last executing test programs: 14.105468403s ago: executing program 1 (id=1977): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) rseq(0x0, 0xc8, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000000f00)={0x2020}, 0x2020) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x700, 0x1, 0x0, 0x51748212, {{0xc, 0x4, 0x1, 0x21, 0x30, 0x68, 0x0, 0x8, 0x4, 0x0, @remote, @rand_addr=0x64010101, {[@generic={0x44, 0xb, "3f965f0cb607e6c6c0"}, @end, @generic={0x86, 0xf, "e00a0f22cc918751f6a73d0091"}, @end]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x5, 0xc419, 0x9, 0x20001, r2, 0xa74a, '\x00', r3, 0xffffffffffffffff, 0x4, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'\x00', 0x1000}) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 14.021348641s ago: executing program 1 (id=1980): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x1, @loopback}, 0x10) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) sendmsg$alg(r1, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="100000001401000006"], 0x10}, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0x4, 0xc8}}}, 0x6) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x8fa9, @any, 0xeffe}, 0xe) listen(r2, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 13.941480398s ago: executing program 1 (id=1983): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40000, 0x0) recvmsg$inet_nvme(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000000440)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f00000019c0)=[{&(0x7f00000004c0)=""/119, 0x77}, {&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000540)=""/226, 0xe2}, {&(0x7f0000000640)=""/144, 0x90}, {&(0x7f0000000700)=""/185, 0xb9}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/171, 0xab}, {&(0x7f0000001880)=""/178, 0xb2}, {&(0x7f0000001940)=""/102, 0x66}], 0x9}, 0x100) r0 = fanotify_init(0x0, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f922240685", 0x14}], 0x1}, 0x840) fanotify_mark(r0, 0x11, 0x48000038, r2, 0x0) mkdirat(r2, &(0x7f00000001c0)='\x00', 0x40) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000001ac0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x1c0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="02"], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f00000001c0)={r7, 0x9}, &(0x7f00000002c0)=0x8) mount$tmpfs(0x0, &(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340), 0x0, 0x0) umount2(&(0x7f0000000380)='./file0/file0\x00', 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) r9 = socket(0x2b, 0x1, 0x1) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r8, 0x0) accept4$unix(r9, &(0x7f0000000300), &(0x7f0000000100)=0x6e, 0x800) 13.559092362s ago: executing program 1 (id=1985): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r2, 0x28, 0x0, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x2, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) write$tun(r0, &(0x7f0000001840)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x7}, @ipv4=@generic={{0x8, 0x4, 0x2, 0x2, 0xfcc, 0x66, 0x0, 0xb, 0x88, 0x0, @rand_addr=0x64010120, @broadcast, {[@lsrr={0x83, 0xb, 0x68, [@dev={0xac, 0x14, 0x14, 0x24}, @dev={0xac, 0x14, 0x14, 0x42}]}]}}, "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"}}, 0xfda) 13.500763316s ago: executing program 1 (id=1986): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2000000000000036, &(0x7f0000000180)=ANY=[@ANYRES16=0x0], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$dlm_plock(0xffffff9c, &(0x7f0000000000), 0x440002, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x18, 0x1401, 0x9, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x8804}, 0x4848) r3 = fsopen(&(0x7f0000000040)='logfs\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r5, 0x101, 0x4, 0x0, &(0x7f0000000000)) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) openat$tcp_mem(0xffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, r8}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000005c0)={@empty, @remote, @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r8}) r9 = syz_pidfd_open(0xffffffffffffffff, 0x0) r10 = socket$key(0xf, 0x3, 0x2) setsockopt$packet_int(r4, 0x107, 0x3, &(0x7f00000001c0)=0x10001, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[r3, r0, r9, r10, r0, r0]}, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r11 = io_uring_setup(0x44e7, &(0x7f0000000380)={0x0, 0x889e, 0x400, 0x1, 0xfffffffe}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) close_range(r11, 0xffffffffffffffff, 0x0) 6.839014367s ago: executing program 1 (id=1986): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2000000000000036, &(0x7f0000000180)=ANY=[@ANYRES16=0x0], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$dlm_plock(0xffffff9c, &(0x7f0000000000), 0x440002, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x18, 0x1401, 0x9, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x8804}, 0x4848) r3 = fsopen(&(0x7f0000000040)='logfs\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r5, 0x101, 0x4, 0x0, &(0x7f0000000000)) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) openat$tcp_mem(0xffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, r8}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000005c0)={@empty, @remote, @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r8}) r9 = syz_pidfd_open(0xffffffffffffffff, 0x0) r10 = socket$key(0xf, 0x3, 0x2) setsockopt$packet_int(r4, 0x107, 0x3, &(0x7f00000001c0)=0x10001, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[r3, r0, r9, r10, r0, r0]}, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r11 = io_uring_setup(0x44e7, &(0x7f0000000380)={0x0, 0x889e, 0x400, 0x1, 0xfffffffe}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) close_range(r11, 0xffffffffffffffff, 0x0) 4.15129047s ago: executing program 2 (id=2040): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x1, 0x10, 0x6, 0xfffffffb, {{0x1c, 0x4, 0x1, 0x28, 0x70, 0x67, 0x0, 0x0, 0x6, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x42}, {[@cipso={0x86, 0xf, 0x24af089813519a14, [{0x2, 0x4, "12ef"}, {0x5, 0x5, "125ddc"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x14, 0x1f, 0x0, 0x2, [0x7b0, 0x46, 0x31, 0x1]}, @end, @timestamp={0x44, 0x10, 0xb9, 0x0, 0x2, [0xffffa1db, 0x8, 0xffff]}, @cipso={0x86, 0x22, 0x3, [{0x6, 0x4, "9eec"}, {0x5, 0x8, "72bdcfea1ffd"}, {0x5, 0xc, "68f7b69091de8184e9b1"}, {0x6, 0x4, "ffa7"}]}]}}}}}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000000095", @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000000)={0x7, 0xa}, 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r4}, 0x8) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYRESDEC=r2, @ANYRES16=r5, @ANYRESOCT=r2, @ANYRES32, @ANYRESDEC=r1, @ANYRES16=r5, @ANYRESHEX=r0, @ANYRESOCT=r5, @ANYRESOCT=r1], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xf, &(0x7f0000000200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x33}, {0x7, 0x0}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = io_uring_setup(0x30d5, &(0x7f0000000100)) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) close_range(r8, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 3.940786389s ago: executing program 2 (id=2042): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x3ff}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000240), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc0f8565c, &(0x7f0000000280)={0x3, 0xffffffff, 0x2, {0x4, @raw_data="fd6a485dab307fa0cbcc1c485890231f99675a7322114115a49831f3ed2cd105953787d909558f6c0a049487b0ee292a8ed61958c96919ac8f2218d0d84db603f8e7288eaef8ba27d8fb668c858a353236c83cabb11177bd3551f62b376bafbf61824c2dca3914f4f86b3b8c045bae0dce984c69a39ecd76a5a1da5c1c6a07448bb82e1e6692dde8fb459f18384e314a6b7b1513d4dc552f627135d977855bba10c54a7b9b7d70f9510b65d966cb01540403c9ca2414778ca00d7ab8ac28403b25528f81374bd2b0"}}) r3 = dup(r0) write$6lowpan_enable(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)=""/103, 0x115, 0x67, 0x1, 0x4d1, 0x10000, @value}, 0x28) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r6 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500}, &(0x7f0000000240), &(0x7f0000001880)) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r7], 0x30}}, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x21, &(0x7f00000002c0)=r5, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1e00000000020000090000000300000001a10500", @ANYRES32=r3, @ANYBLOB="20b800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000000000000040000000500000000000000", @ANYRES32=r4, @ANYBLOB, @ANYRES32=r5, @ANYBLOB="af709d857ec26dad307fb1cb42356ed77bbac5d4ee0fe539c1613ced7abd83d36a270c913c222bafd581702e037ab04a8792d197117a7424fff333752e6857e9094e5d305affe342fd547a3e1f52ed63f9464bba943dc140ea6302759fba08"], 0x50) r8 = getpid() r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000000003c5af50000250000000e0001006e657464657673694f05006e657464657673696d300000080002000000000000135fc80f126aeceba05073161f324804b8e940761e0a5ce4db8fdbe331bd683e90b34ae1760c112b8934ba5c8d5e15779748348a10924a7321aafc6da7fceb4d14b793ea1e104a28244e942c54abff4c15f5cdb3532821a39eb391", @ANYRES32=r8, @ANYBLOB], 0x3c}}, 0x4000084) 1.631976259s ago: executing program 2 (id=2048): ioperm(0x0, 0x9, 0x5) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000280)={0xf0f022}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x2, @win={{0xdd52, 0xc, 0x40, 0xe0fd}, 0x0, 0x2, 0x0, 0xc, &(0x7f0000000380)="e378aa62443b7fd1abf0e38dfa83979c380d38b06d6c93ffd0470d6389f572ef4828329383339609e439", 0x6}}) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/80, 0x50}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) shutdown(r1, 0x0) 1.564731731s ago: executing program 2 (id=2049): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f0000000000), 0x4) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00ef000049d3c21e92eab03a068b"], 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="08030000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="54fdffff0f00c576a80959ce4d6083524d8bdcb794111fff00000000000000f6ffffff001410b8718e4ae00b62904c9f6dbed3f5351f6dc94a5613b454ed1f89dd636d7fd9d12f7231b407b7870f618370cf3bd665e5b80420112431cdd2aaa62355bb0cc01a115100432bf944ed6ff733b24c5a2218b7c296f8a0e32362cf6dfdebf1a21f739f49ed5e32210159b237d2ebf25b94f222f50a2d5c6f56", @ANYRES32=0x0, @ANYBLOB="00020000000000002c003480140035006970365f7674693000000000000000001400350076657468305f746f5f6873720000000008000a00", @ANYRES32=r4, @ANYBLOB], 0x54}}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x5d032, 0xffffffffffffffff, 0x0) (async) r8 = userfaultfd(0x801) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0x39000, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) (async) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r13}, 0x10) (async) mincore(&(0x7f0000cfe000/0x3000)=nil, 0x3000, &(0x7f0000000740)=""/112) sendmsg$NL80211_CMD_LEAVE_OCB(r10, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)=ANY=[@ANYRES32=r12, @ANYRES16=r11, @ANYBLOB="040000a6b4174906418c26d1922dc9ba0016dd6119f40ec3d4e37c81bd7000fedbdf256debffff0700030017575677", @ANYBLOB, @ANYBLOB="1c000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20008150}, 0x4880) (async) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r8, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES32=r5, @ANYRES32=r7, @ANYBLOB="01"], 0x3c}, 0x1, 0x0, 0x0, 0x811}, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r6, 0x0, 0x83, &(0x7f0000000240)={'nat\x00', 0x0, 0x3, 0xf2, [0x8, 0x800, 0x5, 0x8, 0x4, 0x1], 0x1, &(0x7f00000001c0)=[{}], &(0x7f0000000400)=""/242}, &(0x7f00000002c0)=0x50) 1.491176485s ago: executing program 2 (id=2051): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2a, 0x8000, {0x0, 0x0, 0x0, r4, {0x5, 0x3}, {}, {0xa, 0x8}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xc4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x15}, 0x20008004) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) sendfile(r5, r5, 0x0, 0x40000f63c) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) r8 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8169, 0x6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)) r10 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2040, 0x0) fcntl$setlease(r10, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r10, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r10, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000001c0)={0x15, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000004c0)={0x49, 0x7fff, 0x4}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@datasec={0x1, 0x0, 0x0, 0xf, 0x3, [], "27ff2e"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], 'z'}]}}, 0x0, 0x36, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x8, 0x3}) 1.352036078s ago: executing program 2 (id=2052): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x8, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0) 1.280694557s ago: executing program 3 (id=2055): socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) (async) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_usb_connect(0x0, 0x0, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) (async) poll(0x0, 0x0, 0x80) (async) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) (async) close(r4) (async) setuid(0xee01) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_open_dev$cec(0x0, 0x0, 0x0) 1.064925296s ago: executing program 3 (id=2057): add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8b5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_PROPBIT(r0, 0x5501, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/config', 0x0, 0x0) fchmod(r1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 941.953632ms ago: executing program 3 (id=2058): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ppoll(&(0x7f0000000200)=[{r0, 0x1002}], 0x1, &(0x7f0000000240)={0x77359400}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00'}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0x6c5621a684f1998c}}, {{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x15, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xfffffffffffffdac}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/65, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) flistxattr(r2, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) r3 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc2c45512, &(0x7f0000000340)={{0x8, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7130, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffc, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfefffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x10000000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd]}) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0x3, 0x12}, {0xfc, 0x8, 0x7, 0x3, [0xd50, 0x5, 0xfff9, 0xfe01, 0xfffd]}}}}, 0x1f) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x20, 0x0) 409.350987ms ago: executing program 0 (id=2062): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sys_exit\x00', r2}, 0x10) syz_emit_ethernet(0x7a, &(0x7f00000002c0)={@local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ee527e", 0x44, 0x3c, 0x0, @empty, @mcast2}}}}, 0x0) getitimer(0x0, &(0x7f0000000000)) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000001c0)={'bridge_slave_1\x00', @local}) (async) write$tun(r0, &(0x7f0000000100)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x5, 0x6, '\x00', 0x0, 0x2b, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local}}}}}, 0x3a) (async) r4 = socket$inet6(0xa, 0x3, 0x6) (async, rerun: 64) openat$sndseq(0xffffff9c, &(0x7f0000000240), 0x800) (async, rerun: 64) r5 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x110100, 0x0) setsockopt$bt_hci_HCI_FILTER(r5, 0x0, 0x2, &(0x7f0000000080)={0x9, [0x1, 0x8], 0x3}, 0x10) (async) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x3b8, 0xffffffff, 0x0, 0x228, 0x228, 0xfeffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xcc, 0x128, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x0, 0x8}}]}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv6=@private1}}}, {{@uncond, 0x0, 0xdc, 0x100, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @common=@unspec=@AUDIT={0x24}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x414) 302.017387ms ago: executing program 0 (id=2063): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x5210c0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) (async) add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000240)="03", 0x1, 0xfffffffffffffffe) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$isdn(r1, &(0x7f0000000000)={0xfffffffe, 0xfffffffc, "0b816e2a03c43a7c"}, 0x10, 0x20040000, 0x0, 0x0) read$alg(r1, &(0x7f0000000780)=""/4110, 0x880) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x42041) (async) close(r2) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 32) getpeername$qrtr(r1, &(0x7f0000000040), &(0x7f0000000180)=0xc) (rerun: 32) r4 = openat$cgroup_int(r3, &(0x7f0000000580)='cpu.idle\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000340)=ANY=[@ANYRESHEX=r4], 0x27) mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x2480, 0x1) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) 300.80385ms ago: executing program 0 (id=2064): r0 = socket(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000080)={0x8, 0x4, {0xffffffffffffffff}, {0xee00}, 0x17400000, 0x4}) ptrace(0x11, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r7 = socket(0x10, 0x803, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000200), 0x1000000000000276, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xfff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x48005}, 0x0) r9 = syz_open_dev$swradio(&(0x7f0000000a00), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r9, 0xc0405665, &(0x7f0000000a40)={0x0, 0x5}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r11, 0x8818564c, &(0x7f0000001b00)) r12 = socket(0x15, 0xeba462f2a846cb69, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r12) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) rseq(&(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x1, 0x3, 0x5, 0x77a}, 0x1}, 0x20, 0x1, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x4, {0x0, 0x0, 0x0, r13, {0xa}, {0x5}, {0xfff1, 0x3d}}}, 0x24}}, 0x40) 179.261058ms ago: executing program 0 (id=2065): modify_ldt$write(0x1, &(0x7f0000000040)={0xc}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000bc0)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10202, 0x810}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0xc}, 0x10) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000bc0)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10202, 0x810}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) (async) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 101.766705ms ago: executing program 0 (id=2066): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x400442c8, &(0x7f0000000080)={'macsec0\x00', @dev}) mknodat(r1, &(0x7f0000000000)='./file0\x00', 0x4, 0x8) 101.070423ms ago: executing program 0 (id=2067): ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0x3ff) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x5, 0x40000) r2 = eventfd(0xd) r3 = openat$sndseq(0xffffff9c, &(0x7f0000000080), 0x0) r4 = socket$nl_crypto(0x10, 0x3, 0x15) r5 = openat$khugepaged_scan(0xffffff9c, &(0x7f00000000c0), 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f0000000140)=[{r0, 0x40}, {0xffffffffffffffff, 0x4400}, {r1, 0x464}, {r2, 0x4080}, {0xffffffffffffffff, 0x84}, {r3}, {r4, 0x200}, {r5, 0x4005}], 0x8, &(0x7f00000001c0)={r6, r7+10000000}, &(0x7f0000000200)={[0x0, 0x3]}, 0x8) r8 = open(&(0x7f0000000240)='./file0\x00', 0x200, 0x80) io_setup(0x8, &(0x7f0000000280)=0x0) io_getevents(r9, 0x5, 0x1, &(0x7f00000002c0)=[{}], 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f0000000480)={'erspan0\x00', &(0x7f0000000380)={'syztnl1\x00', r11, 0x7800, 0x8, 0xec2, 0x4, {{0x2d, 0x4, 0x0, 0x1, 0xb4, 0x68, 0x0, 0x3, 0x4, 0x0, @local, @multicast2, {[@ssrr={0x89, 0xb, 0x4f, [@multicast2, @remote]}, @generic={0x83, 0x10, "2dbb8b0c222286313f7533fe4790"}, @timestamp={0x44, 0xc, 0xe3, 0x0, 0x7, [0x8079, 0x80000000]}, @timestamp_prespec={0x44, 0x44, 0x35, 0x3, 0x4, [{@local, 0x401}, {@empty, 0x1000}, {@empty, 0x7fff}, {@empty}, {@private=0xa010101, 0x4}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@rand_addr=0x64010100, 0x6}]}, @noop, @timestamp_prespec={0x44, 0x34, 0xbc, 0x3, 0x0, [{@multicast2, 0xb}, {@remote, 0x203}, {@loopback, 0x10}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x8afe}, {@remote, 0x8}, {@multicast2, 0xa20}]}]}}}}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00'}) setsockopt$RDS_GET_MR_FOR_DEST(r8, 0x114, 0x7, &(0x7f00000005c0)={@xdp={0x2c, 0x1, r11, 0x24}, {&(0x7f0000000500)=""/118, 0x76}, &(0x7f0000000580), 0x61}, 0xa0) r12 = openat$cgroup(r8, &(0x7f0000000680)='syz0\x00', 0x200002, 0x0) fcntl$getflags(r12, 0x1) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), r8) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r8, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r13, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4) socket$nl_route(0x10, 0x3, 0x0) fsetxattr(r2, &(0x7f0000000800)=@known='system.posix_acl_default\x00', &(0x7f0000000840)='/dev/snd/midiC#D#\x00', 0x12, 0x1) mknodat$null(r8, &(0x7f0000000880)='./file0\x00', 0x200, 0x103) r14 = semget$private(0x0, 0x4, 0x332) semctl$SEM_INFO(r14, 0x4, 0x13, &(0x7f00000008c0)=""/199) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r8, 0xc01c64b9, &(0x7f0000000a40)={&(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, &(0x7f0000000e00)={&(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x7, 0x4}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r8, 0xc01c64b9, &(0x7f0000000f00)={&(0x7f0000000e80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r8, 0xc03864bc, &(0x7f00000017c0)={0x0, 0x1, &(0x7f0000000a80)=[r15], &(0x7f0000000ac0)=[0x40000, 0x4, 0x101, 0x7], &(0x7f0000001700)=[r16, r17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001740)=[0x99d2, 0xb, 0x7, 0x9, 0xffffffffffff561f, 0x8, 0x0, 0xa3, 0x2], 0x0, 0x5}) 65.141229ms ago: executing program 3 (id=2068): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 505.17µs ago: executing program 3 (id=2069): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@bridge_getneigh={0xf0, 0x1e, 0x100, 0x70bd27, 0x25dfdbff, {0x7, 0x0, 0x0, r2, 0x20, 0x11}, [@IFLA_AF_SPEC={0xd0, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}, @AF_INET6={0x90, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x6}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x8}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xaf}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x5d}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_INET6={0x30, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2c}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x25}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x5}]}]}]}, 0xf0}}, 0x4000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @random="974844815560", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x1a) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x0) 0s ago: executing program 3 (id=2070): syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x80000034) mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000001c0)={'wlan0\x00', 0x0}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) pipe2(&(0x7f0000000000), 0x0) madvise(&(0x7f000031b000/0x2000)=nil, 0x2000, 0x15) flock(r1, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) kernel console output (not intermixed with test programs): pid=10782 comm="syz.3.1153" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 213.579531][ T39] audit: type=1326 audit(1740498811.412:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10782 comm="syz.3.1153" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 213.586023][ T39] audit: type=1326 audit(1740498811.412:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10782 comm="syz.3.1153" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 213.591904][ T39] audit: type=1326 audit(1740498811.412:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10782 comm="syz.3.1153" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 213.597891][ T39] audit: type=1326 audit(1740498811.412:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10782 comm="syz.3.1153" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 213.603878][ T39] audit: type=1326 audit(1740498811.412:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10782 comm="syz.3.1153" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f165a7 code=0x7ffc0000 [ 213.609801][ T39] audit: type=1326 audit(1740498811.412:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10782 comm="syz.3.1153" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 213.615981][ T39] audit: type=1326 audit(1740498811.412:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10782 comm="syz.3.1153" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f165a7 code=0x7ffc0000 [ 213.622040][ T39] audit: type=1326 audit(1740498811.412:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10782 comm="syz.3.1153" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 214.761899][ T6002] IPVS: starting estimator thread 0... [ 214.852935][T10840] IPVS: using max 37 ests per chain, 88800 per kthread [ 215.491537][T10868] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1175'. [ 217.689059][T10915] lo speed is unknown, defaulting to 1000 [ 217.691159][T10915] wg1 speed is unknown, defaulting to 1000 [ 218.572332][T10929] syz.1.1191: attempt to access beyond end of device [ 218.572332][T10929] nbd1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 218.576214][T10929] EXT4-fs (nbd1): unable to read superblock [ 218.621545][T10931] input: syz0 as /devices/virtual/input/input13 [ 218.788242][T10938] IPVS: set_ctl: invalid protocol: 43 100.1.1.1:20003 [ 218.875075][ T5946] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 218.903427][T10946] trusted_key: encrypted_key: insufficient parameters specified [ 219.355331][T10963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1200'. [ 219.549861][T10965] lo: entered promiscuous mode [ 219.552654][T10965] lo: left promiscuous mode [ 219.943918][ T6060] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 219.963998][T10975] input: syz1 as /devices/virtual/input/input14 [ 220.092799][ T6060] usb 7-1: Using ep0 maxpacket: 8 [ 220.097060][ T6060] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.101241][ T6060] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 220.107214][ T6060] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 220.111280][ T6060] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 220.116917][ T6060] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 220.120294][ T6060] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.132676][ T6060] hub 7-1:1.0: bad descriptor, ignoring hub [ 220.135213][ T6060] hub 7-1:1.0: probe with driver hub failed with error -5 [ 220.142288][ T6060] cdc_wdm 7-1:1.0: skipping garbage [ 220.145295][ T6060] cdc_wdm 7-1:1.0: skipping garbage [ 220.147360][ T6060] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 220.149245][ T6060] cdc_wdm 7-1:1.0: Unknown control protocol [ 221.023044][T10971] usb 7-1: reset high-speed USB device number 31 using dummy_hcd [ 221.506148][ T9] usb 7-1: USB disconnect, device number 31 [ 221.553070][T11034] netlink: 'syz.1.1215': attribute type 11 has an invalid length. [ 221.558866][T11034] qnx6: unable to read the first superblock [ 221.562042][T11035] qnx6: unable to read the first superblock [ 221.591922][T11038] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 222.752872][ T64] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 222.906401][ T64] usb 7-1: unable to get BOS descriptor or descriptor too short [ 222.908998][ T64] usb 7-1: not running at top speed; connect to a high speed hub [ 222.911940][ T64] usb 7-1: invalid descriptor for config index 0: type = 0x2, length = 50 [ 222.914481][ T64] usb 7-1: can't read configurations, error -22 [ 223.042798][ T64] usb 7-1: new full-speed USB device number 33 using dummy_hcd [ 223.192878][ T6060] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 223.194378][ T64] usb 7-1: unable to get BOS descriptor or descriptor too short [ 223.197971][ T64] usb 7-1: not running at top speed; connect to a high speed hub [ 223.201103][ T64] usb 7-1: invalid descriptor for config index 0: type = 0x2, length = 50 [ 223.203622][ T64] usb 7-1: can't read configurations, error -22 [ 223.205565][ T64] usb usb7-port1: attempt power cycle [ 223.342804][ T6060] usb 6-1: Using ep0 maxpacket: 8 [ 223.347533][ T6060] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.350687][ T6060] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 223.353268][ T6060] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 223.356369][ T6060] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 223.359386][ T6060] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 223.361893][ T6060] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.368069][ T6060] hub 6-1:1.0: bad descriptor, ignoring hub [ 223.369803][ T6060] hub 6-1:1.0: probe with driver hub failed with error -5 [ 223.371992][ T6060] cdc_wdm 6-1:1.0: skipping garbage [ 223.373507][ T6060] cdc_wdm 6-1:1.0: skipping garbage [ 223.376963][ T6060] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 223.378637][ T6060] cdc_wdm 6-1:1.0: Unknown control protocol [ 223.552930][ T64] usb 7-1: new full-speed USB device number 34 using dummy_hcd [ 223.576545][ T64] usb 7-1: unable to get BOS descriptor or descriptor too short [ 223.578133][T11086] 9pnet_fd: Insufficient options for proto=fd [ 223.579869][ T64] usb 7-1: not running at top speed; connect to a high speed hub [ 223.584947][ T64] usb 7-1: invalid descriptor for config index 0: type = 0x2, length = 50 [ 223.588028][ T64] usb 7-1: can't read configurations, error -22 [ 223.712811][ T64] usb 7-1: new full-speed USB device number 35 using dummy_hcd [ 223.734804][ T64] usb 7-1: unable to get BOS descriptor or descriptor too short [ 223.737339][ T64] usb 7-1: not running at top speed; connect to a high speed hub [ 223.740260][ T64] usb 7-1: invalid descriptor for config index 0: type = 0x2, length = 50 [ 223.742646][ T64] usb 7-1: can't read configurations, error -22 [ 223.744800][ T64] usb usb7-port1: unable to enumerate USB device [ 224.121412][T11092] lo speed is unknown, defaulting to 1000 [ 224.123767][T11092] wg1 speed is unknown, defaulting to 1000 [ 224.429052][T11084] cdc_wdm 6-1:1.0: Error autopm - -16 [ 224.429236][ T6060] usb 6-1: USB disconnect, device number 38 [ 225.073184][T11182] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1239'. [ 225.188756][T11191] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1236'. [ 225.680798][T11199] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 225.684582][ T5946] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 227.095400][T11231] lo speed is unknown, defaulting to 1000 [ 227.097532][T11231] wg1 speed is unknown, defaulting to 1000 [ 227.140912][T11237] overlayfs: failed to clone upperpath [ 227.184770][T11242] autofs: Unknown parameter './file1' [ 227.751324][T11259] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 227.772849][ T5946] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 227.799741][T11262] ceph: No mds server is up or the cluster is laggy [ 228.679556][T11283] syz.2.1265: attempt to access beyond end of device [ 228.679556][T11283] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 228.689131][T11283] XFS (nbd2): SB validate failed with error -5. [ 228.757591][T11290] gtp0: entered promiscuous mode [ 228.759172][T11290] gtp0: entered allmulticast mode [ 228.905154][T11297] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.025081][T11297] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.143686][T11297] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.178141][T11306] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 229.180212][T11306] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 229.242407][T11297] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.332354][T11297] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.339226][T11297] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.349513][T11297] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.355503][T11297] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.380295][T11311] netlink: 'syz.1.1270': attribute type 1 has an invalid length. [ 229.398183][T11311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1270'. [ 229.408956][T11311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.413029][T11311] bond2: (slave batadv0): Enslaving as a backup interface with an up link [ 229.834597][ T39] kauditd_printk_skb: 1533 callbacks suppressed [ 229.834610][ T39] audit: type=1326 audit(1740498827.672:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11319 comm="syz.1.1273" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 229.844014][ T39] audit: type=1326 audit(1740498827.672:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11319 comm="syz.1.1273" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 229.853014][ T39] audit: type=1326 audit(1740498827.672:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11319 comm="syz.1.1273" exe="/syz-executor" sig=0 arch=40000003 syscall=335 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 229.859502][ T39] audit: type=1326 audit(1740498827.672:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11319 comm="syz.1.1273" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 229.869247][ T39] audit: type=1326 audit(1740498827.672:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11319 comm="syz.1.1273" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 229.875754][ T39] audit: type=1326 audit(1740498827.682:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11319 comm="syz.1.1273" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 229.925267][T11324] netlink: 19 bytes leftover after parsing attributes in process `syz.3.1274'. [ 229.932400][T11324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1274'. [ 229.991738][T11318] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 229.997154][ T5946] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 230.039721][ T39] audit: type=1326 audit(1740498827.872:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11319 comm="syz.1.1273" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 230.051104][ T39] audit: type=1326 audit(1740498827.872:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11319 comm="syz.1.1273" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 230.126881][T11333] cgroup: subsys name conflicts with all [ 230.136155][ T39] audit: type=1326 audit(1740498827.972:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11332 comm="syz.1.1277" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 230.142519][ T39] audit: type=1326 audit(1740498827.972:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11332 comm="syz.1.1277" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 231.773198][ T63] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 231.922820][ T63] usb 7-1: Using ep0 maxpacket: 8 [ 231.928865][ T63] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.931798][ T63] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 231.934682][ T63] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 231.938192][ T63] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 231.941589][ T63] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 231.945032][ T63] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.950839][ T63] hub 7-1:1.0: bad descriptor, ignoring hub [ 231.953327][ T63] hub 7-1:1.0: probe with driver hub failed with error -5 [ 231.956124][ T63] cdc_wdm 7-1:1.0: skipping garbage [ 231.957802][ T63] cdc_wdm 7-1:1.0: skipping garbage [ 231.960367][ T63] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 231.962226][ T63] cdc_wdm 7-1:1.0: Unknown control protocol [ 232.147522][T11384] 9pnet_fd: Insufficient options for proto=fd [ 232.153223][T11375] FAULT_INJECTION: forcing a failure. [ 232.153223][T11375] name failslab, interval 1, probability 0, space 0, times 1 [ 232.157060][T11375] CPU: 1 UID: 0 PID: 11375 Comm: syz.2.1292 Not tainted 6.14.0-rc4-syzkaller #0 [ 232.157074][T11375] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 232.157081][T11375] Call Trace: [ 232.157085][T11375] [ 232.157090][T11375] dump_stack_lvl+0x16c/0x1f0 [ 232.157299][T11375] should_fail_ex+0x50a/0x650 [ 232.157382][T11375] ? fs_reclaim_acquire+0xae/0x150 [ 232.157414][T11375] should_failslab+0xc2/0x120 [ 232.157439][T11375] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 232.157461][T11375] ? getname_flags.part.0+0x4c/0x550 [ 232.157496][T11375] ? vfs_write+0x306/0x1150 [ 232.157518][T11375] getname_flags.part.0+0x4c/0x550 [ 232.157536][T11375] getname+0x8d/0xe0 [ 232.157554][T11375] do_sys_openat2+0x104/0x1e0 [ 232.157569][T11375] ? __pfx_do_sys_openat2+0x10/0x10 [ 232.157587][T11375] ? __fget_files+0x206/0x3a0 [ 232.157624][T11375] __ia32_compat_sys_openat+0x16e/0x210 [ 232.157637][T11375] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 232.157648][T11375] ? ksys_write+0x1ba/0x250 [ 232.157665][T11375] __do_fast_syscall_32+0x73/0x120 [ 232.157680][T11375] do_fast_syscall_32+0x32/0x80 [ 232.157693][T11375] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 232.157712][T11375] RIP: 0023:0xf7fa4579 [ 232.157768][T11375] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 232.157779][T11375] RSP: 002b:00000000f50c6100 EFLAGS: 00000293 ORIG_RAX: 0000000000000127 [ 232.157818][T11375] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f50c6150 [ 232.157824][T11375] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00000000f742cff4 [ 232.157830][T11375] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 232.157835][T11375] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 232.157841][T11375] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 232.157853][T11375] [ 232.263127][ T7989] usb 7-1: USB disconnect, device number 36 [ 232.437439][T11390] 9p: Unknown uid 00000000004294967295 [ 232.491027][T11397] overlayfs: failed to resolve './bus': -2 [ 232.496764][T11397] sctp: [Deprecated]: syz.0.1295 (pid 11397) Use of struct sctp_assoc_value in delayed_ack socket option. [ 232.496764][T11397] Use struct sctp_sack_info instead [ 232.517731][T11399] netlink: zone id is out of range [ 232.614605][T11404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1299'. [ 232.811968][ T9] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 232.925875][T11417] netlink: 'syz.0.1300': attribute type 10 has an invalid length. [ 232.931651][T11417] netlink: 'syz.0.1300': attribute type 10 has an invalid length. [ 233.202810][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 233.427031][ T9] usb 7-1: config 1 has an invalid descriptor of length 114, skipping remainder of the config [ 233.430034][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 233.432675][ T9] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 233.436480][ T9] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 233.439152][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.448096][ T9] hub 7-1:1.0: bad descriptor, ignoring hub [ 233.450091][ T9] hub 7-1:1.0: probe with driver hub failed with error -5 [ 233.452629][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 233.454299][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 233.455875][ T9] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 233.565573][T11422] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 233.569072][ T5946] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 233.611465][T11426] input input15: cannot allocate more than FF_MAX_EFFECTS effects [ 233.667783][T11425] /dev/sr0: Can't open blockdev [ 233.768992][ T9] usb 7-1: USB disconnect, device number 37 [ 233.911613][T11445] ebtables: wrong size: *len 264, entries_size 144, replsz 144 [ 234.145213][T11460] 9pnet_fd: p9_fd_create_tcp (11460): problem connecting socket to 127.0.0.1 [ 234.256763][T11470] batadv1: entered promiscuous mode [ 234.258537][T11470] batadv1: entered allmulticast mode [ 234.814206][T11483] syz.0.1323: attempt to access beyond end of device [ 234.814206][T11483] loop0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 234.818263][T11483] XFS (loop0): SB validate failed with error -5. [ 234.845731][ T6060] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 235.014326][ T6060] usb 6-1: Using ep0 maxpacket: 8 [ 235.023365][ T6060] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.026485][ T6060] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 235.029064][ T6060] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 235.032392][ T6060] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 235.035749][ T6060] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 235.038442][ T6060] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.044616][ T6060] hub 6-1:1.0: bad descriptor, ignoring hub [ 235.046420][ T6060] hub 6-1:1.0: probe with driver hub failed with error -5 [ 235.048763][ T6060] cdc_wdm 6-1:1.0: skipping garbage [ 235.050322][ T6060] cdc_wdm 6-1:1.0: skipping garbage [ 235.052493][ T6060] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 235.056172][ T6060] cdc_wdm 6-1:1.0: Unknown control protocol [ 235.372799][ T63] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 235.379720][T11504] wireguard0: entered promiscuous mode [ 235.381416][T11504] wireguard0: entered allmulticast mode [ 235.522998][ T63] usb 7-1: Using ep0 maxpacket: 8 [ 235.526041][ T63] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.528950][ T63] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 235.531600][ T63] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 235.534835][ T63] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 235.538077][ T63] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 235.540661][ T63] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.545917][ T63] hub 7-1:1.0: bad descriptor, ignoring hub [ 235.547707][ T63] hub 7-1:1.0: probe with driver hub failed with error -5 [ 235.549984][ T63] cdc_wdm 7-1:1.0: skipping garbage [ 235.551507][ T63] cdc_wdm 7-1:1.0: skipping garbage [ 235.653166][T11480] usb 6-1: reset high-speed USB device number 39 using dummy_hcd [ 235.745929][T11498] FAULT_INJECTION: forcing a failure. [ 235.745929][T11498] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 235.749812][T11498] CPU: 3 UID: 0 PID: 11498 Comm: syz.2.1327 Not tainted 6.14.0-rc4-syzkaller #0 [ 235.749824][T11498] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 235.749831][T11498] Call Trace: [ 235.749835][T11498] [ 235.749839][T11498] dump_stack_lvl+0x16c/0x1f0 [ 235.749858][T11498] should_fail_ex+0x50a/0x650 [ 235.749877][T11498] strncpy_from_user+0x3b/0x2d0 [ 235.749893][T11498] getname_flags.part.0+0x8f/0x550 [ 235.749907][T11498] getname+0x8d/0xe0 [ 235.749919][T11498] do_sys_openat2+0x104/0x1e0 [ 235.749931][T11498] ? __pfx_do_sys_openat2+0x10/0x10 [ 235.749958][T11498] ? __fget_files+0x206/0x3a0 [ 235.749976][T11498] __ia32_compat_sys_openat+0x16e/0x210 [ 235.749988][T11498] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 235.749999][T11498] ? ksys_write+0x1ba/0x250 [ 235.750017][T11498] __do_fast_syscall_32+0x73/0x120 [ 235.750031][T11498] do_fast_syscall_32+0x32/0x80 [ 235.750043][T11498] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 235.750061][T11498] RIP: 0023:0xf7fa4579 [ 235.750069][T11498] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 235.750079][T11498] RSP: 002b:00000000f50c6100 EFLAGS: 00000293 ORIG_RAX: 0000000000000127 [ 235.750089][T11498] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f50c6150 [ 235.750095][T11498] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00000000f742cff4 [ 235.750100][T11498] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 235.750106][T11498] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 235.750112][T11498] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 235.750123][T11498] [ 235.824862][T11480] usb 6-1: device firmware changed [ 235.826795][T11480] cdc_wdm 6-1:1.0: Error autopm - -16 [ 235.826900][ T1015] usb 6-1: USB disconnect, device number 39 [ 235.831573][ T63] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 235.833384][ T63] cdc_wdm 7-1:1.0: Unknown control protocol [ 235.855539][ T63] usb 7-1: USB disconnect, device number 38 [ 235.873975][T11511] syz_tun: entered allmulticast mode [ 235.963156][ T1015] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 236.112806][ T1015] usb 6-1: Using ep0 maxpacket: 8 [ 236.115531][ T1015] usb 6-1: config 1 has an invalid descriptor of length 114, skipping remainder of the config [ 236.118537][ T1015] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 236.121251][ T1015] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 236.125225][ T1015] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 236.127847][ T1015] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.132578][ T1015] hub 6-1:1.0: bad descriptor, ignoring hub [ 236.134433][ T1015] hub 6-1:1.0: probe with driver hub failed with error -5 [ 236.137168][ T1015] cdc_wdm 6-1:1.0: skipping garbage [ 236.138741][ T1015] cdc_wdm 6-1:1.0: skipping garbage [ 236.140260][ T1015] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 236.282820][ T63] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 236.452983][ T1015] usb 6-1: USB disconnect, device number 40 [ 236.459864][ T63] usb 7-1: Using ep0 maxpacket: 8 [ 236.462614][ T63] usb 7-1: config 1 has an invalid descriptor of length 114, skipping remainder of the config [ 236.467276][ T63] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 236.469834][ T63] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 236.473570][ T63] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 236.476204][ T63] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.481233][ T63] hub 7-1:1.0: bad descriptor, ignoring hub [ 236.484708][ T63] hub 7-1:1.0: probe with driver hub failed with error -5 [ 236.487067][ T63] cdc_wdm 7-1:1.0: skipping garbage [ 236.488594][ T63] cdc_wdm 7-1:1.0: skipping garbage [ 236.490133][ T63] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 236.792940][ T6060] usb 7-1: USB disconnect, device number 39 [ 236.890971][ T39] kauditd_printk_skb: 22 callbacks suppressed [ 236.890987][ T39] audit: type=1326 audit(1740498834.722:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11529 comm="syz.1.1335" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 236.912997][ T39] audit: type=1326 audit(1740498834.722:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11529 comm="syz.1.1335" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 236.919288][ T39] audit: type=1326 audit(1740498834.722:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11529 comm="syz.1.1335" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 236.926069][T11533] tmpfs: Bad value for 'mpol' [ 236.931795][ T39] audit: type=1326 audit(1740498834.722:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11529 comm="syz.1.1335" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 236.938404][ T39] audit: type=1326 audit(1740498834.722:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11529 comm="syz.1.1335" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 236.948607][ T39] audit: type=1326 audit(1740498834.722:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11529 comm="syz.1.1335" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 236.956312][ T39] audit: type=1326 audit(1740498834.722:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11529 comm="syz.1.1335" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 236.963348][ T39] audit: type=1326 audit(1740498834.722:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11529 comm="syz.1.1335" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 236.970268][ T39] audit: type=1326 audit(1740498834.722:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11529 comm="syz.1.1335" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 236.977200][ T39] audit: type=1326 audit(1740498834.722:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11529 comm="syz.1.1335" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 237.224366][T11546] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 237.233264][ T5946] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 238.107942][T11597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1350'. [ 238.269326][ T64] libceph: connect (1)[c::]:6789 error -101 [ 238.271261][ T64] libceph: mon0 (1)[c::]:6789 connect error [ 238.294438][ T6060] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 238.462816][ T6060] usb 6-1: Using ep0 maxpacket: 8 [ 238.466028][ T6060] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.469730][ T6060] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 238.470845][T11606] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 238.473325][ T6060] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 238.480326][ T6060] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 238.484008][ T5946] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 238.484498][ T6060] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 238.490071][ T6060] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.495897][ T6060] hub 6-1:1.0: bad descriptor, ignoring hub [ 238.498100][ T6060] hub 6-1:1.0: probe with driver hub failed with error -5 [ 238.500936][ T6060] cdc_wdm 6-1:1.0: skipping garbage [ 238.502982][ T6060] cdc_wdm 6-1:1.0: skipping garbage [ 238.505366][ T6060] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 238.507569][ T6060] cdc_wdm 6-1:1.0: Unknown control protocol [ 238.533117][ T64] libceph: connect (1)[c::]:6789 error -101 [ 238.534982][ T64] libceph: mon0 (1)[c::]:6789 connect error [ 238.695694][T11595] FAULT_INJECTION: forcing a failure. [ 238.695694][T11595] name failslab, interval 1, probability 0, space 0, times 0 [ 238.700400][T11595] CPU: 3 UID: 0 PID: 11595 Comm: syz.1.1354 Not tainted 6.14.0-rc4-syzkaller #0 [ 238.700413][T11595] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 238.700420][T11595] Call Trace: [ 238.700425][T11595] [ 238.700429][T11595] dump_stack_lvl+0x16c/0x1f0 [ 238.700446][T11595] should_fail_ex+0x50a/0x650 [ 238.700464][T11595] ? fs_reclaim_acquire+0xae/0x150 [ 238.700479][T11595] should_failslab+0xc2/0x120 [ 238.700489][T11595] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 238.700505][T11595] ? alloc_empty_file+0x73/0x1e0 [ 238.700518][T11595] alloc_empty_file+0x73/0x1e0 [ 238.700528][T11595] path_openat+0xe1/0x2d80 [ 238.700541][T11595] ? hlock_class+0x4e/0x130 [ 238.700576][T11595] ? __lock_acquire+0x15a9/0x3c40 [ 238.700594][T11595] ? __pfx_path_openat+0x10/0x10 [ 238.700608][T11595] ? __pfx___lock_acquire+0x10/0x10 [ 238.700621][T11595] ? lock_acquire.part.0+0x11b/0x380 [ 238.700635][T11595] ? find_held_lock+0x2d/0x110 [ 238.700647][T11595] do_filp_open+0x20c/0x470 [ 238.700661][T11595] ? __pfx_do_filp_open+0x10/0x10 [ 238.700674][T11595] ? find_held_lock+0x2d/0x110 [ 238.700692][T11595] ? alloc_fd+0x41f/0x760 [ 238.700709][T11595] do_sys_openat2+0x17a/0x1e0 [ 238.700719][T11595] ? __pfx_do_sys_openat2+0x10/0x10 [ 238.700731][T11595] ? __fget_files+0x206/0x3a0 [ 238.700747][T11595] __ia32_compat_sys_openat+0x16e/0x210 [ 238.700759][T11595] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 238.700770][T11595] ? ksys_write+0x1ba/0x250 [ 238.700787][T11595] __do_fast_syscall_32+0x73/0x120 [ 238.700802][T11595] do_fast_syscall_32+0x32/0x80 [ 238.700815][T11595] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 238.700832][T11595] RIP: 0023:0xf7f95579 [ 238.700841][T11595] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 238.700851][T11595] RSP: 002b:00000000f50b6100 EFLAGS: 00000293 ORIG_RAX: 0000000000000127 [ 238.700860][T11595] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f50b6150 [ 238.700867][T11595] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00000000f741cff4 [ 238.700872][T11595] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 238.700878][T11595] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 238.700883][T11595] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 238.700895][T11595] [ 238.802918][ T6060] usb 6-1: USB disconnect, device number 41 [ 238.852087][T11600] ceph: No mds server is up or the cluster is laggy [ 238.924892][T11611] bond0: (slave syz_tun): Releasing backup interface [ 238.931715][T11611] bridge_slave_0: left allmulticast mode [ 238.934362][T11611] bridge_slave_0: left promiscuous mode [ 238.936131][T11611] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.939689][T11611] bridge_slave_1: left allmulticast mode [ 238.941404][T11611] bridge_slave_1: left promiscuous mode [ 238.943437][T11611] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.950128][T11611] bond0: (slave bond_slave_0): Releasing backup interface [ 238.953933][T11611] bond0: (slave bond_slave_1): Releasing backup interface [ 238.957629][T11611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.959845][T11611] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.962548][T11611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.967229][T11611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.972781][T11611] bond0: (slave wlan1): Releasing backup interface [ 238.976565][T11612] team0: Mode changed to "broadcast" [ 239.023516][T11616] veth1_macvtap: left promiscuous mode [ 239.025254][T11616] macsec0: entered allmulticast mode [ 239.134313][ T6060] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 239.264516][T11623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1360'. [ 239.268001][T11623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1360'. [ 239.270985][T11623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1360'. [ 239.274135][T11623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1360'. [ 239.277134][T11623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1360'. [ 239.280191][T11623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1360'. [ 239.282862][ T6060] usb 6-1: Using ep0 maxpacket: 8 [ 239.284723][T11623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1360'. [ 239.287711][T11623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1360'. [ 239.287903][ T6060] usb 6-1: config 1 has an invalid descriptor of length 114, skipping remainder of the config [ 239.290928][T11623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1360'. [ 239.293458][ T6060] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 239.298604][ T6060] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 239.302289][ T6060] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 239.306494][ T6060] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.310667][ T6060] hub 6-1:1.0: bad descriptor, ignoring hub [ 239.312446][ T6060] hub 6-1:1.0: probe with driver hub failed with error -5 [ 239.314836][ T6060] cdc_wdm 6-1:1.0: skipping garbage [ 239.316449][ T6060] cdc_wdm 6-1:1.0: skipping garbage [ 239.317999][ T6060] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 239.612986][ T35] usb 6-1: USB disconnect, device number 42 [ 239.968776][T11631] loop8: detected capacity change from 0 to 7 [ 239.974179][T11631] Dev loop8: unable to read RDB block 7 [ 239.975968][T11631] loop8: AHDI p1 p3 p4 [ 239.977200][T11631] loop8: partition table partially beyond EOD, truncated [ 239.979324][T11631] loop8: p1 start 975770946 is beyond EOD, truncated [ 239.981368][T11631] loop8: p3 start 6514546 is beyond EOD, truncated [ 239.997734][T11637] netlink: 'syz.0.1364': attribute type 3 has an invalid length. [ 240.187715][T11639] lo speed is unknown, defaulting to 1000 [ 240.189854][T11639] wg1 speed is unknown, defaulting to 1000 [ 240.226847][T11651] vlan0: entered promiscuous mode [ 240.228477][T11651] vlan0: entered allmulticast mode [ 240.510303][T11659] syz.1.1367: attempt to access beyond end of device [ 240.510303][T11659] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 240.515994][T11659] XFS (nbd1): SB validate failed with error -5. [ 241.476993][T11687] sp0: Synchronizing with TNC [ 241.524383][T11687] kvm: apic: phys broadcast and lowest prio [ 241.532293][T11687] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 243.657706][T11694] befs: (nullb0): No write support. Marking filesystem read-only [ 243.660880][T11694] befs: (nullb0): invalid magic header [ 245.092761][ T6060] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 245.138007][ T5946] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 245.183207][T11800] input: syz0 as /devices/virtual/input/input17 [ 245.244086][T11804] __nla_validate_parse: 36 callbacks suppressed [ 245.244098][T11804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1403'. [ 245.248566][T11804] netlink: 'syz.0.1403': attribute type 2 has an invalid length. [ 245.250956][T11804] netlink: 'syz.0.1403': attribute type 1 has an invalid length. [ 245.262788][ T6060] usb 6-1: Using ep0 maxpacket: 8 [ 245.272124][ T6060] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.275222][ T6060] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 245.278649][ T6060] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 245.282665][ T6060] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 245.286377][ T6060] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 245.288974][ T6060] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.294046][ T6060] hub 6-1:1.0: bad descriptor, ignoring hub [ 245.295811][ T6060] hub 6-1:1.0: probe with driver hub failed with error -5 [ 245.298073][ T6060] cdc_wdm 6-1:1.0: skipping garbage [ 245.299599][ T6060] cdc_wdm 6-1:1.0: skipping garbage [ 245.302006][ T6060] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 245.304362][ T6060] cdc_wdm 6-1:1.0: Unknown control protocol [ 245.640445][T11812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1403'. [ 245.647231][T11813] nfs: Unknown parameter 'ac' [ 245.650984][T11812] wireguard0: entered promiscuous mode [ 246.142626][T11823] lo speed is unknown, defaulting to 1000 [ 246.157545][T11823] wg1 speed is unknown, defaulting to 1000 [ 246.171370][T11826] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1409'. [ 246.178059][T11826] bridge0: port 1(vlan0) entered blocking state [ 246.180650][T11826] bridge0: port 1(vlan0) entered disabled state [ 246.191872][T11826] vlan0: entered allmulticast mode [ 246.195221][T11826] vlan0: left allmulticast mode [ 246.225522][T11757] usb 6-1: reset high-speed USB device number 43 using dummy_hcd [ 246.305597][T11837] program syz.0.1411 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 246.373758][T11757] usb 6-1: device firmware changed [ 246.375667][ T6060] usb 6-1: USB disconnect, device number 43 [ 246.377917][T11757] cdc_wdm 6-1:1.0: Error autopm - -16 [ 246.502816][ T6060] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 246.662846][ T6060] usb 6-1: Using ep0 maxpacket: 8 [ 246.665620][ T6060] usb 6-1: config 1 has an invalid descriptor of length 114, skipping remainder of the config [ 246.668727][ T6060] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 246.671326][ T6060] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 246.675157][ T6060] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 246.677778][ T6060] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.683036][ T6060] hub 6-1:1.0: bad descriptor, ignoring hub [ 246.684804][ T6060] hub 6-1:1.0: probe with driver hub failed with error -5 [ 246.687133][ T6060] cdc_wdm 6-1:1.0: skipping garbage [ 246.688658][ T6060] cdc_wdm 6-1:1.0: skipping garbage [ 246.690313][ T6060] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 246.960196][T11757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.962869][T11757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.082966][ T6060] usb 6-1: USB disconnect, device number 44 [ 247.461876][T11859] ./file0: Can't lookup blockdev [ 247.497356][T11861] 9pnet_fd: Insufficient options for proto=fd [ 247.503969][T11866] trusted_key: syz.0.1418 sent an empty control message without MSG_MORE. [ 247.572953][T11871] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1414'. [ 247.902220][T11875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1421'. [ 248.266599][T11892] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1425'. [ 248.457358][ T6060] libceph: mon0 (1)[c::]:6789 socket error on write [ 248.579324][T11923] "syz.0.1433" (11923) uses obsolete ecb(arc4) skcipher [ 248.583285][T11908] ceph: No mds server is up or the cluster is laggy [ 248.869053][T11943] kvm: Disabled LAPIC found during irq injection [ 248.999056][T11943] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.002660][T11943] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.007265][T11943] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.009797][T11943] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.025400][T11943] tipc: Resetting bearer [ 249.035354][ T64] lo speed is unknown, defaulting to 1000 [ 249.412872][ T63] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 249.476487][T11957] netlink: 'syz.0.1444': attribute type 4 has an invalid length. [ 249.574260][ T63] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 249.576675][ T63] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 249.579973][ T63] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 249.583612][ T63] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 249.586826][ T63] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 249.590544][ T63] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 249.593477][ T63] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.600045][ T63] usb 7-1: config 0 descriptor?? [ 249.602113][T11951] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 249.765174][T11972] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1448'. [ 249.919642][ T63] usbhid 7-1:0.0: can't add hid device: -71 [ 249.921370][ T63] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 249.930349][ T63] usb 7-1: USB disconnect, device number 40 [ 250.150086][ T5983] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 250.154957][ T5983] dvb_usb_az6027 5-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 250.162184][ T5983] usb 5-1: USB disconnect, device number 22 [ 250.957130][T12008] input: syz1 as /devices/virtual/input/input18 [ 251.795594][T12032] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 251.798563][T12032] syz.1.1464: attempt to access beyond end of device [ 251.798563][T12032] loop1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 251.821000][ T39] kauditd_printk_skb: 19 callbacks suppressed [ 251.821010][ T39] audit: type=1326 audit(1740498849.652:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12038 comm="syz.3.1465" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 251.829701][ T39] audit: type=1326 audit(1740498849.652:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12038 comm="syz.3.1465" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 251.836502][ T39] audit: type=1326 audit(1740498849.662:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12038 comm="syz.3.1465" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 251.842676][ T39] audit: type=1326 audit(1740498849.662:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12038 comm="syz.3.1465" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 251.849133][ T39] audit: type=1326 audit(1740498849.662:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12038 comm="syz.3.1465" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 251.855460][ T39] audit: type=1326 audit(1740498849.662:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12038 comm="syz.3.1465" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 251.861494][ T39] audit: type=1326 audit(1740498849.662:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12038 comm="syz.3.1465" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 251.867552][ T39] audit: type=1326 audit(1740498849.662:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12038 comm="syz.3.1465" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 251.874129][ T39] audit: type=1326 audit(1740498849.672:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12038 comm="syz.3.1465" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 251.881399][ T39] audit: type=1326 audit(1740498849.672:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12038 comm="syz.3.1465" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 251.987917][T12039] netlink: 35 bytes leftover after parsing attributes in process `syz.3.1465'. [ 252.137352][ T5946] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 252.141477][T12057] netlink: 18 bytes leftover after parsing attributes in process `syz.1.1472'. [ 252.144871][T12057] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1472'. [ 252.207530][T12063] syzkaller1: entered promiscuous mode [ 252.209183][T12063] syzkaller1: entered allmulticast mode [ 252.285215][T12052] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 252.288695][ T5946] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 252.809684][T12098] netlink: 'syz.2.1482': attribute type 10 has an invalid length. [ 252.811921][T12098] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1482'. [ 253.824828][T12135] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1492'. [ 253.933763][T12132] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 253.943645][ T5946] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 254.229177][T12151] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.1496'. [ 254.506175][T12173] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 254.512510][T12171] team0: No ports can be present during mode change [ 254.859095][T12189] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1508'. [ 254.979148][T12194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1502'. [ 254.982247][T12194] tipc: Resetting bearer [ 255.022197][T12194] tipc: Disabling bearer [ 255.052655][T12194] team0 (unregistering): Port device team_slave_0 removed [ 255.066228][T12194] team0 (unregistering): Port device team_slave_1 removed [ 255.252836][ T1321] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 255.412839][ T1321] usb 7-1: Using ep0 maxpacket: 32 [ 255.416577][ T1321] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 255.419047][ T1321] usb 7-1: config 0 has no interface number 0 [ 255.422350][ T1321] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 255.425518][ T1321] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.428500][ T1321] usb 7-1: Product: syz [ 255.430110][ T1321] usb 7-1: Manufacturer: syz [ 255.431427][ T1321] usb 7-1: SerialNumber: syz [ 255.434457][ T1321] usb 7-1: config 0 descriptor?? [ 255.439875][ T1321] smsc95xx v2.0.0 [ 255.441417][ T1321] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 255.445081][ T1321] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -22 [ 255.515382][T12205] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 255.521025][ T5946] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 255.622793][ T35] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 255.701704][T12214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1514'. [ 255.772885][ T35] usb 5-1: Using ep0 maxpacket: 16 [ 255.776442][ T35] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.780173][ T35] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 255.786154][ T35] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 255.788794][ T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.791127][ T35] usb 5-1: Product: syz [ 255.792367][ T35] usb 5-1: Manufacturer: syz [ 255.794052][ T35] usb 5-1: SerialNumber: syz [ 255.796470][ T35] usb 5-1: config 0 descriptor?? [ 256.225713][T12227] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1518'. [ 256.266732][T12233] fuse: Bad value for 'fd' [ 256.268250][T12233] fuse: Bad value for 'fd' [ 256.269836][T12233] fuse: Bad value for 'fd' [ 256.272273][T12233] fuse: Bad value for 'fd' [ 256.320511][T12239] virtio-fs: tag <(null)> not found [ 256.667980][T12248] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 256.673482][ T5946] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 257.258553][T12258] __nla_validate_parse: 2 callbacks suppressed [ 257.258567][T12258] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1526'. [ 257.313047][T12264] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.386715][T12264] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.390877][ T1321] usb 7-1: USB disconnect, device number 41 [ 257.437865][T12264] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.558352][T12264] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.595649][T12273] lo speed is unknown, defaulting to 1000 [ 257.597695][T12273] wg1 speed is unknown, defaulting to 1000 [ 257.645947][T12264] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.652024][T12264] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.656973][T12264] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.661354][T12264] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.821288][T12285] bridge0: entered promiscuous mode [ 257.850405][T12284] bridge0: left promiscuous mode [ 257.887649][T12289] netlink: 'syz.3.1535': attribute type 1 has an invalid length. [ 257.937175][T12289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1535'. [ 258.123503][T12299] netlink: 'syz.3.1537': attribute type 1 has an invalid length. [ 258.136052][T12299] bond5: entered promiscuous mode [ 258.137984][T12299] bond5: entered allmulticast mode [ 258.225920][ T39] kauditd_printk_skb: 77 callbacks suppressed [ 258.225934][ T39] audit: type=1326 audit(1740498856.062:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12201 comm="syz.0.1511" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7fc00000 [ 258.254018][ T63] usb 5-1: USB disconnect, device number 23 [ 259.798500][ T39] audit: type=1804 audit(1740498857.632:1866): pid=12379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1558" name="file0" dev="ramfs" ino=33761 res=1 errno=0 [ 260.166381][T12387] veth1_to_batadv: entered promiscuous mode [ 260.207036][T12385] veth1_to_batadv: left promiscuous mode [ 260.682115][T12409] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1568'. [ 260.709661][T12408] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.713166][T12408] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.716076][T12408] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.719110][T12408] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.723243][T12408] vxlan1: entered promiscuous mode [ 260.725542][T12408] vxlan1: entered allmulticast mode [ 260.738665][T12408] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.742017][T12408] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.745280][T12408] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.749017][T12408] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.119171][ T39] audit: type=1804 audit(1740498858.952:1867): pid=12423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1572" name="/newroot/333/file0" dev="tmpfs" ino=1799 res=1 errno=0 [ 261.202567][T12425] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1573'. [ 261.205221][T12425] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1573'. [ 261.373330][T12432] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 261.402901][T12432] netlink: 'syz.1.1575': attribute type 3 has an invalid length. [ 263.677360][ T39] audit: type=1326 audit(1740498861.512:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12490 comm="syz.0.1591" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf747e579 code=0x0 [ 263.945825][T12495] lo speed is unknown, defaulting to 1000 [ 263.948591][T12495] wg1 speed is unknown, defaulting to 1000 [ 264.567809][ T39] audit: type=1326 audit(1740498862.402:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12518 comm="syz.1.1600" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 264.576247][ T39] audit: type=1326 audit(1740498862.402:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12518 comm="syz.1.1600" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 264.584763][ T39] audit: type=1326 audit(1740498862.402:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12518 comm="syz.1.1600" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 264.590839][ T39] audit: type=1326 audit(1740498862.402:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12518 comm="syz.1.1600" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 265.130882][T12548] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1608'. [ 265.134825][T12548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1608'. [ 265.182141][T12556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1611'. [ 265.487832][T12573] overlayfs: missing 'lowerdir' [ 265.557275][T12575] netlink: 'syz.3.1616': attribute type 1 has an invalid length. [ 265.588825][T12575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1616'. [ 265.596615][T12575] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 265.599282][T12575] bond6: (slave batadv1): Enslaving as a backup interface with an up link [ 265.610135][T12575] bond6 (unregistering): (slave batadv1): Releasing backup interface [ 265.613936][T12575] bond6 (unregistering): Released all slaves [ 266.295684][T12587] delete_channel: no stack [ 266.383168][T12590] lo speed is unknown, defaulting to 1000 [ 266.383681][T12592] 9pnet_fd: Insufficient options for proto=fd [ 266.385361][T12590] wg1 speed is unknown, defaulting to 1000 [ 266.663507][T12614] tipc: Enabling of bearer <@F:> rejected, media not registered [ 267.363201][T12624] block nbd2: NBD_DISCONNECT [ 267.365734][T12624] block nbd2: Disconnected due to user request. [ 267.368772][T12624] block nbd2: shutting down sockets [ 267.962847][ T35] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 268.112856][ T35] usb 5-1: Using ep0 maxpacket: 8 [ 268.115774][ T35] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.118792][ T35] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 268.121440][ T35] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 268.125316][ T35] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 268.129021][ T35] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 268.131729][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.138872][ T35] hub 5-1:1.0: bad descriptor, ignoring hub [ 268.141219][ T35] hub 5-1:1.0: probe with driver hub failed with error -5 [ 268.144539][ T35] cdc_wdm 5-1:1.0: skipping garbage [ 268.146707][ T35] cdc_wdm 5-1:1.0: skipping garbage [ 268.149907][ T35] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 268.152292][ T35] cdc_wdm 5-1:1.0: Unknown control protocol [ 268.344225][T12640] fuse: Bad value for 'fd' [ 268.615097][T12654] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1640'. [ 268.623605][T12656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1638'. [ 268.640241][T12656] wireguard0: entered promiscuous mode [ 268.931332][T12662] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 268.939154][ T7280] Bluetooth: hci4: Frame reassembly failed (-84) [ 269.223490][T12640] cdc_wdm 5-1:1.0: Error autopm - -16 [ 269.223739][ T35] usb 5-1: USB disconnect, device number 24 [ 269.321567][T12664] netlink: 'syz.1.1642': attribute type 3 has an invalid length. [ 269.322365][T12665] openvswitch: netlink: IP tunnel dst address not specified [ 269.541621][T12673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1644'. [ 269.547929][T12673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1644'. [ 269.641666][T12680] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1645'. [ 269.674907][ T39] audit: type=1800 audit(1740498867.512:1873): pid=12680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1645" name="/" dev="9p" ino=2 res=0 errno=0 [ 270.604475][T12705] fuse: Bad value for 'user_id' [ 270.606111][T12705] fuse: Bad value for 'user_id' [ 270.942928][ T5946] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 270.942976][ T5950] Bluetooth: hci4: command 0x1003 tx timeout [ 271.056098][T12716] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 271.060138][ T5946] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 271.232279][T12726] team0: Mode changed to "loadbalance" [ 271.242173][T12726] veth0_to_team: entered promiscuous mode [ 271.248763][T12726] team0: Port device veth0_to_team added [ 271.257770][T12726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1657'. [ 271.368113][T12726] team0 (unregistering): Port device veth0_to_team removed [ 271.822827][ T5946] Bluetooth: hci3: command 0x0405 tx timeout [ 271.851737][T12733] lo speed is unknown, defaulting to 1000 [ 271.863240][T12733] wg1 speed is unknown, defaulting to 1000 [ 272.577063][T12767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1669'. [ 272.579798][T12767] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1669'. [ 272.651391][T12766] can: request_module (can-proto-5) failed. [ 272.654829][T12766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1667'. [ 273.638420][T12801] 9pnet_virtio: no channels available for device syz [ 273.758539][T12806] 9pnet_fd: Insufficient options for proto=fd [ 273.938483][T12809] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=2835518976 (181473214464 ns) > initial count (126071742208 ns). Using initial count to start timer. [ 274.456989][T12826] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 274.461428][T12826] overlay: filesystem on ./bus not supported as upperdir [ 275.159017][ T1321] kernel write not supported for file [eventfd] (pid: 1321 comm: kworker/1:2) [ 275.444793][T12847] xt_time: unknown flags 0xf0 [ 275.546827][T12858] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1694'. [ 276.247414][T12867] netlink: 'syz.2.1696': attribute type 10 has an invalid length. [ 276.250446][T12867] bond0: (slave wlan1): Opening slave failed [ 276.323749][T12872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1698'. [ 276.336892][T12872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1698'. [ 276.341063][T12872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1698'. [ 276.467165][T12888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1702'. [ 276.699634][T12896] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.702098][T12896] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.704722][T12896] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.707100][T12896] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.709693][T12896] vxlan1: entered promiscuous mode [ 276.711355][T12896] vxlan1: entered allmulticast mode [ 276.717416][T12896] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.720039][T12896] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.722487][T12896] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.725162][T12896] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.475101][T12907] vlan2: entered allmulticast mode [ 277.476683][T12907] bridge_slave_0: entered allmulticast mode [ 277.481470][T12907] bridge_slave_0: left allmulticast mode [ 278.124006][T12921] bond_slave_0: entered allmulticast mode [ 278.125731][T12924] xt_connbytes: Forcing CT accounting to be enabled [ 278.125753][T12924] xt_CT: You must specify a L4 protocol and not use inversions on it [ 279.226272][T12983] fuse: Bad value for 'user_id' [ 279.227898][T12983] fuse: Bad value for 'user_id' [ 279.485209][T12991] openvswitch: netlink: Missing key (keys=40, expected=100) [ 279.637060][T13005] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 280.128668][T13012] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1735'. [ 280.234849][T13016] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1737'. [ 280.590601][T13027] /dev/sr0: Can't open blockdev [ 280.920495][T13066] can0: slcan on ttyS3. [ 281.613296][T13057] can0 (unregistered): slcan off ttyS3. [ 281.802615][T13084] [U] 4RZ*Hݗ$4T[BZ`RX>M=`X4VX~@/0ЋŮV•!̵Qօ+DMHQ`:,"?T [ 281.806692][T13084] [U] ODF0\8Ɇ [ 281.811254][T13084] [U] SDTEҝ}%,;ƅ¯Bͯ/WUSΉ` [ 281.816366][T13084] [U] T)'SNC4 +P.C [ 281.823172][T13084] [U] UO ߗŧ,L1;LKUV7XQ%#S\D .Ē_3 [ 281.826234][T13084] [U] }-![C%QJ8| [ 281.828641][T13084] [U] 40Ğً,Ȣ^-A [ 281.836021][T13084] [U] CL\ȂR6}C_T/VNAI-[˧\^NX> Q%R0ϤN X [ 281.847585][T13084] [U] Hߙʧ2Z|"תH*Q"PԐ\U6O$=ZȅͲEMQI±.T6ʌ̞SRHIRJԴ_BT!BǬ8 FBB {>ܛEA3GRR4POOʅG\-CWZ~= 4RSP?և>HG 8[)!U0BĐݠUԼ! [ 281.864286][T13084] [U] NXFΔé6:G'`LW_.UԠA}\PQS̝9{G;5\ZE&ʵ̡ [ 281.943214][T13084] [U] MCו5ęR|[+<ZHB@W0DIB?6M{ص(O^D# $Qɠ%+]K&NC15ğՃ2OG$F 6J‡-K<<^?? *+?:!֛˩QIՐ +T.Yπ GI[Dܕ$9 [ 281.953002][T13084] [U] DJ?F44E#~{U [ 281.955194][T13084] [U] ر5/6L_[ C*'ˊ˗RAҝJ|MZ&LC҂Z'1 [ 282.020074][T13084] [U] F{ˏEEϠ`B) [ 282.023152][T13084] [U] KC-,IOGCI [ 282.025690][T13084] [U] ڎ#SGI>DAN4ϙ [ 282.030596][T13084] [U] PBXKӜEPAQGRC.K(Iܗ-G0SوA[$_&Z=(60ϴXK\ԛ T&"݊ǃ0RWB [ 282.044386][T13083] [U] T V4PL,7I+DZF=FT [ 282.127637][T13099] netlink: 'syz.2.1758': attribute type 8 has an invalid length. [ 282.206705][T13101] netlink: 187320 bytes leftover after parsing attributes in process `syz.1.1757'. [ 282.209485][T13101] netlink: zone id is out of range [ 282.211022][T13101] netlink: zone id is out of range [ 282.294259][T13111] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 282.294644][T13101] IPVS: stopping backup sync thread 13111 ... [ 282.575933][T13123] fuse: Bad value for 'rootmode' [ 282.876603][ T39] audit: type=1326 audit(1740498880.712:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13126 comm="syz.2.1764" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 282.887451][ T39] audit: type=1326 audit(1740498880.712:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13126 comm="syz.2.1764" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 282.893765][ T39] audit: type=1326 audit(1740498880.722:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13126 comm="syz.2.1764" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 282.899922][ T39] audit: type=1326 audit(1740498880.722:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13126 comm="syz.2.1764" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 282.906424][ T39] audit: type=1326 audit(1740498880.722:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13126 comm="syz.2.1764" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 282.912525][ T39] audit: type=1326 audit(1740498880.722:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13126 comm="syz.2.1764" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 282.919023][ T39] audit: type=1326 audit(1740498880.722:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13126 comm="syz.2.1764" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 282.925429][ T39] audit: type=1326 audit(1740498880.722:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13126 comm="syz.2.1764" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 282.931842][ T39] audit: type=1326 audit(1740498880.722:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13126 comm="syz.2.1764" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 282.938570][ T39] audit: type=1326 audit(1740498880.722:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13126 comm="syz.2.1764" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 282.940114][T13127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1764'. [ 283.390254][T13135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1766'. [ 283.511010][T13142] input: syz1 as /devices/virtual/input/input21 [ 283.587999][T13150] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 283.772281][T13159] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 283.774281][T13159] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 283.775278][T13158] xt_hashlimit: invalid rate [ 283.777661][T13159] vhci_hcd vhci_hcd.0: Device attached [ 283.784010][T13160] usbip_core: unknown command [ 283.785472][T13160] vhci_hcd: unknown pdu 524288 [ 283.786920][T13160] usbip_core: unknown command [ 283.789488][ T7274] vhci_hcd: stop threads [ 283.790814][ T7274] vhci_hcd: release socket [ 283.792135][ T7274] vhci_hcd: disconnect device [ 283.910273][T13171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1777'. [ 284.257716][T13180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1780'. [ 284.260894][T13180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1780'. [ 284.567735][T13191] netlink: 'syz.0.1783': attribute type 4 has an invalid length. [ 284.570122][T13191] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1783'. [ 284.584816][T13191] : renamed from bond0 (while UP) [ 284.617877][T13193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1784'. [ 284.621088][T13193] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1784'. [ 285.021641][T13218] sp0: Synchronizing with TNC [ 285.487492][T13229] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1793'. [ 285.491386][T13229] tipc: Enabling of bearer rejected, failed to enable media [ 285.759568][T13244] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 285.764655][T13245] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 285.818573][T13251] netlink: 'syz.0.1796': attribute type 1 has an invalid length. [ 286.122028][T13283] : entered promiscuous mode [ 286.123866][T13273] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 286.126051][T13273] IPv6: NLM_F_CREATE should be set when creating new route [ 286.129070][T13282] netlink: 'syz.0.1806': attribute type 3 has an invalid length. [ 286.169216][T13285] lo speed is unknown, defaulting to 1000 [ 286.171395][T13285] wg1 speed is unknown, defaulting to 1000 [ 286.306477][T13297] [U] v3f"S/4:XTzWtlW= [ 286.308291][T13297] [U] J"e:" [ 286.387202][T13305] 9pnet_virtio: no channels available for device syz [ 286.513825][T13316] netlink: 'syz.0.1817': attribute type 7 has an invalid length. [ 286.924574][T13331] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 286.926886][T13331] tipc: Enabled bearer , priority 10 [ 286.967459][ T35] kernel read not supported for file /dsp1 (pid: 35 comm: kworker/3:0) [ 287.063432][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 287.102369][T13337] all (unregistering): Released all slaves [ 287.245233][T13341] netlink: 'syz.2.1824': attribute type 1 has an invalid length. [ 287.253185][T13341] 8021q: adding VLAN 0 to HW filter on device bond2 [ 287.260149][T13341] vlan2: entered promiscuous mode [ 287.262178][T13341] bond2: entered promiscuous mode [ 287.268797][T13341] bond2: left promiscuous mode [ 287.322552][T13347] /dev/nullb0: Can't open blockdev [ 287.332864][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 287.388587][T13352] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1827'. [ 287.391248][T13352] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1827'. [ 287.862827][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 288.356117][T13378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1833'. [ 288.358740][T13378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1833'. [ 288.364244][T13378] geneve4: entered promiscuous mode [ 288.365820][T13378] geneve4: entered allmulticast mode [ 288.375825][T13376] 9pnet_fd: Insufficient options for proto=fd [ 288.566672][T13386] lo speed is unknown, defaulting to 1000 [ 288.568842][T13386] wg1 speed is unknown, defaulting to 1000 [ 288.630227][ T39] kauditd_printk_skb: 90 callbacks suppressed [ 288.630238][ T39] audit: type=1326 audit(1740498886.462:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13390 comm="syz.1.1838" exe="/syz-executor" sig=9 arch=40000003 syscall=172 compat=1 ip=0xf7f95579 code=0x0 [ 288.810851][T13405] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 288.952879][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 289.012825][ T1321] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 289.162823][ T1321] usb 6-1: Using ep0 maxpacket: 8 [ 289.232815][ T1321] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 289.235348][ T1321] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 289.238596][ T1321] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 289.262814][ T1321] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 289.265694][ T1321] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 289.269383][ T1321] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 289.271968][ T1321] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.514440][ T1321] usb 6-1: usb_control_msg returned -32 [ 289.516116][ T1321] usbtmc 6-1:16.0: can't read capabilities [ 289.519573][ T1321] usb 6-1: USB disconnect, device number 45 [ 289.717283][T13433] Cannot find add_set index 0 as target [ 289.733291][ T63] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 289.892881][ T63] usb 5-1: Using ep0 maxpacket: 8 [ 289.896187][ T63] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 289.899061][ T63] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 289.901889][ T63] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 289.905137][ T63] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 289.909093][ T63] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 289.911703][ T63] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.982856][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 290.280906][ T63] usb 5-1: usb_control_msg returned -71 [ 290.282641][ T63] usbtmc 5-1:16.0: can't read capabilities [ 290.291663][ T63] usb 5-1: USB disconnect, device number 25 [ 290.536537][T13445] kAFS: No cell specified [ 291.032865][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 291.266854][T13460] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 291.565101][T13465] can0: slcan on ttyS3. [ 291.728316][T13465] can0 (unregistered): slcan off ttyS3. [ 291.975266][T13483] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1863'. [ 291.977934][T13483] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1863'. [ 291.985304][T13483] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1863'. [ 292.062922][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 292.217313][T13492] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1865'. [ 292.886505][T13502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1868'. [ 293.102868][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 293.269969][T13506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1869'. [ 293.274884][T13506] netlink: 177 bytes leftover after parsing attributes in process `syz.3.1869'. [ 293.432119][T13514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1871'. [ 293.598615][T13518] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1873'. [ 294.041328][ T9] IPVS: starting estimator thread 0... [ 294.142847][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 294.142965][T13537] IPVS: using max 37 ests per chain, 88800 per kthread [ 294.184422][T13540] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1878'. [ 294.707221][T13561] block nbd2: Unsupported socket: shutdown callout must be supported. [ 294.725834][T13561] syz.2.1884: attempt to access beyond end of device [ 294.725834][T13561] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 294.729465][T13561] syz.2.1884: attempt to access beyond end of device [ 294.729465][T13561] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 294.736001][T13561] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 294.739970][T13561] syz.2.1884: attempt to access beyond end of device [ 294.739970][T13561] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 294.751615][T13561] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 294.757873][T13561] syz.2.1884: attempt to access beyond end of device [ 294.757873][T13561] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 294.761642][T13561] syz.2.1884: attempt to access beyond end of device [ 294.761642][T13561] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 294.765747][T13561] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 294.768738][T13561] syz.2.1884: attempt to access beyond end of device [ 294.768738][T13561] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 294.772922][T13561] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 294.775951][T13561] syz.2.1884: attempt to access beyond end of device [ 294.775951][T13561] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 294.781895][T13561] syz.2.1884: attempt to access beyond end of device [ 294.781895][T13561] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 294.785838][T13561] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 294.789152][T13561] syz.2.1884: attempt to access beyond end of device [ 294.789152][T13561] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 294.793623][T13561] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 294.796427][T13561] syz.2.1884: attempt to access beyond end of device [ 294.796427][T13561] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 294.800832][T13561] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 294.804096][T13561] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 294.806782][T13561] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 294.941547][T13563] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1885'. [ 294.946302][T13563] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1885'. [ 295.192812][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 295.774346][T13563] ip6gretap0: entered promiscuous mode [ 295.777343][T13563] erspan0: entered promiscuous mode [ 295.781544][T13563] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 295.784741][T13563] hsr1: Slave B (erspan0) is not up; please bring it up to get a fully working HSR network [ 295.899240][T13580] random: crng reseeded on system resumption [ 295.973971][ T7989] hid (null): global environment stack underflow [ 295.976471][ T7989] hid (null): bogus close delimiter [ 295.982257][ T7989] hid-generic 00BD:0004:0800.0005: unknown main item tag 0x0 [ 295.992908][ T7989] hid-generic 00BD:0004:0800.0005: global environment stack underflow [ 295.995339][ T7989] hid-generic 00BD:0004:0800.0005: item 0 4 1 11 parsing failed [ 295.997784][ T7989] hid-generic 00BD:0004:0800.0005: probe with driver hid-generic failed with error -22 [ 296.222832][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 296.244034][ T39] audit: type=1326 audit(1740498894.082:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13594 comm="syz.2.1895" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 296.353138][ T39] audit: type=1326 audit(1740498894.082:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13594 comm="syz.2.1895" exe="/syz-executor" sig=0 arch=40000003 syscall=122 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 296.359428][ T39] audit: type=1326 audit(1740498894.082:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13594 comm="syz.2.1895" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 296.365948][ T39] audit: type=1326 audit(1740498894.082:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13594 comm="syz.2.1895" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 296.373328][ T39] audit: type=1326 audit(1740498894.082:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13594 comm="syz.2.1895" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 296.381396][ T39] audit: type=1326 audit(1740498894.082:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13594 comm="syz.2.1895" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 296.387782][ T39] audit: type=1326 audit(1740498894.082:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13594 comm="syz.2.1895" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 296.394020][ T39] audit: type=1326 audit(1740498894.082:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13594 comm="syz.2.1895" exe="/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 296.400145][ T39] audit: type=1326 audit(1740498894.082:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13594 comm="syz.2.1895" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 296.407289][ T39] audit: type=1326 audit(1740498894.082:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13594 comm="syz.2.1895" exe="/syz-executor" sig=0 arch=40000003 syscall=308 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 296.620725][T13600] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 297.005660][T13610] netlink: 'syz.1.1897': attribute type 2 has an invalid length. [ 297.007923][T13610] netlink: 'syz.1.1897': attribute type 1 has an invalid length. [ 297.010172][T13610] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.1897'. [ 297.012928][T13610] nbd: couldn't find device at index 1568768 [ 297.262787][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 297.539442][ T1321] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 297.683011][ T1321] usb 7-1: Using ep0 maxpacket: 8 [ 297.688545][ T1321] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.692550][ T1321] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 297.696732][ T1321] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.700562][ T1321] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 297.703742][ T1321] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.712338][ T1321] hub 7-1:1.0: bad descriptor, ignoring hub [ 297.716002][ T1321] hub 7-1:1.0: probe with driver hub failed with error -5 [ 297.719341][ T1321] cdc_wdm 7-1:1.0: skipping garbage [ 297.721562][ T1321] cdc_wdm 7-1:1.0: skipping garbage [ 297.724382][ T1321] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 297.903423][T13640] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1905'. [ 298.094947][ T5983] usb 7-1: USB disconnect, device number 42 [ 298.302811][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 298.372869][ T1321] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 298.523852][ T1321] usb 7-1: Using ep0 maxpacket: 8 [ 298.526800][ T1321] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.529884][ T1321] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 298.532547][ T1321] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.536713][ T1321] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 298.539765][ T1321] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.544545][ T1321] hub 7-1:1.0: bad descriptor, ignoring hub [ 298.546448][ T1321] hub 7-1:1.0: probe with driver hub failed with error -5 [ 298.548941][ T1321] cdc_wdm 7-1:1.0: skipping garbage [ 298.550525][ T1321] cdc_wdm 7-1:1.0: skipping garbage [ 298.552069][ T1321] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 298.578888][T13654] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1909'. [ 298.611043][T13660] netlink: 'syz.1.1911': attribute type 1 has an invalid length. [ 298.635144][T13663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1911'. [ 298.647511][T13663] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 298.655403][T13663] bond3: (slave batadv2): Enslaving as a backup interface with an up link [ 298.668019][T13663] bond3 (unregistering): (slave batadv2): Releasing backup interface [ 298.672109][T13663] bond3 (unregistering): Released all slaves [ 299.342778][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 299.620386][ T7989] usb 7-1: USB disconnect, device number 43 [ 299.766408][T13677] vlan0: entered promiscuous mode [ 299.778331][T13684] overlay: Unknown parameter 'seclabel' [ 299.979680][T13689] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 300.383347][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 300.386962][ T1321] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 300.455624][T13710] sp0: Synchronizing with TNC [ 300.463218][T13710] ip6t_rpfilter: unknown options [ 300.470216][T13710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1925'. [ 300.542969][ T1321] usb 7-1: Using ep0 maxpacket: 8 [ 300.550496][ T1321] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 300.553784][ T1321] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 300.556413][ T1321] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 300.559533][ T1321] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 300.562875][ T1321] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 300.565498][ T1321] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.571788][ T1321] hub 7-1:1.0: bad descriptor, ignoring hub [ 300.573824][ T1321] hub 7-1:1.0: probe with driver hub failed with error -5 [ 300.576257][ T1321] cdc_wdm 7-1:1.0: skipping garbage [ 300.577699][ T1321] cdc_wdm 7-1:1.0: skipping garbage [ 300.580635][ T1321] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 300.582382][ T1321] cdc_wdm 7-1:1.0: Unknown control protocol [ 300.596903][T13712] tmpfs: Bad value for 'mpol' [ 300.942895][ T1015] usb 7-1: USB disconnect, device number 44 [ 301.332929][ T1015] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 301.432783][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 301.503107][ T1015] usb 7-1: Using ep0 maxpacket: 8 [ 301.506649][ T1015] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.509637][ T1015] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 301.512310][ T1015] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 301.516003][ T1015] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 301.520378][ T1015] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 301.523242][ T1015] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.569051][ T1015] hub 7-1:1.0: bad descriptor, ignoring hub [ 301.571471][ T1015] hub 7-1:1.0: probe with driver hub failed with error -5 [ 301.582343][ T1015] cdc_wdm 7-1:1.0: skipping garbage [ 301.584199][ T1015] cdc_wdm 7-1:1.0: skipping garbage [ 301.587150][ T1015] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 301.588982][ T1015] cdc_wdm 7-1:1.0: Unknown control protocol [ 301.673977][T13739] netlink: 'syz.0.1933': attribute type 1 has an invalid length. [ 301.676217][T13739] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1933'. [ 301.703948][T13740] random: crng reseeded on system resumption [ 301.756054][T13740] lo speed is unknown, defaulting to 1000 [ 301.759611][T13740] wg1 speed is unknown, defaulting to 1000 [ 301.819118][T13743] netlink: 'syz.0.1934': attribute type 11 has an invalid length. [ 301.889413][T13746] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1935'. [ 301.903148][ T35] usb 7-1: USB disconnect, device number 45 [ 301.938902][T13748] tipc: Failed to remove unknown binding: 66,1,1/0:1341167660/1341167662 [ 301.941112][T13748] tipc: Failed to remove unknown binding: 66,1,1/0:1341167660/1341167662 [ 302.061005][T13752] 9pnet_virtio: no channels available for device syz [ 302.462785][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 302.985423][ T39] kauditd_printk_skb: 25 callbacks suppressed [ 302.985437][ T39] audit: type=1326 audit(1740498900.822:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13772 comm="syz.1.1943" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7fc00000 [ 303.034928][T13780] Driver unsupported XDP return value 0 on prog (id 361) dev N/A, expect packet loss! [ 303.502823][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 303.606337][ T39] audit: type=1326 audit(1740498901.442:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13772 comm="syz.1.1943" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f95579 code=0x7fc00000 [ 304.114913][ T5950] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 304.120943][ T5950] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 304.125855][ T5950] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 304.131232][ T5950] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 304.134054][ T5950] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 304.136494][ T5950] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 304.159896][T13823] lo speed is unknown, defaulting to 1000 [ 304.161977][T13823] wg1 speed is unknown, defaulting to 1000 [ 304.279649][ T39] audit: type=1326 audit(1740498902.112:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13831 comm="syz.2.1960" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 304.286692][ T39] audit: type=1326 audit(1740498902.112:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13831 comm="syz.2.1960" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 304.286970][ T7731] syz_tun (unregistering): left allmulticast mode [ 304.292450][ T39] audit: type=1326 audit(1740498902.122:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13831 comm="syz.2.1960" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 304.292472][ T39] audit: type=1326 audit(1740498902.122:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13831 comm="syz.2.1960" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 304.302890][ T5950] Bluetooth: hci3: command 0x0405 tx timeout [ 304.308172][ T39] audit: type=1326 audit(1740498902.122:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13831 comm="syz.2.1960" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 304.317162][ T39] audit: type=1326 audit(1740498902.122:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13831 comm="syz.2.1960" exe="/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 304.446382][T13837] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1960'. [ 304.451057][T13823] chnl_net:caif_netlink_parms(): no params data found [ 304.511828][T13823] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.519455][T13823] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.521541][T13823] bridge_slave_0: entered allmulticast mode [ 304.524024][T13823] bridge_slave_0: entered promiscuous mode [ 304.542863][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 304.546168][ T7281] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.553670][T13823] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.557001][T13823] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.559042][T13823] bridge_slave_1: entered allmulticast mode [ 304.561147][T13823] bridge_slave_1: entered promiscuous mode [ 304.580780][T13823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.586410][T13823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.612624][T13823] team0: Port device team_slave_0 added [ 304.617004][ T7281] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.622838][T13823] team0: Port device team_slave_1 added [ 304.654815][T13823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.657570][T13823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.664906][T13823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.669710][T13823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.671746][T13823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.680022][T13823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.685464][ T7281] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.713359][T13823] hsr_slave_0: entered promiscuous mode [ 304.715718][T13823] hsr_slave_1: entered promiscuous mode [ 304.717769][T13823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.719882][T13823] Cannot create hsr debugfs directory [ 304.735674][ T7281] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.740016][T13844] overlayfs: missing 'lowerdir' [ 304.747075][T13844] overlayfs: failed to resolve './file1': -2 [ 304.749188][T13845] overlayfs: failed to resolve './file1': -2 [ 305.125437][ T7281] bond0 (unregistering): (slave gretap1): Releasing active interface [ 305.464410][ T7281] bond0 (unregistering): Released all slaves [ 305.567037][ T7281] bond1 (unregistering): Released all slaves [ 305.572864][ T7281] bond2 (unregistering): (slave bond3): Releasing active interface [ 305.575809][ T7281] bond2 (unregistering): Released all slaves [ 305.592924][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 305.679024][ T7281] bond3 (unregistering): Released all slaves [ 305.685525][ T7281] bond4 (unregistering): Released all slaves [ 305.692498][ T7281] bond5 (unregistering): Released all slaves [ 305.874721][ T63] wg1 speed is unknown, defaulting to 1000 [ 305.874808][ T7281] tipc: Left network mode [ 305.887799][ T7281] IPVS: stopping master sync thread 8930 ... [ 306.184535][T13883] bio_check_eod: 2 callbacks suppressed [ 306.184547][T13883] syz.1.1972: attempt to access beyond end of device [ 306.184547][T13883] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 306.191067][T13883] MINIX-fs: unable to read superblock [ 306.210764][ T7281] hsr_slave_0: left promiscuous mode [ 306.213258][ T7281] hsr_slave_1: left promiscuous mode [ 306.215259][ T7281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.217479][ T7281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.220388][ T7281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.222643][ T7281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.222978][ T67] Bluetooth: hci4: command tx timeout [ 306.260340][ T7281] veth1_macvtap: left promiscuous mode [ 306.262496][ T7281] veth0_macvtap: left promiscuous mode [ 306.266259][ T7281] veth1_vlan: left promiscuous mode [ 306.268701][ T7281] veth0_vlan: left promiscuous mode [ 306.433416][ T7281] pim6reg (unregistering): left allmulticast mode [ 306.622798][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 306.663008][T13884] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 307.663711][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 308.092438][T13898] tipc: Enabling of bearer rejected, failed to enable media [ 308.128925][T13901] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1978'. [ 308.131592][T13901] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1978'. [ 308.142362][T13903] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1978'. [ 308.146616][T13903] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1978'. [ 308.175201][T13823] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 308.178688][T13823] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 308.180553][T13906] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1979'. [ 308.184985][T13823] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 308.195294][T13823] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 308.240754][T13823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.287970][T13823] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.304502][ T67] Bluetooth: hci4: command tx timeout [ 308.306940][ T7269] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.308943][ T7269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.311683][ T7269] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.313793][ T7269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.340591][T13916] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 308.374708][T13911] /dev/sr0: Can't open blockdev [ 308.448985][T13823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.498785][T13823] veth0_vlan: entered promiscuous mode [ 308.510563][T13823] veth1_vlan: entered promiscuous mode [ 308.524385][T13823] veth0_macvtap: entered promiscuous mode [ 308.527530][T13823] veth1_macvtap: entered promiscuous mode [ 308.537593][T13823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.542432][T13823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.547141][T13823] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.550410][T13823] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.553888][T13823] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.557063][T13823] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.668402][ T7274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.672796][ T7274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.697398][ T7285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.699713][ T7285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.702927][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 308.732911][ T64] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 308.888412][T13928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1956'. [ 308.915388][ T64] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 308.932530][ T5950] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 308.939590][ T5950] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 308.943076][ T64] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 308.946484][ T64] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 308.946559][ T5950] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 308.951501][ T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.970691][ T5950] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 308.971795][ T7281] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.972068][T13923] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 308.975456][ T5950] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 308.975953][ T64] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 308.995239][ T5950] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 309.042126][T13929] lo speed is unknown, defaulting to 1000 [ 309.106259][ T7281] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.193564][ T7281] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.243934][ T5983] usb 5-1: USB disconnect, device number 26 [ 309.252132][T13929] chnl_net:caif_netlink_parms(): no params data found [ 309.384068][T13929] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.389435][T13929] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.392393][T13929] bridge_slave_0: entered allmulticast mode [ 309.395118][T13929] bridge_slave_0: entered promiscuous mode [ 309.403211][T13929] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.405838][T13929] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.408064][T13929] bridge_slave_1: entered allmulticast mode [ 309.410430][T13929] bridge_slave_1: entered promiscuous mode [ 309.443344][T13929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.447405][T13929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.473922][ T7281] team0: left allmulticast mode [ 309.475437][ T7281] team_slave_0: left allmulticast mode [ 309.477343][ T7281] team_slave_1: left allmulticast mode [ 309.481909][ T7281] bridge0: port 1(team0) entered disabled state [ 309.486652][ T7281] bridge_slave_1: left allmulticast mode [ 309.488374][ T7281] bridge_slave_1: left promiscuous mode [ 309.490175][ T7281] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.545676][ T7281] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 309.548828][ T7281] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 309.752776][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 309.900559][ T7281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.903438][ T7281] bond_slave_0: left promiscuous mode [ 309.908161][ T7281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.911683][ T7281] bond_slave_1: left promiscuous mode [ 309.916307][ T7281] bond0 (unregistering): Released all slaves [ 310.075699][ T7281] bond1 (unregistering): Released all slaves [ 310.086012][ T7281] bond2 (unregistering): (slave batadv0): Releasing backup interface [ 310.091213][ T7281] bond2 (unregistering): Released all slaves [ 310.137129][T13929] team0: Port device team_slave_0 added [ 310.148667][T13929] team0: Port device team_slave_1 added [ 310.235939][T13929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.238022][T13929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.246494][T13929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.250928][T13929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.253021][T13929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.260866][T13929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.321733][T13929] hsr_slave_0: entered promiscuous mode [ 310.324078][T13929] hsr_slave_1: entered promiscuous mode [ 310.326138][T13929] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.328353][T13929] Cannot create hsr debugfs directory [ 310.384060][ T5950] Bluetooth: hci4: command tx timeout [ 310.407873][ T7281] hsr_slave_0: left promiscuous mode [ 310.409986][ T7281] hsr_slave_1: left promiscuous mode [ 310.428600][ T7281] veth1_vlan: left promiscuous mode [ 310.430309][ T7281] veth0_vlan: left promiscuous mode [ 310.521046][ T7281] pimreg (unregistering): left allmulticast mode [ 310.778984][T13962] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 310.783225][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 311.033539][ T5950] Bluetooth: hci0: command tx timeout [ 311.054110][T13981] kexec: Could not allocate control_code_buffer [ 311.392772][ T7281] team0 (unregistering): Port device team_slave_1 removed [ 311.521892][ T7281] team0 (unregistering): Port device team_slave_0 removed [ 311.832789][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 312.238041][T14012] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2005'. [ 312.375371][ C0] vkms_vblank_simulate: vblank timer overrun [ 312.463199][ T5950] Bluetooth: hci4: command tx timeout [ 312.521101][T14021] 9pnet_fd: Insufficient options for proto=fd [ 312.665315][T14021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2003'. [ 312.714832][T13929] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 312.743340][T13929] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 312.755993][T13929] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 312.773170][T13929] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 312.816561][T13929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.828356][T13929] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.835259][ T7274] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.837326][ T7274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.848341][ T7280] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.850679][ T7280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.862989][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 312.882298][T13929] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 312.887488][T13929] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 312.971360][T13929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.000589][T13929] veth0_vlan: entered promiscuous mode [ 313.006640][T13929] veth1_vlan: entered promiscuous mode [ 313.034104][T13929] veth0_macvtap: entered promiscuous mode [ 313.039669][T13929] veth1_macvtap: entered promiscuous mode [ 313.049115][T13929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.056770][T13929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.057715][T13929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.062314][T13929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.062330][T13929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.063136][T13929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.065016][T13929] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.065046][T13929] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.065070][T13929] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.065093][T13929] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.102848][ T5950] Bluetooth: hci0: command tx timeout [ 313.129638][ T7269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.131994][ T7269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.148029][ T7281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.150550][ T7281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.231940][T14036] netlink: 'syz.2.2008': attribute type 1 has an invalid length. [ 313.282671][T14044] ufs: Invalid option: "grpquota" or missing value [ 313.286657][T14044] ufs: wrong mount options [ 313.849025][T14049] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 313.912767][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 314.145125][ T39] audit: type=1326 audit(1740498911.982:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14062 comm="syz.0.2018" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf747e579 code=0x0 [ 314.212384][T14064] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 314.220166][T14066] netlink: 18 bytes leftover after parsing attributes in process `syz.3.2019'. [ 314.223664][T14066] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2019'. [ 314.284016][T14070] dlm: plock device version mismatch: kernel (1.2.0), user (2147487449.0.0) [ 314.347358][T14069] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 314.632671][T14081] 9pnet_fd: Insufficient options for proto=fd [ 314.638208][T14079] nftables ruleset with unbound set [ 314.952826][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 315.095983][T14083] vlan2: entered promiscuous mode [ 315.156936][T14083] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 315.321088][T14094] tmpfs: Bad value for 'mpol' [ 315.377289][ T25] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 315.407048][ T7281] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.476295][T14099] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 315.479721][T14099] overlayfs: overlapping lowerdir path [ 315.522823][ T25] usb 5-1: device descriptor read/64, error -71 [ 315.609031][ T67] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 315.616927][ T67] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 315.619781][ T67] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 315.623392][ T67] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 315.625971][ T67] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 315.628221][ T67] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 315.641233][T14101] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 315.656183][T14102] lo speed is unknown, defaulting to 1000 [ 315.714905][T14102] chnl_net:caif_netlink_parms(): no params data found [ 315.763842][ T25] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 315.769993][T14102] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.772220][T14102] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.775404][T14102] bridge_slave_0: entered allmulticast mode [ 315.778101][T14102] bridge_slave_0: entered promiscuous mode [ 315.780920][T14102] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.783507][T14102] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.785754][T14102] bridge_slave_1: entered allmulticast mode [ 315.787990][T14102] bridge_slave_1: entered promiscuous mode [ 315.813448][T14102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.817333][T14102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.843271][T14102] team0: Port device team_slave_0 added [ 315.846917][T14102] team0: Port device team_slave_1 added [ 315.868216][T14102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.871212][T14102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.879727][T14102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.884917][T14102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.886972][T14102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.892922][ T25] usb 5-1: device descriptor read/64, error -71 [ 315.896244][T14102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.931487][T14102] hsr_slave_0: entered promiscuous mode [ 315.933584][T14102] hsr_slave_1: entered promiscuous mode [ 315.935476][T14102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 315.937596][T14102] Cannot create hsr debugfs directory [ 315.992805][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 316.003901][ T25] usb usb5-port1: attempt power cycle [ 316.152510][T14111] netlink: 1028 bytes leftover after parsing attributes in process `syz.2.2028'. [ 316.342870][ T25] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 316.363332][ T25] usb 5-1: device descriptor read/8, error -71 [ 316.612884][ T25] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 316.644636][ T25] usb 5-1: device descriptor read/8, error -71 [ 316.756874][ T25] usb usb5-port1: unable to enumerate USB device [ 317.022785][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 317.072885][ T7281] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.134666][ T7281] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.197752][ T7281] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.304155][ T7281] bridge_slave_1: left allmulticast mode [ 317.305872][ T7281] bridge_slave_1: left promiscuous mode [ 317.307712][ T7281] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.313332][ T7281] bridge_slave_0: left allmulticast mode [ 317.315014][ T7281] bridge_slave_0: left promiscuous mode [ 317.316705][ T7281] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.445085][T14141] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 317.456533][ T5950] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 317.655716][ T7281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.662853][ T5950] Bluetooth: hci0: command tx timeout [ 317.694508][ T7281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.698451][ T7281] bond0 (unregistering): Released all slaves [ 317.894712][T14147] netlink: 'syz.3.2038': attribute type 10 has an invalid length. [ 317.947085][T14147] team0: Port device netdevsim0 added [ 317.960042][T14147] netlink: 'syz.3.2038': attribute type 10 has an invalid length. [ 317.979904][T14147] team0: Port device netdevsim0 removed [ 317.987518][T14147] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 318.072766][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 318.184765][ T7281] hsr_slave_0: left promiscuous mode [ 318.187605][ T7281] hsr_slave_1: left promiscuous mode [ 318.190264][ T7281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.194316][ T7281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.197170][ T7281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.199655][ T7281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.307750][ T7281] veth1_macvtap: left promiscuous mode [ 318.312617][ T7281] veth0_macvtap: left promiscuous mode [ 318.317010][ T7281] veth1_vlan: left promiscuous mode [ 318.323638][ T7281] veth0_vlan: left promiscuous mode [ 318.631335][T14171] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2044'. [ 319.112773][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 319.715939][ T7281] team0 (unregistering): Port device team_slave_1 removed [ 319.742910][ T5950] Bluetooth: hci0: command tx timeout [ 319.834147][ T7281] team0 (unregistering): Port device team_slave_0 removed [ 320.029483][T14181] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 320.142794][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 320.528004][T14161] lo speed is unknown, defaulting to 1000 [ 320.660660][T14102] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 320.664808][T14102] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 320.668054][T14102] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 320.671181][T14187] netlink: 'syz.2.2049': attribute type 1 has an invalid length. [ 320.671279][T14102] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 320.689485][T14187] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 320.777153][T14102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.821289][T14102] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.825766][ T7277] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.827857][ T7277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.832308][ T7274] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.834777][ T7274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.951234][T14102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.077881][T14102] veth0_vlan: entered promiscuous mode [ 321.083252][T14102] veth1_vlan: entered promiscuous mode [ 321.098551][T14102] veth0_macvtap: entered promiscuous mode [ 321.105233][T14102] veth1_macvtap: entered promiscuous mode [ 321.106187][ T7989] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 321.124533][T14102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.132824][T14102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.143922][T14102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.155490][T14102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.158679][T14102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.165975][T14102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.172453][T14102] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.172480][T14219] input: syz0 as /devices/virtual/input/input24 [ 321.177237][T14102] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.182081][T14102] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.184374][ T39] audit: type=1326 audit(1740498919.012:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14218 comm="syz.3.2057" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 321.186131][T14102] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.193150][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 321.196671][ T39] audit: type=1326 audit(1740498919.012:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14218 comm="syz.3.2057" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 321.206716][ T39] audit: type=1326 audit(1740498919.032:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14218 comm="syz.3.2057" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 321.213656][ T39] audit: type=1326 audit(1740498919.032:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14218 comm="syz.3.2057" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 321.219886][ T39] audit: type=1326 audit(1740498919.032:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14218 comm="syz.3.2057" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 321.228779][ T39] audit: type=1326 audit(1740498919.032:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14218 comm="syz.3.2057" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 321.240366][ T39] audit: type=1326 audit(1740498919.032:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14218 comm="syz.3.2057" exe="/syz-executor" sig=0 arch=40000003 syscall=94 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 321.251199][ T39] audit: type=1326 audit(1740498919.032:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14218 comm="syz.3.2057" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 321.271792][ T7269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.277854][ T7269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.292478][ T7269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.295510][ T7269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.342819][ T7989] usb 7-1: Using ep0 maxpacket: 8 [ 321.353528][ T7989] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 321.356912][ T7989] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 321.359550][ T7989] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 321.363080][ T7989] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 321.366431][ T7989] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 321.369080][ T7989] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.371449][ T39] audit: type=1326 audit(1740498919.032:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14218 comm="syz.3.2057" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 321.382758][ T39] audit: type=1326 audit(1740498919.032:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14218 comm="syz.3.2057" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 321.396531][ T7989] hub 7-1:1.0: bad descriptor, ignoring hub [ 321.398653][ T7989] hub 7-1:1.0: probe with driver hub failed with error -5 [ 321.403025][ T7989] cdc_wdm 7-1:1.0: skipping garbage [ 321.404565][ T7989] cdc_wdm 7-1:1.0: skipping garbage [ 321.414494][ T7989] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 321.416703][ T7989] cdc_wdm 7-1:1.0: Unknown control protocol [ 321.543424][T14228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2059'. [ 321.546053][T14228] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2059'. [ 321.617064][T14229] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 321.654982][T14234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.658625][T14234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.746778][T14241] netlink: 'syz.0.2061': attribute type 4 has an invalid length. [ 321.783339][ T3230] usb 7-1: USB disconnect, device number 46 [ 321.786633][T14245] bridge_slave_1: entered allmulticast mode [ 321.927357][T14255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2064'. [ 321.930388][T14255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2064'. [ 322.009909][T14257] lo speed is unknown, defaulting to 1000 [ 322.038792][T14260] lo speed is unknown, defaulting to 1000 [ 322.190255][T14271] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 322.221564][T14273] netlink: 'syz.3.2070': attribute type 10 has an invalid length. [ 322.232989][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 322.234545][T14273] [ 322.236112][T14273] ====================================================== [ 322.238118][T14273] WARNING: possible circular locking dependency detected [ 322.240165][T14273] 6.14.0-rc4-syzkaller #0 Not tainted [ 322.241972][T14273] ------------------------------------------------------ [ 322.245838][T14273] syz.3.2070/14273 is trying to acquire lock: [ 322.247613][T14273] ffff8880123a8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_open+0x132/0x210 [ 322.250322][T14273] [ 322.250322][T14273] but task is already holding lock: [ 322.252458][T14273] ffff88804c2c0e00 (team->team_lock_key#5){+.+.}-{4:4}, at: team_add_slave+0x9c/0x2190 [ 322.255431][T14273] [ 322.255431][T14273] which lock already depends on the new lock. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 322.255431][T14273] [ 322.258505][T14273] [ 322.258505][T14273] the existing dependency chain (in reverse order) is: [ 322.261071][T14273] [ 322.261071][T14273] -> #3 (team->team_lock_key#5){+.+.}-{4:4}: [ 322.263426][T14273] __mutex_lock+0x19b/0xb10 [ 322.264896][T14273] team_set_mac_address+0x17f/0x290 [ 322.266722][T14273] dev_set_mac_address+0x301/0x4a0 [ 322.268366][T14273] dev_set_mac_address_user+0x30/0x50 [ 322.270153][T14273] do_setlink.constprop.0+0x7bf/0x3f80 [ 322.271916][T14273] rtnl_newlink+0x1306/0x1d60 [ 322.273555][T14273] rtnetlink_rcv_msg+0x95b/0xea0 [ 322.275518][T14273] netlink_rcv_skb+0x16b/0x440 [ 322.276991][T14273] netlink_unicast+0x53c/0x7f0 [ 322.278506][T14273] netlink_sendmsg+0x8b8/0xd70 [ 322.280076][T14273] __sys_sendto+0x488/0x4f0 [ 322.281578][T14273] __do_compat_sys_socketcall+0x5e2/0x700 [ 322.283420][T14273] __do_fast_syscall_32+0x73/0x120 [ 322.285066][T14273] do_fast_syscall_32+0x32/0x80 [ 322.286675][T14273] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 322.288676][T14273] [ 322.288676][T14273] -> #2 (dev_addr_sem){++++}-{4:4}: [ 322.290761][T14273] down_read+0x9a/0x330 [ 322.292112][T14273] address_show+0x23/0x2a0 [ 322.293532][T14273] dev_attr_show+0x53/0xe0 [ 322.294972][T14273] sysfs_kf_seq_show+0x23e/0x410 [ 322.296505][T14273] seq_read_iter+0x4f4/0x12b0 [ 322.298031][T14273] kernfs_fop_read_iter+0x414/0x580 [ 322.299647][T14273] vfs_read+0x886/0xbf0 [ 322.301048][T14273] ksys_read+0x12b/0x250 [ 322.302417][T14273] do_syscall_64+0xcd/0x250 [ 322.303878][T14273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.305832][T14273] [ 322.305832][T14273] -> #1 (kn->active#21){++++}-{0:0}: [ 322.308015][T14273] kernfs_drain+0x48f/0x590 [ 322.309522][T14273] __kernfs_remove+0x281/0x670 [ 322.311031][T14273] kernfs_remove_by_name_ns+0xb2/0x130 [ 322.312752][T14273] remove_files+0x96/0x1c0 [ 322.314245][T14273] sysfs_remove_group+0x8b/0x180 [ 322.315841][T14273] sysfs_remove_groups+0x60/0xa0 [ 322.317421][T14273] device_remove_attrs+0x204/0x290 [ 322.318961][T14273] device_del+0x38e/0x9f0 [ 322.320362][T14273] unregister_netdevice_many_notify+0x13aa/0x1f30 [ 322.322306][T14273] unregister_netdevice_queue+0x307/0x3f0 [ 322.324121][T14273] _cfg80211_unregister_wdev+0x64b/0x830 [ 322.325863][T14273] ieee80211_remove_interfaces+0x34f/0x720 [ 322.327639][T14273] ieee80211_unregister_hw+0x55/0x3a0 [ 322.329384][T14273] mac80211_hwsim_netlink_notify+0x2ec/0x8e0 [ 322.331337][T14273] notifier_call_chain+0xb7/0x410 [ 322.332999][T14273] blocking_notifier_call_chain+0x69/0xa0 [ 322.334845][T14273] netlink_release+0x1951/0x2130 [ 322.336438][T14273] __sock_release+0xb0/0x270 [ 322.337910][T14273] sock_close+0x1c/0x30 [ 322.339245][T14273] __fput+0x3ff/0xb70 [ 322.340517][T14273] __fput_sync+0xa1/0xc0 [ 322.341906][T14273] __ia32_sys_close+0x86/0x100 [ 322.343440][T14273] __do_fast_syscall_32+0x73/0x120 [ 322.345060][T14273] do_fast_syscall_32+0x32/0x80 [ 322.346596][T14273] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 322.348585][T14273] [ 322.348585][T14273] -> #0 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 322.351141][T14273] __lock_acquire+0x249e/0x3c40 [ 322.352748][T14273] lock_acquire.part.0+0x11b/0x380 [ 322.354337][T14273] __mutex_lock+0x19b/0xb10 [ 322.355761][T14273] ieee80211_open+0x132/0x210 [ 322.357200][T14273] __dev_open+0x2d4/0x540 [ 322.358555][T14273] dev_open+0xf4/0x160 [ 322.359853][T14273] team_add_slave+0xaf6/0x2190 [ 322.361390][T14273] do_set_master+0x1bc/0x230 [ 322.362955][T14273] do_setlink.constprop.0+0xb5b/0x3f80 [ 322.364695][T14273] rtnl_newlink+0x1306/0x1d60 [ 322.366245][T14273] rtnetlink_rcv_msg+0x95b/0xea0 [ 322.367842][T14273] netlink_rcv_skb+0x16b/0x440 [ 322.369412][T14273] netlink_unicast+0x53c/0x7f0 [ 322.370948][T14273] netlink_sendmsg+0x8b8/0xd70 [ 322.372709][T14273] ____sys_sendmsg+0xaaf/0xc90 [ 322.374314][T14273] ___sys_sendmsg+0x135/0x1e0 [ 322.375847][T14273] __sys_sendmsg+0x16e/0x220 [ 322.377373][T14273] __do_fast_syscall_32+0x73/0x120 [ 322.379026][T14273] do_fast_syscall_32+0x32/0x80 [ 322.380609][T14273] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 322.382826][T14273] [ 322.382826][T14273] other info that might help us debug this: [ 322.382826][T14273] [ 322.385805][T14273] Chain exists of: [ 322.385805][T14273] &rdev->wiphy.mtx --> dev_addr_sem --> team->team_lock_key#5 [ 322.385805][T14273] [ 322.389658][T14273] Possible unsafe locking scenario: [ 322.389658][T14273] [ 322.391828][T14273] CPU0 CPU1 [ 322.393414][T14273] ---- ---- [ 322.394941][T14273] lock(team->team_lock_key#5); [ 322.396314][T14273] lock(dev_addr_sem); [ 322.398408][T14273] lock(team->team_lock_key#5); [ 322.400533][T14273] lock(&rdev->wiphy.mtx); [ 322.401885][T14273] [ 322.401885][T14273] *** DEADLOCK *** [ 322.401885][T14273] [ 322.404362][T14273] 2 locks held by syz.3.2070/14273: [ 322.405880][T14273] #0: ffffffff8fef8ee8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x5d9/0x1d60 [ 322.408421][T14273] #1: ffff88804c2c0e00 (team->team_lock_key#5){+.+.}-{4:4}, at: team_add_slave+0x9c/0x2190 [ 322.411167][T14273] [ 322.411167][T14273] stack backtrace: [ 322.412741][T14273] CPU: 3 UID: 0 PID: 14273 Comm: syz.3.2070 Not tainted 6.14.0-rc4-syzkaller #0 [ 322.412754][T14273] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 322.412763][T14273] Call Trace: [ 322.412768][T14273] [ 322.412776][T14273] dump_stack_lvl+0x116/0x1f0 [ 322.412791][T14273] print_circular_bug+0x490/0x760 [ 322.412810][T14273] check_noncircular+0x31a/0x400 [ 322.412825][T14273] ? __pfx_check_noncircular+0x10/0x10 [ 322.412841][T14273] ? hlock_class+0x4e/0x130 [ 322.412853][T14273] ? lockdep_lock+0xc6/0x200 [ 322.412863][T14273] ? __pfx_lockdep_lock+0x10/0x10 [ 322.412874][T14273] __lock_acquire+0x249e/0x3c40 [ 322.412891][T14273] ? __pfx___lock_acquire+0x10/0x10 [ 322.412906][T14273] ? __pfx___lock_acquire+0x10/0x10 [ 322.412921][T14273] lock_acquire.part.0+0x11b/0x380 [ 322.412935][T14273] ? ieee80211_open+0x132/0x210 [ 322.412946][T14273] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 322.412959][T14273] ? rcu_is_watching+0x12/0xc0 [ 322.414546][T14273] ? trace_lock_acquire+0x14e/0x1f0 [ 322.414560][T14273] ? __pfx_lock_release+0x10/0x10 [ 322.414572][T14273] ? ieee80211_open+0x132/0x210 [ 322.414581][T14273] ? lock_acquire+0x2f/0xb0 [ 322.414596][T14273] ? ieee80211_open+0x132/0x210 [ 322.414606][T14273] __mutex_lock+0x19b/0xb10 [ 322.414619][T14273] ? ieee80211_open+0x132/0x210 [ 322.414629][T14273] ? ib_device_get_by_netdev+0x1c3/0x520 [ 322.414698][T14273] ? ieee80211_open+0x132/0x210 [ 322.414708][T14273] ? __pfx___mutex_lock+0x10/0x10 [ 322.414719][T14273] ? __pfx_vxlan_netdevice_event+0x10/0x10 [ 322.414736][T14273] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 322.414814][T14273] ? notifier_call_chain+0x36c/0x410 [ 322.414876][T14273] ? ieee80211_open+0x132/0x210 [ 322.414885][T14273] ieee80211_open+0x132/0x210 [ 322.414895][T14273] ? __pfx_ieee80211_open+0x10/0x10 [ 322.414905][T14273] __dev_open+0x2d4/0x540 [ 322.414917][T14273] ? ref_tracker_alloc+0x2ef/0x5b0 [ 322.414981][T14273] ? __pfx___dev_open+0x10/0x10 [ 322.414995][T14273] dev_open+0xf4/0x160 [ 322.415007][T14273] ? __pfx_dev_open+0x10/0x10 [ 322.415018][T14273] ? __kmalloc_noprof+0x23b/0x510 [ 322.415058][T14273] ? __pfx_netdev_has_upper_dev+0x10/0x10 [ 322.415075][T14273] team_add_slave+0xaf6/0x2190 [ 322.415087][T14273] ? __pfx_team_add_slave+0x10/0x10 [ 322.415096][T14273] ? __lock_acquire+0x15a9/0x3c40 [ 322.415112][T14273] ? __pfx_validate_linkmsg+0x10/0x10 [ 322.415129][T14273] ? __pfx_team_add_slave+0x10/0x10 [ 322.415138][T14273] do_set_master+0x1bc/0x230 [ 322.415150][T14273] do_setlink.constprop.0+0xb5b/0x3f80 [ 322.415164][T14273] ? vprintk_emit+0x39e/0x6f0 [ 322.415174][T14273] ? __pfx_vprintk_emit+0x10/0x10 [ 322.415185][T14273] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 322.415198][T14273] ? lock_acquire.part.0+0x11b/0x380 [ 322.415215][T14273] ? __mutex_trylock_common+0xea/0x250 [ 322.415231][T14273] ? __pfx___mutex_trylock_common+0x10/0x10 [ 322.415245][T14273] ? rtnl_newlink+0x5d9/0x1d60 [ 322.415257][T14273] ? rcu_is_watching+0x12/0xc0 [ 322.415267][T14273] ? trace_contention_end+0xee/0x140 [ 322.415281][T14273] ? __mutex_lock+0x1cc/0xb10 [ 322.415292][T14273] ? __pfx_aa_get_newest_label+0x10/0x10 [ 322.415357][T14273] ? rcu_is_watching+0x12/0xc0 [ 322.415367][T14273] ? rtnl_newlink+0x5d9/0x1d60 [ 322.415378][T14273] ? trace_cap_capable+0x1a2/0x210 [ 322.415459][T14273] ? __pfx___mutex_lock+0x10/0x10 [ 322.415475][T14273] rtnl_newlink+0x1306/0x1d60 [ 322.415489][T14273] ? __pfx_rtnl_newlink+0x10/0x10 [ 322.415503][T14273] ? __pfx___lock_acquire+0x10/0x10 [ 322.415515][T14273] ? kfree_skbmem+0x1a4/0x1f0 [ 322.415526][T14273] ? aa_get_newest_label+0x376/0x680 [ 322.415537][T14273] ? find_held_lock+0x2d/0x110 [ 322.415547][T14273] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 322.415560][T14273] ? __pfx_lock_release+0x10/0x10 [ 322.415573][T14273] ? trace_lock_acquire+0x14e/0x1f0 [ 322.415585][T14273] ? __pfx_rtnl_newlink+0x10/0x10 [ 322.415597][T14273] rtnetlink_rcv_msg+0x95b/0xea0 [ 322.415611][T14273] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 322.415627][T14273] netlink_rcv_skb+0x16b/0x440 [ 322.415641][T14273] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 322.415654][T14273] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 322.415671][T14273] ? netlink_deliver_tap+0x1ae/0xd30 [ 322.415684][T14273] netlink_unicast+0x53c/0x7f0 [ 322.415697][T14273] ? __pfx_netlink_unicast+0x10/0x10 [ 322.415710][T14273] ? __phys_addr_symbol+0x30/0x80 [ 322.415755][T14273] ? __check_object_size+0x488/0x710 [ 322.415766][T14273] netlink_sendmsg+0x8b8/0xd70 [ 322.415779][T14273] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.415794][T14273] ____sys_sendmsg+0xaaf/0xc90 [ 322.415806][T14273] ? __pfx_____sys_sendmsg+0x10/0x10 [ 322.415816][T14273] ? get_compat_msghdr+0x11b/0x170 [ 322.415830][T14273] ___sys_sendmsg+0x135/0x1e0 [ 322.415844][T14273] ? __pfx____sys_sendmsg+0x10/0x10 [ 322.415860][T14273] ? __pfx_lock_release+0x10/0x10 [ 322.415873][T14273] ? trace_lock_acquire+0x14e/0x1f0 [ 322.415885][T14273] ? __fget_files+0x206/0x3a0 [ 322.415901][T14273] __sys_sendmsg+0x16e/0x220 [ 322.415914][T14273] ? __pfx___sys_sendmsg+0x10/0x10 [ 322.415928][T14273] ? __ia32_sys_futex_time32+0x1da/0x460 [ 322.415945][T14273] __do_fast_syscall_32+0x73/0x120 [ 322.415959][T14273] do_fast_syscall_32+0x32/0x80 [ 322.415971][T14273] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 322.415989][T14273] RIP: 0023:0xf747e579 [ 322.416048][T14273] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 322.416059][T14273] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 322.416069][T14273] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000600 [ 322.416076][T14273] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 322.416081][T14273] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 322.416087][T14273] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 322.416092][T14273] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 322.416100][T14273] [ 322.684376][T14273] team0: Port device wlan1 added [ 323.262815][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 323.392503][ T7284] ip6gretap0 (unregistering): left promiscuous mode [ 323.461406][ T7284] erspan0 (unregistering): left promiscuous mode [ 323.614600][ T7284] tipc: Disabling bearer [ 324.017471][ T7284] bond0 (unregistering): Released all slaves [ 324.021386][ T7284] . (unregistering): Released all slaves [ 324.025076][ T7284] bond1 (unregistering): Released all slaves [ 324.131913][ T7284] bond2 (unregistering): Released all slaves [ 324.135714][ T7284] bond3 (unregistering): Released all slaves [ 324.196668][ T7284] tipc: Disabling bearer [ 324.198246][ T7284] tipc: Left network mode [ 324.368666][ T7284] hsr_slave_0: left promiscuous mode [ 324.370834][ T7284] hsr_slave_1: left promiscuous mode [ 325.852269][ T7284] IPVS: stop unused estimator thread 0... [ 325.917890][ T7284] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.955709][ T7284] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.995762][ T7284] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.055939][ T7284] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.155733][ T7284] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.205417][ T7284] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.275703][ T7284] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.344812][ T7284] bond0: (slave netdevsim0): Releasing backup interface [ 326.347684][ T7284] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.404826][ T7284] bridge_slave_1: left allmulticast mode [ 326.407106][ T7284] bridge_slave_1: left promiscuous mode [ 326.408820][ T7284] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.411666][ T7284] bridge_slave_0: left allmulticast mode [ 326.413607][ T7284] bridge_slave_0: left promiscuous mode [ 326.415387][ T7284] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.418686][ T7284] bridge_slave_1: left allmulticast mode [ 326.420351][ T7284] bridge_slave_1: left promiscuous mode [ 326.422057][ T7284] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.424757][ T7284] bridge_slave_0: left allmulticast mode [ 326.426384][ T7284] bridge_slave_0: left promiscuous mode [ 326.428054][ T7284] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.626977][ T7284] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.630506][ T7284] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.634182][ T7284] bond0 (unregistering): Released all slaves [ 326.638993][ T7284] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.642347][ T7284] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.645820][ T7284] bond0 (unregistering): Released all slaves [ 326.977468][ T7284] team0: Port device wlan1 removed [ 327.117844][ T7284] hsr_slave_0: left promiscuous mode [ 327.120412][ T7284] hsr_slave_1: left promiscuous mode [ 327.122992][ T7284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.125485][ T7284] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.127910][ T7284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.130493][ T7284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.134891][ T7284] hsr_slave_0: left promiscuous mode [ 327.136656][ T7284] hsr_slave_1: left promiscuous mode [ 327.138825][ T7284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.141770][ T7284] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.144178][ T7284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.146300][ T7284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.150360][ T7284] veth1_macvtap: left promiscuous mode [ 327.151990][ T7284] veth0_macvtap: left promiscuous mode [ 327.153933][ T7284] veth1_vlan: left promiscuous mode [ 327.156097][ T7284] veth0_vlan: left promiscuous mode [ 327.158880][ T7284] veth1_macvtap: left promiscuous mode [ 327.160900][ T7284] veth0_macvtap: left promiscuous mode [ 327.162496][ T7284] veth1_vlan: left promiscuous mode [ 327.164351][ T7284] veth0_vlan: left promiscuous mode [ 327.378751][ T7284] team0 (unregistering): Port device team_slave_1 removed [ 327.423696][ T7284] team0 (unregistering): Port device team_slave_0 removed [ 327.773152][ T7284] team0 (unregistering): Port device team_slave_1 removed [ 327.819375][ T7284] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 15:51:31 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff8b53e76d RDX=ffff8880240e8000 RSI=0000000000000000 RDI=0000000000000000 RBP=ffff88804cc91340 RSP=ffffc9000615ed30 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000014f24 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=ffffc9000615ee18 RIP=ffffffff81b9d91b RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0050 ffff888059a38000 00000067 00008200 DPL=0 LDT TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7409454 CR3=0000000050760000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 00c800a400000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=0000000000000009 RCX=ffffffff84c8c2ce RDX=1ffff92000762e8c RSI=ffffffff84c8c2d8 RDI=0000000000000001 RBP=ffffc90003b17450 RSP=ffffc90003b171f0 R8 =0000000000000001 R9 =0000000000000007 R10=0000000000000009 R11=0000000000000012 R12=0000000000000001 R13=ffffc90003b172a0 R14=ffff88802b5f215d R15=ffffc90003b17458 RIP=ffffffff84c8c31f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f3667297d00 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055c209aad000 CR3=000000004c710000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=30f17a5e30f17a5e 30f17a5e30f17a5e 30f17a5e30f17a5e 30f17a5e30f17a5e 30f17a5e30f17a5e 30f17a5e30f17a5e 30f17a5e30f17a5e 30f17a5e30f17a5e ZMM22=01675f5301675f53 01675f5301675f53 01675f5301675f53 01675f5301675f53 01675f5301675f53 01675f5301675f53 01675f5301675f53 01675f5301675f53 ZMM23=a4398984a4398984 a4398984a4398984 a4398984a4398984 a4398984a4398984 a4398984a4398984 a4398984a4398984 a4398984a4398984 a4398984a4398984 ZMM24=12e9285812e92858 12e9285812e92858 12e9285812e92858 12e9285812e92858 12e9285812e92858 12e9285812e92858 12e9285812e92858 12e9285812e92858 ZMM25=011c5258011c5258 011c5258011c5258 011c5258011c5258 011c5258011c5258 011c5258011c5258 011c5258011c5258 011c5258011c5258 011c5258011c5258 ZMM26=266d61e6266d61e6 266d61e6266d61e6 266d61e6266d61e6 266d61e6266d61e6 266d61e6266d61e6 266d61e6266d61e6 266d61e6266d61e6 266d61e6266d61e6 ZMM27=d9f71c3dd9f71c3d d9f71c3dd9f71c3d d9f71c3dd9f71c3d d9f71c3dd9f71c3d d9f71c3dd9f71c3d d9f71c3dd9f71c3d d9f71c3dd9f71c3d d9f71c3dd9f71c3d ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=ca0f0000ca0f0000 ca0f0000ca0f0000 ca0f0000ca0f0000 ca0f0000ca0f0000 ca0f0000ca0f0000 ca0f0000ca0f0000 ca0f0000ca0f0000 ca0f0000ca0f0000 info registers vcpu 2 CPU#2 RAX=1ffff11004b2e02b RBX=0000000000000000 RCX=ffffffff81f61a8d RDX=ffff888020840000 RSI=ffffffff81f61ac5 RDI=0000000000000005 RBP=ffff8880259700f8 RSP=ffffc9000104f2d0 R8 =0000000000000005 R9 =000000000000003f R10=0000000000000000 R11=ffff88802b628abc R12=ffffea0000ae2fc8 R13=ffffea0000ae2f88 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff81f61ad3 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080000206 CR3=000000006415e000 CR4=00352ef0 DR0=0000000000000008 DR1=0000000000003609 DR2=00000000000002a3 DR3=0000000000000081 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff853e5a35 RDI=ffffffff9ab6ee60 RBP=ffffffff9ab6ee20 RSP=ffffc90002c6e4f8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000002d R14=ffffffff9ab6ee20 R15=0000000000000000 RIP=ffffffff853e5a5f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3fea87 CR3=000000005702a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000080080 Opmask01=0000000000020080 Opmask02=0000000000020000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe5863e4e0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6463202064656469 6553202e3230000a 323a5d2b3a5b2073 000a2e2065692067 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000