acpi_device_notify+0x351/0x480 [ 114.727040][ T7401] device_create_file+0xf2/0x1e0 [ 114.727054][ T7401] device_add+0x2bf/0x1a70 [ 114.727065][ T7401] ? __pfx_dev_set_name+0x10/0x10 [ 114.727077][ T7401] ? __pfx_device_add+0x10/0x10 [ 114.727088][ T7401] ? lockdep_init_map_type+0x5c/0x280 [ 114.727099][ T7401] ? __init_waitqueue_head+0xca/0x150 [ 114.727115][ T7401] netdev_register_kobject+0x182/0x3a0 [ 114.727133][ T7401] register_netdevice+0x13dc/0x2270 [ 114.727151][ T7401] ? kasan_save_track+0x14/0x30 [ 114.727166][ T7401] ? __pfx_register_netdevice+0x10/0x10 [ 114.727181][ T7401] ? macvlan_hash_add_source+0x4d/0x3a0 [ 114.727199][ T7401] macvlan_common_newlink+0x10e7/0x1a20 [ 114.727217][ T7401] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 114.727233][ T7401] ? rtnl_create_link+0xb2b/0x1200 [ 114.727247][ T7401] ? __pfx_macvlan_newlink+0x10/0x10 [ 114.727263][ T7401] rtnl_newlink+0xc42/0x2000 [ 114.727281][ T7401] ? __pfx_rtnl_newlink+0x10/0x10 [ 114.727296][ T7401] ? kernel_text_address+0x8d/0x100 [ 114.727310][ T7401] ? arch_stack_walk+0xa6/0x100 [ 114.727332][ T7401] ? rcu_is_watching+0x12/0xc0 [ 114.727346][ T7401] ? trace_cap_capable+0x18d/0x200 [ 114.727361][ T7401] ? find_held_lock+0x2b/0x80 [ 114.727373][ T7401] ? __pfx_rtnl_newlink+0x10/0x10 [ 114.727386][ T7401] ? __pfx_rtnl_newlink+0x10/0x10 [ 114.727399][ T7401] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 114.727414][ T7401] ? __pfx_rtnl_newlink+0x10/0x10 [ 114.727428][ T7401] rtnetlink_rcv_msg+0x95b/0xe90 [ 114.727444][ T7401] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 114.727465][ T7401] netlink_rcv_skb+0x16a/0x440 [ 114.727482][ T7401] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 114.727497][ T7401] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 114.727520][ T7401] ? netlink_deliver_tap+0x1ae/0xd30 [ 114.727537][ T7401] netlink_unicast+0x53a/0x7f0 [ 114.727554][ T7401] ? __pfx_netlink_unicast+0x10/0x10 [ 114.727573][ T7401] netlink_sendmsg+0x8d1/0xdd0 [ 114.727591][ T7401] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.727607][ T7401] ? __import_iovec+0x1c8/0x660 [ 114.727624][ T7401] ____sys_sendmsg+0xa95/0xc70 [ 114.727635][ T7401] ? __pfx_____sys_sendmsg+0x10/0x10 [ 114.727644][ T7401] ? get_compat_msghdr+0x11a/0x170 [ 114.727670][ T7401] ___sys_sendmsg+0x134/0x1d0 [ 114.727685][ T7401] ? __pfx____sys_sendmsg+0x10/0x10 [ 114.727722][ T7401] __sys_sendmsg+0x16d/0x220 [ 114.727736][ T7401] ? __pfx___sys_sendmsg+0x10/0x10 [ 114.727756][ T7401] ? rcu_is_watching+0x12/0xc0 [ 114.727770][ T7401] __do_fast_syscall_32+0x73/0x120 [ 114.727789][ T7401] do_fast_syscall_32+0x32/0x80 [ 114.727805][ T7401] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 114.727818][ T7401] RIP: 0023:0xf7fe1579 [ 114.727827][ T7401] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 114.727837][ T7401] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 114.727846][ T7401] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000280 [ 114.727853][ T7401] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 114.727858][ T7401] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 114.727864][ T7401] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 114.727869][ T7401] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 114.727882][ T7401] [ 115.237596][ T7412] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 115.389277][ T7392] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 115.473867][ T7425] overlay: Bad value for 'workdir' [ 116.177915][ T7441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.368'. [ 116.703906][ T7465] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.377'. [ 116.711157][ T7465] 8021q: VLANs not supported on ip_vti0 [ 116.830417][ T7469] FAULT_INJECTION: forcing a failure. [ 116.830417][ T7469] name failslab, interval 1, probability 0, space 0, times 0 [ 116.834998][ T7469] CPU: 2 UID: 0 PID: 7469 Comm: syz.2.378 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 116.835022][ T7469] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 116.835032][ T7469] Call Trace: [ 116.835039][ T7469] [ 116.835048][ T7469] dump_stack_lvl+0x16c/0x1f0 [ 116.835079][ T7469] should_fail_ex+0x512/0x640 [ 116.835098][ T7469] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 116.835126][ T7469] should_failslab+0xc2/0x120 [ 116.835143][ T7469] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 116.835167][ T7469] ? __alloc_skb+0x2b2/0x380 [ 116.835192][ T7469] __alloc_skb+0x2b2/0x380 [ 116.835213][ T7469] ? __pfx___alloc_skb+0x10/0x10 [ 116.835235][ T7469] ? __lock_acquire+0xaa4/0x1ba0 [ 116.835263][ T7469] ? __asan_memset+0x23/0x50 [ 116.835286][ T7469] tipc_buf_acquire+0x26/0xe0 [ 116.835305][ T7469] tipc_msg_build+0x853/0x1150 [ 116.835330][ T7469] ? __pfx_tipc_msg_build+0x10/0x10 [ 116.835356][ T7469] ? tipc_nametbl_lookup_mcast_nodes+0x214/0x370 [ 116.835385][ T7469] tipc_sendmcast+0x79a/0xba0 [ 116.835418][ T7469] ? __pfx_bpf_trace_run4+0x10/0x10 [ 116.835444][ T7469] ? __pfx_tipc_sendmcast+0x10/0x10 [ 116.835463][ T7469] ? __bpf_trace_sched_switch+0x145/0x190 [ 116.835490][ T7469] ? lock_acquire+0x179/0x350 [ 116.835505][ T7469] ? __pfx_woken_wake_function+0x10/0x10 [ 116.835527][ T7469] ? finish_task_switch.isra.0+0x21c/0xc10 [ 116.835558][ T7469] ? trace_sched_exit_tp+0xde/0x130 [ 116.835588][ T7469] __tipc_sendmsg+0x135e/0x19a0 [ 116.835608][ T7469] ? perf_trace_contention_end+0x304/0x3d0 [ 116.835639][ T7469] ? __pfx___tipc_sendmsg+0x10/0x10 [ 116.835657][ T7469] ? __lock_acquire+0xaa4/0x1ba0 [ 116.835686][ T7469] ? __pfx___might_resched+0x10/0x10 [ 116.835724][ T7469] ? __local_bh_enable_ip+0xa4/0x120 [ 116.835750][ T7469] tipc_sendmsg+0x4f/0x70 [ 116.835768][ T7469] sock_sendmsg+0x3c9/0x470 [ 116.835786][ T7469] ? __pfx_sock_sendmsg+0x10/0x10 [ 116.835800][ T7469] ? __lock_acquire+0xaa4/0x1ba0 [ 116.835843][ T7469] splice_to_socket+0xaf6/0x1110 [ 116.835880][ T7469] ? __pfx_splice_to_socket+0x10/0x10 [ 116.835944][ T7469] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 116.835974][ T7469] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 116.835999][ T7469] ? __pfx_splice_to_socket+0x10/0x10 [ 116.836023][ T7469] direct_splice_actor+0x18f/0x6c0 [ 116.836049][ T7469] splice_direct_to_actor+0x342/0xa30 [ 116.836073][ T7469] ? __pfx_direct_splice_actor+0x10/0x10 [ 116.836114][ T7469] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 116.836137][ T7469] ? get_pid_task+0xfc/0x250 [ 116.836161][ T7469] do_splice_direct+0x174/0x240 [ 116.836184][ T7469] ? __pfx_do_splice_direct+0x10/0x10 [ 116.836207][ T7469] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 116.836231][ T7469] ? bpf_lsm_file_permission+0x9/0x10 [ 116.836251][ T7469] ? security_file_permission+0x71/0x210 [ 116.836275][ T7469] ? rw_verify_area+0xcf/0x680 [ 116.836298][ T7469] do_sendfile+0xafd/0xe50 [ 116.836324][ T7469] ? __pfx_do_sendfile+0x10/0x10 [ 116.836346][ T7469] ? __fget_files+0x20e/0x3c0 [ 116.836377][ T7469] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 116.836394][ T7469] ? ksys_write+0x1b9/0x240 [ 116.836415][ T7469] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 116.836435][ T7469] ? rcu_is_watching+0x12/0xc0 [ 116.836459][ T7469] __do_fast_syscall_32+0x73/0x120 [ 116.836487][ T7469] do_fast_syscall_32+0x32/0x80 [ 116.836509][ T7469] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 116.836526][ T7469] RIP: 0023:0xf7f57579 [ 116.836537][ T7469] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 116.836552][ T7469] RSP: 002b:00000000f505555c EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 116.836568][ T7469] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000004 [ 116.836578][ T7469] RDX: 0000000000000000 RSI: 000000008010002b RDI: 0000000000000000 [ 116.836587][ T7469] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 116.836596][ T7469] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 116.836605][ T7469] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 116.836629][ T7469] [ 116.981308][ C2] hpet_rtc_timer_reinit: 3 callbacks suppressed [ 116.981318][ C2] hpet: Lost 9 RTC interrupts [ 117.342046][ T7474] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 117.829708][ T7487] syz1: rxe_newlink: already configured on bond_slave_1 [ 117.885692][ T58] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 117.925734][ T6014] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 117.986634][ T7494] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 118.035500][ T58] usb 5-1: Using ep0 maxpacket: 32 [ 118.046589][ T58] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 118.050595][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.053891][ T58] usb 5-1: Product: syz [ 118.056272][ T58] usb 5-1: Manufacturer: syz [ 118.058587][ T58] usb 5-1: SerialNumber: syz [ 118.066916][ T58] usb 5-1: config 0 descriptor?? [ 118.075655][ T6014] usb 8-1: Using ep0 maxpacket: 16 [ 118.079740][ T6014] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.083342][ T6014] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.084352][ T58] as10x_usb: device has been detected [ 118.086642][ T6014] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 118.091970][ T58] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 118.093274][ T6014] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 118.093291][ T6014] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.094908][ T6014] usb 8-1: config 0 descriptor?? [ 118.114327][ T58] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 118.130760][ T58] as10x_usb: error during firmware upload part1 [ 118.133684][ T58] Registered device Abilis Systems DVB-Titan [ 118.419810][ T5956] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 118.428218][ T5956] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 118.435866][ T5956] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 118.442435][ T5956] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 118.446867][ T5956] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 118.511440][ T6014] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 118.513701][ T6014] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 118.516867][ T6014] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 118.519191][ T6014] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 118.521372][ T6014] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 118.537063][ T6014] input: HID 0955:7214 Haptics as /devices/virtual/input/input6 [ 118.568137][ T6014] shield 0003:0955:7214.0005: Registered Thunderstrike controller [ 118.571414][ T6014] shield 0003:0955:7214.0005: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 118.709975][ T7495] random: crng reseeded on system resumption [ 118.794641][ T6014] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 118.799050][ T64] usb 8-1: USB disconnect, device number 3 [ 118.806435][ T6014] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 118.809802][ T6014] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 118.813303][ T6014] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 118.897573][ T64] ------------[ cut here ]------------ [ 118.899510][ T64] workqueue: work disable count underflowed [ 118.901471][ T64] WARNING: CPU: 3 PID: 64 at kernel/workqueue.c:4326 enable_work+0x2f8/0x340 [ 118.904290][ T64] Modules linked in: [ 118.906162][ T64] CPU: 3 UID: 0 PID: 64 Comm: kworker/3:1 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 118.913068][ T64] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 118.916968][ T64] Workqueue: usb_hub_wq hub_event [ 118.918939][ T64] RIP: 0010:enable_work+0x2f8/0x340 [ 118.920934][ T64] Code: 89 ee e8 fb 66 37 00 45 84 ed 0f 85 29 fe ff ff e8 0d 6c 37 00 c6 05 51 ff ea 0e 01 90 48 c7 c7 60 e7 8b 8b e8 99 fd f6 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 77 e9 9b 00 e9 aa fe ff ff [ 118.927244][ T64] RSP: 0018:ffffc9000083f3c8 EFLAGS: 00010086 [ 118.929169][ T64] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817acff8 [ 118.931707][ T64] RDX: ffff88801f37a440 RSI: ffffffff817ad005 RDI: 0000000000000001 [ 118.934202][ T64] RBP: ffff888068fd5730 R08: 0000000000000001 R09: 0000000000000000 [ 118.936751][ T64] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000107e7a [ 118.939367][ T64] R13: 0000000000000000 R14: ffff888068fd5728 R15: ffffffff8fc4e0a0 [ 118.941876][ T64] FS: 0000000000000000(0000) GS:ffff888097ab9000(0000) knlGS:0000000000000000 [ 118.944765][ T64] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.947228][ T64] CR2: 0000000080614000 CR3: 0000000023cc6000 CR4: 0000000000352ef0 [ 118.949996][ T64] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 118.952548][ T64] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 118.955131][ T64] Call Trace: [ 118.956207][ T64] [ 118.957167][ T64] ? __pfx_enable_work+0x10/0x10 [ 118.958838][ T64] ? __thermal_zone_cdev_unbind+0x6c/0x6a0 [ 118.960711][ T64] __cancel_work_sync+0xe7/0x130 [ 118.962368][ T64] thermal_zone_device_unregister+0x239/0x450 [ 118.964336][ T64] ? __pfx_shield_remove+0x10/0x10 [ 118.965997][ T64] power_supply_unregister+0x10a/0x150 [ 118.967930][ T64] shield_remove+0x75/0x130 [ 118.969556][ T64] ? __pfx_shield_remove+0x10/0x10 [ 118.971387][ T64] hid_device_remove+0xce/0x260 [ 118.973116][ T64] ? __pfx_hid_device_remove+0x10/0x10 [ 118.974965][ T64] device_remove+0xc8/0x170 [ 118.976475][ T64] device_release_driver_internal+0x44b/0x620 [ 118.978476][ T64] bus_remove_device+0x22f/0x420 [ 118.980097][ T64] device_del+0x396/0x9f0 [ 118.981519][ T64] ? __pfx_device_del+0x10/0x10 [ 118.983121][ T64] ? do_raw_spin_lock+0x12c/0x2b0 [ 118.984947][ T64] hid_destroy_device+0x19c/0x240 [ 118.986836][ T64] usbhid_disconnect+0xa0/0xe0 [ 118.988559][ T64] usb_unbind_interface+0x1da/0x9a0 [ 118.990288][ T64] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 118.992098][ T64] ? __pfx_usb_unbind_interface+0x10/0x10 [ 118.993926][ T64] device_remove+0x122/0x170 [ 118.995429][ T64] device_release_driver_internal+0x44b/0x620 [ 118.997362][ T64] bus_remove_device+0x22f/0x420 [ 118.999007][ T64] device_del+0x396/0x9f0 [ 119.000397][ T64] ? __pfx_device_del+0x10/0x10 [ 119.002014][ T64] ? kobject_put+0x210/0x5a0 [ 119.003542][ T64] usb_disable_device+0x355/0x7d0 [ 119.005294][ T64] usb_disconnect+0x2e1/0x920 [ 119.006992][ T64] hub_event+0x1c57/0x4fa0 [ 119.008605][ T64] ? __lock_acquire+0xaa4/0x1ba0 [ 119.010424][ T64] ? __pfx_hub_event+0x10/0x10 [ 119.012130][ T64] ? debug_object_deactivate+0x1ec/0x3a0 [ 119.014017][ T64] ? rcu_is_watching+0x12/0xc0 [ 119.015561][ T64] process_one_work+0x9cc/0x1b70 [ 119.017211][ T64] ? __pfx_process_one_work+0x10/0x10 [ 119.019001][ T64] ? assign_work+0x1a0/0x250 [ 119.020486][ T64] worker_thread+0x6c8/0xf10 [ 119.021992][ T64] ? __kthread_parkme+0x19e/0x250 [ 119.023594][ T64] ? __pfx_worker_thread+0x10/0x10 [ 119.025264][ T64] kthread+0x3c2/0x780 [ 119.026555][ T64] ? __pfx_kthread+0x10/0x10 [ 119.028111][ T64] ? __pfx_kthread+0x10/0x10 [ 119.029755][ T64] ? __pfx_kthread+0x10/0x10 [ 119.031462][ T64] ? __pfx_kthread+0x10/0x10 [ 119.033174][ T64] ? rcu_is_watching+0x12/0xc0 [ 119.034918][ T64] ? __pfx_kthread+0x10/0x10 [ 119.036423][ T64] ret_from_fork+0x45/0x80 [ 119.037887][ T64] ? __pfx_kthread+0x10/0x10 [ 119.039411][ T64] ret_from_fork_asm+0x1a/0x30 [ 119.040964][ T64] [ 119.041980][ T64] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 119.044254][ T64] CPU: 3 UID: 0 PID: 64 Comm: kworker/3:1 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 119.048018][ T64] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 119.051693][ T64] Workqueue: usb_hub_wq hub_event [ 119.053721][ T64] Call Trace: [ 119.054822][ T64] [ 119.055769][ T64] dump_stack_lvl+0x3d/0x1f0 [ 119.057270][ T64] panic+0x71c/0x800 [ 119.058646][ T64] ? __pfx_panic+0x10/0x10 [ 119.060260][ T64] ? show_trace_log_lvl+0x29b/0x3e0 [ 119.062138][ T64] ? check_panic_on_warn+0x1f/0xb0 [ 119.063886][ T64] ? enable_work+0x2f8/0x340 [ 119.065595][ T64] check_panic_on_warn+0xab/0xb0 [ 119.067223][ T64] __warn+0xf6/0x3c0 [ 119.068570][ T64] ? enable_work+0x2f8/0x340 [ 119.070060][ T64] report_bug+0x3c3/0x580 [ 119.071460][ T64] ? enable_work+0x2f8/0x340 [ 119.072939][ T64] handle_bug+0x184/0x210 [ 119.074323][ T64] exc_invalid_op+0x17/0x50 [ 119.075775][ T64] asm_exc_invalid_op+0x1a/0x20 [ 119.077308][ T64] RIP: 0010:enable_work+0x2f8/0x340 [ 119.079040][ T64] Code: 89 ee e8 fb 66 37 00 45 84 ed 0f 85 29 fe ff ff e8 0d 6c 37 00 c6 05 51 ff ea 0e 01 90 48 c7 c7 60 e7 8b 8b e8 99 fd f6 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 77 e9 9b 00 e9 aa fe ff ff [ 119.085168][ T64] RSP: 0018:ffffc9000083f3c8 EFLAGS: 00010086 [ 119.087127][ T64] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817acff8 [ 119.089616][ T64] RDX: ffff88801f37a440 RSI: ffffffff817ad005 RDI: 0000000000000001 [ 119.092101][ T64] RBP: ffff888068fd5730 R08: 0000000000000001 R09: 0000000000000000 [ 119.094611][ T64] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000107e7a [ 119.097096][ T64] R13: 0000000000000000 R14: ffff888068fd5728 R15: ffffffff8fc4e0a0 [ 119.099622][ T64] ? __warn_printk+0x198/0x350 [ 119.101164][ T64] ? __warn_printk+0x1a5/0x350 [ 119.102716][ T64] ? enable_work+0x2f7/0x340 [ 119.104206][ T64] ? __pfx_enable_work+0x10/0x10 [ 119.105836][ T64] ? __thermal_zone_cdev_unbind+0x6c/0x6a0 [ 119.107719][ T64] __cancel_work_sync+0xe7/0x130 [ 119.109350][ T64] thermal_zone_device_unregister+0x239/0x450 [ 119.111369][ T64] ? __pfx_shield_remove+0x10/0x10 [ 119.113031][ T64] power_supply_unregister+0x10a/0x150 [ 119.114802][ T64] shield_remove+0x75/0x130 [ 119.116278][ T64] ? __pfx_shield_remove+0x10/0x10 [ 119.118032][ T64] hid_device_remove+0xce/0x260 [ 119.119805][ T64] ? __pfx_hid_device_remove+0x10/0x10 [ 119.121715][ T64] device_remove+0xc8/0x170 [ 119.123267][ T64] device_release_driver_internal+0x44b/0x620 [ 119.125205][ T64] bus_remove_device+0x22f/0x420 [ 119.126841][ T64] device_del+0x396/0x9f0 [ 119.128256][ T64] ? __pfx_device_del+0x10/0x10 [ 119.129816][ T64] ? do_raw_spin_lock+0x12c/0x2b0 [ 119.131455][ T64] hid_destroy_device+0x19c/0x240 [ 119.133083][ T64] usbhid_disconnect+0xa0/0xe0 [ 119.134643][ T64] usb_unbind_interface+0x1da/0x9a0 [ 119.136295][ T64] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 119.138092][ T64] ? __pfx_usb_unbind_interface+0x10/0x10 [ 119.140116][ T64] device_remove+0x122/0x170 [ 119.141782][ T64] device_release_driver_internal+0x44b/0x620 [ 119.143748][ T64] bus_remove_device+0x22f/0x420 [ 119.145358][ T64] device_del+0x396/0x9f0 [ 119.146758][ T64] ? __pfx_device_del+0x10/0x10 [ 119.148370][ T64] ? kobject_put+0x210/0x5a0 [ 119.149855][ T64] usb_disable_device+0x355/0x7d0 [ 119.151473][ T64] usb_disconnect+0x2e1/0x920 [ 119.153018][ T64] hub_event+0x1c57/0x4fa0 [ 119.154466][ T64] ? __lock_acquire+0xaa4/0x1ba0 [ 119.156066][ T64] ? __pfx_hub_event+0x10/0x10 [ 119.157666][ T64] ? debug_object_deactivate+0x1ec/0x3a0 [ 119.159545][ T64] ? rcu_is_watching+0x12/0xc0 [ 119.161063][ T64] process_one_work+0x9cc/0x1b70 [ 119.162794][ T64] ? __pfx_process_one_work+0x10/0x10 [ 119.164676][ T64] ? assign_work+0x1a0/0x250 [ 119.166317][ T64] worker_thread+0x6c8/0xf10 [ 119.167930][ T64] ? __kthread_parkme+0x19e/0x250 [ 119.169548][ T64] ? __pfx_worker_thread+0x10/0x10 [ 119.171210][ T64] kthread+0x3c2/0x780 [ 119.172529][ T64] ? __pfx_kthread+0x10/0x10 [ 119.174024][ T64] ? __pfx_kthread+0x10/0x10 [ 119.175511][ T64] ? __pfx_kthread+0x10/0x10 [ 119.176988][ T64] ? __pfx_kthread+0x10/0x10 [ 119.178504][ T64] ? rcu_is_watching+0x12/0xc0 [ 119.180060][ T64] ? __pfx_kthread+0x10/0x10 [ 119.181538][ T64] ret_from_fork+0x45/0x80 [ 119.182983][ T64] ? __pfx_kthread+0x10/0x10 [ 119.184453][ T64] ret_from_fork_asm+0x1a/0x30 [ 119.186313][ T64] [ 119.187946][ T64] Kernel Offset: disabled [ 119.189463][ T64] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:24:16 Registers: info registers vcpu 0 CPU#0 RAX=0000000000286361 RBX=0000000000000000 RCX=ffffffff8b702439 RDX=0000000000000000 RSI=ffffffff8dbeb4b7 RDI=ffffffff8bf45100 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e10 R8 =0000000000000001 R9 =ffffed10056465bd R10=ffff88802b232deb R11=ffffffff9ad4e9e8 R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff90868010 R15=0000000000000000 RIP=ffffffff8b700ccf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000000c41f7c3 CR3=000000007535a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000002 RBX=0000000000000050 RCX=0000000000000040 RDX=0000000000000000 RSI=0000000000000002 RDI=ffff88802b239f18 RBP=ffff88801efc0af0 RSP=ffffc9000078f780 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000000 R11=ffff88802b239f18 R12=0000000000000001 R13=0000000000000000 R14=ffff88801efc0000 R15=0000000000000000 RIP=ffffffff8197fa5c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880978b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080033000 CR3=000000007535a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000060000 RCX=0000000000000000 RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000000 RBP=00005598faf9e560 RSP=00007ffd662dd6f0 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=00005598e4000aa4 R13=0000000000000076 R14=00005598e40013e8 R15=00007ffd662dd738 RIP=00005598e3f7e102 RFL=00000246 [---Z-P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fad5c2cdd00 ffffffff 00c00000 GS =0000 0000000000000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7fd55c0 CR3=0000000050146000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 ZMM17=9eb8b75008d93f6c 9f18595f92b3e15a 9eb8b75008d93f6c 9f18595f92b3e15a 9eb8b75008d93f6c 9f18595f92b3e15a 9eb8b75008d93f6c 9f18595f92b3e15a ZMM18=427d881eb840c50c 66edee3aae0638a1 427d881eb840c50c 66edee3aae0638a1 427d881eb840c50c 66edee3aae0638a1 427d881eb840c50c 66edee3aae0638a1 ZMM19=6b07000000000000 0000000000000005 6b07000000000000 0000000000000004 6b07000000000000 0000000000000003 6b07000000000000 0000000000000002 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=9f18595f9f18595f 9f18595f9f18595f 9f18595f9f18595f 9f18595f9f18595f 9f18595f9f18595f 9f18595f9f18595f 9f18595f9f18595f 9f18595f9f18595f ZMM22=08d93f6c08d93f6c 08d93f6c08d93f6c 08d93f6c08d93f6c 08d93f6c08d93f6c 08d93f6c08d93f6c 08d93f6c08d93f6c 08d93f6c08d93f6c 08d93f6c08d93f6c ZMM23=9eb8b7509eb8b750 9eb8b7509eb8b750 9eb8b7509eb8b750 9eb8b7509eb8b750 9eb8b7509eb8b750 9eb8b7509eb8b750 9eb8b7509eb8b750 9eb8b7509eb8b750 ZMM24=ae0638a1ae0638a1 ae0638a1ae0638a1 ae0638a1ae0638a1 ae0638a1ae0638a1 ae0638a1ae0638a1 ae0638a1ae0638a1 ae0638a1ae0638a1 ae0638a1ae0638a1 ZMM25=66edee3a66edee3a 66edee3a66edee3a 66edee3a66edee3a 66edee3a66edee3a 66edee3a66edee3a 66edee3a66edee3a 66edee3a66edee3a 66edee3a66edee3a ZMM26=b840c50cb840c50c b840c50cb840c50c b840c50cb840c50c b840c50cb840c50c b840c50cb840c50c b840c50cb840c50c b840c50cb840c50c b840c50cb840c50c ZMM27=427d881e427d881e 427d881e427d881e 427d881e427d881e 427d881e427d881e 427d881e427d881e 427d881e427d881e 427d881e427d881e 427d881e427d881e ZMM28=000000500000004f 0000004e0000004d 0000004c0000004b 0000004a00000049 0000004800000047 0000004600000045 0000004400000043 0000004200000041 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=6807000068070000 6807000068070000 6807000068070000 6807000068070000 6807000068070000 6807000068070000 6807000068070000 6807000068070000 info registers vcpu 3 CPU#3 RAX=0000000000000072 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854bc9a5 RDI=ffffffff9ae12b40 RBP=ffffffff9ae12b00 RSP=ffffc9000083ed30 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000072 R14=ffffffff9ae12b00 R15=ffffffff854bc940 RIP=ffffffff854bc9cf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097ab9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080614000 CR3=0000000023cc6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000004080 Opmask01=0000000000000000 Opmask02=00000000bfdfdfdf Opmask03=2040000404420020 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b5f5455504e495f 4449006b636f6c62 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffececcadf0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffff0f0e0d ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00204b4e494c0020 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737282 7373737373434943 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 494349415c434943 4941071614011207 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f00534b4e494c56 454400454d414e56 4544005845444e49 464900524f4e494d ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6f742079617272 6120656c75722079 7261726f706d6574 002a3f005b3f2a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a4a51055c445757 440540495057055c 5744574a55484051 000f1a005b1a0f00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a151ea51af3601e0 000055643cf4b006 0000000000000221 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7075735f7265776f 702f353030302e34 3132373a35353930 3a333030302f302e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055616a00306e 6f6d77682f305f65 6b69727473726564 6e7568742f796c70 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055616ae124e0 000055616ae12480 000055616ae13c80 000055616ae13c20 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a3a263e383a3a26 39383a3a2638383a 3a263b383a3a263a 383a3a26493b3a3a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000030 0000000000000030 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000030 0000000000000030 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000