last executing test programs: 15.599166443s ago: executing program 2 (id=194): r0 = userfaultfd(0x801) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r2, &(0x7f0000000140)="80003ee9620ca1", 0x7, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) r3 = open(0x0, 0x4c00, 0x18) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) getresuid(0x0, 0x0, 0x0) fstat(r2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="5e1fe141b7f7"}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044}, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x7c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xe}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x54}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x303}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}]]}, 0x7c}, 0x1, 0x0, 0x0, 0x4801}, 0x24000810) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18}, './file0\x00'}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) read$FUSE(r3, &(0x7f0000001a40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f00000001c0)={0x10, 0xfffffffffffffffe, r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x79) mkdir(&(0x7f0000000640)='./file0\x00', 0xd4) 15.508386108s ago: executing program 2 (id=196): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x401) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[]) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x3fffff}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r5, r4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x48, &(0x7f0000000300)=ANY=[@ANYRES8, @ANYRES32, @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x34, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r6 = syz_open_dev$vbi(&(0x7f00000002c0), 0x2, 0x2) ioctl$VIDIOC_S_EDID(r6, 0xc0285629, &(0x7f0000000340)={0x300, 0x9, 0x0, '\x00', 0x0}) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8033, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) 15.261281539s ago: executing program 2 (id=198): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x14, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000108"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x7, 0x8, 0x22, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1000, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 12.188625334s ago: executing program 2 (id=214): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000001810000000000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03040000b5"], 0xc8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50}, 0x50) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) openat$ubi_ctrl(0xffffff9c, 0x0, 0x80040, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x82000, 0x8, 0xe, 0xd9ee, 0x14, "fcf217ad89e348d462365c108fd29b19722acf"}) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="280000001300f5d10300"/20, @ANYRES32=r3, @ANYBLOB="100000000002000008000d"], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[], @mld={0x187, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x23, &(0x7f0000000980)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 11.978758211s ago: executing program 2 (id=216): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = syz_open_dev$vim2m(&(0x7f0000005f00), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0xa, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2063569a"}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x421, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x623f}]}}}]}, 0x3c}}, 0x2) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, 0x0, &(0x7f00000000c0)) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x200000c, &(0x7f0000000480)=ANY=[@ANYBLOB="66643dd6", @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x200000, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r6}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x2, 0x30, 0x95f2, 0x3}, &(0x7f0000000340)=0x18) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000300), &(0x7f00000003c0)=0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r8, 0x0, 0xa, &(0x7f0000000080)=0x3, 0x4) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) sendto$inet(r8, &(0x7f0000000040)="0e00", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400008a}, 0x0) 11.860180433s ago: executing program 2 (id=217): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000080)=0x1, 0x4) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/55, 0x328000, 0x800}, 0x20) openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x20840, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="a78700000000000000000b000000dd9fb2bf3019864651d07a23925ec8d6c644a5bbfad64c5df83b0fad1db8d0d746924e651804faefb7e5f29f22163178973cd04983314948038f6105a43c67d855e9832dbb4c141da7f451c7390a3939f5dce2894663601bf39fe824a6c817594a96918395190958a9673dbdb67c7718168a2be7c87541be740c47087cb1753a05fff4b0c5add2f0e8a9041404f5ba3f819aa9c71d0a27283bda71ab55ae46376e1dd8c4fc0db2853fe59f4323e40c75bd15d4d4ecd970d39672f49df5f09229ce713a45f2519d1053ddbbce8f979372f779d2f3eac8f614a3316fc92f5debcfe9d662695b2b8e0c737571c63203f991a830a132584dc5c34c81afa2b3bc573e1d6d14d551fe3924c2"], 0x14}}, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdir(0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) (async) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000bc0)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x0, &(0x7f0000000240)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x1, 0x7, 0x889, 0x10000, 0xffffffffffffffff, 0xffff8001, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x2, 0x3, 0x8, @void, @value, @value}, 0x50) (async) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0x2, 0x4, 0x4f4, 0xffffffff, 0x42c, 0x248, 0x340, 0xfeffffff, 0xffffffff, 0x42c, 0x42c, 0x42c, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x224, 0x248, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'bridge0\x00', {0x0, 0x6, 0x0, 0x0, 0x0, 0x40, 0x10000}, {0x81}}}, @common=@ah={{0x30}, {[0x4d2, 0x4d3], 0xa, 0xf7, 0x2}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x3}}}, {{@ipv6={@mcast1, @loopback, [0xff000000, 0x7f0000ff, 0xff000101, 0xffffff], [0x0, 0xffffffff, 0x0, 0xff000000], 'macsec0\x00', 'netpci0\x00', {}, {}, 0x29, 0x4, 0x3}, 0x0, 0xd4, 0xf8, 0x0, {}, [@common=@unspec=@cluster={{0x30}}]}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @mcast1, [], [], 'team_slave_1\x00', 'syzkaller1\x00'}, 0x0, 0xc8, 0xec, 0x0, {}, [@common=@eui64={{0x24}}]}, @common=@inet=@SYNPROXY={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x550) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) openat$tun(0xffffff9c, &(0x7f0000000000), 0x101003, 0x0) 2.869790837s ago: executing program 0 (id=272): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0xd, &(0x7f0000000000)="03020000008002ff", 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f00000007c0)={{0x1, 0x0, 0x466, {0x8000000, 0x1000}}, "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", "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"}) close_range(r1, 0xffffffffffffffff, 0x0) 2.549382101s ago: executing program 0 (id=275): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0xc010) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x82, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @val={@val={0x88a8, 0x3, 0x1, 0x1}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "0961d3", 0x44, 0x2f, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x1, {{0x6, 0x1, 0x8, 0x3, 0x0, 0x0, 0x3, 0x2}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x4, {{0x1, 0x2, 0x1, 0x3, 0x1, 0x3, 0x7, 0x6}, 0x2, {0x9, 0xe, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1}}}}}}}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) symlink(0x0, 0x0) readlink(0x0, 0x0, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) lseek(0xffffffffffffffff, 0x1, 0x0) socket(0xf, 0x3, 0x20000) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x40002) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r6, 0xc0305302, &(0x7f00000000c0)={0x9, 0x10, 0x4, 0x9, 0xb, 0xa}) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) syz_pidfd_open(0x0, 0x0) 2.294162429s ago: executing program 0 (id=276): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newtaction={0x1a8, 0x30, 0x1, 0x0, 0x0, {}, [{0x194, 0x1, [@m_vlan={0xf0, 0x1b, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}]}, {0xba, 0x6, "ba0235ca5d8f4be94aece82da7b5f746f2acfc1ea3438bc6b7fea39d57195987e14ae89271c03d1311e0f18b6049a4c60d764ee4b9e6341ff6b4bba37149b322891edbf39e5d1e775fe2ba4677d0a506cb8c981c46233d7fb02efd7a6032c48cdcbcde620492ef5773557e94ace44359d10b887adb4e9351c81a1cb0e13edeb284d8d94d6779645ff224050a804bb1d6b49f3ba9ab5258fb44437a11da49d196f4614abc2d8c351ca139247ae4bd1fed594a2c392088"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0xa0, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xfffffffd, 0x7}}}]}, {0x5c, 0x6, "358dac4fec11b125550e188f74506639069198e5892372adfb51c55d576574b4691b726a7f028cbb719bd2a4787b3f44b9236ac84b522a7e036bca238f6fa1f0a9f94cd7595ba63411351f5e46666efd567fc9b9d8ea5b01"}, {0xc}, {0xc}}}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0cc5640, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, 0x0, 0xd) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0xce5d, 0x80, 0x0, 0x89}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000300)=0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) 2.050490519s ago: executing program 1 (id=277): r0 = socket(0x40000000015, 0x5, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000440)) getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000019580)=""/102400, &(0x7f0000000000)=0x19000) 2.050212979s ago: executing program 1 (id=278): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000800"/15], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x1c, 0x2c, 0x1, 0x60, 0x0, "", [@nested={0x4, 0x800}, @nested={0x8, 0x11, 0x0, 0x1, [@generic="2fe5afbf"]}]}, 0x1c}], 0x1}, 0x0) 1.99191953s ago: executing program 1 (id=279): ustat(0x10001, &(0x7f0000000040)) socket$inet6(0xa, 0x3, 0xb6) (async) ioperm(0x6, 0x3, 0xb017) (async) open(0x0, 0x400141042, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2000008, 0x8a}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) (async) ioctl$TCSETA(r4, 0x5406, 0x0) (async) r5 = syz_open_pts(r4, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$TIOCSTI(r6, 0x5412, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x0, 0x7}) ioperm(0x3, 0x0, 0x9) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x0) setpriority(0x1, 0x0, 0x6) 1.680398128s ago: executing program 1 (id=280): r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c46"], 0x78) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x8, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000000300)='./file0\x00', 0x600000, 0x2) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x76) syz_emit_ethernet(0xdb, &(0x7f0000000680)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa8000000000000000f53a0400a13a00fe8000000000000000000002000000000000000000000000000102009078000005006050835900000000fc010000000000000000000000000000ff0000000000000000000000000000003a010000000000000708000000000000000000000000000077efe604d60ae419ba09bd362155e4bd0dabd73a98b2b72d51fc035fcb30abc6a0d7983a6cff4de785b33036d38010237e727f2954d9a558388898288478b2b5adc9393550c2ba59d321f1fa8caff0fe67ad26eff5d035c919"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000040)=0xffffffffffffffff) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r6, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x12023, 0x0) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xb, 0x3}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0xe4, 0x0, &(0x7f0000000ac0)=[@clear_death={0x400c630f, 0x3}, @acquire={0x40046305, 0x1}, @dead_binder_done, @request_death={0x400c630e, 0x3}, @decrefs={0x40046307, 0x3}, @request_death={0x400c630e, 0x1}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000a00)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/98, 0x62, 0x2, 0x40000033}, @ptr={0x70742a85, 0x0, &(0x7f0000000840)=""/185, 0xb9, 0x2, 0x1f}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/194, 0xc2, 0x2, 0x14}}, &(0x7f0000000a80)={0x0, 0x28, 0x50}}, 0x1000}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000400)={@flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x101, 0x2}, @flat=@weak_binder={0x77622a85, 0x1000, 0x2}}, &(0x7f0000000480)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400699b000008001b", @ANYRES8=r3], 0x30}}, 0x0) 1.651042594s ago: executing program 3 (id=281): migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000000)=0xfffffffffffffffc) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e06f40908"], 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x54) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket(0x10, 0x3, 0x400005) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x2, 0x56d, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x10042, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) sendmmsg$inet6(r3, 0x0, 0x0, 0x4000300) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r2}, 0x38) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r2}, 0x38) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x3a, 0x1, &(0x7f00000000c0), 0xff2a) syz_emit_ethernet(0x66, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd6007000000303a00fe8000000000000000000000000000aaff02000000000000000000000000000101"], 0x0) r5 = syz_io_uring_setup(0x6584, &(0x7f0000000740)={0x0, 0x5373, 0x10000, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {}, 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) 1.180944963s ago: executing program 0 (id=282): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x200000100000011, 0x803, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x58, 0x2, 0x6, 0x303, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0) mq_open(0x0, 0x1, 0x89, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="140100000000b2000500000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r4, 0x0, r5, 0x0, 0x10000000000016, 0x0) (fail_nth: 14) inotify_add_watch(0xffffffffffffffff, 0x0, 0x200) creat(&(0x7f00000002c0)='./bus\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) 1.178082289s ago: executing program 3 (id=283): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000300), 0xd) write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[], 0x78) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/94, 0x5e}}], 0x1, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000001280), 0x8) r4 = dup(r2) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x7) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x7f36, 0x10100, 0x0, 0x1}, &(0x7f0000000180)=0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f00000007c0)=[@request_death], 0x0, 0x0, 0x0}) syz_io_uring_submit(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETA(r7, 0x8924, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r8, &(0x7f0000000cc0)={'syz0\x00', {0x9, 0x0, 0x0, 0x3}, 0x48, [0x1400000, 0x1, 0xd0, 0x7fff, 0x5, 0x7, 0x4, 0x6aa51a28, 0x1891ffb7, 0x2, 0x6e8, 0x7, 0x6, 0x3, 0x10000, 0x7, 0x80008, 0x2, 0x1, 0xd, 0x5c01, 0x1, 0x80b7, 0x6, 0xb4, 0x7595, 0x8, 0x8, 0x8, 0xd, 0x0, 0x2, 0x9, 0x20005, 0x4c, 0x3, 0x2, 0xbc, 0x8001, 0x4, 0xfffffffe, 0x40, 0xf, 0xfff, 0xfffffe00, 0x80000001, 0x7, 0x9, 0x2, 0x6, 0x6, 0x0, 0x401, 0x7, 0xffff, 0x9, 0x3, 0x2, 0xe4, 0x23380, 0x8, 0xfff, 0x3d4fffc, 0x200], [0x8, 0xe, 0xf2de, 0x8, 0x8, 0x10, 0xe, 0x6, 0xfffffffa, 0x8, 0x3dc6, 0x9, 0x9, 0xd361, 0x8000, 0x6, 0x4, 0x2489, 0x9d, 0xfff, 0x10, 0x10001, 0xc0, 0xb, 0x8, 0x563, 0x5, 0x2c308c93, 0x7fffffff, 0x71e6, 0xe, 0xe969, 0x2, 0x2, 0x6, 0x0, 0xc0000, 0x74cb9859, 0x2, 0xfffffff7, 0x4, 0x6, 0x7, 0x7, 0x80, 0x72012756, 0x6, 0x152, 0xc, 0x6, 0x0, 0x7, 0x2, 0x80000000, 0x5, 0x3, 0x3, 0x3ff, 0x7, 0xfd2e, 0x3ff, 0x5, 0x5, 0xe], [0x101, 0x2, 0x23f4, 0x3, 0x34, 0x55, 0x63, 0xffffffff, 0x9, 0xd8, 0x3c6, 0x1, 0x1, 0x9, 0xd, 0xfff, 0x800002, 0x1ff, 0x7, 0x200, 0x3, 0x0, 0x8, 0x34c, 0x2, 0x8001, 0x92, 0x0, 0xfffffe00, 0x2, 0x7fff, 0xfd, 0x8, 0x3ff, 0x5, 0x3, 0xde3, 0x6, 0x5, 0xfffff25a, 0x3, 0x9, 0x7, 0x6, 0x6, 0x203, 0x3, 0x7, 0x168e, 0x9, 0x4, 0x15c, 0x9, 0x9d, 0xfffffffe, 0x401, 0x3f, 0xfc8a, 0x4, 0x7fff, 0x7, 0x7f, 0x1, 0xa23], [0x100, 0x8, 0x5, 0x8d1, 0x0, 0x6, 0xfffff665, 0x834, 0x6, 0x9, 0x5, 0x4, 0xc6, 0x81, 0x4, 0xfffffffc, 0x0, 0x240, 0x401, 0x5, 0x4, 0x9, 0x3, 0xf4b, 0x8000001, 0xfffffffd, 0x7, 0x7, 0x1fb, 0xb7, 0x7, 0x401, 0xd, 0x4, 0x1, 0x401, 0x9, 0x9, 0x0, 0x8001, 0x9, 0xfffffffc, 0x5606, 0x3, 0x4, 0x0, 0x2, 0x3, 0xfae7, 0x40001, 0x0, 0x1, 0x8, 0x100, 0x2, 0xffffffff, 0x5, 0xfffff82c, 0x8, 0x4, 0x6, 0x81, 0x6, 0xffff4609]}, 0x45c) ioctl$UI_DEV_CREATE(r8, 0x5501) 1.060289273s ago: executing program 3 (id=284): io_uring_setup(0x776b, &(0x7f0000000bc0)={0x0, 0x0, 0x40, 0x0, 0x3a0}) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000000000000010000400100000000000000c700000005000000e00000000300000000000000000000000000000001"]) r5 = memfd_create(&(0x7f0000000940)='y\x105\xfb\xf7u\x83%\b\x00\x00\x00\x00\x00\x00\x00\xea_\xccZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x10\x00\x00\x00\x04\x879\xa24\xa9a\b\x00\xb2\xd3\xcbZJ\x7fa\xc4\x1acB\xaa\xc1\xfb Q\x96\xd9xJ2\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea\b\x00\x00\x00\x00\x00\x00\x00\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9V\x01A\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\a\x00\x01vRk\xaabB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\x80\x81\xa0\xa2-g\b\x99\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecn\x02\xc8\xc4\f\x04\x99\xf6\xfc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8L\xae\x1ff\xcf\xb3\xb65\x12\x89\x02\x82t\x0f\xb0\xe89\x16\fO\x19\x91\xfd\x10\x0e\xa7r\x12\xab\xd4\xd1d\xad\f\x11\xb3\xb3c\xe2\xfe\xcd\x9f7\xa1\x14\xfa\xe2\xdf\x7f\xf4NG\xe3\xeb\x18\xde|\xb3\xf5S\x9a\x04\xb4Lry\xa9\xd6\xfb\xbc\n+N\xf7\xf6\x87\x95\xd9+\xd2sc/\x06\xaa#K3,k\xf3(\xcc\xc7\xb47\xfa\xc3\x1c\x91!\xd3\xd2`-\xa2xrR\x1c\x81i\x87u|29Q\xdf\xed\x10\x9b\x930\xa8v\xa0\x88\xa4t\x17\xb2\xca9\x02\x03\xc9P\xcc\xe0\xb7\x9c\x82\xb4\x03\x83e\xee\x95\xccO\x1b\x83\f\n{\xf3\x12\x90\xcf\x10\xb5>\b3\x80\x8d\xb2%7\x10\xeee\xe4\xc3\xb2^\xad\xb6~\xa2\xbdE\xbf\x91\vqt\x81\xbd\x19\xde\x81\tw\xd4p\xd1\x8aNJ\xb3M\a\xc4\xfa\xb0,$\x81j\xb4Hs\x93>\x16U\xd0t\xe4\xca0T\xb7\xf7\x9d4\b\xd9\xdeps\xec\xa0\nJ\xa5\xfe\xda{(\xee\xb5\x11?\xc3I-\x8bc\xc9\xfb\a\xe5\xab\xf8v1\xdc\xc5\x8c\xebs1\x81\xca\x81l\xa12\xff<\xf5\x12\xcc+\xd4\xab\x84\x16\xa4+\x0e\xd4\x02\xe3\xaa1\xeam\x8ce\xb4r\x0eo&3wff\xe6\x91\x7f\xba\xad\x05\xdd\xc0+\"\xa5\x80\'#\xfd\x9dA&\xee \x18\xe5\x17\x1bd\xd0\xb9\x90\xde\xec\xe4M\xe5\x06\x03r\fc\x8c\x10\x99x\xec`e`\xc3F\xdf\xbc\xa8\xff\x05\xe6\xea\xc3u\xd7\t\x88<\"\xf7!\xd6\x0e\xbbE^\xcd\xb0\x15g\xe6\xf2?y1\x9f\xd3\x95\xc4E\xd0\xb4\x16`r\x14\xad\x02\x17\x9a\x86I]\x02f\xd3\xc9\xe1H\xd7c\xcaQ\x8cE7\xcc\xcf=\xf3\xf7\xb9\xf6s\x88\bZi\b*w\xc5;\x88\r\xab\xa1\t\xf1\x02)5\x00\x84', 0xb) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) pwritev2(r6, &(0x7f00000001c0)=[{&(0x7f0000000200)='y', 0x1}], 0x1, 0x7fff, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) lseek(r7, 0x4bc, 0x4) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f00000002c0)={r5, 0x0, 0x2000, 0x8000}) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r9}) close_range(r0, r9, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000001440), 0x2200, 0x0) read(r3, &(0x7f0000000200)=""/169, 0xfd6c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000001, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 1.040431354s ago: executing program 3 (id=285): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)=@multiplanar_userptr={0xff, 0xb, 0x4, 0x2000, 0x401, {}, {0x2, 0x0, 0xcf, 0x3, 0xc0, 0x8, "65ec72bb"}, 0x4, 0x2, {0x0}, 0x9}) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = eventfd2(0x0, 0x0) r2 = dup(r1) read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020) 991.198132ms ago: executing program 0 (id=286): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x639) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000480)=""/238, 0xee}], 0x1) read(r0, &(0x7f00000006c0)=""/104, 0x68) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000001980)={{0x2000, 0x0, 0x0, 0x594, 'syz0\x00', 0xffff}, 0x5, 0x0, 0x1, 0x0, 0x3f00, 0x0, 'syz1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2(0x0, 0x0) epoll_create(0x8) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) poll(0x0, 0x0, 0x5182) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 763.520955ms ago: executing program 1 (id=287): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='bcache_btree_gc_coalesce\x00'}, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc048aeca, &(0x7f0000000040)=ANY=[@ANYRES16]) 630.245234ms ago: executing program 1 (id=288): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1002, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06055c8, &(0x7f0000000380)={0x0, 0x1, {0x53, 0x7, 0x400, {0x8, 0x2}, {0x8206, 0x1c00}, @cond=[{0x101, 0x3, 0x9, 0x45be, 0xf, 0x80e2}, {0xc3d8, 0x7, 0x1, 0x3, 0x9, 0x8}]}, {0x52, 0x5b29, 0x2, {0x5, 0x3}, {0x0, 0x9}, @cond=[{0x7, 0x2, 0xfc01, 0x3ff, 0x3}, {0x6, 0x7, 0x7d10, 0x6, 0x3, 0x5}]}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000000c0), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x8b, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000004c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 120.043077ms ago: executing program 3 (id=289): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@newsa={0x1b4, 0x10, 0x1, 0x0, 0x25dfdbfe, {{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa}, {@in, 0x0, 0x32}, @in6=@loopback, {}, {0x475}, {}, 0x0, 0x3502, 0x2, 0x0, 0xb3, 0xaf}, [@algo_aead={0x5d, 0x12, {{'aegis128l-aesni\x00'}, 0x88, 0x40, "3dd99b1745ec238a7d7b75f94d00adecaa"}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x8}}]}, 0x1b4}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000009207010000f8ffffffb702000008000000b7030000fe00000085000000060000008d41c000fcffffff9500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[0xfffffffffffffffe, 0x8, 0x7fffffff, 0x4, 0x4, 0x10000, 0x4, 0x9050, 0x6, 0x3, 0xf1600000000000, 0xf, 0xffffffffffffffff, 0x1e, 0x1000000000000000, 0x1ff], 0x3000, 0x41000}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@timestamp={0x44, 0x1c, 0xff, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@empty}, {@broadcast, 0x10001}, {@empty}, {@multicast1}, {@private}]}, @rr={0x7, 0x23, 0x0, [@remote, @empty, @empty, @multicast1, @remote, @dev, @loopback, @rand_addr]}, @noop, @lsrr={0x83, 0x3}, @generic={0x0, 0x2}]}}}}}) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f00000000c0)={0x1, 0x0, 0x3, &(0x7f0000000080)={0x0, "df1e970974a75196eeb58543bd9d2ba55aeacc9859bdc9f2472342370527626623"}}) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r8, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="dc01c6ba1cdcc12519250000000000007f007101001300000000000000000000000000000000000000000000000000000000000000dce600000000000000", @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000020000000032000000fe8000000000000000000000000000bb00"/168], 0x1dc}}, 0x0) r9 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r12, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r12, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ_FIXED) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x11, &(0x7f0000000380)=0xfffdffff, 0x4) io_uring_enter(r9, 0x2d3e, 0x0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) 119.577359ms ago: executing program 0 (id=290): open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x1204020, 0x1, 0x3}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000000440)={0x0, 0x20000000, 0x4, 0x1, 0x0, r2, &(0x7f0000000140)='\x00', 0x1, 0x6}]) (fail_nth: 7) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) dup3(r2, r0, 0x0) 0s ago: executing program 3 (id=291): listen(0xffffffffffffffff, 0xd75) socket$l2tp6(0xa, 0x2, 0x73) r0 = syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0x89b8, 0x9040, 0xfffffffd}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6(0xa, 0x3, 0xff) sendmsg$inet6(r3, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000100)="daffc38b69363a52fe8000000000000021845a91f64fddcf51f405595faeea41974e5559ea91f7", 0x27}, {&(0x7f00000001c0)='\x00', 0x1}], 0x2}, 0xb00) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000c9fc8ec4f400000061424462d1e75934000000000095000000000000000000009830d57569bae5cc99e91f4507d0cdaf39013729479132c28725a1df52d0adb1671ba793e0fc584fc8f361da001537843aa6abd5228331e827a593d030605abaf56d4a4d2d0e629912869d806ae553b67ae67473cdfc417643e6dc314ac183964fb598e224d60231e9f084010100002040c11c426ab8007a1788c7ac6d280c2e1351dd33ea90a54e8edf466cd21473211748d3e6565cad6649143b2db7d020570200f1cd1e675078bc9b32"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000000)={0x0, 0x0, 0x7, &(0x7f0000000180)={0x1a, "a107efe12eeb7faf05ffffffffffffffffcab3d1ab0000006c00100000000800"}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000100)={{0x1, 0x1, 0x1, 0x1, 0x5}}) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) poll(0x0, 0x0, 0xfffffffe) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000080)={0x1, @vbi={0x0, 0x0, 0x0, 0x32344d59, [0x5, 0x948a]}}) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r7 = socket(0x10, 0x803, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) r11 = openat$tun(0xffffff9c, &(0x7f0000000300), 0x44900, 0x0) ioctl$TUNSETOFFLOAD(r11, 0x400454d0, 0x1) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x800) r13 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_int(r13, 0x29, 0x4d, 0x0, &(0x7f0000004d80)) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:42354' (ED25519) to the list of known hosts. [ 41.876080][ T5933] cgroup: Unknown subsys name 'net' [ 42.039473][ T5933] cgroup: Unknown subsys name 'cpuset' [ 42.042731][ T5933] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.868310][ T5933] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.383323][ T5950] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.385951][ T5948] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.387486][ T5954] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.389094][ T5957] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.390836][ T5954] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.393176][ T5957] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.395743][ T5954] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.399078][ T5957] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.402995][ T5954] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.403054][ T5957] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.403505][ T5948] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.403893][ T5948] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.404370][ T5948] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.404599][ T5948] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 45.404711][ T5948] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.406590][ T5305] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.409238][ T5957] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.410979][ T5305] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 45.414032][ T5957] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 45.415016][ T5305] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.417430][ T5957] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.423561][ T5959] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.435082][ T5959] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 45.437967][ T5959] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.580065][ T5953] chnl_net:caif_netlink_parms(): no params data found [ 45.614933][ T5956] chnl_net:caif_netlink_parms(): no params data found [ 45.641151][ T5946] chnl_net:caif_netlink_parms(): no params data found [ 45.733336][ T5953] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.736770][ T5953] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.739761][ T5953] bridge_slave_0: entered allmulticast mode [ 45.742418][ T5953] bridge_slave_0: entered promiscuous mode [ 45.798823][ T5953] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.800983][ T5953] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.803145][ T5953] bridge_slave_1: entered allmulticast mode [ 45.805397][ T5953] bridge_slave_1: entered promiscuous mode [ 45.808344][ T5944] chnl_net:caif_netlink_parms(): no params data found [ 45.865809][ T5956] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.868128][ T5956] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.870253][ T5956] bridge_slave_0: entered allmulticast mode [ 45.872433][ T5956] bridge_slave_0: entered promiscuous mode [ 45.874790][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.878000][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.881017][ T5946] bridge_slave_0: entered allmulticast mode [ 45.884324][ T5946] bridge_slave_0: entered promiscuous mode [ 45.890452][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.893479][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.896750][ T5946] bridge_slave_1: entered allmulticast mode [ 45.899957][ T5946] bridge_slave_1: entered promiscuous mode [ 45.903998][ T5953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.907032][ T5956] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.909895][ T5956] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.912537][ T5956] bridge_slave_1: entered allmulticast mode [ 45.915732][ T5956] bridge_slave_1: entered promiscuous mode [ 45.946776][ T5953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.987793][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.014677][ T5956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.034873][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.051571][ T5953] team0: Port device team_slave_0 added [ 46.054211][ T5956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.072483][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.074691][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.077482][ T5944] bridge_slave_0: entered allmulticast mode [ 46.079649][ T5944] bridge_slave_0: entered promiscuous mode [ 46.092117][ T5946] team0: Port device team_slave_0 added [ 46.094579][ T5953] team0: Port device team_slave_1 added [ 46.114264][ T5956] team0: Port device team_slave_0 added [ 46.118013][ T5956] team0: Port device team_slave_1 added [ 46.120634][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.123404][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.126135][ T5944] bridge_slave_1: entered allmulticast mode [ 46.128925][ T5944] bridge_slave_1: entered promiscuous mode [ 46.140817][ T5946] team0: Port device team_slave_1 added [ 46.151231][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.153087][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.161302][ T5953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.195546][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.197576][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.204212][ T5953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.208368][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.210724][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.218728][ T5956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.223492][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.234903][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.237624][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.246612][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.254989][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.257754][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.267363][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.271051][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.273053][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.280643][ T5956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.286753][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.323308][ T5944] team0: Port device team_slave_0 added [ 46.328581][ T5944] team0: Port device team_slave_1 added [ 46.348962][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.351311][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.359260][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.364510][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.366674][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.375601][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.399841][ T5953] hsr_slave_0: entered promiscuous mode [ 46.402126][ T5953] hsr_slave_1: entered promiscuous mode [ 46.444445][ T5946] hsr_slave_0: entered promiscuous mode [ 46.446671][ T5946] hsr_slave_1: entered promiscuous mode [ 46.448666][ T5946] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.450996][ T5946] Cannot create hsr debugfs directory [ 46.454962][ T5956] hsr_slave_0: entered promiscuous mode [ 46.460279][ T5956] hsr_slave_1: entered promiscuous mode [ 46.462445][ T5956] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.464707][ T5956] Cannot create hsr debugfs directory [ 46.505944][ T5944] hsr_slave_0: entered promiscuous mode [ 46.509120][ T5944] hsr_slave_1: entered promiscuous mode [ 46.511658][ T5944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.513901][ T5944] Cannot create hsr debugfs directory [ 46.745084][ T5956] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 46.750559][ T5956] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 46.754022][ T5956] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 46.759725][ T5956] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 46.772857][ T5946] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 46.778731][ T5946] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 46.782549][ T5946] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 46.787357][ T5946] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 46.811985][ T5953] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 46.817091][ T5953] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 46.820507][ T5953] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 46.830587][ T5953] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 46.852934][ T5944] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 46.859084][ T5944] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 46.862570][ T5944] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 46.868432][ T5944] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 46.917131][ T5956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.930253][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.938191][ T5956] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.944463][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.946646][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.961423][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.963546][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.967126][ T5946] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.972832][ T5953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.975791][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.978312][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.990437][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.992659][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.004493][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.018829][ T5953] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.023324][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.031012][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.033184][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.049883][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.052074][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.054968][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.057308][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.060528][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.062629][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.164406][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.182739][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.190036][ T5956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.207322][ T5944] veth0_vlan: entered promiscuous mode [ 47.212326][ T5953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.220352][ T5944] veth1_vlan: entered promiscuous mode [ 47.231134][ T5946] veth0_vlan: entered promiscuous mode [ 47.240275][ T5956] veth0_vlan: entered promiscuous mode [ 47.245953][ T5946] veth1_vlan: entered promiscuous mode [ 47.251942][ T5956] veth1_vlan: entered promiscuous mode [ 47.258772][ T5944] veth0_macvtap: entered promiscuous mode [ 47.263513][ T5944] veth1_macvtap: entered promiscuous mode [ 47.274128][ T5946] veth0_macvtap: entered promiscuous mode [ 47.293647][ T5953] veth0_vlan: entered promiscuous mode [ 47.296047][ T5956] veth0_macvtap: entered promiscuous mode [ 47.298504][ T5946] veth1_macvtap: entered promiscuous mode [ 47.303397][ T5956] veth1_macvtap: entered promiscuous mode [ 47.310347][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.314358][ T5953] veth1_vlan: entered promiscuous mode [ 47.322029][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.326740][ T5944] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.329355][ T5944] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.331904][ T5944] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.334426][ T5944] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.338408][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.341558][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.344823][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.350677][ T5956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.353823][ T5956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.357395][ T5956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.360824][ T5956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.364750][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.368890][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.372020][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.375505][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.381331][ T5956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.384879][ T5956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.388373][ T5956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.391798][ T5956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.395625][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.399678][ T5956] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.402492][ T5956] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.405293][ T5956] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.408436][ T5956] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.413267][ T5946] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.416966][ T5946] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.420019][ T5946] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.423165][ T5946] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.429096][ T5953] veth0_macvtap: entered promiscuous mode [ 47.443738][ T5953] veth1_macvtap: entered promiscuous mode [ 47.477439][ T67] Bluetooth: hci0: command tx timeout [ 47.477443][ T5959] Bluetooth: hci1: command tx timeout [ 47.477452][ T5957] Bluetooth: hci2: command tx timeout [ 47.478773][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.478791][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.478797][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.478803][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.478808][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.478815][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.479265][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.483335][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.486223][ T5952] Bluetooth: hci3: command tx timeout [ 47.491751][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.513021][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.516460][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.519576][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.522908][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.526901][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.534446][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.534483][ T5953] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.537840][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.540227][ T5953] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.545353][ T5953] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.548325][ T5953] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.570374][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.573304][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.585000][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.588100][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.600452][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.602800][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.611357][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.614432][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.620696][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.623973][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.633044][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.636027][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.641430][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.644119][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.659648][ T5944] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 47.794742][ T6014] bridge0: port 3(syz_tun) entered blocking state [ 47.798722][ T6014] bridge0: port 3(syz_tun) entered disabled state [ 47.800811][ T6014] syz_tun: entered allmulticast mode [ 47.803088][ T6014] syz_tun: entered promiscuous mode [ 47.805050][ T6014] bridge0: port 3(syz_tun) entered blocking state [ 47.807447][ T6014] bridge0: port 3(syz_tun) entered forwarding state [ 47.818033][ T6014] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 48.163093][ T6019] 9pnet_virtio: no channels available for device 127.0.0.1 [ 49.218435][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 49.399262][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.412959][ T833] IPVS: starting estimator thread 0... [ 49.415130][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.419479][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.473378][ T6037] syzkaller0: entered promiscuous mode [ 49.475372][ T6037] syzkaller0: entered allmulticast mode [ 49.479945][ T6045] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 49.483531][ T6045] syzkaller0: Linktype set failed because interface is up [ 49.546429][ T6047] IPVS: using max 38 ests per chain, 91200 per kthread [ 49.557393][ T5952] Bluetooth: hci2: command tx timeout [ 49.557543][ T5957] Bluetooth: hci0: command tx timeout [ 49.559278][ T5952] Bluetooth: hci1: command tx timeout [ 49.561259][ T6027] 9pnet_virtio: no channels available for device syz [ 49.562926][ T5952] Bluetooth: hci3: command tx timeout [ 49.580141][ T6027] 9pnet_virtio: no channels available for device 127.0.0.1 [ 49.679886][ T6040] 9pnet_virtio: no channels available for device 127.0.0.1 [ 50.026024][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 50.419499][ T6063] 9pnet_virtio: no channels available for device syz [ 50.424263][ T6063] 9pnet_virtio: no channels available for device 127.0.0.1 [ 51.015180][ T6068] Invalid logical block size (768) [ 51.366828][ T6074] Invalid logical block size (768) [ 51.636637][ T5959] Bluetooth: hci3: command tx timeout [ 51.636790][ T5952] Bluetooth: hci0: command tx timeout [ 51.638361][ T5957] Bluetooth: hci1: command tx timeout [ 51.640375][ T5952] Bluetooth: hci2: command tx timeout [ 51.647789][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.944558][ T6083] 9pnet_virtio: no channels available for device 127.0.0.1 [ 51.954750][ T6088] could not allocate digest TFM handle blake2s-160-x86 [ 51.956786][ T6092] 9pnet_virtio: no channels available for device syz [ 52.074634][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 52.206779][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 52.211590][ T6084] overlayfs: failed to clone lowerpath [ 52.278851][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 52.308822][ T6098] 9pnet_virtio: no channels available for device syz [ 52.381524][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 52.607412][ T6085] 9pnet_virtio: no channels available for device 127.0.0.1 [ 53.716527][ T5952] Bluetooth: hci3: command tx timeout [ 53.718467][ T5952] Bluetooth: hci0: command tx timeout [ 53.720109][ T5952] Bluetooth: hci1: command tx timeout [ 53.721735][ T5952] Bluetooth: hci2: command tx timeout [ 54.351489][ T6122] 9pnet_virtio: no channels available for device 127.0.0.1 [ 54.790883][ T6146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28'. [ 55.220380][ T6153] 9pnet_fd: Insufficient options for proto=fd [ 55.260028][ T6156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.31'. [ 55.275286][ T6156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.31'. [ 55.292593][ T6157] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.782628][ T6161] 9pnet_virtio: no channels available for device 127.0.0.1 [ 56.586707][ T6192] 9pnet_virtio: no channels available for device 127.0.0.1 [ 56.822388][ T6184] 9pnet_virtio: no channels available for device 127.0.0.1 [ 56.922562][ T6193] 9pnet_virtio: no channels available for device syz [ 56.925210][ T6193] 9pnet_virtio: no channels available for device 127.0.0.1 [ 56.952988][ T6199] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.772882][ T6216] netlink: 'syz.0.42': attribute type 4 has an invalid length. [ 57.775281][ T6216] netlink: 152 bytes leftover after parsing attributes in process `syz.0.42'. [ 57.865138][ T6207] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 58.884071][ T6206] 9pnet_virtio: no channels available for device 127.0.0.1 [ 59.364078][ T6273] 9pnet_virtio: no channels available for device 127.0.0.1 [ 59.791593][ T6259] 9pnet_virtio: no channels available for device syz [ 59.794660][ T6259] 9pnet_virtio: no channels available for device 127.0.0.1 [ 60.064895][ T6264] 9pnet_virtio: no channels available for device 127.0.0.1 [ 61.063153][ T64] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.065452][ T64] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.068026][ T64] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.070304][ T64] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.073738][ T64] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.077484][ T64] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.079739][ T64] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.081886][ T64] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.084058][ T64] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.086952][ T64] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.089242][ T64] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.091416][ T64] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.093590][ T64] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.095757][ T64] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.098223][ T64] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.100439][ T64] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.102606][ T64] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.104773][ T64] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.107395][ T64] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.109583][ T64] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.111767][ T64] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.113934][ T64] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.116100][ T64] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.118915][ T64] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.119138][ T6286] 9pnet_virtio: no channels available for device 127.0.0.1 [ 61.121145][ T64] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.126010][ T64] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.128261][ T64] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.130640][ T64] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.132796][ T64] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.134985][ T64] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.140838][ T64] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.143494][ T64] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.145723][ T64] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.148059][ T64] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.150302][ T64] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.155306][ T64] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.158082][ T64] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.165496][ T64] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.167988][ T64] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.170608][ T64] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.173427][ T64] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.176225][ T64] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.179048][ T64] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.198112][ T64] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz0 [ 61.217726][ T6302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.223384][ T6302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.229791][ T6302] bond0 (unregistering): Released all slaves [ 61.350106][ T6306] netlink: 28 bytes leftover after parsing attributes in process `syz.2.57'. [ 61.506392][ T6069] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 61.849099][ T6069] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.852391][ T6069] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.855348][ T6069] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 61.859275][ T6069] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 61.861975][ T6069] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.865926][ T6069] usb 6-1: config 0 descriptor?? [ 62.280133][ T6069] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 62.282691][ T6069] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 62.284992][ T6069] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 62.288130][ T6069] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 62.290362][ T6069] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 62.292568][ T6069] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 62.294787][ T6069] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 62.297145][ T6069] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 62.299360][ T6069] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 62.301571][ T6069] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 62.303782][ T6069] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 62.306017][ T6069] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 62.308260][ T6069] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 62.310454][ T6069] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 62.312654][ T6069] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 62.315781][ T6069] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 62.322964][ T6069] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 62.548348][ T6304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.551502][ T6304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.762849][ T6304] Bluetooth: MGMT ver 1.23 [ 62.769448][ T5832] usb 6-1: USB disconnect, device number 2 [ 64.420953][ T6346] Zero length message leads to an empty skb [ 64.838266][ T6352] netlink: 32 bytes leftover after parsing attributes in process `syz.3.68'. [ 64.842497][ T6352] netlink: 32 bytes leftover after parsing attributes in process `syz.3.68'. [ 64.952934][ T6357] 9pnet: Could not find request transport: virÏòÆ ãFþ#Τ€êç|io [ 64.958942][ T6357] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 64.985468][ T6360] 9pnet_virtio: no channels available for device 127.0.0.1 [ 65.064149][ T6363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.69'. [ 65.067016][ T6363] syz_tun: left allmulticast mode [ 65.068644][ T6363] syz_tun: left promiscuous mode [ 65.070943][ T6363] bridge0: port 3(syz_tun) entered disabled state [ 65.651291][ T6363] bridge_slave_1: left allmulticast mode [ 65.653253][ T6363] bridge_slave_1: left promiscuous mode [ 65.666113][ T6363] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.731495][ T6366] fuse: Bad value for 'fd' [ 66.002272][ T6363] bridge_slave_0: left allmulticast mode [ 66.004019][ T6363] bridge_slave_0: left promiscuous mode [ 66.005752][ T6363] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.409601][ T6401] FAULT_INJECTION: forcing a failure. [ 67.409601][ T6401] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 67.413784][ T6401] CPU: 3 UID: 0 PID: 6401 Comm: syz.1.78 Not tainted 6.13.0-rc5-syzkaller #0 [ 67.416431][ T6401] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 67.419619][ T6401] Call Trace: [ 67.420632][ T6401] [ 67.421532][ T6401] dump_stack_lvl+0x16c/0x1f0 [ 67.422966][ T6401] should_fail_ex+0x497/0x5b0 [ 67.424393][ T6401] _copy_to_user+0x32/0xd0 [ 67.425747][ T6401] simple_read_from_buffer+0xd0/0x160 [ 67.427363][ T6401] proc_fail_nth_read+0x198/0x270 [ 67.428877][ T6401] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 67.430541][ T6401] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 67.432191][ T6401] vfs_read+0x1df/0xbe0 [ 67.433493][ T6401] ? __fget_files+0x1fc/0x3a0 [ 67.434935][ T6401] ? __pfx___mutex_lock+0x10/0x10 [ 67.436457][ T6401] ? __pfx_vfs_read+0x10/0x10 [ 67.438054][ T6401] ? __fget_files+0x206/0x3a0 [ 67.439493][ T6401] ksys_read+0x12b/0x250 [ 67.440777][ T6401] ? __pfx_ksys_read+0x10/0x10 [ 67.442232][ T6401] __do_fast_syscall_32+0x73/0x120 [ 67.443789][ T6401] do_fast_syscall_32+0x32/0x80 [ 67.445300][ T6401] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 67.447207][ T6401] RIP: 0023:0xf70ae579 [ 67.448449][ T6401] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 67.454214][ T6401] RSP: 002b:00000000f50a0590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 67.456717][ T6401] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50a0620 [ 67.459081][ T6401] RDX: 000000000000000f RSI: 00000000f73e3ff4 RDI: 0000000000000000 [ 67.461441][ T6401] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 67.463804][ T6401] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 67.466170][ T6401] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 67.468552][ T6401] [ 67.666229][ T6418] fuse: Bad value for 'fd' [ 68.700638][ T6443] fuse: Unknown parameter 'fd0x0000000000000004' [ 69.859859][ T6461] netlink: 72 bytes leftover after parsing attributes in process `syz.1.98'. [ 69.898356][ T6468] 9pnet_fd: Insufficient options for proto=fd [ 70.840013][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.841924][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.858053][ T6502] netlink: 40 bytes leftover after parsing attributes in process `syz.2.110'. [ 71.269887][ T6512] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 71.843354][ T6526] netlink: 16 bytes leftover after parsing attributes in process `syz.1.115'. [ 72.572239][ T6540] fuse: Unknown parameter 'fd0x0000000000000004' [ 72.610184][ T6544] FAULT_INJECTION: forcing a failure. [ 72.610184][ T6544] name failslab, interval 1, probability 0, space 0, times 1 [ 72.613890][ T6544] CPU: 3 UID: 0 PID: 6544 Comm: syz.1.123 Not tainted 6.13.0-rc5-syzkaller #0 [ 72.616429][ T6544] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 72.619800][ T6544] Call Trace: [ 72.620770][ T6544] [ 72.621624][ T6544] dump_stack_lvl+0x16c/0x1f0 [ 72.623029][ T6544] should_fail_ex+0x497/0x5b0 [ 72.624384][ T6544] ? fs_reclaim_acquire+0xae/0x150 [ 72.625821][ T6544] should_failslab+0xc2/0x120 [ 72.627502][ T6544] __kmalloc_cache_noprof+0x68/0x420 [ 72.629677][ T6544] ? afs_find_cell+0x1d3/0x2d0 [ 72.631356][ T6544] afs_get_tree+0x3ae/0x14d0 [ 72.632763][ T6544] ? security_capable+0x7e/0x260 [ 72.634283][ T6544] vfs_get_tree+0x8f/0x380 [ 72.635602][ T6544] path_mount+0x6e1/0x1f10 [ 72.636919][ T6544] ? kmem_cache_free+0x152/0x4c0 [ 72.638521][ T6544] ? __pfx_path_mount+0x10/0x10 [ 72.639953][ T6544] ? putname+0x13c/0x180 [ 72.641219][ T6544] __ia32_sys_mount+0x292/0x310 [ 72.642736][ T6544] ? __pfx___ia32_sys_mount+0x10/0x10 [ 72.644320][ T6544] __do_fast_syscall_32+0x73/0x120 [ 72.645795][ T6544] do_fast_syscall_32+0x32/0x80 [ 72.647319][ T6544] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 72.649424][ T6544] RIP: 0023:0xf70ae579 [ 72.650600][ T6544] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 72.656006][ T6544] RSP: 002b:00000000f50a055c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 72.658471][ T6544] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000020002840 [ 72.660706][ T6544] RDX: 0000000020002880 RSI: 0000000000000000 RDI: 0000000020000200 [ 72.662937][ T6544] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 72.665166][ T6544] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 72.667461][ T6544] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.669721][ T6544] [ 72.890504][ T5832] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 72.969004][ T6549] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 72.983455][ T6549] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 73.046490][ T5832] usb 7-1: Using ep0 maxpacket: 16 [ 73.055457][ T5832] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 212, changing to 11 [ 73.060478][ T5832] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 41224, setting to 1024 [ 73.064785][ T5832] usb 7-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 73.077157][ T5832] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.080409][ T5832] usb 7-1: config 0 descriptor?? [ 73.289074][ T5832] usbhid 7-1:0.0: can't add hid device: -71 [ 73.290967][ T5832] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 73.296928][ T5832] usb 7-1: USB disconnect, device number 2 [ 73.309139][ T39] audit: type=1800 audit(1735584843.194:2): pid=6560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.126" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 74.723242][ T5989] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x4 [ 74.725807][ T5989] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x2 [ 74.728440][ T5989] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 74.730976][ T5989] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 74.733501][ T5989] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 74.735763][ T5989] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 74.738088][ T5989] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 74.740589][ T5989] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 74.743204][ T5989] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 74.745428][ T5989] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 74.747982][ T5989] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 74.750957][ T5989] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 74.753894][ T5989] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 74.756945][ T5989] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 74.759837][ T5989] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 74.762002][ T5989] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 74.765452][ T5989] hid-generic 0000:3000000:0000.0004: hidraw1: HID v0.00 Device [sy] on syz0 [ 74.941159][ T6608] syz.1.139 uses obsolete (PF_INET,SOCK_PACKET) [ 76.618488][ T6652] xt_CT: You must specify a L4 protocol and not use inversions on it [ 76.622215][ T6652] netlink: 36 bytes leftover after parsing attributes in process `syz.2.156'. [ 76.657681][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 76.903910][ T6657] netlink: 'syz.3.158': attribute type 4 has an invalid length. [ 76.932109][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 76.936036][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.940653][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.958056][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 76.972049][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 76.976051][ T9] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 76.980084][ T9] usb 5-1: Manufacturer: syz [ 76.996321][ T9] usb 5-1: config 0 descriptor?? [ 77.530163][ T6668] 9pnet_fd: Insufficient options for proto=fd [ 77.659869][ T6672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.163'. [ 77.664745][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 77.666857][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.669182][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.671503][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.673889][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.676244][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.678670][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.680994][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.683234][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.684176][ T9] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 77.685484][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.689916][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.692224][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.694488][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.696813][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.697907][ T9] appleir 0003:05AC:8243.0005: No inputs registered, leaving [ 77.699152][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.704212][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.704627][ T9] appleir 0003:05AC:8243.0005: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 77.706623][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.706632][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.706655][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.714611][ T39] audit: type=1326 audit(1735584847.594:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6671 comm="syz.2.163" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x0 [ 77.714946][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.725375][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.727576][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.729821][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.732017][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.734295][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.736595][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.738906][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.741209][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.743538][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.745793][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.748177][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.750516][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.752912][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.755252][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.757610][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.759935][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.762272][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.764642][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.767088][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.769373][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.771646][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.773947][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.969098][ T25] usb 5-1: USB disconnect, device number 2 [ 78.165322][ T6683] netlink: 24 bytes leftover after parsing attributes in process `syz.1.166'. [ 78.173154][ T6684] netlink: 128 bytes leftover after parsing attributes in process `syz.1.166'. [ 78.175942][ T6684] netlink: 24 bytes leftover after parsing attributes in process `syz.1.166'. [ 78.179318][ T6683] netlink: 128 bytes leftover after parsing attributes in process `syz.1.166'. [ 78.181978][ T6683] netlink: 24 bytes leftover after parsing attributes in process `syz.1.166'. [ 78.459909][ T6691] netlink: 24 bytes leftover after parsing attributes in process `syz.1.168'. [ 78.539264][ T6695] FAULT_INJECTION: forcing a failure. [ 78.539264][ T6695] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 78.543445][ T6695] CPU: 0 UID: 0 PID: 6695 Comm: syz.0.169 Not tainted 6.13.0-rc5-syzkaller #0 [ 78.546493][ T6695] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.550763][ T6695] Call Trace: [ 78.552032][ T6695] [ 78.552994][ T6695] dump_stack_lvl+0x16c/0x1f0 [ 78.554473][ T6695] should_fail_ex+0x497/0x5b0 [ 78.555896][ T6695] ? fs_reclaim_acquire+0xae/0x150 [ 78.557444][ T6695] should_fail_alloc_page+0xe7/0x130 [ 78.559045][ T6695] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 78.560891][ T6695] ? __pfx___lock_acquire+0x10/0x10 [ 78.562469][ T6695] __alloc_pages_noprof+0x190/0x25b0 [ 78.564097][ T6695] ? find_held_lock+0x2d/0x110 [ 78.565576][ T6695] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 78.567286][ T6695] ? __pfx___might_resched+0x10/0x10 [ 78.568835][ T6695] ? hlock_class+0x4e/0x130 [ 78.570204][ T6695] ? hlock_class+0x4e/0x130 [ 78.571594][ T6695] ? mark_lock+0xb5/0xc60 [ 78.572932][ T6695] ? __pfx_mark_lock+0x10/0x10 [ 78.574417][ T6695] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 78.576203][ T6695] ? policy_nodemask+0xea/0x4e0 [ 78.577674][ T6695] alloc_pages_mpol_noprof+0x2c9/0x610 [ 78.579308][ T6695] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 78.581105][ T6695] ? hlock_class+0x4e/0x130 [ 78.582497][ T6695] ? __lock_acquire+0xcc5/0x3c40 [ 78.584006][ T6695] ? hlock_class+0x4e/0x130 [ 78.585749][ T6695] pte_alloc_one+0x20/0x390 [ 78.587640][ T6695] __pte_alloc+0x6e/0x3b0 [ 78.589440][ T6695] ? __pfx___pte_alloc+0x10/0x10 [ 78.591502][ T6695] ? __pfx___lock_acquire+0x10/0x10 [ 78.593189][ T6695] do_pte_missing+0x2810/0x3e00 [ 78.594707][ T6695] ? lock_vma_under_rcu+0x13e/0x980 [ 78.596269][ T6695] ? reacquire_held_locks+0x20b/0x4c0 [ 78.597855][ T6695] ? lock_vma_under_rcu+0x13e/0x980 [ 78.599415][ T6695] __handle_mm_fault+0x103c/0x2a40 [ 78.600956][ T6695] ? lock_vma_under_rcu+0x6b9/0x980 [ 78.602486][ T6695] ? __pfx___handle_mm_fault+0x10/0x10 [ 78.604128][ T6695] ? __pfx___vm_munmap+0x10/0x10 [ 78.605743][ T6695] handle_mm_fault+0x3fa/0xaa0 [ 78.607203][ T6695] do_user_addr_fault+0x60d/0x13f0 [ 78.608700][ T6695] exc_page_fault+0x5c/0xc0 [ 78.610067][ T6695] asm_exc_page_fault+0x26/0x30 [ 78.611557][ T6695] RIP: 0023:0xf71b7210 [ 78.612808][ T6695] Code: 18 e8 d4 52 03 00 83 c4 10 8b 54 24 08 85 c0 0f 85 55 01 00 00 8b 83 60 66 00 00 83 e8 01 39 f0 0f 82 b4 00 00 00 8b 44 24 04 <89> 72 08 89 72 0c 89 42 10 83 c4 1c 89 d0 5b 5e 5f 5d c3 8d 74 26 [ 78.618621][ T6695] RSP: 002b:00000000f507f280 EFLAGS: 00010286 [ 78.620457][ T6695] RAX: 0000000000001000 RBX: 00000000f73c3ff4 RCX: 0000000000021000 [ 78.622848][ T6695] RDX: 00000000f4f00000 RSI: 0000000000021000 RDI: 0000000000100000 [ 78.625264][ T6695] RBP: 00000000000a0000 R08: 0000000000000000 R09: 0000000000000000 [ 78.627626][ T6695] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 78.630004][ T6695] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 78.632395][ T6695] [ 78.634126][ T6695] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 78.914361][ T6704] overlayfs: invalid origin (0000) [ 78.962352][ T6710] bridge_slave_0: left allmulticast mode [ 78.964071][ T6710] bridge_slave_0: left promiscuous mode [ 78.966007][ T6710] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.969981][ T6710] bridge_slave_1: left allmulticast mode [ 78.971723][ T6710] bridge_slave_1: left promiscuous mode [ 78.973487][ T6710] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.982283][ T6710] bond0: (slave bond_slave_0): Releasing backup interface [ 78.987684][ T6710] bond0: (slave bond_slave_1): Releasing backup interface [ 79.000531][ T6710] team0: Port device team_slave_0 removed [ 79.006044][ T6710] team0: Port device team_slave_1 removed [ 79.009662][ T6710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.011811][ T6710] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.015026][ T6710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.018155][ T6710] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.049019][ T6713] netlink: 16 bytes leftover after parsing attributes in process `syz.2.176'. [ 79.079536][ T39] audit: type=1326 audit(1735584848.964:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6712 comm="syz.2.176" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x0 [ 79.086667][ T6716] 9pnet_virtio: no channels available for device syz [ 79.092120][ T6718] fuse: Bad value for 'fd' [ 79.138147][ T6724] 9pnet_fd: Insufficient options for proto=fd [ 79.201749][ T6730] netlink: 2052 bytes leftover after parsing attributes in process `syz.1.181'. [ 79.208293][ T6730] FAULT_INJECTION: forcing a failure. [ 79.208293][ T6730] name failslab, interval 1, probability 0, space 0, times 0 [ 79.212752][ T6730] CPU: 3 UID: 0 PID: 6730 Comm: syz.1.181 Not tainted 6.13.0-rc5-syzkaller #0 [ 79.215571][ T6730] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.218818][ T6730] Call Trace: [ 79.219826][ T6730] [ 79.220703][ T6730] dump_stack_lvl+0x16c/0x1f0 [ 79.222091][ T6730] should_fail_ex+0x497/0x5b0 [ 79.223507][ T6730] ? fs_reclaim_acquire+0xae/0x150 [ 79.225161][ T6730] should_failslab+0xc2/0x120 [ 79.226529][ T6730] __kmalloc_node_track_caller_noprof+0xcf/0x520 [ 79.228295][ T6730] ? kstrdup_const+0x63/0x80 [ 79.229600][ T6730] kstrdup+0x42/0xb0 [ 79.230769][ T6730] kstrdup_const+0x63/0x80 [ 79.232122][ T6730] __kernfs_new_node+0x9c/0x890 [ 79.233567][ T6730] ? __pfx___kernfs_new_node+0x10/0x10 [ 79.235156][ T6730] ? __pfx_lock_release+0x10/0x10 [ 79.236639][ T6730] ? kernfs_add_one+0x39d/0x520 [ 79.238084][ T6730] ? lock_acquire.part.0+0x11b/0x380 [ 79.239695][ T6730] ? find_held_lock+0x2d/0x110 [ 79.241049][ T6730] kernfs_new_node+0x186/0x240 [ 79.242476][ T6730] kernfs_create_link+0xcc/0x240 [ 79.243880][ T6730] sysfs_do_create_link_sd+0x90/0x140 [ 79.245445][ T6730] sysfs_create_link+0x61/0xc0 [ 79.246868][ T6730] device_add+0x62e/0x1a70 [ 79.248182][ T6730] ? __pfx_device_add+0x10/0x10 [ 79.249641][ T6730] ? __init_waitqueue_head+0xca/0x150 [ 79.251187][ T6730] netdev_register_kobject+0x183/0x3a0 [ 79.252819][ T6730] register_netdevice+0x1473/0x1e20 [ 79.254316][ T6730] ? __pfx_register_netdevice+0x10/0x10 [ 79.256071][ T6730] bond_newlink+0x48/0xa0 [ 79.257316][ T6730] ? __pfx_bond_newlink+0x10/0x10 [ 79.258762][ T6730] rtnl_newlink+0xbae/0x1d70 [ 79.260126][ T6730] ? __pfx_rtnl_newlink+0x10/0x10 [ 79.261592][ T6730] ? __pfx___lock_acquire+0x10/0x10 [ 79.263142][ T6730] ? kmem_cache_free+0x152/0x4c0 [ 79.264611][ T6730] ? aa_get_newest_label+0x376/0x680 [ 79.266184][ T6730] ? find_held_lock+0x2d/0x110 [ 79.267535][ T6730] ? find_held_lock+0x2d/0x110 [ 79.268965][ T6730] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 79.270501][ T6730] ? __pfx_lock_release+0x10/0x10 [ 79.271971][ T6730] ? trace_lock_acquire+0x14e/0x1f0 [ 79.273486][ T6730] ? __pfx_rtnl_newlink+0x10/0x10 [ 79.274937][ T6730] rtnetlink_rcv_msg+0x95b/0xea0 [ 79.276330][ T6730] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 79.277869][ T6730] ? __pfx___dev_queue_xmit+0x10/0x10 [ 79.279420][ T6730] netlink_rcv_skb+0x165/0x410 [ 79.280833][ T6730] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 79.282463][ T6730] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 79.284123][ T6730] ? netlink_deliver_tap+0x1ae/0xca0 [ 79.285701][ T6730] netlink_unicast+0x53c/0x7f0 [ 79.287161][ T6730] ? __pfx_netlink_unicast+0x10/0x10 [ 79.288734][ T6730] ? __phys_addr+0xc6/0x150 [ 79.290105][ T6730] ? __phys_addr_symbol+0x30/0x80 [ 79.291618][ T6730] ? __check_object_size+0x488/0x710 [ 79.293224][ T6730] netlink_sendmsg+0x8b8/0xd70 [ 79.294641][ T6730] ? __pfx_netlink_sendmsg+0x10/0x10 [ 79.296202][ T6730] ? trace_contention_end+0xee/0x140 [ 79.297739][ T6730] sock_sendmsg+0x369/0x410 [ 79.299093][ T6730] ? __pfx_sock_sendmsg+0x10/0x10 [ 79.300603][ T6730] splice_to_socket+0xaac/0x1040 [ 79.302072][ T6730] ? __pfx_splice_to_socket+0x10/0x10 [ 79.303722][ T6730] ? apparmor_file_permission+0x251/0x400 [ 79.305407][ T6730] ? bpf_lsm_file_permission+0x9/0x10 [ 79.307142][ T6730] ? security_file_permission+0x71/0x210 [ 79.308977][ T6730] ? __pfx_splice_to_socket+0x10/0x10 [ 79.310559][ T6730] do_splice+0x145c/0x1f60 [ 79.311922][ T6730] ? __pfx_do_splice+0x10/0x10 [ 79.313357][ T6730] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 79.314937][ T6730] ? __pfx_lock_release+0x10/0x10 [ 79.316446][ T6730] ? trace_lock_acquire+0x14e/0x1f0 [ 79.317991][ T6730] __do_splice+0x327/0x360 [ 79.319305][ T6730] ? __pfx___do_splice+0x10/0x10 [ 79.320763][ T6730] ? __fget_files+0x206/0x3a0 [ 79.322172][ T6730] __ia32_sys_splice+0x189/0x250 [ 79.323653][ T6730] __do_fast_syscall_32+0x73/0x120 [ 79.325136][ T6730] do_fast_syscall_32+0x32/0x80 [ 79.326575][ T6730] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 79.328373][ T6730] RIP: 0023:0xf70ae579 [ 79.329552][ T6730] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 79.335027][ T6730] RSP: 002b:00000000f507f55c EFLAGS: 00000296 ORIG_RAX: 0000000000000139 [ 79.337395][ T6730] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 79.339929][ T6730] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 000000000004ffe2 [ 79.342107][ T6730] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 79.344444][ T6730] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 79.346808][ T6730] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 79.349180][ T6730] [ 79.353307][ T6730] bond1 (unregistered): Released all slaves [ 80.163480][ T6751] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 80.669920][ T6765] 9pnet_fd: Insufficient options for proto=fd [ 80.692944][ T6768] netlink: 'syz.0.193': attribute type 1 has an invalid length. [ 80.888018][ T6781] netlink: 'syz.2.196': attribute type 10 has an invalid length. [ 80.997344][ T67] Bluetooth: hci3: command tx timeout [ 81.093156][ T58] cfg80211: failed to load regulatory.db [ 81.306348][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 81.456359][ T9] usb 7-1: device descriptor read/64, error -71 [ 81.710550][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 82.145632][ T9] usb 7-1: device descriptor read/64, error -71 [ 82.271970][ T9] usb usb7-port1: attempt power cycle [ 82.796364][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 82.816822][ T9] usb 7-1: device descriptor read/8, error -71 [ 82.836823][ T6849] 9pnet_fd: Insufficient options for proto=fd [ 82.838265][ T6851] __nla_validate_parse: 2 callbacks suppressed [ 82.838274][ T6851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.208'. [ 83.056507][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 83.077226][ T9] usb 7-1: device descriptor read/8, error -71 [ 83.186436][ T9] usb usb7-port1: unable to enumerate USB device [ 84.063350][ T6867] FAULT_INJECTION: forcing a failure. [ 84.063350][ T6867] name failslab, interval 1, probability 0, space 0, times 0 [ 84.069996][ T6867] CPU: 1 UID: 0 PID: 6867 Comm: syz.0.213 Not tainted 6.13.0-rc5-syzkaller #0 [ 84.073823][ T6867] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.078279][ T6867] Call Trace: [ 84.079543][ T6867] [ 84.080443][ T6867] dump_stack_lvl+0x16c/0x1f0 [ 84.081861][ T6867] should_fail_ex+0x497/0x5b0 [ 84.083319][ T6867] ? fs_reclaim_acquire+0xae/0x150 [ 84.084909][ T6867] should_failslab+0xc2/0x120 [ 84.086375][ T6867] __kmalloc_cache_noprof+0x68/0x420 [ 84.087771][ T6867] binder_transaction+0xb92/0x9af0 [ 84.089434][ T6867] ? __pfx_mark_lock+0x10/0x10 [ 84.091009][ T6867] ? __pfx___schedule+0x10/0x10 [ 84.092487][ T6867] ? __pfx_llist_add_batch+0x10/0x10 [ 84.094195][ T6867] ? __pfx_binder_transaction+0x10/0x10 [ 84.096358][ T6867] ? irqentry_exit+0x3b/0x90 [ 84.097741][ T6867] ? lockdep_hardirqs_on+0x7c/0x110 [ 84.099303][ T6867] ? hlock_class+0x4e/0x130 [ 84.100677][ T6867] ? find_held_lock+0x2d/0x110 [ 84.102111][ T6867] ? __might_fault+0x13b/0x190 [ 84.103594][ T6867] ? __pfx_lock_release+0x10/0x10 [ 84.105153][ T6867] ? trace_lock_acquire+0x14e/0x1f0 [ 84.106721][ T6867] ? __pfx_lock_release+0x10/0x10 [ 84.108231][ T6867] ? lock_acquire+0x2f/0xb0 [ 84.109595][ T6867] ? __might_fault+0xe3/0x190 [ 84.111019][ T6867] ? __might_fault+0xe3/0x190 [ 84.112959][ T6867] binder_thread_write+0x1404/0x4c30 [ 84.115314][ T6867] ? __pfx___lock_acquire+0x10/0x10 [ 84.117422][ T6867] ? __kasan_slab_free+0x51/0x70 [ 84.119568][ T6867] ? __pfx_binder_thread_write+0x10/0x10 [ 84.121843][ T6867] ? find_held_lock+0x2d/0x110 [ 84.123496][ T6867] ? lock_acquire+0x2f/0xb0 [ 84.124900][ T6867] ? lock_acquire+0x2f/0xb0 [ 84.126257][ T6867] ? __might_fault+0xe3/0x190 [ 84.127677][ T6867] ? __might_fault+0xe3/0x190 [ 84.129132][ T6867] binder_ioctl+0x269d/0x7080 [ 84.130602][ T6867] ? tomoyo_path_number_perm+0x46d/0x5b0 [ 84.132235][ T6867] ? tomoyo_path_number_perm+0x190/0x5b0 [ 84.133941][ T6867] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 84.135873][ T6867] ? __pfx_binder_ioctl+0x10/0x10 [ 84.137797][ T6867] ? do_vfs_ioctl+0x513/0x1950 [ 84.139232][ T6867] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 84.140738][ T6867] ? trace_lock_acquire+0x14e/0x1f0 [ 84.142292][ T6867] ? __fget_files+0x206/0x3a0 [ 84.143709][ T6867] ? __pfx_binder_ioctl+0x10/0x10 [ 84.145254][ T6867] compat_ptr_ioctl+0x6b/0xa0 [ 84.146652][ T6867] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 84.148223][ T6867] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 84.149798][ T6867] __do_fast_syscall_32+0x73/0x120 [ 84.151323][ T6867] do_fast_syscall_32+0x32/0x80 [ 84.152778][ T6867] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 84.155251][ T6867] RIP: 0023:0xf708e579 [ 84.156518][ T6867] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 84.162186][ T6867] RSP: 002b:00000000f508055c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 84.164916][ T6867] RAX: ffffffffffffffda RBX: 0000000000000011 RCX: 00000000c0306201 [ 84.167283][ T6867] RDX: 0000000020000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 84.169618][ T6867] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 84.172769][ T6867] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 84.175556][ T6867] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 84.177911][ T6867] [ 84.381645][ T6879] autofs: Unknown parameter './file0' [ 84.386093][ T6879] sctp: [Deprecated]: syz.2.216 (pid 6879) Use of int in max_burst socket option. [ 84.386093][ T6879] Use struct sctp_assoc_value instead [ 84.852436][ T6891] vivid-002: disconnect [ 84.857080][ T6890] vivid-002: reconnect [ 85.326587][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 85.456426][ T9] usb 5-1: device descriptor read/64, error -71 [ 85.656324][ T6943] netlink: 152 bytes leftover after parsing attributes in process `syz.1.226'. [ 85.696390][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 85.826422][ T9] usb 5-1: device descriptor read/64, error -71 [ 85.936634][ T9] usb usb5-port1: attempt power cycle [ 86.276638][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 86.296978][ T9] usb 5-1: device descriptor read/8, error -71 [ 86.405315][ T6968] bridge0: port 3(syz_tun) entered blocking state [ 86.408006][ T6968] bridge0: port 3(syz_tun) entered disabled state [ 86.410866][ T6968] syz_tun: entered allmulticast mode [ 86.413274][ T6968] syz_tun: entered promiscuous mode [ 86.415663][ T6968] bridge0: port 3(syz_tun) entered blocking state [ 86.417990][ T6968] bridge0: port 3(syz_tun) entered forwarding state [ 86.424308][ T6968] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 86.556401][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 86.576865][ T9] usb 5-1: device descriptor read/8, error -71 [ 86.688773][ T9] usb usb5-port1: unable to enumerate USB device [ 87.182716][ T6979] wireguard0: entered promiscuous mode [ 87.764926][ T6988] nbd: must specify a device to reconfigure [ 87.847317][ T6994] openvswitch: netlink: Tunnel attr 6 has unexpected len 16 expected 0 [ 88.696139][ T7015] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 88.775785][ T7018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.242'. [ 89.446413][ T58] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 89.586619][ T58] usb 5-1: device descriptor read/64, error -71 [ 89.726439][ T67] Bluetooth: hci0: command tx timeout [ 89.828006][ T58] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 89.966383][ T58] usb 5-1: device descriptor read/64, error -71 [ 90.086497][ T58] usb usb5-port1: attempt power cycle [ 90.446429][ T58] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 90.466791][ T58] usb 5-1: device descriptor read/8, error -71 [ 90.706422][ T58] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 90.736891][ T58] usb 5-1: device descriptor read/8, error -71 [ 90.846766][ T58] usb usb5-port1: unable to enumerate USB device [ 90.862346][ T7054] overlayfs: failed to clone upperpath [ 90.905481][ T7052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.253'. [ 90.986464][ T58] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 91.176434][ T58] usb 5-1: device descriptor read/64, error -71 [ 91.426375][ T58] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 91.557202][ T58] usb 5-1: device descriptor read/64, error -71 [ 91.666886][ T58] usb usb5-port1: attempt power cycle [ 91.882672][ T7072] netlink: 332 bytes leftover after parsing attributes in process `syz.3.261'. [ 92.046396][ T58] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 92.066726][ T58] usb 5-1: device descriptor read/8, error -71 [ 93.037964][ T7088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.265'. [ 93.040882][ T7088] unsupported nlmsg_type 40 [ 93.200795][ T7098] netlink: 'syz.1.269': attribute type 12 has an invalid length. [ 93.203261][ T7098] netlink: 132 bytes leftover after parsing attributes in process `syz.1.269'. [ 93.209390][ T7098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.269'. [ 95.193285][ T7153] evm: overlay not supported [ 95.194988][ T7150] FAULT_INJECTION: forcing a failure. [ 95.194988][ T7150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.199878][ T7150] CPU: 1 UID: 0 PID: 7150 Comm: syz.0.282 Not tainted 6.13.0-rc5-syzkaller #0 [ 95.202573][ T7150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 95.205814][ T7150] Call Trace: [ 95.206844][ T7150] [ 95.207745][ T7150] dump_stack_lvl+0x16c/0x1f0 [ 95.209268][ T7150] should_fail_ex+0x497/0x5b0 [ 95.210732][ T7150] save_fsave_header+0x17c/0x2e0 [ 95.212264][ T7150] ? __pfx_save_fsave_header+0x10/0x10 [ 95.213995][ T7150] ? __local_bh_enable_ip+0xa4/0x120 [ 95.215604][ T7150] copy_fpstate_to_sigframe+0x7b6/0xb20 [ 95.217270][ T7150] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 95.219112][ T7150] ? lock_acquire+0x2f/0xb0 [ 95.220489][ T7150] ? posixtimer_deliver_signal+0x1ad/0x650 [ 95.222286][ T7150] ? posixtimer_deliver_signal+0x1ad/0x650 [ 95.224066][ T7150] ? find_held_lock+0x2d/0x110 [ 95.225520][ T7150] get_sigframe+0x4aa/0x9c0 [ 95.226910][ T7150] ? __pfx_get_sigframe+0x10/0x10 [ 95.228407][ T7150] ? _raw_spin_unlock_irq+0x23/0x50 [ 95.229954][ T7150] ? siginfo_layout+0x177/0x290 [ 95.231457][ T7150] ia32_setup_rt_frame+0xe4/0xb30 [ 95.233028][ T7150] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 95.234726][ T7150] ? __pfx_do_splice+0x10/0x10 [ 95.236204][ T7150] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 95.237858][ T7150] arch_do_signal_or_restart+0x47b/0x7e0 [ 95.239570][ T7150] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 95.241437][ T7150] ? __do_splice+0x1dd/0x360 [ 95.242863][ T7150] syscall_exit_to_user_mode+0x150/0x2a0 [ 95.244557][ T7150] do_int80_emulation+0x111/0x200 [ 95.246079][ T7150] asm_int80_emulation+0x1a/0x20 [ 95.247594][ T7150] RIP: 0023:0xf708e577 [ 95.248825][ T7150] Code: 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 [ 95.254587][ T7150] RSP: 002b:00000000f508055c EFLAGS: 00000296 ORIG_RAX: 0000000000000139 [ 95.257170][ T7150] RAX: 0000000000000139 RBX: 0000000000000008 RCX: 0000000000000000 [ 95.259513][ T7150] RDX: 000000000000000a RSI: 0000000000000000 RDI: 0000000000000016 [ 95.262262][ T7150] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 95.265056][ T7150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.267431][ T7150] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 95.269796][ T7150] [ 96.159355][ T7170] netlink: 101 bytes leftover after parsing attributes in process `syz.3.289'. [ 96.326188][ T7172] FAULT_INJECTION: forcing a failure. [ 96.326188][ T7172] name failslab, interval 1, probability 0, space 0, times 0 [ 96.331206][ T7172] CPU: 3 UID: 0 PID: 7172 Comm: syz.0.290 Not tainted 6.13.0-rc5-syzkaller #0 [ 96.333855][ T7172] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 96.337732][ T7172] Call Trace: [ 96.339101][ T7172] [ 96.340310][ T7172] dump_stack_lvl+0x16c/0x1f0 [ 96.342283][ T7172] should_fail_ex+0x497/0x5b0 [ 96.344260][ T7172] ? fs_reclaim_acquire+0xae/0x150 [ 96.346407][ T7172] should_failslab+0xc2/0x120 [ 96.348395][ T7172] __kmalloc_noprof+0xce/0x4f0 [ 96.350420][ T7172] ? kasan_save_track+0x14/0x30 [ 96.352446][ T7172] ? fuse_direct_io+0x5b3/0x2580 [ 96.354578][ T7172] fuse_direct_io+0x5b3/0x2580 [ 96.356615][ T7172] ? __pfx_fuse_direct_io+0x10/0x10 [ 96.358803][ T7172] ? lockdep_init_map_type+0x16d/0x7d0 [ 96.361078][ T7172] fuse_direct_IO+0x620/0xf20 [ 96.363070][ T7172] ? __pfx_aio_complete_rw+0x10/0x10 [ 96.365285][ T7172] ? __pfx_fuse_direct_IO+0x10/0x10 [ 96.367600][ T7172] generic_file_direct_write+0x197/0x410 [ 96.369928][ T7172] ? kiocb_modified+0x134/0x2c0 [ 96.371984][ T7172] fuse_file_write_iter+0x6d5/0x8c0 [ 96.374196][ T7172] aio_write+0x3b2/0x8c0 [ 96.376013][ T7172] ? __pfx_aio_write+0x10/0x10 [ 96.378020][ T7172] ? find_held_lock+0x2d/0x110 [ 96.380057][ T7172] ? lock_acquire+0x2f/0xb0 [ 96.381961][ T7172] ? __might_fault+0xe3/0x190 [ 96.383462][ T7172] ? io_submit_one+0x1248/0x1da0 [ 96.384950][ T7172] io_submit_one+0x1248/0x1da0 [ 96.386460][ T7172] ? __pfx_io_submit_one+0x10/0x10 [ 96.388010][ T7172] ? __might_fault+0x13b/0x190 [ 96.389462][ T7172] ? lock_acquire+0x2f/0xb0 [ 96.390849][ T7172] ? __might_fault+0xe3/0x190 [ 96.392264][ T7172] ? __ia32_compat_sys_io_submit+0x1ba/0x3a0 [ 96.394088][ T7172] __ia32_compat_sys_io_submit+0x1ba/0x3a0 [ 96.396068][ T7172] ? __pfx___ia32_compat_sys_io_submit+0x10/0x10 [ 96.398602][ T7172] __do_fast_syscall_32+0x73/0x120 [ 96.400135][ T7172] do_fast_syscall_32+0x32/0x80 [ 96.401593][ T7172] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 96.403491][ T7172] RIP: 0023:0xf708e579 [ 96.404745][ T7172] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 96.410800][ T7172] RSP: 002b:00000000f508055c EFLAGS: 00000296 ORIG_RAX: 00000000000000f8 [ 96.413300][ T7172] RAX: ffffffffffffffda RBX: 00000000f5036000 RCX: 0000000000000001 [ 96.415780][ T7172] RDX: 0000000020000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 96.418967][ T7172] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 96.421307][ T7172] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 96.423669][ T7172] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 96.426052][ T7172] [ 96.428484][ T7172] ------------[ cut here ]------------ [ 96.430117][ T7172] kernel BUG at lib/iov_iter.c:626! [ 96.431699][ T7172] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 96.434833][ T7172] CPU: 3 UID: 0 PID: 7172 Comm: syz.0.290 Not tainted 6.13.0-rc5-syzkaller #0 [ 96.439288][ T7172] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 96.443769][ T7172] RIP: 0010:iov_iter_revert+0x533/0x5a0 [ 96.446107][ T7172] Code: 89 e6 48 c7 c7 60 38 90 8e e8 59 db 31 00 e9 b1 fd ff ff e8 9f 39 65 fd eb 95 e8 c8 39 65 fd e9 46 fb ff ff e8 be c9 02 fd 90 <0f> 0b 48 8b 3c 24 e8 b2 39 65 fd e9 97 fb ff ff 48 8b 7c 24 08 e8 [ 96.454305][ T7172] RSP: 0018:ffffc900078a7638 EFLAGS: 00010293 [ 96.456853][ T7172] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff849681f0 [ 96.460240][ T7172] RDX: ffff888023758000 RSI: ffffffff84968602 RDI: 0000000000000001 [ 96.463564][ T7172] RBP: ffffc900078a7b10 R08: 0000000000000001 R09: 0000000000000000 [ 96.466913][ T7172] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 96.470247][ T7172] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff888021d3fc00 [ 96.473613][ T7172] FS: 0000000000000000(0000) GS:ffff88802b700000(0063) knlGS:00000000f5080b40 [ 96.477432][ T7172] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 96.480208][ T7172] CR2: 00000000f5035da4 CR3: 00000000676fa000 CR4: 0000000000352ef0 [ 96.483654][ T7172] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 96.486983][ T7172] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 96.490316][ T7172] Call Trace: [ 96.491729][ T7172] [ 96.493011][ T7172] ? die+0x31/0x80 [ 96.494595][ T7172] ? do_trap+0x232/0x430 [ 96.496368][ T7172] ? iov_iter_revert+0x533/0x5a0 [ 96.498516][ T7172] ? iov_iter_revert+0x533/0x5a0 [ 96.500651][ T7172] ? do_error_trap+0xf4/0x230 [ 96.502647][ T7172] ? iov_iter_revert+0x533/0x5a0 [ 96.504731][ T7172] ? handle_invalid_op+0x34/0x40 [ 96.506534][ T7172] ? iov_iter_revert+0x533/0x5a0 [ 96.508033][ T7172] ? exc_invalid_op+0x2e/0x50 [ 96.509593][ T7172] ? asm_exc_invalid_op+0x1a/0x20 [ 96.511109][ T7172] ? iov_iter_revert+0x120/0x5a0 [ 96.512605][ T7172] ? iov_iter_revert+0x532/0x5a0 [ 96.514479][ T7172] ? iov_iter_revert+0x533/0x5a0 [ 96.516546][ T7172] ? iov_iter_revert+0x532/0x5a0 [ 96.518644][ T7172] fuse_direct_io+0xf0e/0x2580 [ 96.520666][ T7172] ? __pfx_fuse_direct_io+0x10/0x10 [ 96.522861][ T7172] ? lockdep_init_map_type+0x16d/0x7d0 [ 96.525086][ T7172] fuse_direct_IO+0x620/0xf20 [ 96.526977][ T7172] ? __pfx_aio_complete_rw+0x10/0x10 [ 96.529143][ T7172] ? __pfx_fuse_direct_IO+0x10/0x10 [ 96.531328][ T7172] generic_file_direct_write+0x197/0x410 [ 96.533765][ T7172] ? kiocb_modified+0x134/0x2c0 [ 96.535827][ T7172] fuse_file_write_iter+0x6d5/0x8c0 [ 96.537975][ T7172] aio_write+0x3b2/0x8c0 [ 96.539768][ T7172] ? __pfx_aio_write+0x10/0x10 [ 96.541714][ T7172] ? find_held_lock+0x2d/0x110 [ 96.543765][ T7172] ? lock_acquire+0x2f/0xb0 [ 96.545653][ T7172] ? __might_fault+0xe3/0x190 [ 96.547639][ T7172] ? io_submit_one+0x1248/0x1da0 [ 96.549701][ T7172] io_submit_one+0x1248/0x1da0 [ 96.551708][ T7172] ? __pfx_io_submit_one+0x10/0x10 [ 96.553871][ T7172] ? __might_fault+0x13b/0x190 [ 96.555927][ T7172] ? lock_acquire+0x2f/0xb0 [ 96.557780][ T7172] ? __might_fault+0xe3/0x190 [ 96.559668][ T7172] ? __ia32_compat_sys_io_submit+0x1ba/0x3a0 [ 96.562116][ T7172] __ia32_compat_sys_io_submit+0x1ba/0x3a0 [ 96.564490][ T7172] ? __pfx___ia32_compat_sys_io_submit+0x10/0x10 [ 96.567031][ T7172] __do_fast_syscall_32+0x73/0x120 [ 96.569080][ T7172] do_fast_syscall_32+0x32/0x80 [ 96.571093][ T7172] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 96.573682][ T7172] RIP: 0023:0xf708e579 [ 96.575321][ T7172] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 96.582968][ T7172] RSP: 002b:00000000f508055c EFLAGS: 00000296 ORIG_RAX: 00000000000000f8 [ 96.586291][ T7172] RAX: ffffffffffffffda RBX: 00000000f5036000 RCX: 0000000000000001 [ 96.589469][ T7172] RDX: 0000000020000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 96.592582][ T7172] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 96.595784][ T7172] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 96.598975][ T7172] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 96.602133][ T7172] [ 96.603426][ T7172] Modules linked in: [ 96.605308][ T7172] ---[ end trace 0000000000000000 ]--- [ 96.607790][ T7172] RIP: 0010:iov_iter_revert+0x533/0x5a0 [ 96.609749][ T7172] Code: 89 e6 48 c7 c7 60 38 90 8e e8 59 db 31 00 e9 b1 fd ff ff e8 9f 39 65 fd eb 95 e8 c8 39 65 fd e9 46 fb ff ff e8 be c9 02 fd 90 <0f> 0b 48 8b 3c 24 e8 b2 39 65 fd e9 97 fb ff ff 48 8b 7c 24 08 e8 [ 96.616661][ T7172] RSP: 0018:ffffc900078a7638 EFLAGS: 00010293 [ 96.618407][ T7172] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff849681f0 [ 96.620652][ T7172] RDX: ffff888023758000 RSI: ffffffff84968602 RDI: 0000000000000001 [ 96.622972][ T7172] RBP: ffffc900078a7b10 R08: 0000000000000001 R09: 0000000000000000 [ 96.625334][ T7172] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 96.627726][ T7172] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff888021d3fc00 [ 96.630030][ T7172] FS: 0000000000000000(0000) GS:ffff88802b700000(0063) knlGS:00000000f5080b40 [ 96.632608][ T7172] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 96.634596][ T7172] CR2: 00000000f5035da4 CR3: 00000000676fa000 CR4: 0000000000352ef0 [ 96.636990][ T7172] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 96.639328][ T7172] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 96.641662][ T7172] Kernel panic - not syncing: Fatal exception [ 96.644010][ T7172] Kernel Offset: disabled [ 96.645277][ T7172] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:54:26 Registers: info registers vcpu 0 CPU#0 RAX=000000000022c085 RBX=0000000000000000 RCX=ffffffff8b1a4819 RDX=0000000000000000 RSI=ffffffff8b4cd260 RDI=ffffffff8bb17040 RBP=fffffbfff1b52ef8 RSP=ffffffff8da07e20 R8 =0000000000000001 R9 =ffffed1005686fed R10=ffff88802b437f6b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8da977c0 R14=ffffffff901ce550 R15=0000000000000000 RIP=ffffffff8b1a5bff RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020004d80 CR3=000000006284c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000029b5d4 RBX=0000000000000001 RCX=ffffffff8b1a4819 RDX=ffffed10056a6fee RSI=ffffffff8bb16fc0 RDI=ffffffff81702ed9 RBP=ffffed10039dc910 RSP=ffffc9000047fe08 R8 =0000000000000000 R9 =ffffed10056a6fed R10=ffff88802b537f6b R11=0000000000000001 R12=0000000000000001 R13=ffff88801cee4880 R14=ffffffff901ce550 R15=0000000000000000 RIP=ffffffff8b1a5bff RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000000 CR3=0000000069c78000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000d6764 RBX=0000000000000002 RCX=ffffffff8b1a4819 RDX=ffffed10056c6fee RSI=ffffffff8bb16fc0 RDI=ffffffff81702ed9 RBP=ffffed10039df000 RSP=ffffc9000048fe08 R8 =0000000000000000 R9 =ffffed10056c6fed R10=ffff88802b637f6b R11=0000000000000001 R12=0000000000000002 R13=ffff88801cef8000 R14=ffffffff901ce550 R15=0000000000000000 RIP=ffffffff8b1a5bff RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005604623cc3d8 CR3=00000000676fa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000005d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85143435 RDI=ffffffff9a667200 RBP=ffffffff9a6671c0 RSP=ffffc900078a6f50 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552033203a555043 R12=0000000000000000 R13=000000000000005d R14=ffffffff851433d0 R15=0000000000000000 RIP=ffffffff8514345f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f5035da4 CR3=00000000676fa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000005000001 Opmask01=0000000000000000 Opmask02=0000000000000002 Opmask03=0000000000000000 Opmask04=00000000fffffffb Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeb006a390 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e6f63007325 203a726f72726520 64656e7275746572 2072657672657300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40514b4a46005600 051f574a57574005 41404b5750514057 0557405357405600 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3130302030303030 3030203030302031 3735322e35392020 20363932300a3030 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3020302020303030 3020202030302030 3534302e24302020 2020333230000020 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 305a59582a573a3f 3b3d5e2a51573d32 3f3e3f38243f332a 2a2a51343e36003a ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3b3a3a3a3a3a3a3a 3a3a3a3a3a3a2a30 524b58554d435845 2a3c33383a3a3a3a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000