last executing test programs: 6.589264849s ago: executing program 2 (id=216): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c00") ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e01000038010000010000000000000000000000000000000000000000000000000000006d79706f") 6.510348109s ago: executing program 2 (id=217): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) r3 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10000000}) write$evdev(r2, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000940)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x0, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="0c0001800800dd8ca592406a1fdb0000003e01"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x4}]}, 0x98}}, 0x0) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000340)='romfs\x00', 0x21008d, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@ifindex, 0xffffffffffffffff, 0x21}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x7, 0xf202}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}}, 0x4044) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r7, &(0x7f0000000a00)={&(0x7f0000000040), 0xc, &(0x7f00000009c0)={&(0x7f0000000780)={0x228, r8, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x401}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff0}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf9b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaa2b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd73}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5646}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0xf0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x364c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x691a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x53424489}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x40801}, 0x4000004) r9 = syz_socket_connect_nvme_tcp() recvmsg$inet_nvme(r9, &(0x7f0000000480)={&(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)=""/5, 0x5}], 0x1, &(0x7f0000000680)=""/243, 0xf3}, 0x103) r10 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f0000000040)={0x1, 0xa, 0x1}) ioctl$VIDIOC_EXPBUF(r10, 0xc0405610, &(0x7f00000000c0)={0xe, 0x0, 0xca, 0x84000}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x1f, 0x4, 0x9, 0x32021, 0xffffffffffffffff, 0x5, '\x00', r1, 0xffffffffffffffff, 0x1, 0x0, 0x288}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x6b3, 0x7fffffff, 0x1, 0x4, r11, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x7}, 0x50) 6.449117619s ago: executing program 2 (id=221): r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x30000)=nil, 0x30000, 0x3, 0x11, r0, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}, @in6={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}]}, &(0x7f0000000780)=0x10) write(r2, &(0x7f0000000210)="01", 0x1) read(r1, &(0x7f0000000000)=""/8, 0x8) sendto$packet(r0, 0x0, 0x0, 0x8004, &(0x7f0000000100)={0x11, 0x0, 0x1, 0x1, 0x4, 0x0, @random="0000f3ff6400"}, 0x14) 6.370714263s ago: executing program 2 (id=223): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000000c0)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x18d883, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) poll(0x0, 0x0, 0xd4) symlink(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) 5.871285408s ago: executing program 2 (id=228): ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r0, 0x1) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x2a, &(0x7f0000000bc0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 5.311170341s ago: executing program 2 (id=232): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x8000, 0x6, 0x300, 0xfc}, 0x10) mmap(&(0x7f0000000000/0x30000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}, @in6={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}]}, &(0x7f0000000780)=0x10) write(r1, &(0x7f0000000210)="01", 0x1) read(r0, &(0x7f0000000000)=""/8, 0x8) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x8004, &(0x7f0000000100)={0x11, 0x0, 0x1, 0x1, 0x4, 0x0, @random="0000f3ff6400"}, 0x14) 5.242010085s ago: executing program 32 (id=232): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x8000, 0x6, 0x300, 0xfc}, 0x10) mmap(&(0x7f0000000000/0x30000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}, @in6={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}]}, &(0x7f0000000780)=0x10) write(r1, &(0x7f0000000210)="01", 0x1) read(r0, &(0x7f0000000000)=""/8, 0x8) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x8004, &(0x7f0000000100)={0x11, 0x0, 0x1, 0x1, 0x4, 0x0, @random="0000f3ff6400"}, 0x14) 4.932169733s ago: executing program 3 (id=236): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x220}}}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 3.367058523s ago: executing program 3 (id=241): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = memfd_create(0x0, 0x6) fcntl$addseals(r1, 0x409, 0xe) (async) fcntl$addseals(r1, 0x409, 0xe) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)=0x2) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r3, &(0x7f00000002c0)=""/4096, 0x1000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x18, 0x3, "c6a41d10c6a41d1000000000fff5000000000000"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x18, 0x3, "c6a41d10c6a41d1000000000fff5000000000000"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010) 3.100028258s ago: executing program 3 (id=242): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4040, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002080)='./file0\x00', 0xa0000, 0x40) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) openat(r0, &(0x7f0000000000)='./file0\x00', 0x101100, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408d0}], 0x1, 0x20048805) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000050}, 0x24000890) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x10004, 0x3, 0x80a0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f08c40f009b27000000f2e10a8e690f3271008000c90f30b80e0000000f23d80f215035800000a0c9b9490300000f60b932c00a00b9730200000f32328fe8587db660602fb92dbf0002e6e6006880000000000000000f30", 0x64}], 0x4dd17ed7c0be0334, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.420999505s ago: executing program 3 (id=258): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000002000), 0x22, 0x252c00) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x8008000}, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETCARRIER(r2, 0x400454e2, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f00003d8000/0x4000)=nil, 0x4000, 0xb635773f06ebbeef, 0x4010, r1, 0xec2f2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setgroups(0x0, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0xfefe, 0xc, 0x0, 0x6, 0x243}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioprio_set$pid(0x2, r3, 0x4003) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) ioctl$TIOCSERGETLSR(r6, 0x5459, &(0x7f0000002040)) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}}) 1.374028854s ago: executing program 4 (id=239): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r0, 0x40086e81, &(0x7f0000000080)=0x5) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095", @ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ed}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x101040, 0x0) prctl$PR_SET_NAME(0x4, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0xfb, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@deltclass={0x3c, 0x29, 0x800, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0xfff9}, {0xffff, 0x5}, {0x2, 0x7}}, [@tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x9, 0x3}}, @TCA_RATE={0x6, 0x5, {0x4, 0xdb}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004c00}, 0x20080000) syz_clone(0x10014000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$dri(&(0x7f0000000280), 0x3, 0x644003) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)=[0x0], 0x1}) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'veth1_to_hsr\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000258000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000bb5000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r4}, 0xffffffffffffffd1) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x6, 0x244c, 0x2, 0x101, 0x0, 0x3ff}) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r6, 0x7a4, &(0x7f0000000000)={{@host}, 0x200000000000, 0x0, 0x0, 0xfffffffc}) io_uring_setup(0xe37, &(0x7f0000000200)={0x0, 0x4241, 0x40, 0xffffffff, 0x6, 0x0, r4}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000380)=[@ioring_restriction_sqe_flags_required={0x3, 0x1d}], 0x1) 1.287706483s ago: executing program 4 (id=260): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r1 = memfd_create(&(0x7f0000000100)='test\x00', 0x2) ftruncate(r1, 0x1000) fcntl$addseals(r1, 0x409, 0x2) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000200)={r1, 0x0, 0x0, 0x1000}) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x3, 0x11, r2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$pfkey(0xffffff9c, &(0x7f0000000200), 0x62e203, 0x0) socket$inet6(0xa, 0x5, 0x4e) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) fcntl$setstatus(r4, 0x4, 0x2400) ioctl(r6, 0x3, &(0x7f00000000c0)='lap\x00') ioctl(r7, 0x890b, 0x0) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r8, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x4001, @multicast1}, 0x10, 0x0}, 0x4004000) sendmmsg(r8, &(0x7f0000000380), 0x0, 0x4020044) r9 = syz_io_uring_setup(0x14ad, &(0x7f0000000380)={0x0, 0x1bcf, 0x8, 0x2, 0x2051, 0x0, r5}, &(0x7f0000000180)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r10, r11, r12, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x8, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x989680}, 0x0, 0x0, 0x3, 0x1}) io_uring_enter(r9, 0x2a32, 0xfffffffc, 0xff, 0x0, 0x0) bind$x25(r7, &(0x7f0000000080), 0x12) connect$x25(r7, &(0x7f0000000300)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) 1.20961895s ago: executing program 0 (id=262): syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="30000000410007010000000001"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), 0x0, 0x1000, r0}, 0x38) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) syz_open_pts(0xffffffffffffffff, 0x81) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a7565aba55a87d2a251c295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507a0592c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd106926acb583ad63a4e7e1ca17c1b6aac63fefa9dcbe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0xa, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRES32=r6, @ANYBLOB="4000100a14000100009a"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20024090) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x2000010}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"ff87c89d4e3e6bd4ae7ee3551b880c0ac56cb2a58b7da498a7045278c8043bbe"}) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000000)={'syztnl2\x00', r6, 0x7, 0x7800, 0x67a, 0x7, {{0x6, 0x4, 0x2, 0x29, 0x18, 0x64, 0x0, 0x6, 0x2f, 0x0, @remote, @remote, {[@ra={0x94, 0x4}]}}}}}) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@mask_cswp={0x58, 0x114, 0x9, {{0x1, 0x80200000}, 0x0, 0x0, 0xfffffffffffffff8, 0xff, 0x9, 0xffffffffffffffff, 0x40, 0x4}}], 0x58, 0x4044004}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x1f, 0x2, [@const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x13, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}}, 0x0, 0x42}, 0x28) 1.148662295s ago: executing program 1 (id=263): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\x00', 0x14, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x60, 0x0, 0x4}}}}}}}, 0x0) 1.031056837s ago: executing program 1 (id=264): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82202, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000014c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001500)=[{&(0x7f0000000080)=""/4080, 0x1044}], 0x1, 0x1, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82202, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f00000014c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) (async) preadv(r0, &(0x7f0000001500)=[{&(0x7f0000000080)=""/4080, 0x1044}], 0x1, 0x1, 0x1) (async) 1.030597465s ago: executing program 1 (id=265): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x23, 0x301, 0x270bd22, 0x25dfdbfa, {0x1, 0x0, 0xf000}}, 0x14}}, 0xc004) 951.392594ms ago: executing program 1 (id=266): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000001600)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x9b639ffca15f133, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local}}}}}}, 0x0) 802.333225ms ago: executing program 1 (id=267): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x4, 0x2, 0x6, 0x0, 0x2, 0x3, 0x1, 0x6, 0x7fffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/infiniband_srp/srp-syz0-1/add_target\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='id_ext=0,ioc_guid=0,dest=0.0.0.0:3260\x00', 0x25) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0xb, 0x17, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x408, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x7, 0x1, 0x5, 0x1, 0xa, 0xc, 0x10}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 731.151194ms ago: executing program 1 (id=268): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="8b00000000000000000000000000000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$DVB_DVR_DMX_DQBUF(0xffffffffffffffff, 0xc0186f40, &(0x7f0000000040)={0x1, 0x20000000, 0x9, 0xb, 0x8, 0x6}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000003240), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="b0010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f00000002c0)={0x3c, 0x4, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @enc_lim={0x4, 0x1, 0x4}, @pad1, @ra, @calipso={0x7, 0x10, {0x0, 0x2, 0x7f, 0x9, [0x100000000]}}, @ra={0x5, 0x2, 0x7}]}, 0x30) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x0, 0x61, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x36ae, 0x4, 0x7fff, 0x3, 0x400000000], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket(0x2a, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000001c0)={0x9, r1, 'id1\x00'}) ioctl$HIDIOCGRAWNAME(r6, 0x80404804, &(0x7f0000000240)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x20040011}}], 0x1, 0x80) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) socket(0x2b, 0x1, 0x1) 530.275673ms ago: executing program 0 (id=269): futex(0x0, 0x6, 0x2, 0x0, 0x0, 0x3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40005}, 0x8010) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000040)='./dev/mtdblock0\x00', &(0x7f0000000400)='msdos\x00', 0x2300, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 391.189362ms ago: executing program 0 (id=270): socket$nl_generic(0x10, 0x3, 0x10) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='pagemap\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c000180060006006558000014000280100014800c00", @ANYRES8=r0], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 390.659772ms ago: executing program 4 (id=271): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipe\x00', 0x1ff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = openat$nvme_fabrics(0xffffff9c, &(0x7f00000001c0), 0x8000, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000240)={0x3, {{0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @remote}, 0x32b8}}, {{0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x1b}}}}, 0x104) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./rpc_pipe/file0\x00', 0x1ff) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELOBJ={0x70, 0x14, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x43, 0x8, "1fa6018cc2c79e48a48707b9b46aa1f58a53baf83d066f4fd47f57efffe7ba4dbd3d9e25829217dea070ede6973ac0520a18078bf5bb87a3d3b796ac5893c2"}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x8, 0x6, "6417cec9"}]}, @NFT_MSG_NEWCHAIN={0x108, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_CHAIN_USERDATA={0xde, 0xc, "f200f19396a7616cc199be66daeed45caa5976a0bbbaed4bc485adcd12329589e4d4ca395a01bab8e76cf95031fa22dfb17dc33908f376872eb687009a98929454c33d1efd0797a311035fe810eeb9ae592749d2cd58c521f710e37c0037a2c60155f211af37904df0d48c3e0b64c1db9ff54628c71216ff3513f9c66aa451f10c41d02405c99ed58e9550c1cafb1829ab7052da6a6fc05cea57a8a4bd5f60c4f46cd905f5836f40897525ec09afbada56473bcda2b1adffb1245bef14c83e35a5109298f5ebf3edd5a4ccf2ee94b5a024c4decc00babe3dcceb"}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x84}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6002}]}, @NFTA_RULE_ID={0x8}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x201, 0x0, 0x0, {0x4, 0x0, 0x7}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x298}, 0x1, 0x0, 0x0, 0x8800}, 0x4008000) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000740)='syz1\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys/class/ptp/ptp0/max_vclocks\x00', &(0x7f0000000080)='sysfs\x00', 0x8, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/ptp/ptp0/max_vclocks\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r2, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c00") ioctl(r2, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e01000038010000010000000000000000000000000000000000000000000000000000006d79706f") 270.975473ms ago: executing program 4 (id=272): ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) setns(r1, 0x80) socket(0x29, 0x5, 0x5) r2 = openat$ublk_ctrl(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) ioctl$UBLK_U_CMD_GET_DEV_INFO(r2, 0x80207502, &(0x7f0000000080)={0x0, 0xffff, 0x40, &(0x7f0000000040)=@ublk_ctrl_dev_info_existing}) 270.063125ms ago: executing program 0 (id=273): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000410001032bbd7000fddbdf250300"], 0x18}, 0x1, 0xf0ffff}, 0x840) 207.062045ms ago: executing program 3 (id=274): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000001600)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x9b639ffca15f133, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local}}}}}}, 0x0) (fail_nth: 2) 206.915453ms ago: executing program 0 (id=275): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r1, 0x4068aea3, &(0x7f0000000440)={0xcc, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3f000000) 91.619599ms ago: executing program 4 (id=276): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e9003f"], 0x14}], 0x1, 0x0, 0x0, 0x44100}, 0x0) 461.572µs ago: executing program 3 (id=277): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timerfd_create(0x7, 0x0) timerfd_gettime(r0, 0x0) read(r0, &(0x7f0000000380)=""/162, 0xa2) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="09000000040000000400000007"], 0x48) r6 = fsmount(r4, 0x1, 0x0) fchdir(r6) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r5}, 0x18) close_range(r3, 0xffffffffffffffff, 0x0) fchdir(r2) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24040090) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20045808}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r10, {0x1}, {0xf, 0xf}, {0x3, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) r11 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r11, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000400)={0x1d0, 0x12, 0x100, 0x70bd2c, 0x25dfdbfc, {0x6, 0x19, 0x8, 0x5, {0x4e20, 0x4e22, [0x7, 0xc, 0xc, 0x1], [0xc, 0x2, 0x9, 0x8], r10, [0x7, 0x4]}, 0x2, 0xfffffbff}, [@INET_DIAG_REQ_BYTECODE={0x63, 0x1, "c38f659f184ba132a21e5cebee71cfbab5d952613d8895a5558fd86bfd5ec7427fe144841a1f2e12308194fd9744fec0c9a475591fbc5821435bd281c0b7a707b1416641ae39b00567d15179f5e1041c511f077fc74bcba8874902de61213f"}, @INET_DIAG_REQ_BYTECODE={0x60, 0x1, "a0708f77d7e8aaca6083a68295e6383ad5cc51638aff2771716ee498d9f795ebecd228987eb3f0b6232b7d43917a37febdc2bd91dcbb5ed210a4358ad11afadee3240ca7388ce35ff64e65aee41908cddff4fe10a15e33d2d52dea79"}, @INET_DIAG_REQ_BYTECODE={0x35, 0x1, "07e92a77b886a256c5118cfe594a2fe1a4f55c94c2eaa0d2cf58e22982a1aa8ea030ab5c3744faf234b8c3e95acd6ed0b0"}, @INET_DIAG_REQ_BYTECODE={0x87, 0x1, "b77842f5ea062e906fc5e76710bc4969dee10ce7bbfd4741ba6cbebdc3e20a198e011979cfefcf8c0e059348446bf3c6b5f6665c6a2b9f7dd5cfe87dd3e74d02f82053e9f520cd7e37afece793d32c0a41a73ca5fb898d19e6431f330dd27b7231e9061d0cacdccf933899c453975a3053637ceeb2eb17d5fd0b29e2146b7eb47ac77b"}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 195.964µs ago: executing program 0 (id=278): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) r1 = openat$sequencer2(0xffffff9c, &(0x7f0000000140), 0xa00, 0x0) ioctl$SNDCTL_SYNTH_INFO(r1, 0xc08c5102, &(0x7f0000000380)={"b5293ce5975955b1b9ba75a030e5cf254699933de1a35faa3894db5240f3", 0x81, 0x0, 0x1, 0x8, 0x1, 0x3, 0x9, 0x0, [0xffffff00, 0x0, 0x1, 0x3, 0xc, 0x100, 0x10, 0xebb, 0x6dce27db, 0x101, 0x7, 0x3, 0x5, 0x4, 0x7, 0x4, 0x8, 0x45, 0x80000000]}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "4cf90fba85c830e42a3ca4b10f01bbcb15f3806c4853e7c44a6974759d9f643905a56baa4195fb396d9bfa306999f1586e5d1ca49add100a36b751a7d9fe0b182ebf2c8a0e66f72c1c08260030752f07cd4089473e52885a3c85bacf3ccfac5bb9435fe036dcfccd7254bbd8bce90e2284d29e1f17d6652270fd0abcb8729f16ff602b438bd122a9e09984e2799d0dbfef7533d1a930ea4f4b57605ace45f5815450693650ae122d34aa0c5ca5e793516d156e5a5b34d6c17c40d753426a3d8e15e726d0f2622e873e0cbe63751bb62c68594d4cb0a21b92ad2e80f24a9b290a87ee6779022a0b7f5223e4e8c9f53f501ec8c439724078fdc076a51d50760566"}) mkdir(&(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/config.gz\x00', 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = io_uring_setup(0xbec, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x3, 0x32b}) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) close_range(r5, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffffffffffff, 0x4}, 0x38) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r4], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r7, 0x8004510a, &(0x7f0000000000)) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000000)="01fe000200373a4541062000a59ea940d2cb0b3692f5020000a00000050000000000eb000000a5e5be21c44e", 0x2c, 0xffffffffffffffff) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000000140)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x30, 0x66, 0x0, 0x40, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x1c, 0x0, @gue={{0x2, 0x0, 0x0, 0xff, 0x100}, "b68ed34f131c030800000000"}}}}, 0x3e) read(r2, 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000180)=ANY=[@ANYBLOB="d094000002000000818d8b7ed6e95fddd85b1b55d536b7f2a8521b9a0f560375c1c552"]) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8001, 0x7, &(0x7f0000000000)) shmctl$SHM_LOCK(0x0, 0xb) recvfrom$inet_nvme(r2, &(0x7f0000000040)=""/2, 0x2, 0x2001, &(0x7f00000000c0)=@l2={0x1f, 0x8, @none, 0x7, 0x2}, 0x80) 0s ago: executing program 4 (id=279): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f000000000000000001"], 0x6a) (fail_nth: 7) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:58671' (ED25519) to the list of known hosts. [ 41.825033][ T5686] cgroup: Unknown subsys name 'net' [ 41.969366][ T5686] cgroup: Unknown subsys name 'cpuset' [ 41.973177][ T5686] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.931968][ T5686] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.797421][ T5090] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.810445][ T5736] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.812073][ T5735] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.814662][ T5736] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.816479][ T5735] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.820738][ T5736] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.821808][ T5735] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.824497][ T5736] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.826731][ T5735] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.829801][ T5736] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.830858][ T5739] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.834262][ T5736] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.838117][ T64] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.843784][ T5746] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.844242][ T64] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.849087][ T5746] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.850271][ T64] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.852772][ T5746] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.860437][ T5739] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.865016][ T5739] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 48.484673][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.487533][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.489918][ T5737] bridge_slave_0: entered allmulticast mode [ 48.492663][ T5737] bridge_slave_0: entered promiscuous mode [ 48.532763][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.535405][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.538189][ T5737] bridge_slave_1: entered allmulticast mode [ 48.541799][ T5737] bridge_slave_1: entered promiscuous mode [ 48.575391][ T5728] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.578603][ T5728] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.581665][ T5728] bridge_slave_0: entered allmulticast mode [ 48.585397][ T5728] bridge_slave_0: entered promiscuous mode [ 48.590581][ T5728] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.593615][ T5728] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.596729][ T5728] bridge_slave_1: entered allmulticast mode [ 48.600613][ T5728] bridge_slave_1: entered promiscuous mode [ 48.649623][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.661787][ T5728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.677820][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.687700][ T5728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.697735][ T5729] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.700600][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.702991][ T5729] bridge_slave_0: entered allmulticast mode [ 48.705722][ T5729] bridge_slave_0: entered promiscuous mode [ 48.709294][ T5729] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.711684][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.713993][ T5729] bridge_slave_1: entered allmulticast mode [ 48.717048][ T5729] bridge_slave_1: entered promiscuous mode [ 48.735193][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.737689][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.742268][ T5741] bridge_slave_0: entered allmulticast mode [ 48.747681][ T5741] bridge_slave_0: entered promiscuous mode [ 48.764907][ T5737] team0: Port device team_slave_0 added [ 48.769263][ T5737] team0: Port device team_slave_1 added [ 48.778422][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.780805][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.783177][ T5741] bridge_slave_1: entered allmulticast mode [ 48.791685][ T5741] bridge_slave_1: entered promiscuous mode [ 48.796503][ T5729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.812755][ T5728] team0: Port device team_slave_0 added [ 48.825270][ T5729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.834366][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.836800][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.844790][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.849946][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.852230][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.860223][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.865525][ T5728] team0: Port device team_slave_1 added [ 48.890626][ T5729] team0: Port device team_slave_0 added [ 48.902133][ T5729] team0: Port device team_slave_1 added [ 48.905351][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.910226][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.946255][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.948809][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.957014][ T5728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.961385][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.963669][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.971829][ T5728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.983829][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.986416][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.994804][ T5729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.999742][ T5741] team0: Port device team_slave_0 added [ 49.018414][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.021355][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.031724][ T5729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.038305][ T5741] team0: Port device team_slave_1 added [ 49.046263][ T5737] hsr_slave_0: entered promiscuous mode [ 49.049783][ T5737] hsr_slave_1: entered promiscuous mode [ 49.071236][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.073621][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.082279][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.106582][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.108942][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.118804][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.129141][ T5728] hsr_slave_0: entered promiscuous mode [ 49.132533][ T5728] hsr_slave_1: entered promiscuous mode [ 49.135530][ T5728] debugfs: 'hsr0' already exists in 'hsr' [ 49.138255][ T5728] Cannot create hsr debugfs directory [ 49.189808][ T5729] hsr_slave_0: entered promiscuous mode [ 49.192949][ T5729] hsr_slave_1: entered promiscuous mode [ 49.195827][ T5729] debugfs: 'hsr0' already exists in 'hsr' [ 49.198222][ T5729] Cannot create hsr debugfs directory [ 49.271689][ T5741] hsr_slave_0: entered promiscuous mode [ 49.275282][ T5741] hsr_slave_1: entered promiscuous mode [ 49.278346][ T5741] debugfs: 'hsr0' already exists in 'hsr' [ 49.280684][ T5741] Cannot create hsr debugfs directory [ 49.584501][ T5737] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.593398][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.596618][ T5737] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.601324][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.604936][ T5737] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.611577][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.614346][ T5737] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.619043][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.662158][ T5728] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.668544][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.671489][ T5728] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.676185][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.679311][ T5728] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.688316][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.693428][ T5728] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.702304][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.765909][ T5741] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.772632][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.779020][ T5741] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.784854][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.789616][ T5741] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.795707][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.800460][ T5741] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.806036][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.868080][ T5743] Bluetooth: hci0: command tx timeout [ 49.871214][ T5744] Bluetooth: hci2: command tx timeout [ 49.888884][ T5729] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.894824][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.899073][ T5729] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.907038][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.910669][ T5729] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.918681][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.922044][ T5729] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.928993][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.946997][ T5744] Bluetooth: hci3: command tx timeout [ 49.949615][ T5743] Bluetooth: hci1: command tx timeout [ 49.979908][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.990568][ T5728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.007394][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.018886][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.022002][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.034596][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.036931][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.052806][ T5728] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.066874][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.072075][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.074381][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.093928][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.096227][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.104897][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.123772][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.126113][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.134324][ T139] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.136673][ T139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.148923][ T5737] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.157025][ T5729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.184928][ T5729] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.202238][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.204410][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.212042][ T139] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.214186][ T139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.267505][ T5729] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.411805][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.443599][ T5737] veth0_vlan: entered promiscuous mode [ 50.451194][ T5737] veth1_vlan: entered promiscuous mode [ 50.460763][ T5728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.471675][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.489182][ T5737] veth0_macvtap: entered promiscuous mode [ 50.496141][ T5737] veth1_macvtap: entered promiscuous mode [ 50.520185][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.531886][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.541286][ T5729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.544367][ T5741] veth0_vlan: entered promiscuous mode [ 50.553358][ T5728] veth0_vlan: entered promiscuous mode [ 50.564405][ T5728] veth1_vlan: entered promiscuous mode [ 50.574430][ T5741] veth1_vlan: entered promiscuous mode [ 50.587301][ T5807] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.635908][ T5741] veth0_macvtap: entered promiscuous mode [ 50.645949][ T5728] veth0_macvtap: entered promiscuous mode [ 50.657792][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.658873][ T5741] veth1_macvtap: entered promiscuous mode [ 50.661050][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.669511][ T5728] veth1_macvtap: entered promiscuous mode [ 50.675480][ T5729] veth0_vlan: entered promiscuous mode [ 50.692760][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.694400][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.695289][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.699489][ T5729] veth1_vlan: entered promiscuous mode [ 50.707509][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.711693][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.721972][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.748074][ T5579] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.749315][ T5737] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.767564][ T5737] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.773263][ T5737] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.782813][ T5729] veth0_macvtap: entered promiscuous mode [ 50.783828][ T5737] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.790312][ T5729] veth1_macvtap: entered promiscuous mode [ 50.815978][ T5737] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.850306][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.855097][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.873111][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.876930][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.896482][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.901281][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.929057][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.933031][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.944579][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.957731][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.997956][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.015111][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.049208][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.054690][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.078412][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.081247][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.084079][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.087495][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.090112][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.093141][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.103016][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.137064][ T5579] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.166844][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.169939][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.173408][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.177687][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.181210][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.184144][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.251030][ T5887] Console: switching to colour dummy device 80x25 [ 51.297698][ T5890] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 51.333898][ T5890] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 51.337657][ T5890] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 51.340817][ T5890] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 51.343756][ T5890] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 51.359753][ T5890] pci 0000:00:01.0: Adding to iommu group 1 [ 51.367932][ T5890] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 51.370087][ T5890] pci 0000:00:01.0: vgaarb: bridge control possible [ 51.372084][ T5890] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 51.381909][ T5890] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 51.395396][ T5890] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 51.403282][ T5890] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 51.415641][ T5890] [drm] Found bochs VGA, ID 0xb0c5. [ 51.417859][ T5890] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 51.419969][ T5897] tipc: Enabling of bearer rejected, failed to enable media [ 51.424228][ T5898] tipc: Enabling of bearer rejected, failed to enable media [ 51.432037][ T5890] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 51.435668][ T5895] tipc: Enabling of bearer rejected, failed to enable media [ 51.488710][ T5877] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 51.558931][ T5890] Console: switching to colour frame buffer device 160x50 [ 51.598903][ T5890] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 51.639430][ T5877] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 51.643871][ T5877] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 51.646980][ T5877] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 51.650341][ T5877] usb 7-1: config 0 interface 0 has no altsetting 0 [ 51.653755][ T5877] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 51.656610][ T5877] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 51.659946][ T5877] usb 7-1: config 0 interface 0 has no altsetting 0 [ 51.663192][ T5877] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 51.665990][ T5877] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 51.669701][ T5877] usb 7-1: config 0 interface 0 has no altsetting 0 [ 51.672552][ T5877] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 51.675379][ T5877] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 51.679135][ T5877] usb 7-1: config 0 interface 0 has no altsetting 0 [ 51.682923][ T5877] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 51.685739][ T5877] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 51.690320][ T5877] usb 7-1: config 0 interface 0 has no altsetting 0 [ 51.693222][ T5877] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 51.696033][ T5877] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 51.699444][ T5877] usb 7-1: config 0 interface 0 has no altsetting 0 [ 51.703102][ T5877] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 51.705891][ T5877] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 51.709563][ T5877] usb 7-1: config 0 interface 0 has no altsetting 0 [ 51.713106][ T5877] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 51.715904][ T5877] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 51.719776][ T5877] usb 7-1: config 0 interface 0 has no altsetting 0 [ 51.723498][ T5877] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 51.726253][ T5877] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 51.728887][ T5877] usb 7-1: Product: syz [ 51.730143][ T5877] usb 7-1: Manufacturer: syz [ 51.731607][ T5877] usb 7-1: SerialNumber: syz [ 51.736532][ T5877] usb 7-1: config 0 descriptor?? [ 51.747920][ T5877] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 51.946941][ T5743] Bluetooth: hci2: command tx timeout [ 51.946983][ T5744] Bluetooth: hci0: command tx timeout [ 52.026764][ T5744] Bluetooth: hci3: command tx timeout [ 52.027376][ T5743] Bluetooth: hci1: command tx timeout [ 52.293573][ T5889] mmap: syz.2.3 (5889) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 52.391482][ T5889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.394601][ T5889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.408902][ T50] usb 7-1: USB disconnect, device number 2 [ 52.413701][ T50] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 53.266744][ T5836] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 53.309382][ T5807] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.436486][ T5836] usb 7-1: Using ep0 maxpacket: 8 [ 53.439503][ T5836] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 53.442219][ T5836] usb 7-1: config 0 has no interface number 0 [ 53.444126][ T5836] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 53.447533][ T5836] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 53.451090][ T5836] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 53.454519][ T5836] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 53.460479][ T5836] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 53.463418][ T5836] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.464565][ T5744] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.467507][ T5836] usb 7-1: config 0 descriptor?? [ 53.470421][ T5744] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.475348][ T5744] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.478851][ T5836] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 53.481234][ T5744] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.485668][ T5744] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.827636][ T5744] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.833156][ T5744] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.837588][ T5744] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.841401][ T5744] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.845245][ T5744] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.952697][ T5909] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.955381][ T5909] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.959408][ T5909] bridge_slave_0: entered allmulticast mode [ 53.962269][ T5909] bridge_slave_0: entered promiscuous mode [ 53.965859][ T5909] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.968312][ T5909] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.971316][ T5909] bridge_slave_1: entered allmulticast mode [ 53.974003][ T5909] bridge_slave_1: entered promiscuous mode [ 53.990821][ T5909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.995786][ T5909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.012669][ T5907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.018217][ T5907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.018835][ T5909] team0: Port device team_slave_0 added [ 54.024619][ T5909] team0: Port device team_slave_1 added [ 54.026868][ T5743] Bluetooth: hci0: command tx timeout [ 54.027168][ T1341] usb 7-1: USB disconnect, device number 3 [ 54.043417][ T1341] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 54.060097][ T5909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.064934][ T5909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.074876][ T5909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.081815][ T5909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.085921][ T5909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.096891][ T5909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.145052][ T5909] hsr_slave_0: entered promiscuous mode [ 54.148408][ T5909] hsr_slave_1: entered promiscuous mode [ 54.151559][ T5909] debugfs: 'hsr0' already exists in 'hsr' [ 54.154006][ T5909] Cannot create hsr debugfs directory [ 54.210836][ T5744] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.217965][ T5744] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.223047][ T5744] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.227742][ T5744] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.236101][ T5744] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.237722][ T5807] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.323208][ T5807] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.430827][ T5807] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.482785][ T5922] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.485207][ T5922] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.487798][ T5922] bridge_slave_0: entered allmulticast mode [ 54.490794][ T5922] bridge_slave_0: entered promiscuous mode [ 54.494398][ T5922] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.496713][ T5922] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.499024][ T5922] bridge_slave_1: entered allmulticast mode [ 54.501815][ T5922] bridge_slave_1: entered promiscuous mode [ 54.538600][ T5922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.562768][ T5922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.602477][ T5922] team0: Port device team_slave_0 added [ 54.616792][ T5922] team0: Port device team_slave_1 added [ 54.659239][ T5922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.661836][ T5922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.671981][ T5922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.689252][ T5807] bridge_slave_1: left allmulticast mode [ 54.691439][ T5807] bridge_slave_1: left promiscuous mode [ 54.694289][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.701634][ T5807] bridge_slave_0: left allmulticast mode [ 54.703489][ T5807] bridge_slave_0: left promiscuous mode [ 54.705374][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.812659][ T5807] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.817985][ T5807] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.822161][ T5807] bond0 (unregistering): Released all slaves [ 54.829486][ T5922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.831744][ T5922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.840491][ T5922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.921307][ T5922] hsr_slave_0: entered promiscuous mode [ 54.923736][ T5922] hsr_slave_1: entered promiscuous mode [ 54.925952][ T5922] debugfs: 'hsr0' already exists in 'hsr' [ 54.927946][ T5922] Cannot create hsr debugfs directory [ 55.145853][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.148960][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.151788][ T5942] bridge_slave_0: entered allmulticast mode [ 55.154733][ T5942] bridge_slave_0: entered promiscuous mode [ 55.166320][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.173088][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.175629][ T5942] bridge_slave_1: entered allmulticast mode [ 55.178650][ T5942] bridge_slave_1: entered promiscuous mode [ 55.199529][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.205785][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.229868][ T5807] hsr_slave_0: left promiscuous mode [ 55.232258][ T5807] hsr_slave_1: left promiscuous mode [ 55.234491][ T5807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.236778][ T5807] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.239585][ T5807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.241826][ T5807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.250620][ T5807] veth1_macvtap: left promiscuous mode [ 55.252934][ T5807] veth0_macvtap: left promiscuous mode [ 55.255460][ T5807] veth1_vlan: left promiscuous mode [ 55.258537][ T5807] veth0_vlan: left promiscuous mode [ 55.403534][ T5807] team0 (unregistering): Port device team_slave_1 removed [ 55.412685][ T5807] team0 (unregistering): Port device team_slave_0 removed [ 55.517684][ T5942] team0: Port device team_slave_0 added [ 55.521044][ T5942] team0: Port device team_slave_1 added [ 55.546571][ T5744] Bluetooth: hci1: command tx timeout [ 55.570717][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.582836][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.613848][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.630425][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.634543][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.645189][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.673380][ T5922] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.733815][ T5942] hsr_slave_0: entered promiscuous mode [ 55.736018][ T5942] hsr_slave_1: entered promiscuous mode [ 55.741739][ T5942] debugfs: 'hsr0' already exists in 'hsr' [ 55.743462][ T5942] Cannot create hsr debugfs directory [ 55.767901][ T5922] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.783149][ T5988] netlink: Conntrack attr has 12 unknown bytes [ 55.790775][ T5988] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 55.868411][ T5744] Bluetooth: hci2: command tx timeout [ 55.902302][ T5922] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.997284][ T5922] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.108540][ T5744] Bluetooth: hci0: command tx timeout [ 56.183458][ T5909] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.191553][ T5909] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.194840][ T5909] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.201207][ T5909] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.223675][ T5942] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.233428][ T5909] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.238221][ T5909] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.241114][ T5909] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.245138][ T5909] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.266887][ T5744] Bluetooth: hci3: command tx timeout [ 56.301336][ T5942] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.311756][ T5909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.330555][ T5909] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.337672][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.339998][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.348199][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.350446][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.368507][ T24] cfg80211: failed to load regulatory.db [ 56.419834][ T5942] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.520533][ T5942] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.528449][ T6004] raw_sendmsg: syz.2.16 forgot to set AF_INET. Fix it! [ 56.576077][ T5807] bridge_slave_1: left allmulticast mode [ 56.578000][ T5807] bridge_slave_1: left promiscuous mode [ 56.580106][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.584452][ T5807] bridge_slave_0: left allmulticast mode [ 56.586312][ T5807] bridge_slave_0: left promiscuous mode [ 56.588950][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.600099][ T5807] bridge_slave_1: left allmulticast mode [ 56.602493][ T5807] bridge_slave_1: left promiscuous mode [ 56.604976][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.612254][ T5807] bridge_slave_0: left allmulticast mode [ 56.614698][ T5807] bridge_slave_0: left promiscuous mode [ 56.620120][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.743726][ T5807] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.753503][ T5807] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.758605][ T5807] bond0 (unregistering): Released all slaves [ 56.841234][ T5807] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.846403][ T5807] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.849974][ T5807] bond0 (unregistering): Released all slaves [ 56.888289][ T5922] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.892732][ T5922] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.896039][ T5922] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.904129][ T5922] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.907313][ T5922] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.917516][ T5922] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.920499][ T5922] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.932411][ T5922] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.978179][ T5909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.019410][ T5942] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.024992][ T5942] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 57.028111][ T5942] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.032199][ T5942] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 57.035642][ T5942] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.039620][ T5942] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 57.042717][ T5942] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.047902][ T5942] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 57.138655][ T5909] veth0_vlan: entered promiscuous mode [ 57.181722][ T5909] veth1_vlan: entered promiscuous mode [ 57.202526][ T5922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.229585][ T5922] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.244580][ T5909] veth0_macvtap: entered promiscuous mode [ 57.267847][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.275647][ T5909] veth1_macvtap: entered promiscuous mode [ 57.295557][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.298635][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.380775][ T6027] jffs2: notice: (6027) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 57.390555][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.393558][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.429934][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.434484][ T5909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.442669][ T5909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.488111][ T5807] hsr_slave_0: left promiscuous mode [ 57.497522][ T5807] hsr_slave_1: left promiscuous mode [ 57.502902][ T5807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.511811][ T5807] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.518085][ T5807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.522369][ T5807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.531500][ T5807] hsr_slave_0: left promiscuous mode [ 57.533858][ T5807] hsr_slave_1: left promiscuous mode [ 57.535970][ T5807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.538627][ T5807] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.541747][ T5807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.544155][ T5807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.566052][ T5807] veth1_macvtap: left promiscuous mode [ 57.568699][ T5807] veth0_macvtap: left promiscuous mode [ 57.570563][ T5807] veth1_vlan: left promiscuous mode [ 57.572313][ T5807] veth0_vlan: left promiscuous mode [ 57.579570][ T5807] veth1_macvtap: left promiscuous mode [ 57.581343][ T5807] veth0_macvtap: left promiscuous mode [ 57.583168][ T5807] veth1_vlan: left promiscuous mode [ 57.584849][ T5807] veth0_vlan: left promiscuous mode [ 57.637059][ T5744] Bluetooth: hci1: command tx timeout [ 57.768833][ T5807] team0 (unregistering): Port device team_slave_1 removed [ 57.784314][ T5807] team0 (unregistering): Port device team_slave_0 removed [ 57.856823][ T5900] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 57.939226][ T5807] team0 (unregistering): Port device team_slave_1 removed [ 57.946223][ T5807] team0 (unregistering): Port device team_slave_0 removed [ 57.956651][ T5744] Bluetooth: hci2: command tx timeout [ 58.007263][ T5900] usb 7-1: Using ep0 maxpacket: 8 [ 58.011660][ T5900] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 58.015577][ T5900] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 58.021902][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.024968][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.028490][ T5900] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 58.032981][ T5900] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 58.039944][ T5900] usb 7-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 58.043869][ T5900] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.043956][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.047253][ T5900] usb 7-1: Product: syz [ 58.049998][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.051655][ T5900] usb 7-1: Manufacturer: syz [ 58.056476][ T5900] usb 7-1: SerialNumber: syz [ 58.056868][ T6000] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.064028][ T5900] usb 7-1: config 0 descriptor?? [ 58.073513][ T6032] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 58.164146][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.166746][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.190853][ T220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.194052][ T220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.207101][ T5579] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.209968][ T5579] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.236633][ T6033] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.271862][ T6042] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11'. [ 58.286679][ T5900] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 58.299357][ T5900] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input5 [ 58.356524][ T5744] Bluetooth: hci3: command tx timeout [ 58.362548][ T6042] netlink: 'syz.0.11': attribute type 12 has an invalid length. [ 58.461351][ T6054] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 58.465234][ T6054] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 58.469370][ T6054] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 58.510668][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.519492][ C3] powermate: config urb returned -71 [ 58.520107][ T41] usb 7-1: USB disconnect, device number 4 [ 58.521829][ C3] powermate: usb_submit_urb(config) failed [ 58.523903][ C3] powermate 7-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 58.566772][ T5942] veth0_vlan: entered promiscuous mode [ 58.573314][ T5942] veth1_vlan: entered promiscuous mode [ 58.583198][ T6060] device-mapper: ioctl: Invalid ioctl structure: name my, dev f800 [ 58.603074][ T5942] veth0_macvtap: entered promiscuous mode [ 58.607614][ T5942] veth1_macvtap: entered promiscuous mode [ 58.614357][ T5922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.623255][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.633934][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.737935][ T5807] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.742772][ T5807] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.750085][ T5807] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.754861][ T5807] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.783699][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.787927][ T5922] veth0_vlan: entered promiscuous mode [ 58.791930][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.803967][ T5922] veth1_vlan: entered promiscuous mode [ 58.825728][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.832882][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.844990][ T5922] veth0_macvtap: entered promiscuous mode [ 58.850806][ T5922] veth1_macvtap: entered promiscuous mode [ 58.862931][ T5922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.870045][ T5922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.899013][ T6033] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.903943][ T6033] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.938695][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.943678][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.985113][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.991977][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.014400][ T6069] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.056554][ T6033] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.061736][ T6033] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.117563][ T6078] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 1000003 out of range (51000000..2150000000) [ 59.140409][ T6080] tipc: Enabling of bearer rejected, failed to enable media [ 59.182151][ T6081] binder: 6076:6081 ioctl 80247008 800001c0 returned -22 [ 59.206925][ T6080] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 59.222338][ T6080] wusb3801 0-004a: supply vbus not found, using dummy regulator [ 59.245114][ T6080] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 59.706675][ T5744] Bluetooth: hci1: command tx timeout [ 60.030976][ T5744] Bluetooth: hci2: command tx timeout [ 60.134963][ T6083] printk: legacy console [ttyGS0] disabled [ 60.144817][ T6069] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.320081][ T6098] Console: switching to colour dummy device 80x25 [ 60.371544][ T6101] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 60.391980][ T6101] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 60.394394][ T6101] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 60.397536][ T6101] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 60.400390][ T6101] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 60.401820][ T6097] dummy0: entered promiscuous mode [ 60.410720][ T6101] pci 0000:00:01.0: Adding to iommu group 1 [ 60.413784][ T6097] dummy0: left promiscuous mode [ 60.418450][ T6101] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 60.420555][ T6101] pci 0000:00:01.0: vgaarb: bridge control possible [ 60.422652][ T6101] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 60.426859][ T5744] Bluetooth: hci3: command tx timeout [ 60.431019][ T6101] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 60.433681][ T6101] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 60.437842][ T6101] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 60.445957][ T6101] [drm] Found bochs VGA, ID 0xb0c5. [ 60.448965][ T6101] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 60.459607][ T6101] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 60.543879][ T6104] tipc: Started in network mode [ 60.543911][ T6104] tipc: Node identity 6ac614643dd4, cluster identity 4711 [ 60.544047][ T6104] tipc: Enabled bearer , priority 0 [ 60.566775][ T6101] Console: switching to colour frame buffer device 160x50 [ 60.577460][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 60.592129][ T41] libceph: connect (1)[c::]:6789 error -101 [ 60.592506][ T41] libceph: mon0 (1)[c::]:6789 connect error [ 60.629784][ T6069] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.640118][ T6101] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 60.736553][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 60.741973][ T10] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 60.745250][ T10] usb 6-1: config 0 has no interface number 0 [ 60.750270][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 60.753126][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.756604][ T10] usb 6-1: Product: syz [ 60.758338][ T10] usb 6-1: Manufacturer: syz [ 60.760331][ T10] usb 6-1: SerialNumber: syz [ 60.765392][ T10] usb 6-1: config 0 descriptor?? [ 60.769752][ T10] hub 6-1:0.132: bad descriptor, ignoring hub [ 60.772176][ T10] hub 6-1:0.132: probe with driver hub failed with error -5 [ 60.779035][ T10] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.132/input/input7 [ 60.849149][ T41] libceph: connect (1)[c::]:6789 error -101 [ 60.851544][ T41] libceph: mon0 (1)[c::]:6789 connect error [ 61.041895][ T6111] bond1: option arp_validate: invalid value (18446744073709551615) [ 61.045709][ T6111] bond1 (unregistering): Released all slaves [ 61.089040][ T6113] process 'syz.1.28' launched './file0' with NULL argv: empty string added [ 61.139964][ T6104] tipc: Disabling bearer [ 61.172655][ T6069] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.356990][ T41] libceph: connect (1)[c::]:6789 error -101 [ 61.359077][ T41] libceph: mon0 (1)[c::]:6789 connect error [ 61.403625][ T6106] ceph: No mds server is up or the cluster is laggy [ 61.523079][ T6124] netlink: 'syz.2.33': attribute type 9 has an invalid length. [ 61.525479][ T6124] netlink: 'syz.2.33': attribute type 1 has an invalid length. [ 61.528698][ T6124] netlink: 'syz.2.33': attribute type 8 has an invalid length. [ 61.590680][ T5442] 8021q: adding VLAN 0 to HW filter on device eth2 [ 61.594185][ T6129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.34'. [ 61.608856][ T6129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.34'. [ 61.629323][ T6129] ======================================================= [ 61.629323][ T6129] WARNING: The mand mount option has been deprecated and [ 61.629323][ T6129] and is ignored by this kernel. Remove the mand [ 61.629323][ T6129] option from the mount to silence this warning. [ 61.629323][ T6129] ======================================================= [ 61.684148][ T6135] loop5: detected capacity change from 0 to 7 [ 61.781783][ T5442] 8021q: adding VLAN 0 to HW filter on device eth3 [ 61.787127][ T5744] Bluetooth: hci1: command tx timeout [ 61.821937][ T6135] Dev loop5: unable to read RDB block 7 [ 61.824901][ T6135] loop5: unable to read partition table [ 61.827509][ T6135] loop5: partition table beyond EOD, truncated [ 61.830082][ T6135] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 61.997350][ T6150] ip6gre1: entered allmulticast mode [ 62.019264][ T5807] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 62.031671][ T5442] 8021q: adding VLAN 0 to HW filter on device eth4 [ 62.054261][ T6154] printk: legacy console [ttyGS0] disabled [ 62.106641][ T5744] Bluetooth: hci2: command tx timeout [ 62.209955][ T6165] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 62.285755][ T6169] binder: 6168:6169 ioctl c00c6211 0 returned -14 [ 62.507480][ T5744] Bluetooth: hci3: command tx timeout [ 63.286018][ T5442] 8021q: adding VLAN 0 to HW filter on device eth5 [ 64.041587][ T5836] usb 6-1: USB disconnect, device number 2 [ 64.179018][ T6199] netlink: 36 bytes leftover after parsing attributes in process `syz.3.46'. [ 64.182756][ T6199] netlink: 16 bytes leftover after parsing attributes in process `syz.3.46'. [ 64.185741][ T6199] netlink: 36 bytes leftover after parsing attributes in process `syz.3.46'. [ 64.226205][ T6193] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 65.370071][ T6237] netlink: 20 bytes leftover after parsing attributes in process `syz.3.51'. [ 66.266620][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 66.294925][ T6279] netlink: 'syz.1.61': attribute type 4 has an invalid length. [ 66.297579][ T6279] netlink: 28 bytes leftover after parsing attributes in process `syz.1.61'. [ 66.738566][ T5836] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 67.075457][ T5836] usb 6-1: device descriptor read/64, error -71 [ 67.137190][ T6285] xt_TCPMSS: Only works on TCP SYN packets [ 67.372613][ T5836] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 67.538391][ T5836] usb 6-1: device descriptor read/64, error -71 [ 67.654163][ T5836] usb usb6-port1: attempt power cycle [ 67.979799][ T42] audit: type=1326 audit(1786235338.916:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6294 comm="syz.0.65" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x0 [ 68.073286][ T5836] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 68.095996][ T6307] netlink: 20 bytes leftover after parsing attributes in process `syz.2.68'. [ 68.100987][ T6307] netlink: 'syz.2.68': attribute type 6 has an invalid length. [ 68.101188][ T5836] usb 6-1: device descriptor read/8, error -71 [ 68.110342][ T6307] netlink: 72 bytes leftover after parsing attributes in process `syz.2.68'. [ 68.243975][ T6313] Zero length message leads to an empty skb [ 68.269636][ T6033] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.273778][ T6033] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.277470][ T6033] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.280845][ T6033] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.386607][ T5836] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 68.407071][ T5836] usb 6-1: device descriptor read/8, error -71 [ 68.516920][ T5836] usb usb6-port1: unable to enumerate USB device [ 68.923961][ T6320] usb usb9: check_ctrlrecip: process 6320 (syz.2.72) requesting ep 01 but needs 81 [ 68.927062][ T6320] usb usb9: usbfs: process 6320 (syz.2.72) did not claim interface 0 before use [ 69.036733][ T29] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 69.114117][ T6325] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 69.123045][ T6325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.74'. [ 69.130056][ T6325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.74'. [ 69.135011][ T6325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.74'. [ 69.407508][ T6331] Console: switching to colour dummy device 80x25 [ 69.860743][ T29] usb 5-1: unable to get BOS descriptor or descriptor too short [ 69.941903][ T29] usb 5-1: not running at top speed; connect to a high speed hub [ 69.946713][ T29] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 69.950271][ T29] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 69.953751][ T29] usb 5-1: config 14 has an invalid descriptor of length 35, skipping remainder of the config [ 69.958085][ T29] usb 5-1: config 14 has no interface number 0 [ 69.960685][ T29] usb 5-1: config 14 has no interface number 1 [ 69.963290][ T29] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 69.967863][ T29] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 69.972644][ T29] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 9097, setting to 64 [ 69.977360][ T29] usb 5-1: config 14 interface 57 has no altsetting 0 [ 69.980235][ T29] usb 5-1: config 14 interface 228 has no altsetting 0 [ 69.985175][ T29] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 69.990813][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.994253][ T29] usb 5-1: Product: syz [ 69.996028][ T29] usb 5-1: Manufacturer: syz [ 69.998000][ T29] usb 5-1: SerialNumber: syz [ 70.146548][ T1341] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 70.289036][ T29] legousbtower 5-1:14.57: interrupt endpoints not found [ 70.301734][ T29] legousbtower 5-1:14.228: get version request failed: -71 [ 70.306566][ T1341] usb 6-1: Invalid ep0 maxpacket: 9 [ 70.308457][ T29] legousbtower 5-1:14.228: probe with driver legousbtower failed with error -71 [ 70.343122][ T29] usb 5-1: USB disconnect, device number 2 [ 70.436459][ T1341] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 70.586590][ T1341] usb 6-1: Invalid ep0 maxpacket: 9 [ 70.588879][ T1341] usb usb6-port1: attempt power cycle [ 70.694541][ T6366] __nla_validate_parse: 1 callbacks suppressed [ 70.694590][ T6366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.88'. [ 70.719472][ T6366] zram0: detected capacity change from 0 to 8 [ 70.829817][ T6370] FAULT_INJECTION: forcing a failure. [ 70.829817][ T6370] name failslab, interval 1, probability 0, space 0, times 1 [ 70.835191][ T6370] CPU: 3 UID: 0 PID: 6370 Comm: syz.0.90 Tainted: G L syzkaller #0 PREEMPT(full) [ 70.835218][ T6370] Tainted: [L]=SOFTLOCKUP [ 70.835224][ T6370] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.835241][ T6370] Call Trace: [ 70.835249][ T6370] [ 70.835256][ T6370] dump_stack_lvl+0x100/0x190 [ 70.835458][ T6370] should_fail_ex.cold+0x5/0xa [ 70.835485][ T6370] should_failslab+0xc2/0x120 [ 70.835518][ T6370] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 70.835544][ T6370] ? __alloc_skb+0x140/0x710 [ 70.835637][ T6370] __alloc_skb+0x140/0x710 [ 70.835657][ T6370] ? __alloc_skb+0x5b7/0x710 [ 70.835679][ T6370] ? __pfx___alloc_skb+0x10/0x10 [ 70.835702][ T6370] ? genl_rcv_msg+0x4be/0x800 [ 70.835740][ T6370] netlink_ack+0x117/0xb80 [ 70.835767][ T6370] netlink_rcv_skb+0x333/0x420 [ 70.835785][ T6370] ? __pfx_genl_rcv_msg+0x10/0x10 [ 70.835808][ T6370] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 70.835837][ T6370] ? netlink_deliver_tap+0x1ae/0xcc0 [ 70.835859][ T6370] genl_rcv+0x28/0x40 [ 70.835878][ T6370] netlink_unicast+0x585/0x850 [ 70.835918][ T6370] ? __pfx_netlink_unicast+0x10/0x10 [ 70.835945][ T6370] netlink_sendmsg+0x8b0/0xda0 [ 70.835969][ T6370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.835992][ T6370] ? apparmor_socket_sendmsg+0x15b/0x270 [ 70.836048][ T6370] ____sys_sendmsg+0xa4d/0xbe0 [ 70.836063][ T6370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.836081][ T6370] ? __pfx_____sys_sendmsg+0x10/0x10 [ 70.836105][ T6370] ___sys_sendmsg+0x190/0x1e0 [ 70.836127][ T6370] ? __pfx____sys_sendmsg+0x10/0x10 [ 70.836154][ T6370] ? find_held_lock+0x2b/0x80 [ 70.836198][ T6370] __sys_sendmsg+0x160/0x210 [ 70.836222][ T6370] ? __pfx___sys_sendmsg+0x10/0x10 [ 70.836252][ T6370] ? __pfx_ksys_write+0x10/0x10 [ 70.836274][ T6370] __do_fast_syscall_32+0xe7/0x970 [ 70.836361][ T6370] ? lockdep_hardirqs_on+0x78/0x100 [ 70.836386][ T6370] do_fast_syscall_32+0x32/0x70 [ 70.836411][ T6370] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 70.836433][ T6370] RIP: 0023:0xf700efec [ 70.836453][ T6370] Code: Unable to access opcode bytes at 0xf700efc2. [ 70.836478][ T6370] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 70.836497][ T6370] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 70.836508][ T6370] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 70.836517][ T6370] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 70.836527][ T6370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.836536][ T6370] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 70.836558][ T6370] [ 70.912466][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.940678][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.986558][ T1341] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 71.007131][ T1341] usb 6-1: Invalid ep0 maxpacket: 9 [ 71.072636][ T6384] netlink: 'syz.0.93': attribute type 2 has an invalid length. [ 71.075473][ T6384] netlink: 228 bytes leftover after parsing attributes in process `syz.0.93'. [ 71.097212][ T6384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.93'. [ 71.105969][ T6384] netlink: 'syz.0.93': attribute type 79 has an invalid length. [ 71.132077][ T6384] syz.0.93 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 71.136989][ T6384] CPU: 0 UID: 0 PID: 6384 Comm: syz.0.93 Tainted: G L syzkaller #0 PREEMPT(full) [ 71.137024][ T6384] Tainted: [L]=SOFTLOCKUP [ 71.137031][ T6384] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.137042][ T6384] Call Trace: [ 71.137051][ T6384] [ 71.137059][ T6384] dump_stack_lvl+0x100/0x190 [ 71.137089][ T6384] dump_header+0xfb/0x606 [ 71.137112][ T6384] oom_kill_process.cold+0xd/0x330 [ 71.137136][ T6384] out_of_memory+0x340/0x14f0 [ 71.137165][ T6384] ? __pfx_out_of_memory+0x10/0x10 [ 71.137194][ T6384] mem_cgroup_out_of_memory+0xc6/0x130 [ 71.137223][ T6384] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 71.137245][ T6384] ? find_held_lock+0x2b/0x80 [ 71.137275][ T6384] ? do_raw_spin_unlock+0x145/0x1e0 [ 71.137297][ T6384] ? _raw_spin_unlock+0x28/0x50 [ 71.137327][ T6384] try_charge_memcg+0x6e5/0xdf0 [ 71.137361][ T6384] ? __pfx_try_charge_memcg+0x10/0x10 [ 71.137390][ T6384] ? find_held_lock+0x2b/0x80 [ 71.137412][ T6384] ? rcu_read_unlock+0x17/0x60 [ 71.137440][ T6384] ? rcu_read_unlock+0x17/0x60 [ 71.137477][ T6384] __memcg_slab_post_alloc_hook+0x469/0x1160 [ 71.137516][ T6384] ? kasan_save_track+0x14/0x30 [ 71.137544][ T6384] kmem_cache_alloc_lru_noprof+0x583/0x6a0 [ 71.137570][ T6384] ? __d_alloc+0x35/0xa50 [ 71.137596][ T6384] __d_alloc+0x35/0xa50 [ 71.137630][ T6384] d_alloc+0x4a/0x1e0 [ 71.137655][ T6384] lookup_one_qstr_excl+0x171/0x250 [ 71.137685][ T6384] start_dirop+0x59/0xb0 [ 71.137704][ T6384] simple_start_creating+0xf9/0x110 [ 71.137722][ T6384] ? __pfx_simple_start_creating+0x10/0x10 [ 71.137742][ T6384] ? mntput+0x70/0xa0 [ 71.137758][ T6384] ? simple_pin_fs+0xa3/0x190 [ 71.137788][ T6384] debugfs_start_creating.part.0+0x82/0x170 [ 71.137831][ T6384] debugfs_create_dir+0x72/0x440 [ 71.137857][ T6384] ? lockdep_hardirqs_on+0x78/0x100 [ 71.137889][ T6384] bdi_register_va+0x2c0/0x820 [ 71.137921][ T6384] ? __pfx_bdi_register_va+0x10/0x10 [ 71.137948][ T6384] ? lockdep_init_map_type+0x5c/0x250 [ 71.137967][ T6384] ? bdi_init+0x3f4/0x5b0 [ 71.137994][ T6384] super_setup_bdi_name+0xff/0x250 [ 71.138021][ T6384] ? __pfx_super_setup_bdi_name+0x10/0x10 [ 71.138051][ T6384] ? do_raw_spin_unlock+0x145/0x1e0 [ 71.138072][ T6384] ? _raw_spin_unlock+0x28/0x50 [ 71.138102][ T6384] v9fs_get_tree+0x347/0xb50 [ 71.138126][ T6384] ? __pfx_v9fs_get_tree+0x10/0x10 [ 71.138150][ T6384] ? bpf_lsm_capable+0x9/0x10 [ 71.138171][ T6384] ? security_capable+0x80/0x260 [ 71.138194][ T6384] vfs_get_tree+0x92/0x320 [ 71.138222][ T6384] path_mount+0x7d0/0x23d0 [ 71.138251][ T6384] ? __pfx_path_mount+0x10/0x10 [ 71.138273][ T6384] ? lockdep_hardirqs_on+0x78/0x100 [ 71.138302][ T6384] ? putname+0xb1/0x110 [ 71.138322][ T6384] ? kmem_cache_free+0x127/0x6b0 [ 71.138352][ T6384] ? __ia32_sys_mount+0x292/0x310 [ 71.138404][ T6384] __ia32_sys_mount+0x292/0x310 [ 71.138432][ T6384] ? __pfx___ia32_sys_mount+0x10/0x10 [ 71.138467][ T6384] __do_fast_syscall_32+0xe7/0x970 [ 71.138498][ T6384] ? lockdep_hardirqs_on+0x78/0x100 [ 71.138526][ T6384] do_fast_syscall_32+0x32/0x70 [ 71.138556][ T6384] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 71.138581][ T6384] RIP: 0023:0xf700efec [ 71.138609][ T6384] Code: Unable to access opcode bytes at 0xf700efc2. [ 71.138619][ T6384] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 71.138640][ T6384] RAX: ffffffffffffffda RBX: 0000000080000100 RCX: 00000000800000c0 [ 71.138654][ T6384] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 71.138668][ T6384] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 71.138681][ T6384] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 71.138693][ T6384] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 71.138720][ T6384] [ 71.138729][ T6384] memory: usage 8kB, limit 8kB, failcnt 21 [ 71.146519][ T1341] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 71.149495][ T6384] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 71.167305][ T1341] usb 6-1: Invalid ep0 maxpacket: 9 [ 71.169037][ T6384] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 71.169055][ T6384] Memory cgroup stats for /syz0/test [ 71.171317][ T1341] usb usb6-port1: unable to enumerate USB device [ 71.172891][ T6384] : [ 71.172994][ T6384] cache 0 [ 71.180385][ T6387] binder: 6386:6387 ioctl c0245629 80000100 returned -22 [ 71.181183][ T6384] rss 0 [ 71.298949][ T6384] rss_huge 0 [ 71.300432][ T6384] shmem 0 [ 71.301796][ T6384] mapped_file 0 [ 71.303308][ T6384] dirty 0 [ 71.304597][ T6384] writeback 0 [ 71.306037][ T6384] workingset_refault_anon 0 [ 71.309499][ T6384] workingset_refault_file 0 [ 71.311516][ T6384] swap 0 [ 71.312809][ T6384] swapcached 0 [ 71.314332][ T6384] pgpgin 0 [ 71.315738][ T6384] pgpgout 0 [ 71.317316][ T6384] pgfault 0 [ 71.318831][ T6384] pgmajfault 0 [ 71.320301][ T6384] inactive_anon 0 [ 71.321903][ T6384] active_anon 0 [ 71.323452][ T6384] inactive_file 0 [ 71.325071][ T6384] active_file 0 [ 71.327012][ T6384] unevictable 0 [ 71.328580][ T6384] hierarchical_memory_limit 8192 [ 71.330773][ T6384] hierarchical_memsw_limit 9223372036854771712 [ 71.333429][ T6384] total_cache 0 [ 71.335004][ T6384] total_rss 0 [ 71.336504][ T6384] total_rss_huge 0 [ 71.338116][ T6384] total_shmem 0 [ 71.339599][ T6384] total_mapped_file 0 [ 71.341267][ T6384] total_dirty 0 [ 71.342733][ T6384] total_writeback 0 [ 71.344242][ T6384] total_workingset_refault_anon 0 [ 71.346299][ T6384] total_workingset_refault_file 0 [ 71.349947][ T6384] total_swap 0 [ 71.351434][ T6384] total_swapcached 0 [ 71.353067][ T6384] total_pgpgin 0 [ 71.354574][ T6384] total_pgpgout 0 [ 71.356100][ T6384] total_pgfault 0 [ 71.357712][ T6384] total_pgmajfault 0 [ 71.359233][ T6384] total_inactive_anon 0 [ 71.360754][ T6384] total_active_anon 0 [ 71.362242][ T6384] total_inactive_file 0 [ 71.363785][ T6384] total_active_file 0 [ 71.365253][ T6384] total_unevictable 0 [ 71.366896][ T6384] anon_cost 0 [ 71.368144][ T6384] file_cost 0 [ 71.369488][ T6384] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.93,pid=6383,uid=0 [ 71.375240][ T6384] Memory cgroup out of memory: Killed process 6383 (syz.0.93) total-vm:102024kB, anon-rss:1300kB, file-rss:23464kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 71.702829][ T6415] Bluetooth: MGMT ver 1.23 [ 72.555731][ T6441] overlayfs: overlapping lowerdir path [ 72.560969][ T6442] netlink: 'syz.2.105': attribute type 1 has an invalid length. [ 72.563550][ T6442] netlink: 224 bytes leftover after parsing attributes in process `syz.2.105'. [ 72.858515][ T2316] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 73.026698][ T2316] usb 7-1: Using ep0 maxpacket: 16 [ 73.033561][ T2316] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.039003][ T2316] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.043576][ T2316] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 73.056430][ T2316] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 73.059785][ T2316] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.073116][ T2316] usb 7-1: config 0 descriptor?? [ 73.085856][ T6459] netlink: 20 bytes leftover after parsing attributes in process `syz.1.112'. [ 73.267774][ T6463] netlink: 'syz.0.114': attribute type 2 has an invalid length. [ 73.271351][ T6463] netlink: 228 bytes leftover after parsing attributes in process `syz.0.114'. [ 73.362032][ T6463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.114'. [ 73.383092][ T6463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.114'. [ 73.457460][ T6463] syz.0.114 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 73.462748][ T6463] CPU: 1 UID: 0 PID: 6463 Comm: syz.0.114 Tainted: G L syzkaller #0 PREEMPT(full) [ 73.462787][ T6463] Tainted: [L]=SOFTLOCKUP [ 73.462795][ T6463] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.462836][ T6463] Call Trace: [ 73.462846][ T6463] [ 73.462857][ T6463] dump_stack_lvl+0x100/0x190 [ 73.462967][ T6463] dump_header+0xfb/0x606 [ 73.463004][ T6463] oom_kill_process.cold+0xd/0x330 [ 73.463032][ T6463] out_of_memory+0x340/0x14f0 [ 73.463070][ T6463] ? __pfx_out_of_memory+0x10/0x10 [ 73.463101][ T6463] mem_cgroup_out_of_memory+0xc6/0x130 [ 73.463129][ T6463] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 73.463160][ T6463] ? find_held_lock+0x2b/0x80 [ 73.463202][ T6463] ? do_raw_spin_unlock+0x145/0x1e0 [ 73.463231][ T6463] ? _raw_spin_unlock+0x28/0x50 [ 73.463335][ T6463] try_charge_memcg+0x6e5/0xdf0 [ 73.463375][ T6463] ? __pfx_try_charge_memcg+0x10/0x10 [ 73.463408][ T6463] ? find_held_lock+0x2b/0x80 [ 73.463436][ T6463] ? rcu_read_unlock+0x17/0x60 [ 73.463471][ T6463] ? rcu_read_unlock+0x17/0x60 [ 73.463515][ T6463] __memcg_slab_post_alloc_hook+0x469/0x1160 [ 73.463559][ T6463] ? kasan_save_track+0x14/0x30 [ 73.463589][ T6463] kmem_cache_alloc_noprof+0x587/0x6a0 [ 73.463618][ T6463] ? alloc_empty_file+0x5b/0x1c0 [ 73.463649][ T6463] alloc_empty_file+0x5b/0x1c0 [ 73.463678][ T6463] path_openat+0xe7/0x4280 [ 73.463703][ T6463] ? kasan_save_track+0x14/0x30 [ 73.463730][ T6463] ? __kasan_slab_alloc+0x89/0x90 [ 73.463775][ T6463] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 73.463804][ T6463] ? do_getname+0x35/0x390 [ 73.463829][ T6463] ? do_sys_openat2+0xc7/0x1e0 [ 73.463852][ T6463] ? __ia32_compat_sys_openat+0x12d/0x210 [ 73.463877][ T6463] ? __do_fast_syscall_32+0xe7/0x970 [ 73.463911][ T6463] ? __pfx_path_openat+0x10/0x10 [ 73.463940][ T6463] do_file_open+0x20e/0x430 [ 73.463958][ T6463] ? __lock_acquire+0x49f/0x1a40 [ 73.463990][ T6463] ? __pfx_do_file_open+0x10/0x10 [ 73.464028][ T6463] ? _raw_spin_unlock+0x28/0x50 [ 73.464052][ T6463] ? alloc_fd+0x471/0x7a0 [ 73.464081][ T6463] do_sys_openat2+0x10f/0x1e0 [ 73.464108][ T6463] ? __pfx_do_sys_openat2+0x10/0x10 [ 73.464134][ T6463] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 73.464177][ T6463] __ia32_compat_sys_openat+0x12d/0x210 [ 73.464210][ T6463] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 73.464253][ T6463] __do_fast_syscall_32+0xe7/0x970 [ 73.464284][ T6463] ? lockdep_hardirqs_on+0x78/0x100 [ 73.464314][ T6463] do_fast_syscall_32+0x32/0x70 [ 73.464342][ T6463] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 73.464367][ T6463] RIP: 0023:0xf700efec [ 73.464394][ T6463] Code: Unable to access opcode bytes at 0xf700efc2. [ 73.464424][ T6463] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 73.464445][ T6463] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800002c0 [ 73.464460][ T6463] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 73.464472][ T6463] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 73.464483][ T6463] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 73.464493][ T6463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 73.464518][ T6463] [ 73.465262][ T6463] memory: usage 8kB, limit 8kB, failcnt 137 [ 73.603529][ T6463] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 73.606812][ T6463] kmem: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 73.610919][ T6463] Memory cgroup stats for /syz0/test: [ 73.611739][ T6463] cache 0 [ 73.616134][ T6463] rss 0 [ 73.617576][ T6463] rss_huge 0 [ 73.618989][ T6463] shmem 0 [ 73.620269][ T6463] mapped_file 0 [ 73.621717][ T6463] dirty 0 [ 73.622985][ T6463] writeback 0 [ 73.624549][ T6463] workingset_refault_anon 0 [ 73.631282][ T6463] workingset_refault_file 0 [ 73.634747][ T6463] swap 0 [ 73.636246][ T6463] swapcached 0 [ 73.638736][ T6463] pgpgin 0 [ 73.640252][ T6463] pgpgout 0 [ 73.641732][ T6463] pgfault 4 [ 73.643323][ T6463] pgmajfault 1 [ 73.645140][ T6463] inactive_anon 0 [ 73.647035][ T6463] active_anon 0 [ 73.648997][ T6463] inactive_file 0 [ 73.650876][ T6463] active_file 0 [ 73.652596][ T6463] unevictable 0 [ 73.654311][ T6463] hierarchical_memory_limit 8192 [ 73.656930][ T6463] hierarchical_memsw_limit 9223372036854771712 [ 73.660113][ T6463] total_cache 0 [ 73.662420][ T6463] total_rss 0 [ 73.664205][ T6463] total_rss_huge 0 [ 73.666185][ T6463] total_shmem 0 [ 73.668797][ T6463] total_mapped_file 0 [ 73.671077][ T6463] total_dirty 0 [ 73.672710][ T6463] total_writeback 0 [ 73.674010][ T6463] total_workingset_refault_anon 0 [ 73.676231][ T6463] total_workingset_refault_file 0 [ 73.678659][ T6463] total_swap 0 [ 73.680480][ T6463] total_swapcached 0 [ 73.685174][ T6463] total_pgpgin 0 [ 73.687087][ T6463] total_pgpgout 0 [ 73.688872][ T6463] total_pgfault 4 [ 73.691266][ T6463] total_pgmajfault 1 [ 73.694283][ T6463] total_inactive_anon 0 [ 73.696309][ T6463] total_active_anon 0 [ 73.698340][ T6463] total_inactive_file 0 [ 73.700026][ T6463] total_active_file 0 [ 73.701468][ T6463] total_unevictable 0 [ 73.703185][ T6463] anon_cost 0 [ 73.705079][ T6463] file_cost 0 [ 73.709259][ T6463] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.114,pid=6462,uid=0 [ 73.719123][ T6463] Memory cgroup out of memory: Killed process 6462 (syz.0.114) total-vm:102156kB, anon-rss:1296kB, file-rss:23272kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 73.960466][ T2316] usbhid 7-1:0.0: can't add hid device: -71 [ 74.086425][ T2316] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 74.097476][ T2316] usb 7-1: USB disconnect, device number 5 [ 74.459878][ T6480] sch_fq: defrate 4294967295 ignored. [ 74.477491][ T6482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.120'. [ 74.481484][ T6482] netlink: 277 bytes leftover after parsing attributes in process `syz.2.120'. [ 74.501087][ T6484] bridge0: port 3(veth1_virt_wifi) entered blocking state [ 74.504185][ T6484] bridge0: port 3(veth1_virt_wifi) entered disabled state [ 74.506771][ T6484] veth1_virt_wifi: entered allmulticast mode [ 74.519806][ T6484] veth1_virt_wifi: left allmulticast mode [ 74.642339][ T6492] program syz.0.122 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.651041][ T6492] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 74.677205][ T6492] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 74.680712][ T6492] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 74.683910][ T6492] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 74.693025][ T6492] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 74.744101][ T6492] pci 0000:00:01.0: Adding to iommu group 1 [ 74.748816][ T2316] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 74.794564][ T6492] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 74.796738][ T6492] pci 0000:00:01.0: vgaarb: bridge control possible [ 74.798848][ T6492] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 74.818944][ T6492] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 74.821896][ T6492] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 74.832637][ T6492] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 74.937094][ T6492] [drm] Found bochs VGA, ID 0xb0c5. [ 74.938963][ T6492] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 75.000767][ T6492] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 75.314096][ T42] audit: type=1800 audit(1786235346.246:3): pid=6486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.117" name="file0" dev="fuse" ino=18446744073709551613 res=0 errno=0 [ 75.336553][ T2316] usb 6-1: Using ep0 maxpacket: 8 [ 75.342229][ T2316] usb 6-1: config 83 has an invalid interface number: 49 but max is 0 [ 75.342258][ T2316] usb 6-1: config 83 contains an unexpected descriptor of type 0x1, skipping [ 75.342274][ T2316] usb 6-1: config 83 has no interface number 0 [ 75.342309][ T2316] usb 6-1: config 83 interface 49 altsetting 128 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 75.342336][ T2316] usb 6-1: config 83 interface 49 altsetting 128 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 75.342388][ T2316] usb 6-1: config 83 interface 49 has no altsetting 0 [ 75.344861][ T2316] usb 6-1: New USB device found, idVendor=0582, idProduct=0040, bcdDevice=ff.46 [ 75.345067][ T2316] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.345085][ T2316] usb 6-1: Product: syz [ 75.345099][ T2316] usb 6-1: Manufacturer: syz [ 75.345112][ T2316] usb 6-1: SerialNumber: syz [ 75.396666][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 75.480449][ T6492] Console: switching to colour frame buffer device 160x50 [ 75.611791][ T6492] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 75.651017][ T2316] usb 6-1: USB disconnect, device number 11 [ 76.351415][ T6532] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 76.394876][ T6535] __nla_validate_parse: 2 callbacks suppressed [ 76.394897][ T6535] netlink: 20 bytes leftover after parsing attributes in process `syz.0.131'. [ 76.562613][ T6550] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 77.013258][ T6568] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 77.401210][ T6596] ufs: You didn't specify the type of your ufs filesystem [ 77.401210][ T6596] [ 77.401210][ T6596] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 77.401210][ T6596] [ 77.401210][ T6596] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 77.432226][ T6596] ufs: ufstype=old is supported read-only [ 77.454687][ T5900] kernel write not supported for file /input/event0 (pid: 5900 comm: kworker/3:5) [ 77.600397][ T6602] netlink: 16 bytes leftover after parsing attributes in process `syz.1.141'. [ 77.956769][ T6628] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 78.504094][ T6663] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 78.571962][ T2316] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 79.747431][ T2316] usb 5-1: Dual-Role OTG device on HNP port [ 79.752694][ T2316] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 79.758636][ T2316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.790251][ T2316] gspca_main: spca501-2.14.0 probing 0000:0000 [ 79.800869][ T2316] gspca_spca501: reg write: error -32 [ 79.803376][ T2316] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 79.806821][ T2316] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 79.932648][ T6643] Set syz1 is full, maxelem 65536 reached [ 79.988147][ T6697] loop5: detected capacity change from 0 to 7 [ 80.029078][ T6700] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 80.402335][ T6710] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 80.444351][ T6712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.450228][ T6712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.801080][ T6726] syz_tun: entered allmulticast mode [ 80.834421][ T6725] syz_tun: left allmulticast mode [ 80.840690][ T6729] netlink: 128 bytes leftover after parsing attributes in process `syz.1.173'. [ 80.849711][ T6729] netlink: 16 bytes leftover after parsing attributes in process `syz.1.173'. [ 80.891999][ T6734] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 80.931516][ T6739] capability: warning: `syz.2.175' uses deprecated v2 capabilities in a way that may be insecure [ 81.079496][ T6745] afs: Bad value for 'flock' [ 81.276524][ T1341] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 81.352007][ T6762] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 81.354188][ T6762] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 81.358819][ T6762] vhci_hcd vhci_hcd.0: Device attached [ 81.427686][ T1341] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.430993][ T1341] usb 6-1: config 0 has no interfaces? [ 81.434216][ T1341] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 81.437527][ T1341] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.440081][ T1341] usb 6-1: Product: syz [ 81.441404][ T1341] usb 6-1: Manufacturer: syz [ 81.442862][ T1341] usb 6-1: SerialNumber: syz [ 81.445797][ T1341] usb 6-1: config 0 descriptor?? [ 81.626629][ T5808] usb 38-1: SetAddress Request (2) to port 0 [ 81.631149][ T5808] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 81.658236][ T6751] jffs2: notice: (6751) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 81.670849][ T6751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.179'. [ 81.673752][ T6751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.179'. [ 81.683151][ T6751] Illegal XDP return value 68 on prog (id 22) dev N/A, expect packet loss! [ 81.693862][ T1341] usb 6-1: USB disconnect, device number 12 [ 81.964384][ T6764] vhci_hcd: connection reset by peer [ 81.970048][ T5579] vhci_hcd vhci_hcd.0: stop threads [ 81.972298][ T5579] vhci_hcd vhci_hcd.0: release socket [ 81.975721][ T5579] vhci_hcd vhci_hcd.0: disconnect device [ 82.210935][ T6782] netlink: 40 bytes leftover after parsing attributes in process `syz.3.185'. [ 82.210937][ T6774] netlink: 40 bytes leftover after parsing attributes in process `syz.3.185'. [ 82.245057][ T6784] input input10: cannot allocate more than FF_MAX_EFFECTS effects [ 82.287097][ T6790] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 82.289267][ T6790] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 82.291751][ T6790] vhci_hcd vhci_hcd.0: Device attached [ 82.298231][ T6790] netlink: 'syz.3.189': attribute type 12 has an invalid length. [ 82.301583][ T6791] vhci_hcd: connection closed [ 82.303296][ T5579] vhci_hcd vhci_hcd.3: stop threads [ 82.308457][ T5579] vhci_hcd vhci_hcd.3: release socket [ 82.310222][ T5579] vhci_hcd vhci_hcd.3: disconnect device [ 82.381487][ T6795] comedi comedi2: board detection failed [ 82.638879][ T5836] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 82.789187][ T6810] FAULT_INJECTION: forcing a failure. [ 82.789187][ T6810] name failslab, interval 1, probability 0, space 0, times 0 [ 82.793441][ T6810] CPU: 0 UID: 0 PID: 6810 Comm: syz.2.196 Tainted: G L syzkaller #0 PREEMPT(full) [ 82.793462][ T6810] Tainted: [L]=SOFTLOCKUP [ 82.793466][ T6810] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.793481][ T6810] Call Trace: [ 82.793486][ T6810] [ 82.793490][ T6810] dump_stack_lvl+0x100/0x190 [ 82.793597][ T6810] should_fail_ex.cold+0x5/0xa [ 82.793614][ T6810] should_failslab+0xc2/0x120 [ 82.793638][ T6810] kmem_cache_alloc_noprof+0x91/0x6a0 [ 82.793653][ T6810] ? do_getname+0x35/0x390 [ 82.793671][ T6810] do_getname+0x35/0x390 [ 82.793686][ T6810] quotactl_block+0x74/0x670 [ 82.793726][ T6810] ? preempt_schedule_irq+0x7b/0x90 [ 82.793802][ T6810] ? __pfx_quotactl_block+0x10/0x10 [ 82.793820][ T6810] ? irqentry_exit+0x24d/0xa00 [ 82.793840][ T6810] ? lockdep_hardirqs_on+0x78/0x100 [ 82.793860][ T6810] ? irqentry_exit+0x24d/0xa00 [ 82.793881][ T6810] __ia32_sys_quotactl+0x179/0x400 [ 82.793896][ T6810] ? __pfx___ia32_sys_quotactl+0x10/0x10 [ 82.793916][ T6810] __do_fast_syscall_32+0xe7/0x970 [ 82.793933][ T6810] ? lockdep_hardirqs_on+0x78/0x100 [ 82.793949][ T6810] do_fast_syscall_32+0x32/0x70 [ 82.793966][ T6810] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 82.793980][ T6810] RIP: 0023:0xf7ff3fec [ 82.793995][ T6810] Code: Unable to access opcode bytes at 0xf7ff3fc2. [ 82.794011][ T6810] RSP: 002b:00000000f547450c EFLAGS: 00000292 ORIG_RAX: 0000000000000083 [ 82.794022][ T6810] RAX: ffffffffffffffda RBX: 0000000080000402 RCX: 0000000080000040 [ 82.794029][ T6810] RDX: 0000000000000000 RSI: 00000000800003c0 RDI: 0000000000000000 [ 82.794039][ T6810] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 82.794045][ T6810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.794051][ T6810] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 82.794065][ T6810] [ 82.877342][ T5836] usb 6-1: not running at top speed; connect to a high speed hub [ 82.880711][ T5836] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.884021][ T5836] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 82.887190][ T5836] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 82.894802][ T5836] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 82.897757][ T5836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.905929][ T5836] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 82.916612][ T5836] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 82.923366][ T5836] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 82.932915][ T5836] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 82.935429][ T5836] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 82.940345][ T5836] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 83.113599][ T6797] scsi_strcpy_devinfo: vendor string 'QT?]+,r' is too long [ 83.121770][ T5836] usb 6-1: USB disconnect, device number 13 [ 83.131020][ T5836] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 83.136855][ T5836] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 83.140277][ T5836] keyspan 6-1:1.0: device disconnected [ 83.954600][ T6832] netlink: 'syz.3.203': attribute type 1 has an invalid length. [ 83.990375][ T6834] overlay: Unknown parameter 'fscontext' [ 84.009713][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.204'. [ 84.128199][ T6838] cgroup: none used incorrectly [ 84.133021][ T6838] device-mapper: table: 248:1: too large device [ 84.135877][ T6838] device-mapper: ioctl: error adding target to table [ 84.411284][ T6856] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 84.466799][ T6862] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 84.469827][ T6862] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 84.473160][ T6862] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 84.515356][ T6866] netlink: 12 bytes leftover after parsing attributes in process `syz.2.217'. [ 84.535082][ T6866] netlink: 12 bytes leftover after parsing attributes in process `syz.2.217'. [ 84.544227][ T6866] netlink: 12 bytes leftover after parsing attributes in process `syz.2.217'. [ 84.785830][ T6883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 85.610595][ T6898] tipc: Enabling of bearer rejected, failed to enable media [ 85.613422][ T6900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.229'. [ 85.619042][ T6900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.229'. [ 85.718644][ T5579] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.722488][ T5579] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.834427][ T5579] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.841250][ T5579] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.926797][ T1341] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 85.931166][ T5743] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.938460][ T5743] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.942252][ T5743] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.945824][ T5743] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.948643][ T5743] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.980380][ T5579] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.984687][ T5579] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.992786][ T6912] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 86.052360][ T6917] capability: warning: `syz.3.235' uses 32-bit capabilities (legacy support in use) [ 86.075824][ T5579] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.082076][ T5579] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.108104][ T1341] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 86.113103][ T1341] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 86.123228][ T1341] usb 6-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 86.127688][ T1341] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.132865][ T1341] usb 6-1: Product: syz [ 86.134229][ T1341] usb 6-1: Manufacturer: syz [ 86.141073][ T1341] usb 6-1: SerialNumber: syz [ 86.285962][ T5579] bridge_slave_1: left allmulticast mode [ 86.288410][ T5579] bridge_slave_1: left promiscuous mode [ 86.291610][ T5579] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.295701][ T5579] bridge_slave_0: left allmulticast mode [ 86.297816][ T5579] bridge_slave_0: left promiscuous mode [ 86.299678][ T5579] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.400923][ T5579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.411972][ T5579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.415691][ T5579] bond0 (unregistering): Released all slaves [ 86.416426][ T5900] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 86.579408][ T5900] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 544 [ 86.589756][ T5900] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 86.594702][ T5900] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.600254][ T5900] usb 8-1: Product: syz [ 86.601700][ T5900] usb 8-1: Manufacturer: syz [ 86.604646][ T5900] usb 8-1: SerialNumber: syz [ 86.625034][ T6923] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 86.698509][ T5808] usb 38-1: device descriptor read/8, error -110 [ 86.711831][ T1341] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 86.731459][ T1341] usb 6-1: USB disconnect, device number 14 [ 86.735815][ T5828] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 86.747198][ T1341] usblp0: removed [ 86.809784][ T6908] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.812194][ T6908] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.814496][ T6908] bridge_slave_0: entered allmulticast mode [ 86.817556][ T6908] bridge_slave_0: entered promiscuous mode [ 86.825952][ T6908] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.831857][ T6908] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.834241][ T6908] bridge_slave_1: entered allmulticast mode [ 86.837026][ T6908] bridge_slave_1: entered promiscuous mode [ 87.018490][ T5442] 8021q: adding VLAN 0 to HW filter on device eth6 [ 87.035075][ T6908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.049303][ T6908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.117587][ T5808] usb usb38-port1: attempt power cycle [ 87.121534][ T6908] team0: Port device team_slave_0 added [ 87.133160][ T5579] hsr_slave_0: left promiscuous mode [ 87.135551][ T5579] hsr_slave_1: left promiscuous mode [ 87.139929][ T5579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.142810][ T5579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.146923][ T2316] usb 8-1: USB disconnect, device number 2 [ 87.157045][ T5579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.161131][ T5579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.177605][ T5579] veth1_macvtap: left promiscuous mode [ 87.179538][ T5579] veth0_macvtap: left promiscuous mode [ 87.185710][ T5579] veth1_vlan: left promiscuous mode [ 87.187798][ T5579] veth0_vlan: left promiscuous mode [ 87.189540][ T5828] ath9k_htc 8-1:1.0: ath9k_htc: Unable to initialize HTC services [ 87.239850][ T6944] ceph: Path missing in source [ 87.554172][ T5579] team0 (unregistering): Port device team_slave_1 removed [ 87.567688][ T5579] team0 (unregistering): Port device team_slave_0 removed [ 87.599449][ T5828] ath9k_htc: Failed to initialize the device [ 87.602221][ T2316] usb 8-1: ath9k_htc: USB layer deinitialized [ 87.698024][ T5808] usb usb38-port1: unable to enumerate USB device [ 87.709811][ T6908] team0: Port device team_slave_1 added [ 87.738304][ T6908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.740592][ T6908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.750835][ T6908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.755403][ T6908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.757987][ T6908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.766018][ T6908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.825002][ T6908] hsr_slave_0: entered promiscuous mode [ 87.829068][ T6908] hsr_slave_1: entered promiscuous mode [ 87.846647][ T6947] netlink: 'syz.0.240': attribute type 1 has an invalid length. [ 87.849215][ T6947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.240'. [ 87.944206][ T5442] 8021q: adding VLAN 0 to HW filter on device eth7 [ 88.027453][ T5743] Bluetooth: hci0: command tx timeout [ 88.044318][ T6908] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.050198][ T6908] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.053087][ T6908] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.058563][ T6908] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.062544][ T6908] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.079675][ T6908] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.083437][ T6908] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.094695][ T6908] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.149043][ T6976] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 88.173919][ T6908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.201466][ T5442] 8021q: adding VLAN 0 to HW filter on device eth8 [ 88.210121][ T6908] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.222368][ T6401] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.224707][ T6401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.239353][ T6406] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.241751][ T6406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.264748][ T6981] syzkaller1: entered promiscuous mode [ 88.274679][ T6981] syzkaller1: entered allmulticast mode [ 88.380899][ T6981] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 88.389856][ T6981] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 88.411182][ T6981] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 88.418795][ T6981] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 88.423630][ T6981] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 88.440511][ T6981] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 88.445410][ T6981] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 88.448032][ T6981] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 88.452929][ T6981] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 88.458299][ T6981] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 88.464656][ T6981] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 88.473540][ T6981] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 88.474632][ T5442] 8021q: adding VLAN 0 to HW filter on device eth9 [ 88.630072][ T6908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.649757][ T7021] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 88.700596][ T7024] netlink: 'syz.0.252': attribute type 4 has an invalid length. [ 88.852985][ T7035] 9pnet_virtio: no channels available for device syz [ 88.854198][ T6908] veth0_vlan: entered promiscuous mode [ 88.865055][ T6908] veth1_vlan: entered promiscuous mode [ 88.883781][ T6908] veth0_macvtap: entered promiscuous mode [ 88.891407][ T6908] veth1_macvtap: entered promiscuous mode [ 88.907168][ T6908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.918189][ T6908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.053775][ T7041] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 89.568993][ T6033] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.597926][ T6397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.598383][ T6033] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.603493][ T6033] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.603801][ T6397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.628988][ T6401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.631940][ T6401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.658129][ T5807] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.723368][ T7051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 89.937828][ T7067] atomic_op ffff888012cfd198 conn xmit_atomic 0000000000000000 [ 90.440954][ T5743] Bluetooth: hci2: command 0x0c1a tx timeout [ 90.441029][ T5744] Bluetooth: hci1: command 0x0c1a tx timeout [ 90.477745][ T7084] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 90.495829][ T7084] netlink: 16 bytes leftover after parsing attributes in process `syz.1.268'. [ 90.498222][ T7066] syz.3.258 uses obsolete (PF_INET,SOCK_PACKET) [ 90.506602][ T5744] Bluetooth: hci0: command 0x040f tx timeout [ 90.506658][ T5743] Bluetooth: hci3: command 0x0c1a tx timeout [ 90.708462][ T7093] device-mapper: table: 248:1: too large device [ 90.710747][ T7093] device-mapper: ioctl: error adding target to table [ 90.872179][ T7104] FAULT_INJECTION: forcing a failure. [ 90.872179][ T7104] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 90.882563][ T7104] CPU: 1 UID: 0 PID: 7104 Comm: syz.3.274 Tainted: G L syzkaller #0 PREEMPT(full) [ 90.882592][ T7104] Tainted: [L]=SOFTLOCKUP [ 90.882599][ T7104] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 90.882608][ T7104] Call Trace: [ 90.882614][ T7104] [ 90.882621][ T7104] dump_stack_lvl+0x100/0x190 [ 90.882647][ T7104] should_fail_ex.cold+0x5/0xa [ 90.882670][ T7104] _copy_from_iter+0x1f4/0x1690 [ 90.882717][ T7104] ? __pfx__copy_from_iter+0x10/0x10 [ 90.882743][ T7104] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 90.882779][ T7104] copy_page_from_iter+0x238/0x300 [ 90.882810][ T7104] tun_build_skb.constprop.0+0x2ea/0x18f0 [ 90.882875][ T7104] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 90.882895][ T7104] ? unwind_get_return_address+0x59/0xa0 [ 90.882931][ T7104] ? arch_stack_walk+0xa6/0xf0 [ 90.882959][ T7104] ? __lock_acquire+0x49f/0x1a40 [ 90.883006][ T7104] tun_get_user+0x16d6/0x3c20 [ 90.883037][ T7104] ? __pfx_tun_get_user+0x10/0x10 [ 90.883058][ T7104] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 90.883083][ T7104] ? find_held_lock+0x2b/0x80 [ 90.883105][ T7104] ? tun_get+0x191/0x370 [ 90.883123][ T7104] ? tun_get+0x191/0x370 [ 90.883145][ T7104] tun_chr_write_iter+0xdc/0x200 [ 90.883167][ T7104] vfs_write+0x6ac/0x1050 [ 90.883186][ T7104] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 90.883210][ T7104] ? __pfx_vfs_write+0x10/0x10 [ 90.883223][ T7104] ? find_held_lock+0x2b/0x80 [ 90.883259][ T7104] ksys_write+0x12a/0x250 [ 90.883278][ T7104] ? __pfx_ksys_write+0x10/0x10 [ 90.883301][ T7104] do_int80_emulation+0x14b/0x720 [ 90.883332][ T7104] asm_int80_emulation+0x1a/0x20 [ 90.883350][ T7104] RIP: 0023:0xf71d74eb [ 90.883365][ T7104] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 90.883381][ T7104] RSP: 002b:00000000f549644c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 90.883400][ T7104] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080001600 [ 90.883410][ T7104] RDX: 000000000000003e RSI: 0000000000000000 RDI: 0000000000000000 [ 90.883419][ T7104] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 90.883430][ T7104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.883439][ T7104] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 90.883462][ T7104] [ 91.040434][ T7110] usb 5-1: USB disconnect, device number 3 [ 91.069717][ T7113] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 91.105317][ T7108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.277'. [ 91.154879][ T7110] ================================================================== [ 91.157507][ T7110] BUG: KASAN: slab-use-after-free in snd_usb_midi_v2_free+0x52d/0x670 [ 91.160090][ T7110] Write of size 8 at addr ffff88804ffdc350 by task syz.0.278/7110 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 91.163591][ T7110] [ 91.165255][ T7110] CPU: 0 UID: 0 PID: 7110 Comm: syz.0.278 Tainted: G L syzkaller #0 PREEMPT(full) [ 91.165276][ T7110] Tainted: [L]=SOFTLOCKUP [ 91.165281][ T7110] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 91.165289][ T7110] Call Trace: [ 91.165293][ T7110] [ 91.165299][ T7110] dump_stack_lvl+0x100/0x190 [ 91.165315][ T7110] print_report+0x13d/0x4b0 [ 91.165334][ T7110] ? __virt_addr_valid+0x239/0x430 [ 91.165349][ T7110] ? snd_usb_midi_v2_free+0x52d/0x670 [ 91.165364][ T7110] kasan_report+0xdf/0x1c0 [ 91.165383][ T7110] ? snd_usb_midi_v2_free+0x52d/0x670 [ 91.165397][ T7110] snd_usb_midi_v2_free+0x52d/0x670 [ 91.165411][ T7110] ? __pfx_snd_ctl_dev_free+0x10/0x10 [ 91.165440][ T7110] snd_usb_midi_v2_free_all+0x85/0xe0 [ 91.165456][ T7110] snd_usb_audio_free+0x4e/0x120 [ 91.165475][ T7110] ? __pfx_snd_usb_audio_free+0x10/0x10 [ 91.165494][ T7110] release_card_device+0xb2/0x1a0 [ 91.165508][ T7110] ? __pfx_release_card_device+0x10/0x10 [ 91.165522][ T7110] device_release+0xd2/0x270 [ 91.165545][ T7110] kobject_put+0x1f7/0x640 [ 91.165559][ T7110] ? snd_card_disconnect.part.0+0x443/0x5b0 [ 91.165573][ T7110] put_device+0x1f/0x30 [ 91.165586][ T7110] snd_card_free_when_closed+0x2b/0x40 [ 91.165600][ T7110] usb_audio_disconnect+0x210/0x680 [ 91.165620][ T7110] usb_unbind_interface+0x1dd/0x9e0 [ 91.165660][ T7110] ? __pfx_usb_unbind_interface+0x10/0x10 [ 91.165680][ T7110] device_remove+0x12a/0x180 [ 91.165696][ T7110] device_release_driver_internal+0x44e/0x620 [ 91.165716][ T7110] bus_remove_device+0x2bc/0x560 [ 91.165733][ T7110] ? __pfx_bus_remove_device+0x10/0x10 [ 91.165747][ T7110] ? __pfx_device_remove_attrs+0x10/0x10 [ 91.165764][ T7110] device_del+0x376/0x9b0 [ 91.165780][ T7110] ? __pfx_device_del+0x10/0x10 [ 91.165794][ T7110] ? __pfx___pm_runtime_barrier+0x10/0x10 [ 91.165810][ T7110] usb_disable_device+0x367/0x810 [ 91.165825][ T7110] ? rcu_is_watching+0x12/0xc0 [ 91.165840][ T7110] usb_disconnect+0x2e2/0x9a0 [ 91.165855][ T7110] hub_quiesce+0x16d/0x320 [ 91.165870][ T7110] hub_disconnect+0xd5/0x510 [ 91.165885][ T7110] usb_unbind_interface+0x1dd/0x9e0 [ 91.165902][ T7110] ? __pfx_usb_unbind_interface+0x10/0x10 [ 91.165919][ T7110] device_remove+0x12a/0x180 [ 91.165933][ T7110] device_release_driver_internal+0x44e/0x620 [ 91.165950][ T7110] usb_driver_release_interface+0x10e/0x190 [ 91.165968][ T7110] proc_disconnect_claim+0x21b/0x390 [ 91.165980][ T7110] ? __pfx_proc_disconnect_claim+0x10/0x10 [ 91.165992][ T7110] ? trace_contention_end+0x126/0x160 [ 91.166008][ T7110] ? lockdep_hardirqs_on+0x78/0x100 [ 91.166023][ T7110] ? find_held_lock+0x2b/0x80 [ 91.166037][ T7110] usbdev_ioctl+0xbf5/0x3aa0 [ 91.166049][ T7110] ? __pfx_usbdev_ioctl+0x10/0x10 [ 91.166060][ T7110] ? futex_wait+0x11e/0x370 [ 91.166077][ T7110] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 91.166098][ T7110] ? do_vfs_ioctl+0x226/0x13e0 [ 91.166116][ T7110] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 91.166135][ T7110] ? find_held_lock+0x2b/0x80 [ 91.166150][ T7110] ? __fget_files+0x215/0x3d0 [ 91.166162][ T7110] ? hook_file_ioctl_common+0x140/0x440 [ 91.166184][ T7110] ? __fget_files+0x21f/0x3d0 [ 91.166194][ T7110] ? __pfx_usbdev_ioctl+0x10/0x10 [ 91.166206][ T7110] compat_ptr_ioctl+0x6e/0xa0 [ 91.166222][ T7110] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 91.166238][ T7110] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 91.166258][ T7110] __do_fast_syscall_32+0xe7/0x970 [ 91.166305][ T7110] ? lockdep_hardirqs_on+0x78/0x100 [ 91.166322][ T7110] do_fast_syscall_32+0x32/0x70 [ 91.166341][ T7110] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 91.166359][ T7110] RIP: 0023:0xf700efec [ 91.166374][ T7110] Code: Unable to access opcode bytes at 0xf700efc2. [ 91.166380][ T7110] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 91.166393][ T7110] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000008108551b [ 91.166400][ T7110] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 91.166407][ T7110] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 91.166413][ T7110] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 91.166420][ T7110] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 91.166429][ T7110] [ 91.166433][ T7110] [ 91.192061][ T7118] netlink: 64 bytes leftover after parsing attributes in process `syz.0.278'. [ 91.192392][ T7110] Allocated by task 2316: [ 91.192410][ T7110] kasan_save_stack+0x30/0x50 [ 91.304352][ T7110] kasan_save_track+0x14/0x30 [ 91.305863][ T7110] __kasan_kmalloc+0xaa/0xb0 [ 91.307342][ T7110] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 91.309037][ T7110] snd_ump_endpoint_new+0x93/0x470 [ 91.310666][ T7110] create_midi2_ump+0x2dd/0x920 [ 91.312228][ T7110] snd_usb_midi_v2_create+0x11fa/0x4070 [ 91.313954][ T7110] snd_usb_create_stream.isra.0+0x386/0x4d0 [ 91.315796][ T7110] usb_audio_probe+0xf05/0x3b10 [ 91.317278][ T7110] usb_probe_interface+0x303/0x8f0 [ 91.318916][ T7110] really_probe+0x241/0xa60 [ 91.320351][ T7110] __driver_probe_device+0x20e/0x450 [ 91.322032][ T7110] driver_probe_device+0x4a/0x140 [ 91.323624][ T7110] __device_attach_driver+0x1df/0x320 [ 91.325326][ T7110] bus_for_each_drv+0x159/0x1e0 [ 91.326869][ T7110] __device_attach+0x1e4/0x4d0 [ 91.328394][ T7110] device_initial_probe+0xaf/0xd0 [ 91.329988][ T7110] bus_probe_device+0x64/0x160 [ 91.331533][ T7110] device_add+0x121d/0x1970 [ 91.332965][ T7110] usb_set_configuration+0xd97/0x1c60 [ 91.334678][ T7110] usb_generic_driver_probe+0xa1/0xe0 [ 91.336366][ T7110] usb_probe_device+0xef/0x400 [ 91.337880][ T7110] really_probe+0x241/0xa60 [ 91.339332][ T7110] __driver_probe_device+0x20e/0x450 [ 91.340990][ T7110] driver_probe_device+0x4a/0x140 [ 91.342595][ T7110] __device_attach_driver+0x1df/0x320 [ 91.344294][ T7110] bus_for_each_drv+0x159/0x1e0 [ 91.345841][ T7110] __device_attach+0x1e4/0x4d0 [ 91.347367][ T7110] device_initial_probe+0xaf/0xd0 [ 91.348968][ T7110] bus_probe_device+0x64/0x160 [ 91.350492][ T7110] device_add+0x121d/0x1970 [ 91.351950][ T7110] usb_new_device.cold+0x685/0x115c [ 91.353619][ T7110] hub_event+0x30a3/0x4a60 [ 91.355061][ T7110] process_one_work+0xa23/0x1940 [ 91.356628][ T7110] worker_thread+0x5ef/0xe50 [ 91.358098][ T7110] kthread+0x370/0x450 [ 91.359398][ T7110] ret_from_fork+0x72b/0xd50 [ 91.360864][ T7110] ret_from_fork_asm+0x1a/0x30 [ 91.362414][ T7110] [ 91.363185][ T7110] Freed by task 7110: [ 91.364450][ T7110] kasan_save_stack+0x30/0x50 [ 91.365947][ T7110] kasan_save_track+0x14/0x30 [ 91.367442][ T7110] kasan_save_free_info+0x3b/0x70 [ 91.369032][ T7110] __kasan_slab_free+0x5f/0x80 [ 91.370559][ T7110] kfree+0x22b/0x6c0 [ 91.371837][ T7110] snd_rawmidi_dev_free+0x3e/0x60 [ 91.373440][ T7110] __snd_device_free+0x1a3/0x300 [ 91.375023][ T7110] snd_device_free_all+0xf3/0x220 [ 91.376605][ T7110] release_card_device+0x77/0x1a0 [ 91.378191][ T7110] device_release+0xd2/0x270 [ 91.379691][ T7110] kobject_put+0x1f7/0x640 [ 91.381165][ T7110] put_device+0x1f/0x30 [ 91.382546][ T7110] snd_card_free_when_closed+0x2b/0x40 [ 91.384260][ T7110] usb_audio_disconnect+0x210/0x680 [ 91.385960][ T7110] usb_unbind_interface+0x1dd/0x9e0 [ 91.387768][ T7110] device_remove+0x12a/0x180 [ 91.389256][ T7110] device_release_driver_internal+0x44e/0x620 [ 91.391191][ T7110] bus_remove_device+0x2bc/0x560 [ 91.392951][ T7110] device_del+0x376/0x9b0 [ 91.394343][ T7110] usb_disable_device+0x367/0x810 [ 91.395962][ T7110] usb_disconnect+0x2e2/0x9a0 [ 91.397474][ T7110] hub_quiesce+0x16d/0x320 [ 91.398903][ T7110] hub_disconnect+0xd5/0x510 [ 91.400374][ T7110] usb_unbind_interface+0x1dd/0x9e0 [ 91.402045][ T7110] device_remove+0x12a/0x180 [ 91.403532][ T7110] device_release_driver_internal+0x44e/0x620 [ 91.405468][ T7110] usb_driver_release_interface+0x10e/0x190 [ 91.407348][ T7110] proc_disconnect_claim+0x21b/0x390 [ 91.409016][ T7110] usbdev_ioctl+0xbf5/0x3aa0 [ 91.410485][ T7110] compat_ptr_ioctl+0x6e/0xa0 [ 91.412007][ T7110] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 91.413892][ T7110] __do_fast_syscall_32+0xe7/0x970 [ 91.415547][ T7110] do_fast_syscall_32+0x32/0x70 [ 91.417096][ T7110] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 91.419086][ T7110] [ 91.419858][ T7110] The buggy address belongs to the object at ffff88804ffdc000 [ 91.419858][ T7110] which belongs to the cache kmalloc-4k of size 4096 [ 91.424184][ T7110] The buggy address is located 848 bytes inside of [ 91.424184][ T7110] freed 4096-byte region [ffff88804ffdc000, ffff88804ffdd000) [ 91.428453][ T7110] [ 91.429223][ T7110] The buggy address belongs to the physical page: [ 91.431218][ T7110] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4ffd8 [ 91.433955][ T7110] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 91.436586][ T7110] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 91.438962][ T7110] page_type: f5(slab) [ 91.440232][ T7110] raw: 04fff00000000040 ffff88801bc43040 dead000000000100 dead000000000122 [ 91.442917][ T7110] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 91.445584][ T7110] head: 04fff00000000040 ffff88801bc43040 dead000000000100 dead000000000122 [ 91.448304][ T7110] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 91.451019][ T7110] head: 04fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 91.453719][ T7110] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 91.456425][ T7110] page dumped because: kasan: bad access detected [ 91.458457][ T7110] page_owner tracks the page as allocated [ 91.460241][ T7110] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5154, tgid 5154 (udevd), ts 21709669388, free_ts 0 [ 91.466106][ T7110] post_alloc_hook+0xfd/0x120 [ 91.467617][ T7110] get_page_from_freelist+0xf48/0x3530 [ 91.469338][ T7110] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 91.471227][ T7110] new_slab+0xa2/0x640 [ 91.472564][ T7110] refill_objects+0xe3/0x410 [ 91.474058][ T7110] __pcs_replace_empty_main+0x376/0x680 [ 91.475836][ T7110] __kmalloc_noprof+0x66d/0x820 [ 91.477407][ T7110] tomoyo_realpath_from_path+0xb6/0x690 [ 91.479166][ T7110] tomoyo_path_perm+0x276/0x460 [ 91.480724][ T7110] security_inode_getattr+0x116/0x280 [ 91.482453][ T7110] vfs_statx+0x11f/0x3f0 [ 91.483798][ T7110] vfs_fstatat+0x77/0xe0 [ 91.485154][ T7110] __do_sys_newfstatat+0x9d/0x120 [ 91.486757][ T7110] do_syscall_64+0x115/0x840 [ 91.488250][ T7110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.490106][ T7110] page_owner free stack trace missing [ 91.491794][ T7110] [ 91.492564][ T7110] Memory state around the buggy address: [ 91.494325][ T7110] ffff88804ffdc200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 91.496822][ T7110] ffff88804ffdc280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 91.499313][ T7110] >ffff88804ffdc300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 91.501800][ T7110] ^ [ 91.503887][ T7110] ffff88804ffdc380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 91.506410][ T7110] ffff88804ffdc400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 91.508904][ T7110] ================================================================== [ 91.513664][ T7110] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 91.516057][ T7110] CPU: 1 UID: 0 PID: 7110 Comm: syz.0.278 Tainted: G L syzkaller #0 PREEMPT(full) [ 91.519556][ T7110] Tainted: [L]=SOFTLOCKUP [ 91.520944][ T7110] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 91.524101][ T7110] Call Trace: [ 91.525160][ T7110] [ 91.526102][ T7110] dump_stack_lvl+0x100/0x190 [ 91.527598][ T7110] vpanic+0x552/0x970 [ 91.528873][ T7110] ? __pfx_vpanic+0x10/0x10 [ 91.530320][ T7110] ? rcu_is_watching+0x12/0xc0 [ 91.531865][ T7110] ? snd_usb_midi_v2_free+0x52d/0x670 [ 91.533548][ T7110] panic+0xd1/0xe0 [ 91.534744][ T7110] ? __pfx_panic+0x10/0x10 [ 91.536153][ T7110] ? snd_usb_midi_v2_free+0x52d/0x670 [ 91.537846][ T7110] ? preempt_schedule_common+0x42/0xc0 [ 91.539564][ T7110] check_panic_on_warn.cold+0x19/0x34 [ 91.541242][ T7110] end_report.part.0+0x3a/0x90 [ 91.542788][ T7110] kasan_report.cold+0xe/0x18 [ 91.544273][ T7110] ? snd_usb_midi_v2_free+0x52d/0x670 [ 91.545958][ T7110] snd_usb_midi_v2_free+0x52d/0x670 [ 91.547632][ T7110] ? __pfx_snd_ctl_dev_free+0x10/0x10 [ 91.549319][ T7110] snd_usb_midi_v2_free_all+0x85/0xe0 [ 91.551008][ T7110] snd_usb_audio_free+0x4e/0x120 [ 91.552584][ T7110] ? __pfx_snd_usb_audio_free+0x10/0x10 [ 91.554595][ T7110] release_card_device+0xb2/0x1a0 [ 91.556238][ T7110] ? __pfx_release_card_device+0x10/0x10 [ 91.558000][ T7110] device_release+0xd2/0x270 [ 91.559480][ T7110] kobject_put+0x1f7/0x640 [ 91.560890][ T7110] ? snd_card_disconnect.part.0+0x443/0x5b0 [ 91.562783][ T7110] put_device+0x1f/0x30 [ 91.564099][ T7110] snd_card_free_when_closed+0x2b/0x40 [ 91.565810][ T7110] usb_audio_disconnect+0x210/0x680 [ 91.567471][ T7110] usb_unbind_interface+0x1dd/0x9e0 [ 91.569127][ T7110] ? __pfx_usb_unbind_interface+0x10/0x10 [ 91.570920][ T7110] device_remove+0x12a/0x180 [ 91.572409][ T7110] device_release_driver_internal+0x44e/0x620 [ 91.574323][ T7110] bus_remove_device+0x2bc/0x560 [ 91.575884][ T7110] ? __pfx_bus_remove_device+0x10/0x10 [ 91.577593][ T7110] ? __pfx_device_remove_attrs+0x10/0x10 [ 91.579355][ T7110] device_del+0x376/0x9b0 [ 91.580726][ T7110] ? __pfx_device_del+0x10/0x10 [ 91.582287][ T7110] ? __pfx___pm_runtime_barrier+0x10/0x10 [ 91.584066][ T7110] usb_disable_device+0x367/0x810 [ 91.585683][ T7110] ? rcu_is_watching+0x12/0xc0 [ 91.587199][ T7110] usb_disconnect+0x2e2/0x9a0 [ 91.588696][ T7110] hub_quiesce+0x16d/0x320 [ 91.590099][ T7110] hub_disconnect+0xd5/0x510 [ 91.591591][ T7110] usb_unbind_interface+0x1dd/0x9e0 [ 91.593223][ T7110] ? __pfx_usb_unbind_interface+0x10/0x10 [ 91.595025][ T7110] device_remove+0x12a/0x180 [ 91.596488][ T7110] device_release_driver_internal+0x44e/0x620 [ 91.598418][ T7110] usb_driver_release_interface+0x10e/0x190 [ 91.600269][ T7110] proc_disconnect_claim+0x21b/0x390 [ 91.602058][ T7110] ? __pfx_proc_disconnect_claim+0x10/0x10 [ 91.603895][ T7110] ? trace_contention_end+0x126/0x160 [ 91.605593][ T7110] ? lockdep_hardirqs_on+0x78/0x100 [ 91.607250][ T7110] ? find_held_lock+0x2b/0x80 [ 91.608752][ T7110] usbdev_ioctl+0xbf5/0x3aa0 [ 91.610220][ T7110] ? __pfx_usbdev_ioctl+0x10/0x10 [ 91.611830][ T7110] ? futex_wait+0x11e/0x370 [ 91.613270][ T7110] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 91.615131][ T7110] ? do_vfs_ioctl+0x226/0x13e0 [ 91.616642][ T7110] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 91.618232][ T7110] ? find_held_lock+0x2b/0x80 [ 91.619727][ T7110] ? __fget_files+0x215/0x3d0 [ 91.621214][ T7110] ? hook_file_ioctl_common+0x140/0x440 [ 91.622990][ T7110] ? __fget_files+0x21f/0x3d0 [ 91.624471][ T7110] ? __pfx_usbdev_ioctl+0x10/0x10 [ 91.626057][ T7110] compat_ptr_ioctl+0x6e/0xa0 [ 91.627559][ T7110] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 91.629252][ T7110] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 91.630978][ T7110] __do_fast_syscall_32+0xe7/0x970 [ 91.632617][ T7110] ? lockdep_hardirqs_on+0x78/0x100 [ 91.634282][ T7110] do_fast_syscall_32+0x32/0x70 [ 91.635844][ T7110] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 91.637867][ T7110] RIP: 0023:0xf700efec [ 91.639217][ T7110] Code: Unable to access opcode bytes at 0xf700efc2. [ 91.641399][ T7110] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 91.644008][ T7110] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000008108551b [ 91.646477][ T7110] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 91.648957][ T7110] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 91.651449][ T7110] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 91.653918][ T7110] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 91.656400][ T7110] [ 91.657983][ T7110] Kernel Offset: disabled [ 91.659354][ T7110] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:29:22 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a0ddf5 RDI=ffffffff9b9e3520 RBP=ffffffff9b9e34e0 RSP=ffffc9000691ed98 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=666f206574697257 R12=0000000000000000 R13=0000000000000033 R14=ffffffff9b6e321c R15=ffffffff85a0dd90 RIP=ffffffff85a0de1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096bf3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f955c0 CR3=0000000067d99000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000000f010e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000d000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080000002 RBX=ffffea0001af28c0 RCX=ffffffff825ebdb5 RDX=ffff8880298c2540 RSI=ffffffff825ebdcb RDI=ffff8880298c2540 RBP=ffffea0001af28f4 RSP=ffffc90004e57528 R8 =0000000000000006 R9 =000000000006bca3 R10=000000000000bdf6 R11=0000000000000000 R12=ffffea0001af28d8 R13=000000000006bca3 R14=ffff888062e35ea0 R15=ffffea0001af28c0 RIP=ffffffff8209c139 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096cf3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c39003b CR3=0000000062e25000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000012000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000046 RBX=0000000000000002 RCX=ffffffff91c42e01 RDX=0000000000000000 RSI=ffffffff8e29828c RDI=ffffffff8c3fe580 RBP=ffffffff81b816be RSP=ffffc90003e4ef88 R8 =0000000000000001 R9 =0000000000000007 R10=0000000000000200 R11=000000000000c5dc R12=ffff88802421ca80 R13=ffffc90003e4f068 R14=0000000000000202 R15=ffffc90003e4f09c RIP=ffffffff8bb81add RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096df3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f86ec0 CR3=000000004ee8c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 2e7a797300000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88802b53c940 RCX=ffffffff81fd53b4 RDX=ffff88801c788000 RSI=ffffffff81fd538e RDI=ffff88801c788000 RBP=ffffc9000044fcd8 RSP=ffffc9000044fb60 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=ffff88802b433c60 R12=0000000000000003 R13=ffffed10056a7929 R14=ffff88802b53c948 R15=0000000000000001 RIP=ffffffff81fd53a2 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ef3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5475da4 CR3=000000004c5ec000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000