last executing test programs: 1.980259516s ago: executing program 1 (id=596): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x1}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x100) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) (async) r1 = syz_io_uring_setup(0x47f, &(0x7f0000001080)={0x0, 0xa065, 0x3180, 0x22, 0x31a}, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x114, &(0x7f00000000c0)=0xffb, 0x0, 0x4) (async) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x8, &(0x7f0000000100)={0x77359400}, 0x1, 0x40, 0x1}) (async) io_uring_enter(r1, 0x437b, 0xa9c3, 0x3, 0x0, 0x0) 1.979703038s ago: executing program 1 (id=599): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='percpu_alloc_percpu\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r2 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x41) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x1, {0x10002, 0xffffffff, 0x401}}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'geneve0\x00', 0x200}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x7, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3}, 0x94) 1.848896226s ago: executing program 1 (id=604): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x80, 0x1, 0x0, "cb9649f4ad7d527a0e7447de4048315cdd8a771b391c208d2bd399e0a56bade4"}) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000040)) (async) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000040)) 1.694560105s ago: executing program 1 (id=611): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000000c0)={&(0x7f0000000040)=[{0x3, 0xd011, 0x1, &(0x7f00000001c0)="cb"}], 0x1}) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="30000000190001002dbd7000f8dbdf2502200000ff02ff02002a000008000100ac1414aa0c0009000800281052"], 0x30}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) recvmmsg(r3, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x40}], 0x1, 0x102, 0x0) write(r3, &(0x7f0000004200)="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", 0xf81) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000140)=0x3, 0x1ff, 0x0) write(r5, &(0x7f0000000000)="ba474193297cf644f93578df72e4348aa0dc953dc396dbada1f4308e060000000d73685ab8c6d6ed9bd0840f5510988d6fd9", 0x32) 1.368612516s ago: executing program 2 (id=617): r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r0, 0x80079a0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104fcffffff8000000000000000", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x8927, &(0x7f0000000000)={0xfffffffffffffffb, 0xd93a}) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x8, 0x2) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') preadv(r6, &(0x7f0000001240)=[{&(0x7f0000000040)=""/11, 0xb}], 0x1, 0x0, 0xa3e) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000000)={0x33, 0x2, 0x1dad9f8604b238cb, "0600836a330000000000000007000200268d09ff07690000010040c39b08fc00"}) mmap(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0x0, 0x2012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) lseek(r0, 0x80000, 0x3) 1.277699745s ago: executing program 2 (id=620): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="4400028040000100240001006d6f6465000000ddf2ffff0000000000000000000000000000000000000000000500030005000000100004006c6f616462066c616e636500"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 1.273934336s ago: executing program 3 (id=621): ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000000)={0x0, 0x5}) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0xecd, 0x0) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f00000004c0)={0x80, 0xb, &(0x7f00000000c0)="e27cc695292a1f142c0a7c284ba84a269862b256079264f12d5f335e28e23263bc0699ecb9c30399f941102671b7a13f8d290ecd4c55d06146475176a81c7c04f861126f03cf3d15911903e49cbfb472d8c885d2aae5730917bf3ff49d63abfbb9c81e8ea2f65c6fc3b50276ea581c8e2479ca5caf79140b7fd02b131018bc80f94db34711fc47c150c14875d47070691ed5c1535ca0c8ea8c8702eaf56a13f019fe374d0367799c9639aea4af34056efda3340216fc97f1875f15da9751cf8b12db2829d5704c6e4af88931ed2e9df0fb7fb2f6e50ac86d9a7ed02e98f969f2131246644196f25df316f0a7cf1b64e9de6f1a26aa06f2d14126946a62e0683a8578b5fe4c02d5f8e543cf7696bd81932ddcc0c44c577dd8ef4a403550a66ca01c6d87fd42a39582699aafffda5152a63d92b69db711d1fb8453ba874376ae114661dd47766fa5b9d4eacab64dc94e7dbb1ae17756a7dd55644ee8599d6bd7160cec0fdca3659d62ee6bcff608230e425f14e6ff94ed57de5588ea0d8cfee296b0dde28bf34a46c233d360e59eb6f7b8645fd6a7ac60d40e607682454ff5db8de613c2f6d1d5f61d9484f4388b971aa7a72a64cf8783e805bc49aeceaae395cc9e3cc09f9d611c745340eb0cb9a48a400480a1069e086c4801875dfab779375f156f6ef9d994830046784fb4c6005f06f528c0ba3a321d3d89876c955eeb1fc502f07bfabf5ce17a9b7ca4dee1b4807f9e3d87b8f0789d6a3923832ede4e5c6689bbcb861982eadab43b21356b3eea0d0410d0632081402dc1eec6fb89f7c2dfaeabe83468155b5c996a63bcb1b209ff17c13e70a375f227c2a5f7faa2793f31f981af0aa276bc0a5fe1773402e7917078bf43176e0857cbc121caf7d83b87cb48f800a0c29787502065ae5bc52d3d6fc0beaa2fe0c3ac8d0a854a08021bbbf01a77cfda76e9756528635b1e040368b3556be56ddb44df0ddcd478919b3793d36fc6b907c6e4f3acbabec09827c671b94569997018b16d9c457e53fc257625848db7c8b202e6cabc0949fc316b27e25635d6c3ca9aa17f10874863441fdaf078042d75c422b4ceb377382c1bc964591c6936f292f6574d69d9b1573b2fb13f935ac6665d293ce6e863c254715d7c3f58e63bb2b090e2f08459856aba2fd430fe1f4b7411fa13de3443b1959617ede1a14fc8d2923a5ae79c822dd4c59d1aec8e77ccc08a72786dd76a911c8eb8240d6d0db945fc621f4fab54a016c7da6e87addd00bd85ba048bc0657020a4492be1c45efe96b8b193920ba4daecf2d2733e84d19d05219e867d8078d43b98d25098760afbee2682543fdab410bdf88adc1974a0654889d379a6cd79abcb81b5aa79f2e856c54df51dc34835a4cc4d97095d229728f48dbb5f74a070a564f2b31c2e89e3645e7412d7f42a338c8e4c2746b4c9"}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000500)={{}, 0x0, 0x16, @unused=[0x8, 0x1a, 0x8, 0x4], @name="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"}) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000001500)=0x2) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000001540)) pwritev2(r0, &(0x7f0000001640)=[{&(0x7f0000001580)="a9a80efecb1829a3966f557cef61ea13b7989d408dea7d24447e7d9d5c630fed04fc5f6aee18a8e0a9e399f2929606c40807e68cf42bd05a1fc0717e15f534286027f4571385ee18f2a94f12561989686e401051acbd1cf5", 0x58}, {&(0x7f0000001600)="1adb4ea23d11fb6235ed7161456d8ee9e7a4e6cd9f455a475c3a55f1d6c67d182edd5863ef8d80ef002f668c61293132e3f98b969f72e0bd5df12fa164e4a9c8", 0x40}], 0x2, 0x3, 0x3, 0x2) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000001680)=0x4) r1 = syz_open_dev$evdev(&(0x7f00000016c0), 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000001700)=""/201) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000001800)={0x0, {}, 0x0, {}, 0x3ff, 0x4, 0x6, 0x11, "91bf73a3e44f46fe407f5f3d66354f139de025d24b79fcd308fd1b3d280ff78c5454e2bac54efe025739eab726b70c367bb84172b4feb647a1dc2056f161746f", "49d937edf9ec32c863eaf2f4242a268db32e97b3cd6d52daa2b72d70778b0785", [0x1a, 0x9]}) r2 = eventfd2(0x8, 0x80001) r3 = eventfd2(0x6, 0x80000) io_submit(0x0, 0x6, &(0x7f0000001ec0)=[&(0x7f0000001980)={0x0, 0x0, 0x0, 0x2, 0x3, r0, &(0x7f00000018c0)="66eac8e130743529bb0537d2c2cc43d62e519a1701eeb03834c0f0f58b3e937870a5de132da39344f0851c281fe0d2e72afaa2db4c8deaee0e119f962cd1592e13435b45b7728fe93f75c2415034a85726f32e110be4a1ab3f7249a880d717539341a9a2ce237ff40f8e61f167a8bcfef4bf0b04c4aacb35e8b4825d7a89fc0fcd4fe0fbb698de1f9afaee057b06995564189f350268638f875b5770fbd36a7058d3", 0xa2, 0x5, 0x0, 0x2, r2}, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0xe9, r0, &(0x7f00000019c0)="fd630c5c1cd4365b0863ac4e900c761660d96dd057130efa5c0240dc2ba9f4dad18ae49b11767f076016d63ef72b1aefcd6c04eabb8530da746267aa40666ef1af6e249f0683dac6a950d8c277ff8e798f6e14749e5026694007e1581ce1dfe6ef64d961af3ac4f05d42fb2e7524", 0x6e, 0x1ff, 0x0, 0x3}, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x7, 0x6, r0, &(0x7f0000001a80)="05216700c0522159f4372a68b62f7d0d8150c6db9aec687b79400d4a0f020f03cef3d325a0e0a8f379cd1e9ede7e178c55692d38389cc55854b42d9e17cf124ecf791b8df171983cbc3b288f47a57c0dd7f6157fa8e1e318db97890c8da4a6a0f63a7bc6e3e9877a6edbbe86b767bc60b8a1ac64985c6fb9b45b2e54dca822980a925389e9655cab67f1b522513fdf83e2df91f741f0d28c2ec17915158d8599073a45bece79596ce14b234e9955a32c983754996019c430aa6879d8e78b8fe451691c479c84ec2a58acbabb4876955d15293da0f92b9c371d3d6b382b384469923e0bd723e085420deb759cb7721e119639ce", 0xf3, 0xffffffff, 0x0, 0x3}, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x2, 0x3, r0, &(0x7f0000001bc0), 0x0, 0x5, 0x0, 0x0, r0}, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x2, 0x7, r0, &(0x7f0000001c40)="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", 0xfd, 0x5, 0x0, 0x2, r3}, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x6, 0xfffd, r1, &(0x7f0000001d80)="b855abb35942d7a883211619a040e9541791f54cf7fe4f871235433799213e2d27dcb18d80377f3fc36ed1d19bd06e7384d6f66157a613653fe9313e0ee3c66df38cb880f763fdfd287853b0751808fd9298bc3b31979c460a6bacc91a478747fa32bd6436a257ba06a8cf4910a2984e3b2cef739f00ecdad7013977f70269c9def6120e96d0ddb89369cffcbc6b999e1e79891b4b47013fd0e631ea2472c457df080d7c0e4ac7c7790f19f90e56b2f3b7d60e6d8a1b5112f9af87a899eadd77617754077a5b45030a8a8b7e1a55d4798c91b8da54c961904043b0b5dba2a9", 0xdf, 0x6, 0x0, 0x3, r0}]) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000001f00), &(0x7f0000001f40)=0x4) ioctl$int_in(r1, 0x5421, &(0x7f0000001f80)=0x7) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000001fc0)=[@timestamp, @window={0x3, 0x400, 0x8f}, @timestamp, @window={0x3, 0x80}], 0x4) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000002000), &(0x7f0000002040)=0x4) socket$packet(0x11, 0x0, 0x300) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f0000002080)={0x5, r2, 'id1\x00'}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000002100)={0x0, 0x9b, 0x7}) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000002500)={r5, "4bdcb08e66980146474f764da07cd49b"}) socket$inet_tcp(0x2, 0x1, 0x0) mmap$usbmon(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x110, r0, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000003500)={0x1ff, 0x2, 0x6000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000003540), 0x400402, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000003680)={@map=r4, 0x22, 0x1, 0x5, &(0x7f0000003580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000035c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003640)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000036c0)={@map, r6, 0x1d, 0x8, 0x0, @void, @value=r0, @void, @void, r7}, 0x20) 1.273042174s ago: executing program 2 (id=622): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) poll(&(0x7f00000000c0)=[{r2, 0x1117}], 0x1, 0xfffffffb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff018}, {0x6, 0x0, 0xfc}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff018}, {0x6, 0x0, 0xfc}]}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@local}, {@local}, 0x400, "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"}, 0x418, 0x7fffffff}) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43aff"], 0x340a) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="70010000100033060000000000000000fc000000000000000000000000000000ff10000001000000000000000000000000004000000080010000200400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000032000000fe80000000000000000000000000000b23030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000100000000000000000000000000000000000000080000000000000029bd7000000000000a000100000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00200002004e2200010000000000000000000000000000000000001c00040002004e2100000000fc020000000000000000000000000001"], 0x170}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="70010000100033060000000000000000fc000000000000000000000000000000ff10000001000000000000000000000000004000000080010000200400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000032000000fe80000000000000000000000000000b23030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000100000000000000000000000000000000000000080000000000000029bd7000000000000a000100000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00200002004e2200010000000000000000000000000000000000001c00040002004e2100000000fc020000000000000000000000000001"], 0x170}}, 0x0) 1.272273132s ago: executing program 3 (id=623): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000006800010027bd7000fbdbdf25020002000800000004000b0006000708ee191e39010000000007000000"], 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x244200, 0x0) eventfd2(0x4000004, 0x80001) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x37, [0xfffffffc, 0x8, 0xec, 0x9, 0x10001, 0x155f, 0x6, 0x5, 0x2, 0x1, 0xa4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x5, 0x4, 0x7, 0x80000081, 0x10000, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x401, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x4e, 0x2, 0x7, 0x8, 0xffffff7d, 0x400, 0x6, 0xfffff000, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x9, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x4, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xffff, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0xbea, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x7b, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x6, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x602, 0x101, 0xdd80, 0x60a2, 0x7f, 0x9d26, 0x10000, 0x8, 0x2, 0x7, 0xa, 0x8000, 0x4, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10004, 0x1, 0x8, 0x1], [0x2, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x55, 0x47d179d6, 0xff, 0x5, 0xffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x6f, 0x1ff, 0x2000003, 0xfffffffd, 0x10000, 0x0, 0x6, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x7, 0xfffffff9, 0x4, 0xfffffff9, 0x8cb, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x182, 0x2, 0x14, 0xf0, 0xd, 0x3, 0x800000000007, 0x5, 0x100000000000003, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x10000, 0x304}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000180)={'rose0\x00', 0x28000000}) socket$kcm(0xa, 0x2, 0x0) r9 = socket(0x2, 0x80805, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'dh\x00', 0x1, 0x80005, 0x6f}, 0x2c) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000100)={0x3, 0x8}) 1.117554131s ago: executing program 0 (id=626): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0xc4, 0x8}, @initr0, @exit, @exit]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 1.078844189s ago: executing program 0 (id=627): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x4e}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x5) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xcc, r2, 0x400, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x240}, {0x6, 0x11, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x82}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x9}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x4000804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, r1, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="58b9a51bd29b"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x63}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x69}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x50}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xd}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4000008) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x10b202, 0x15, 0x24}, 0x18) r5 = open_tree(r4, &(0x7f0000000580)='./file0\x00', 0x100) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000005c0)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, {0xa, 0x4e20, 0x8001, @rand_addr=' \x01\x00', 0x8}, r6, 0x86d}}, 0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000006c0)={'pim6reg\x00'}) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000700)='/dev/comedi4\x00', 0x11000, 0x0) ioctl$COMEDI_SETWSUBD(r5, 0x6411) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000780), r5) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r8, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x6}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40054}, 0x8001) r9 = open(&(0x7f0000000880)='./file0\x00', 0x220082, 0x100) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r9, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x40, r1, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x4c}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x90}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_BANDS={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x20040045) ioctl$HIDIOCSFLAG(r9, 0x4004480f, &(0x7f00000009c0)=0x16e273aab67505e9) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000a00)=0x1000) ioctl$KVM_GET_MP_STATE(r5, 0x8004ae98, &(0x7f0000000a40)) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000ac0), r0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000a80), 0xc, &(0x7f0000000d80)={&(0x7f0000000b00)={0x264, r10, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe3de}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "b35e83209b83a873b1771ca84413a9ac76a2d5e9cce7934006862b"}}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x639e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x77}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6b3}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x254a}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x264}, 0x1, 0x0, 0x0, 0x34005010}, 0x5) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r5, 0x40049366, &(0x7f0000000e00)) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x100010, r7, 0x1d651000) ioctl$KVM_GET_SREGS2(r9, 0x8140aecc, &(0x7f0000000e40)) close_range(r9, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x27, 0x5, 0x9d4f) 1.055673585s ago: executing program 3 (id=628): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x400, 0xffffffff, 0x0, 0x1e0, 0x0, 0xfeffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x41, {0x6}}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xffffffff], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x9, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0xf}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 0x4e24, 0x4e21, 0x4e21, 0x4e23, 0x8a, 0xffff, 0x5, 0x2, 0x3fd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000300)='./file0\x00', 0x2000, 0x0) unlink(&(0x7f0000000040)='./file0\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0x9a51, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x10, 0xfffffffffffffffd, 0x8, 0x4, 0x0, 0x6000, 0xf, r3, 0x0, 0x800004, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x3, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r3, r4, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000540)='./file2\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$netlink(0x10, 0x3, 0xa) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2000000, &(0x7f0000000400)={'trans=virtio,', {[{@access_uid={'access', 0x3d, r7}}]}}) mount$fuse(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x1004800, &(0x7f0000000600)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1800}}, {@default_permissions}, {@allow_other}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}], [{@dont_measure}, {@hash}, {@seclabel}, {@measure}, {@fowner_gt={'fowner>', r7}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) r8 = socket$inet6(0xa, 0x3, 0x8000000003c) ioctl$sock_inet6_udp_SIOCINQ(r8, 0x541b, &(0x7f0000000100)) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2000, 0x0) 959.854853ms ago: executing program 0 (id=629): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0b0001"], 0xa) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$CDROM_SELECT_SPEED(r2, 0x5322, 0x81) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@remote, 0x1, 0x1, 0x4e27, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@private2, 0x4d4, 0x6c}, @in6=@mcast2, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x3}, {0x0, 0xffffffff80000000, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @etimer_thresh={0x8, 0xc, 0x33}]}, 0x140}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x7f, 0x4) 959.42267ms ago: executing program 3 (id=630): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x3, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r0, 0x0) listen(r1, 0x2) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd68, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x5}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r10, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="0414b2361e3aed2860d45f69be03de06b1c80004ffff"], 0x9) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x7}]}}]}, 0x38}}, 0x4) fanotify_mark(r3, 0x1, 0x40000020, r2, &(0x7f00000000c0)='./file0\x00') 877.34578ms ago: executing program 2 (id=631): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000ddf2ffff0000000000000000000000000000000000000000000500030005000000100004006c6f616462066c616e636500"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 829.606557ms ago: executing program 2 (id=632): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f00000001c0)={0x8, {"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", 0x1000}}, 0x1006) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000001440)={{0xc, 0x7}, 'port1\x00', 0x80, 0x851, 0x7, 0x1, 0x44, 0x3, 0xf, 0x0, 0x2}) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r3, 0xffffffffffffffff, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x5, 0xfffffffffffffff9, 0x0, 0x2, 0x8000000000000001, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x9, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x80, 0x0, 0x0, 0x3, 0x80000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000000, 0x0, 0x1c, 0x5, 0x3, 0x2, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x5, 0x7ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xac18, 0x0, 0x0, 0x4000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x1, 0x0, 0x2000, 0x400000000000000, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x1]}) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6800000015000100000000000000ff00fe8800000000000000000000800000010000000000000000000000000000000000040000000000000000b10000000000", @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b'], 0x68}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000001340)={'sit0\x00', &(0x7f0000001240)={'gre0\x00', 0x0, 0x8, 0x20, 0x7f, 0x68814b61, {{0x31, 0x4, 0x2, 0x35, 0xc4, 0x64, 0x0, 0x1, 0x0, 0x0, @rand_addr=0x64010102, @multicast2, {[@timestamp={0x44, 0x10, 0x95, 0x0, 0x0, [0x7fffffff, 0x69a, 0x9]}, @lsrr={0x83, 0x7, 0xa6, [@remote]}, @lsrr={0x83, 0x23, 0xbf, [@empty, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @private=0xa010101, @broadcast, @broadcast, @loopback]}, @end, @rr={0x7, 0x7, 0x6b, [@broadcast]}, @lsrr={0x83, 0x17, 0x86, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @rand_addr=0x64010100, @loopback, @empty]}, @timestamp={0x44, 0x8, 0x6b, 0x0, 0x9, [0x1]}, @timestamp_addr={0x44, 0x4c, 0x37, 0x1, 0x0, [{@local, 0x5c}, {@private=0xa010101, 0x9}, {@broadcast, 0x1}, {@remote, 0x7}, {@broadcast, 0xc8}, {@broadcast, 0x2465}, {@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x400}, {@empty, 0x4}]}]}}}}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="60000000020601080000000000000000000000080900020073797a3100000000050004000000030011000300686173683a6e65742c6e65740000000014000780050015004b0000000800114000000000050005000a0000000500010006"], 0x60}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001400)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)=@gettfilter={0x3c, 0x2e, 0x400, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0x4}, {0x1, 0x2}, {0x4, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0xb}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8045854}, 0x8000) 829.421234ms ago: executing program 3 (id=633): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) (async, rerun: 64) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async, rerun: 64) r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x841, 0x0) (async, rerun: 64) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) (rerun: 64) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x20, 0x0, 0x7, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8001}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000340)={[0x0, 0x9, 0x1, 0x8, 0x1, 0x0, 0x4002004c4, 0x1004, 0x8080000000000000, 0xc595, 0x0, 0x1, 0xa0, 0x0, 0x1000000000b3, 0x8d], 0xeeee8000, 0x2010d3}) (async, rerun: 64) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (rerun: 64) openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd2d, 0x0, {0xa, 0x0, 0x80, 0x4, 0xff, 0x0, 0x0, 0x1}, [@FRA_SRC={0x14, 0x2, @private2}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x19, 0x5}]}, 0x38}}, 0x0) (async) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, r3, 0x41, 0x1ff) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 822.149682ms ago: executing program 2 (id=634): socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) socket(0x1d, 0x2, 0x6) (async) r1 = socket(0x1d, 0x2, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x16) syz_io_uring_setup(0x551, &(0x7f00000004c0)={0x0, 0x6cdc, 0x400, 0x3, 0x307}, &(0x7f0000000340), &(0x7f0000000440)) (async) r5 = syz_io_uring_setup(0x551, &(0x7f00000004c0)={0x0, 0x6cdc, 0x400, 0x3, 0x307}, &(0x7f0000000340)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x100, &(0x7f0000000040)=0x2, 0x0, 0x4) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb0000020000000004000000000015000000f4b97bb7b84472822963000000"], 0x0, 0x26}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r8, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r8, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r9, 0x4) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r10 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000400), 0x74ff46, 0x0) ioctl$BLKZEROOUT(r11, 0x127c, &(0x7f0000000240)={0x0, 0x1000000}) (async) ioctl$BLKZEROOUT(r11, 0x127c, &(0x7f0000000240)={0x0, 0x1000000}) write$UHID_CREATE2(r10, &(0x7f0000000180)=ANY=[], 0x118) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r5, 0x6612) (async) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r5, 0x6612) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x33, 0x4, 0xffffffffffffffff, 0x0}) io_uring_enter(r10, 0x27af, 0x5bea, 0x4a, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c00000018000100fcffffff000200000a20200000000007"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="000000000092040014001280090001007663616e000000000400028008000a00", @ANYRES32=r4, @ANYBLOB="214869bbcf76767996878a2ab525264a7e32fed942b847451e499417b98e28a693a89c5c25208fed509c3ffd599d2ecbd45ab2d7599d183a1b5b5ac2865d9043e608df220b393cef72431b2568a4f5e4670cd7d6bdde21f09a1b6705f22f516fafed3f46d49a6138f6831dae9960f1a2abad2472f48e4ec185bfdb0acd354bc4ae250004c20298ee22b31bc5c379d7274d0f28224aed4583f6317ccc77dd89d4c3099684070d31fd179d8400efe18e0f7a47cbc97e820bf1d6b7d37c41b950aa65a1cf352fde77df39edb022fcc4edb3d5dff5cd43b5cc05"], 0x3c}}, 0x404c000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) pipe2(&(0x7f0000001cc0), 0x800) (async) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff}, 0x800) read$FUSE(r12, &(0x7f0000001d00)={0x2020}, 0x2020) (async) read$FUSE(r12, &(0x7f0000001d00)={0x2020}, 0x2020) r13 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYRESOCT=r11, @ANYRES16], 0x0) syz_usb_control_io$hid(r13, 0x0, 0x0) syz_usb_control_io$hid(r13, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5ab40bf85edaca83"], 0x0}, 0x0) 821.082816ms ago: executing program 3 (id=635): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x200000, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x2, 0x1}, 0x10) sendmsg$tipc(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000090}, 0x95) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000000), 0x4) r3 = dup3(r1, r2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4040010, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) ioctl$NBD_CLEAR_QUE(r3, 0xab05) sendmsg$rds(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@rdma_args={0x24, 0x114, 0x1, {{0x800, 0x3}, {0x0}, &(0x7f0000000100)=[{&(0x7f00000003c0)=""/176, 0xb0}], 0x1, 0x0, 0x9}}], 0x48, 0x8000}, 0x4000000) syz_emit_ethernet(0x32, &(0x7f0000000080)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x7}}}}}}}, 0x0) 150.227975ms ago: executing program 1 (id=636): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) 148.895157ms ago: executing program 1 (id=637): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000d00)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_le_read_buffer_size={{0x2}, {0x3, 0x5, 0x1}}}}, 0xa) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'multiq3\x00', [0x1610, 0x0, 0x1, 0x0, 0x3, 0xcc7, 0x9, 0xaab, 0xa, 0x100, 0x2, 0x1, 0x8, 0x1100004, 0x6, 0x9, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0xf27, 0x6, 0x800b, 0xca8, 0x5, 0x4, 0x400, 0x10000, 0xfffffff7]}) 139.968302ms ago: executing program 0 (id=638): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/2:0:0:0\x00', 0x40, 0x0) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x3232, 0x100, 0x0, 0x3de}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x8000, 0x1, 0x0, 0x8, 0x0, 0x1, {0x3}}) io_uring_enter(r2, 0x4a5a, 0x2ae5, 0x2, 0x0, 0x0) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'team_slave_0\x00', 0x1}) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) 59.074546ms ago: executing program 0 (id=639): move_pages(0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x2) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0xd1, 0x1, 0x8, 0x4}, 0x5, 0x8, &(0x7f0000000040)={{0x1, 0x2, 0xc, 0x2}}, 0x9, 0x0, 0x8}}) 0s ago: executing program 0 (id=640): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000ddf2ffff0000000000000000000000000000000000000000000500030005000000100004006c6f616462066c616e636500"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) kernel console output (not intermixed with test programs): 199][ T6654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.186'. [ 64.237052][ T6652] netlink: 224 bytes leftover after parsing attributes in process `syz.2.185'. [ 64.239402][ T6652] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.185'. [ 64.247570][ T61] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.249993][ T6654] netlink: 'syz.1.186': attribute type 9 has an invalid length. [ 64.251027][ T61] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.257873][ T61] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.260687][ T61] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.886798][ T6686] netlink: 'syz.0.197': attribute type 13 has an invalid length. [ 65.015520][ T5941] Bluetooth: hci0: command 0x0c1a tx timeout [ 65.336440][ T6702] futex_wake_op: syz.2.202 tries to shift op by -1; fix this program [ 65.431692][ T6712] warning: `syz.0.206' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 65.602538][ T6732] syzkaller1: entered promiscuous mode [ 65.604511][ T6732] syzkaller1: entered allmulticast mode [ 65.614816][ T6732] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.729228][ T6741] gre0: Master is either lo or non-ether device [ 65.815526][ T5941] Bluetooth: hci3: command 0x0c1a tx timeout [ 65.815564][ T5930] Bluetooth: hci2: command 0x0c1a tx timeout [ 65.818283][ T5941] Bluetooth: hci1: command 0x0c1a tx timeout [ 66.087533][ T6752] __nla_validate_parse: 7 callbacks suppressed [ 66.087544][ T6752] netlink: 12 bytes leftover after parsing attributes in process `syz.1.215'. [ 66.092365][ T6752] openvswitch: netlink: Flow actions attr not present in new flow. [ 66.444110][ T6766] netlink: 20 bytes leftover after parsing attributes in process `syz.0.218'. [ 66.509938][ T6774] netlink: 'syz.2.221': attribute type 2 has an invalid length. [ 66.514947][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.221'. [ 66.539920][ T6776] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.576010][ T6776] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 66.599246][ T6778] qnx6: unable to set blocksize [ 66.698118][ T6786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.225'. [ 66.846316][ T6797] /dev/nullb0: Can't open blockdev [ 66.882070][ T6800] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 66.889434][ T6800] SELinux: syz.2.231 (6800) set checkreqprot to 1. This is no longer supported. [ 66.934526][ T6804] netlink: 12 bytes leftover after parsing attributes in process `syz.0.233'. [ 66.940607][ T6804] xfrm1: entered promiscuous mode [ 66.942309][ T6804] xfrm1: entered allmulticast mode [ 67.019727][ T6814] program syz.2.238 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.062601][ T6821] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 67.095186][ T5930] Bluetooth: hci0: command 0x0c1a tx timeout [ 67.125464][ T6020] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 67.216558][ T6831] ntfs3(sr0): Primary boot signature is not NTFS. [ 67.219784][ T6831] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 67.229045][ T40] kauditd_printk_skb: 76 callbacks suppressed [ 67.229058][ T40] audit: type=1400 audit(1765966059.963:406): avc: granted { setsecparam } for pid=6830 comm="syz.0.243" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 67.235484][ T853] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 67.295449][ T6020] usb 6-1: Using ep0 maxpacket: 8 [ 67.299724][ T6020] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 67.302787][ T6020] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.309429][ T6020] pvrusb2: Hardware description: Terratec Grabster AV400 [ 67.312113][ T6020] pvrusb2: ********** [ 67.313635][ T6020] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 67.317363][ T6020] pvrusb2: Important functionality might not be entirely working. [ 67.317615][ T40] audit: type=1400 audit(1765966060.053:407): avc: denied { connect } for pid=6838 comm="syz.2.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 67.320345][ T6020] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 67.331087][ T6020] pvrusb2: ********** [ 67.385271][ T853] usb 8-1: Using ep0 maxpacket: 16 [ 67.387774][ T853] usb 8-1: too many configurations: 11, using maximum allowed: 8 [ 67.391374][ T853] usb 8-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 67.394079][ T853] usb 8-1: can't read configurations, error -22 [ 67.525163][ T853] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 67.561125][ C0] vcan0: j1939_tp_rxtimer: 0xffff888037c72c00: rx timeout, send abort [ 67.570186][ T2488] pvrusb2: Invalid write control endpoint [ 67.596603][ T2488] pvrusb2: Invalid write control endpoint [ 67.598628][ T2488] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 67.601621][ T2488] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 67.603999][ T2488] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 67.607455][ T2488] pvrusb2: Device being rendered inoperable [ 67.611843][ T2488] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 67.614801][ T2488] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 67.619421][ T2488] pvrusb2: Attached sub-driver cx25840 [ 67.621172][ T2488] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 67.624322][ T2488] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 67.675266][ T853] usb 8-1: Using ep0 maxpacket: 16 [ 67.677674][ T853] usb 8-1: too many configurations: 11, using maximum allowed: 8 [ 67.680927][ T853] usb 8-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 67.683524][ T853] usb 8-1: can't read configurations, error -22 [ 67.685886][ T853] usb usb8-port1: attempt power cycle [ 67.772653][ T40] audit: type=1400 audit(1765966060.503:408): avc: denied { ioctl } for pid=6801 comm="syz.1.232" path="socket:[14480]" dev="sockfs" ino=14480 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 67.900416][ T5930] Bluetooth: hci3: command 0x0c1a tx timeout [ 67.900731][ T5941] Bluetooth: hci2: command 0x0c1a tx timeout [ 67.901527][ T5939] Bluetooth: hci1: command 0x0c1a tx timeout [ 68.025210][ T853] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 68.045751][ T853] usb 8-1: Using ep0 maxpacket: 16 [ 68.049507][ T853] usb 8-1: too many configurations: 11, using maximum allowed: 8 [ 68.053903][ T853] usb 8-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 68.057777][ T853] usb 8-1: can't read configurations, error -22 [ 68.061181][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802a996000: rx timeout, send abort [ 68.064423][ C0] vcan0: j1939_tp_rxtimer: 0xffff888037c72c00: abort rx timeout. Force session deactivation [ 68.082468][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88802a996000: connection exists (fe ff). last cmd: 20 [ 68.141506][ T40] audit: type=1400 audit(1765966060.873:409): avc: denied { mount } for pid=6857 comm="syz.0.250" name="/" dev="ramfs" ino=13119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 68.185205][ T853] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 68.197808][ T40] audit: type=1400 audit(1765966060.933:410): avc: denied { unmount } for pid=6857 comm="syz.0.250" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 68.205783][ T853] usb 8-1: Using ep0 maxpacket: 16 [ 68.206382][ T853] usb 8-1: too many configurations: 11, using maximum allowed: 8 [ 68.207475][ T853] usb 8-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 68.207501][ T853] usb 8-1: can't read configurations, error -22 [ 68.208741][ T853] usb usb8-port1: unable to enumerate USB device [ 68.332491][ C3] vcan0: j1939_tp_rxtimer: 0xffff88802a994000: rx timeout, send abort [ 68.835963][ C3] vcan0: j1939_tp_rxtimer: 0xffff88802a994000: abort rx timeout. Force session deactivation [ 68.886512][ T6861] netlink: 'syz.2.251': attribute type 11 has an invalid length. [ 68.889126][ T6861] netlink: 199788 bytes leftover after parsing attributes in process `syz.2.251'. [ 68.892960][ T40] audit: type=1400 audit(1765966061.623:411): avc: denied { getopt } for pid=6860 comm="syz.2.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.018868][ T6868] netlink: 3 bytes leftover after parsing attributes in process `syz.0.254'. [ 69.021957][ T6868] 0X: renamed from caif0 [ 69.026014][ T6868] 0X: entered allmulticast mode [ 69.028599][ T6868] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 69.092566][ T40] audit: type=1400 audit(1765966061.823:412): avc: denied { getopt } for pid=6875 comm="syz.0.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 69.172752][ T6889] vlan2: entered promiscuous mode [ 69.175271][ T6889] vlan2: entered allmulticast mode [ 69.177428][ T6889] hsr_slave_1: entered allmulticast mode [ 69.180800][ T6889] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 69.183954][ T6889] IPv6: NLM_F_CREATE should be set when creating new route [ 69.191640][ T5941] Bluetooth: hci0: command 0x0c1a tx timeout [ 69.193960][ T6889] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6889 comm=syz.2.261 [ 69.505181][ T853] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 69.655676][ T853] usb 5-1: Using ep0 maxpacket: 32 [ 69.658659][ T853] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 69.662126][ T853] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 69.665335][ T853] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 69.668415][ T853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 69.671998][ T853] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 69.675360][ T853] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 69.679894][ T853] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 69.683150][ T853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.687267][ T853] usb 5-1: config 0 descriptor?? [ 69.893400][ T853] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 69.898945][ T853] usb 5-1: USB disconnect, device number 4 [ 69.903316][ T853] usblp0: removed [ 69.944096][ T6018] usb 6-1: USB disconnect, device number 2 [ 69.962316][ T6904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.265'. [ 69.975218][ T5941] Bluetooth: hci3: command 0x0c1a tx timeout [ 69.975569][ T5930] Bluetooth: hci1: command 0x0c1a tx timeout [ 69.985410][ T5930] Bluetooth: hci2: command 0x0c1a tx timeout [ 69.988959][ T40] audit: type=1400 audit(1765966062.723:413): avc: denied { create } for pid=6905 comm="syz.1.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 69.996902][ T40] audit: type=1400 audit(1765966062.733:414): avc: denied { ioctl } for pid=6905 comm="syz.1.266" path="socket:[14623]" dev="sockfs" ino=14623 ioctlcmd=0xf512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 70.007063][ T40] audit: type=1400 audit(1765966062.733:415): avc: denied { bind } for pid=6905 comm="syz.1.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 70.067927][ T6020] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 70.099407][ T6922] batadv_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 70.195339][ T853] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 70.215336][ T6020] usb 7-1: Using ep0 maxpacket: 8 [ 70.218245][ T6020] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 70.223355][ T6020] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 70.227316][ T6020] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 70.229646][ T6936] netlink: 'syz.1.274': attribute type 2 has an invalid length. [ 70.230840][ T6020] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 70.237507][ T6020] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 70.241717][ T6020] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 70.244597][ T6020] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.291246][ T6941] netlink: 212324 bytes leftover after parsing attributes in process `syz.3.276'. [ 70.347805][ T853] usb 5-1: Using ep0 maxpacket: 32 [ 70.353608][ T853] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 70.356460][ T853] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 70.359875][ T853] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 70.363756][ T853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 70.368084][ T853] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 70.372402][ T853] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 70.376627][ T853] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 70.380269][ T853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.389919][ T853] usb 5-1: config 0 descriptor?? [ 70.394040][ T6952] gfs2: not a GFS2 filesystem [ 70.450856][ T6020] usb 7-1: usb_control_msg returned -32 [ 70.453316][ T6020] usbtmc 7-1:16.0: can't read capabilities [ 70.482824][ T6020] usb 7-1: USB disconnect, device number 3 [ 70.520850][ T6967] bond0: entered promiscuous mode [ 70.523025][ T6967] bond_slave_0: entered promiscuous mode [ 70.525627][ T6967] bond_slave_1: entered promiscuous mode [ 70.620875][ T853] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 70.636573][ T853] usb 5-1: USB disconnect, device number 5 [ 70.643312][ T853] usblp0: removed [ 70.770172][ T5930] Bluetooth: hci1: unexpected event for opcode 0x200f [ 70.975349][ T7031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.294'. [ 70.978115][ T7031] openvswitch: netlink: Flow actions attr not present in new flow. [ 70.997184][ T6993] cgroup: fork rejected by pids controller in /syz0 [ 71.098298][ T5930] Bluetooth: hci2: unexpected event for opcode 0x080e [ 71.187741][ T7043] syzkaller0: entered promiscuous mode [ 71.190083][ T7043] syzkaller0: entered allmulticast mode [ 71.265385][ T5930] Bluetooth: hci0: command 0x0c1a tx timeout [ 71.644429][ T7072] netlink: 'syz.3.304': attribute type 1 has an invalid length. [ 71.746204][ T7078] netlink: 'syz.2.308': attribute type 1 has an invalid length. [ 71.820562][ T7089] netlink: 96 bytes leftover after parsing attributes in process `syz.2.308'. [ 72.038555][ T7103] x_tables: duplicate underflow at hook 2 [ 72.086999][ T7105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.314'. [ 72.259143][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 72.259159][ T40] audit: type=1400 audit(1765966064.993:437): avc: denied { bind } for pid=7116 comm="syz.2.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.261674][ T7117] netlink: 20 bytes leftover after parsing attributes in process `syz.2.317'. [ 72.262582][ T7117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.317'. [ 72.274844][ T40] audit: type=1400 audit(1765966064.993:438): avc: denied { node_bind } for pid=7116 comm="syz.2.317" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 72.301991][ T40] audit: type=1400 audit(1765966065.033:439): avc: denied { mounton } for pid=7116 comm="syz.2.317" path="/91/file0" dev="tmpfs" ino=514 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 72.367414][ T7118] MINIX-fs: blocksize too small for device [ 72.389887][ T7118] MINIX-fs: blocksize too small for device [ 72.574405][ T6015] libceph: mon0 (1)[c::]:6789 socket error on write [ 72.836425][ T6015] libceph: mon0 (1)[c::]:6789 socket error on write [ 72.845222][ T841] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 72.935904][ T7132] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 73.008478][ T841] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 73.011398][ T841] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.013941][ T841] usb 8-1: Product: syz [ 73.015684][ T841] usb 8-1: Manufacturer: syz [ 73.017172][ T841] usb 8-1: SerialNumber: syz [ 73.021966][ T841] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 73.036601][ T40] audit: type=1400 audit(1765966065.773:440): avc: denied { firmware_load } for pid=841 comm="kworker/3:2" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 73.051423][ T841] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 73.067960][ T40] audit: type=1400 audit(1765966065.803:441): avc: denied { rename } for pid=7131 comm="syz.0.318" name="file2" dev="overlay" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.074845][ T40] audit: type=1400 audit(1765966065.803:442): avc: denied { unlink } for pid=7131 comm="syz.0.318" name="file1" dev="overlay" ino=71827687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 73.086292][ T40] audit: type=1400 audit(1765966065.803:443): avc: denied { rename } for pid=7131 comm="syz.0.318" name="file1" dev="overlay" ino=71827687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 73.093341][ T40] audit: type=1400 audit(1765966065.803:444): avc: denied { rmdir } for pid=7131 comm="syz.0.318" name="file2" dev="overlay" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.102520][ T40] audit: type=1400 audit(1765966065.803:445): avc: denied { write open } for pid=7131 comm="syz.0.318" path=2F202864656C6574656429 dev="tmpfs" ino=443 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 73.115178][ T40] audit: type=1400 audit(1765966065.803:446): avc: denied { setattr } for pid=7131 comm="syz.0.318" name="#443" dev="tmpfs" ino=443 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 73.345717][ T6015] libceph: mon0 (1)[c::]:6789 socket error on write [ 73.369981][ T7125] ceph: No mds server is up or the cluster is laggy [ 73.370013][ T59] usb 8-1: USB disconnect, device number 6 [ 73.397636][ T7143] netlink: 28 bytes leftover after parsing attributes in process `syz.1.325'. [ 73.400498][ T7143] erspan0: entered allmulticast mode [ 73.402414][ T7143] bridge0: port 3(erspan0) entered blocking state [ 73.404534][ T7143] bridge0: port 3(erspan0) entered disabled state [ 73.407450][ T7143] erspan0: entered promiscuous mode [ 73.409451][ T7143] bridge0: port 3(erspan0) entered blocking state [ 73.411688][ T7143] bridge0: port 3(erspan0) entered forwarding state [ 73.728300][ T7157] netlink: 'syz.1.331': attribute type 11 has an invalid length. [ 73.825770][ T853] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 73.845916][ T7161] fuse: Bad value for 'fd' [ 73.978871][ T853] usb 7-1: config 26 has an invalid interface number: 67 but max is 1 [ 73.981543][ T853] usb 7-1: config 26 has an invalid interface number: 25 but max is 1 [ 73.984068][ T853] usb 7-1: config 26 has an invalid interface number: 25 but max is 1 [ 73.986806][ T853] usb 7-1: config 26 has an invalid interface number: 127 but max is 1 [ 73.989423][ T853] usb 7-1: config 26 has 3 interfaces, different from the descriptor's value: 2 [ 73.992277][ T853] usb 7-1: config 26 has no interface number 0 [ 73.994250][ T853] usb 7-1: config 26 has no interface number 1 [ 74.005478][ T853] usb 7-1: config 26 has no interface number 2 [ 74.007528][ T853] usb 7-1: config 26 interface 67 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 74.010926][ T853] usb 7-1: config 26 interface 67 altsetting 9 has a duplicate endpoint with address 0x6, skipping [ 74.023202][ T853] usb 7-1: config 26 interface 67 altsetting 9 has a duplicate endpoint with address 0x6, skipping [ 74.026647][ T853] usb 7-1: config 26 interface 67 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 74.030049][ T853] usb 7-1: config 26 interface 67 altsetting 9 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 74.033501][ T853] usb 7-1: config 26 interface 67 altsetting 9 bulk endpoint 0xE has invalid maxpacket 64 [ 74.040151][ T853] usb 7-1: config 26 interface 67 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 74.043534][ T853] usb 7-1: config 26 interface 67 altsetting 9 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 74.047360][ T853] usb 7-1: config 26 interface 67 altsetting 9 endpoint 0xC has an invalid bInterval 198, changing to 11 [ 74.050964][ T853] usb 7-1: config 26 interface 25 altsetting 8 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 74.054386][ T853] usb 7-1: config 26 interface 25 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 74.058685][ T853] usb 7-1: too many endpoints for config 26 interface 25 altsetting 136: 46, using maximum allowed: 30 [ 74.062286][ T853] usb 7-1: config 26 interface 25 altsetting 136 has an invalid descriptor for endpoint zero, skipping [ 74.065864][ T853] usb 7-1: config 26 interface 25 altsetting 136 has 1 endpoint descriptor, different from the interface descriptor's value: 46 [ 74.070174][ T853] usb 7-1: config 26 interface 127 altsetting 238 has a duplicate endpoint with address 0x7, skipping [ 74.073998][ T853] usb 7-1: config 26 interface 127 altsetting 238 has an endpoint descriptor with address 0x21, changing to 0x1 [ 74.078697][ T853] usb 7-1: config 26 interface 127 altsetting 238 has a duplicate endpoint with address 0x1, skipping [ 74.082762][ T853] usb 7-1: config 26 interface 127 altsetting 238 has a duplicate endpoint with address 0xC, skipping [ 74.086889][ T853] usb 7-1: config 26 interface 127 altsetting 238 has a duplicate endpoint with address 0xB, skipping [ 74.089904][ T853] usb 7-1: config 26 interface 127 altsetting 238 has a duplicate endpoint with address 0x1, skipping [ 74.093417][ T853] usb 7-1: config 26 interface 127 altsetting 238 has 5 endpoint descriptors, different from the interface descriptor's value: 21 [ 74.098386][ T853] usb 7-1: config 26 interface 67 has no altsetting 0 [ 74.100557][ T853] usb 7-1: config 26 interface 25 has no altsetting 0 [ 74.102700][ T853] usb 7-1: config 26 interface 25 has no altsetting 1 [ 74.104880][ T853] usb 7-1: config 26 interface 127 has no altsetting 0 [ 74.108911][ T853] usb 7-1: New USB device found, idVendor=0403, idProduct=9e50, bcdDevice=58.b7 [ 74.111892][ T853] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.114490][ T853] usb 7-1: Product: 鱔냁柅톃≉絖⦶푩ᅔߤ푪捻⺱켁쨀慎陘糁䖚靽赎᚜炼ڙж㬾险ド녾凱꾋ꩁ˕ﻒ㪴杹曥袨壞裻蠶ꍌᖉ㬐艥쯨跿㝲﹘☹廻跠ఌ脒㟊ⷘ贰也崶㽴컄朾ή鈠蚞⒁銣⋼ꀣ瀻☥겄璝᭐쏜髄ട諼떋멸桌敒瓲逨黩윏톾碜쭼὘䡎쮡䞘⸸鏤粏壣䴌葘㒸꙲瞪๔∈兾 [ 74.124955][ T853] usb 7-1: Manufacturer: 㱧튕༔遣ϒꩄ￴길鯎؆ꜝ櫐ᄉ쉃雥쌕ㅺ㋊콠敕䬁뒮烱⢒ᬄ禓ꀃ徜Ꝑᑣ㬤龍썾ᨭ匊䪊ᤒ鏑Ⲃ뭹僾䊦易共㍋㤍㗮끉幐䬰ᨀ퉙惹盳 [ 74.131312][ T853] usb 7-1: SerialNumber: syz [ 74.135379][ T7151] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 74.135545][ T841] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 74.141339][ T841] ath9k_htc: Failed to initialize the device [ 74.145781][ T59] usb 8-1: ath9k_htc: USB layer deinitialized [ 74.241561][ T7175] ip6gre1: entered promiscuous mode [ 74.243910][ T7175] ip6gre1: entered allmulticast mode [ 74.248082][ T61] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 74.250848][ T7175] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 74.251215][ T61] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 74.275566][ T141] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 74.331794][ T7155] netlink: 'syz.0.329': attribute type 1 has an invalid length. [ 74.350938][ T7155] bond1: entered promiscuous mode [ 74.355661][ T853] ftdi_sio 7-1:26.67: FTDI USB Serial Device converter detected [ 74.355815][ T7155] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.359569][ T853] ftdi_sio ttyUSB0: unknown device type: 0x58b7 [ 74.373527][ T853] ftdi_sio 7-1:26.25: FTDI USB Serial Device converter detected [ 74.376914][ T853] ftdi_sio ttyUSB1: unknown device type: 0x58b7 [ 74.382243][ T853] ftdi_sio 7-1:26.127: FTDI USB Serial Device converter detected [ 74.386210][ T853] ftdi_sio ttyUSB2: unknown device type: 0x58b7 [ 74.390102][ T853] usb 7-1: USB disconnect, device number 4 [ 74.397499][ T853] ftdi_sio 7-1:26.67: device disconnected [ 74.401384][ T853] ftdi_sio 7-1:26.25: device disconnected [ 74.405680][ T853] ftdi_sio 7-1:26.127: device disconnected [ 74.462100][ T7155] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.509102][ T7155] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 74.513391][ T7155] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 74.617009][ T7155] bond1: (slave ip6gre1): making interface the new active one [ 74.645263][ T7155] ip6gre1: entered promiscuous mode [ 74.648527][ T7155] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 75.018940][ T141] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 75.063620][ T7022] syz.0.291 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 75.072936][ T7022] CPU: 3 UID: 0 PID: 7022 Comm: syz.0.291 Tainted: G L syzkaller #0 PREEMPT(full) [ 75.072953][ T7022] Tainted: [L]=SOFTLOCKUP [ 75.072957][ T7022] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.072963][ T7022] Call Trace: [ 75.072966][ T7022] [ 75.072970][ T7022] dump_stack_lvl+0x16c/0x1f0 [ 75.073003][ T7022] dump_header+0x101/0x960 [ 75.073022][ T7022] oom_kill_process+0x176/0x910 [ 75.073040][ T7022] out_of_memory+0x350/0x1700 [ 75.073061][ T7022] ? __lock_acquire+0x436/0x2890 [ 75.073075][ T7022] ? __pfx_out_of_memory+0x10/0x10 [ 75.073096][ T7022] mem_cgroup_out_of_memory+0x118/0x130 [ 75.073110][ T7022] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 75.073123][ T7022] ? do_raw_spin_unlock+0x172/0x230 [ 75.073140][ T7022] try_charge_memcg+0x695/0xd30 [ 75.073156][ T7022] ? __pfx_try_charge_memcg+0x10/0x10 [ 75.073170][ T7022] ? __print_lock_name+0xd1/0xe0 [ 75.073186][ T7022] ? rcu_read_unlock+0x17/0x60 [ 75.073204][ T7022] charge_memcg+0x8a/0x230 [ 75.073218][ T7022] __mem_cgroup_charge+0x2b/0x1e0 [ 75.073235][ T7022] filemap_add_folio+0xe6/0x610 [ 75.073246][ T7022] ? __pfx_filemap_add_folio+0x10/0x10 [ 75.073260][ T7022] __filemap_get_folio_mpol+0x511/0xc60 [ 75.073274][ T7022] filemap_fault+0x684/0x29d0 [ 75.073286][ T7022] ? __pfx_filemap_fault+0x10/0x10 [ 75.073303][ T7022] ? __pfx_filemap_map_pages+0x10/0x10 [ 75.073311][ T7022] __do_fault+0x10d/0x490 [ 75.073323][ T7022] ? __pfx_filemap_map_pages+0x10/0x10 [ 75.073331][ T7022] do_fault+0xae4/0x1ad0 [ 75.073344][ T7022] ? __pfx_filemap_map_pages+0x10/0x10 [ 75.073355][ T7022] __handle_mm_fault+0x1919/0x2bb0 [ 75.073375][ T7022] ? __pfx___handle_mm_fault+0x10/0x10 [ 75.073392][ T7022] ? __pte_offset_map_lock+0x174/0x310 [ 75.073405][ T7022] ? find_held_lock+0x2b/0x80 [ 75.073425][ T7022] ? follow_page_pte+0x5cf/0x1390 [ 75.073441][ T7022] handle_mm_fault+0x3fe/0xad0 [ 75.073459][ T7022] __get_user_pages+0x54e/0x3590 [ 75.073478][ T7022] ? __pfx___get_user_pages+0x10/0x10 [ 75.073491][ T7022] ? __kernel_write_iter+0x5a5/0xb10 [ 75.073507][ T7022] get_dump_page+0x257/0x3d0 [ 75.073521][ T7022] ? __pfx_get_dump_page+0x10/0x10 [ 75.073535][ T7022] ? dump_user_range+0x756/0xb70 [ 75.073554][ T7022] dump_user_range+0x195/0xb70 [ 75.073574][ T7022] ? __pfx_dump_user_range+0x10/0x10 [ 75.073590][ T7022] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 75.073605][ T7022] ? __pfx_writenote+0x10/0x10 [ 75.073618][ T7022] elf_core_dump+0x29c3/0x3c10 [ 75.073636][ T7022] ? __pfx_elf_core_dump+0x10/0x10 [ 75.073645][ T7022] ? kasan_save_stack+0x33/0x60 [ 75.073656][ T7022] ? kasan_save_track+0x14/0x30 [ 75.073666][ T7022] ? __kasan_kmalloc+0xaa/0xb0 [ 75.073676][ T7022] ? __kvmalloc_node_noprof+0x3ac/0xa40 [ 75.073688][ T7022] ? vfs_coredump+0x1dd9/0x55e0 [ 75.073703][ T7022] ? arch_do_signal_or_restart+0x8f/0x7e0 [ 75.073717][ T7022] ? irqentry_exit+0x38a/0x8c0 [ 75.073729][ T7022] ? asm_exc_page_fault+0x26/0x30 [ 75.073742][ T7022] ? 0xffffffffff600000 [ 75.073774][ T7022] ? vfs_coredump+0x2b85/0x55e0 [ 75.073789][ T7022] vfs_coredump+0x2b85/0x55e0 [ 75.073818][ T7022] ? __pfx_vfs_coredump+0x10/0x10 [ 75.073839][ T7022] ? __lock_acquire+0x436/0x2890 [ 75.073864][ T7022] ? __lock_acquire+0x436/0x2890 [ 75.073883][ T7022] ? lock_acquire+0x179/0x330 [ 75.073907][ T7022] ? lock_acquire+0x179/0x330 [ 75.073941][ T7022] ? arch_stack_walk+0xa6/0x100 [ 75.073961][ T7022] ? stack_trace_save+0x8e/0xc0 [ 75.073972][ T7022] ? __pfx_stack_trace_save+0x10/0x10 [ 75.073984][ T7022] ? stack_depot_save_flags+0x29/0x9b0 [ 75.074000][ T7022] ? __lock_acquire+0x436/0x2890 [ 75.074013][ T7022] ? kasan_save_stack+0x42/0x60 [ 75.074047][ T7022] ? proc_coredump_connector+0x2d1/0x4f0 [ 75.074065][ T7022] ? __pfx_proc_coredump_connector+0x10/0x10 [ 75.074082][ T7022] ? rcu_is_watching+0x12/0xc0 [ 75.074094][ T7022] get_signal+0x22e1/0x26d0 [ 75.074115][ T7022] ? __pfx_get_signal+0x10/0x10 [ 75.074134][ T7022] arch_do_signal_or_restart+0x8f/0x7e0 [ 75.074149][ T7022] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 75.074169][ T7022] ? do_user_addr_fault+0x926/0x1370 [ 75.074185][ T7022] irqentry_exit+0x38a/0x8c0 [ 75.074199][ T7022] asm_exc_page_fault+0x26/0x30 [ 75.074209][ T7022] RIP: 0033:0x7f6df738f7c9 [ 75.074221][ T7022] Code: Unable to access opcode bytes at 0x7f6df738f79f. [ 75.074226][ T7022] RSP: 002b:00007f6df82b0fe8 EFLAGS: 00010206 [ 75.074234][ T7022] RAX: 0000000000000000 RBX: 00007f6df75e6090 RCX: 00007f6df738f7c9 [ 75.074240][ T7022] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000a0400 [ 75.074246][ T7022] RBP: 00007f6df7413f91 R08: 0000000000000000 R09: 0000000000000000 [ 75.074251][ T7022] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 75.074257][ T7022] R13: 00007f6df75e6128 R14: 00007f6df75e6090 R15: 00007fffaeea1f98 [ 75.074270][ T7022] [ 75.074274][ T7022] memory: usage 307200kB, limit 307200kB, failcnt 26708 [ 75.095292][ T141] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 75.114539][ T7022] memory+swap: usage 432124kB, limit 9007199254740988kB, failcnt 0 [ 75.135203][ T6018] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 75.136741][ T7022] kmem: usage 4852kB, limit 9007199254740988kB, failcnt 0 [ 75.138842][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 75.140627][ T7022] Memory cgroup stats for /syz0: [ 75.262593][ T7022] cache 309383168 [ 75.266292][ T7022] rss 167936 [ 75.267645][ T7022] rss_huge 0 [ 75.268979][ T7022] shmem 309362688 [ 75.270499][ T7022] mapped_file 8192 [ 75.276305][ T7022] dirty 0 [ 75.277511][ T7022] writeback 0 [ 75.278903][ T7022] workingset_refault_anon 119 [ 75.280903][ T7022] workingset_refault_file 5582 [ 75.283038][ T7022] swap 127922176 [ 75.284571][ T7022] swapcached 57344 [ 75.286642][ T7022] pgpgin 129970 [ 75.288157][ T7022] pgpgout 54894 [ 75.289627][ T7022] pgfault 22646 [ 75.290973][ T7022] pgmajfault 311 [ 75.292444][ T7022] inactive_anon 159522816 [ 75.294309][ T7022] active_anon 150061056 [ 75.296214][ T7022] inactive_file 20480 [ 75.297854][ T7022] active_file 0 [ 75.299317][ T7022] unevictable 0 [ 75.300771][ T7022] hierarchical_memory_limit 314572800 [ 75.302999][ T7022] hierarchical_memsw_limit 9223372036854771712 [ 75.306865][ T7022] total_cache 309383168 [ 75.308698][ T7022] total_rss 167936 [ 75.310328][ T7022] total_rss_huge 0 [ 75.311918][ T7022] total_shmem 309362688 [ 75.313614][ T7022] total_mapped_file 8192 [ 75.315819][ T7022] total_dirty 0 [ 75.317375][ T7022] total_writeback 0 [ 75.318959][ T7022] total_workingset_refault_anon 119 [ 75.321027][ T7022] total_workingset_refault_file 5582 [ 75.323131][ T7022] total_swap 127922176 [ 75.324721][ T7022] total_swapcached 57344 [ 75.328233][ T7022] total_pgpgin 129970 [ 75.329802][ T7022] total_pgpgout 54894 [ 75.331434][ T7022] total_pgfault 22646 [ 75.333062][ T7022] total_pgmajfault 311 [ 75.334746][ T7022] total_inactive_anon 159522816 [ 75.336922][ T7022] total_active_anon 150061056 [ 75.337122][ T10] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 75.338929][ T7022] total_inactive_file 20480 [ 75.342316][ T10] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 75.344142][ T7022] total_active_file 0 [ 75.344152][ T7022] total_unevictable 0 [ 75.344157][ T7022] anon_cost 0 [ 75.344164][ T7022] file_cost 0 [ 75.348607][ T6018] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 75.348639][ T6018] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.348727][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 75.350352][ T7022] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset= [ 75.354044][ T6018] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 75.355928][ T7022] / [ 75.358727][ T6018] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 75.362580][ T7022] ,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.329,pid=7153,uid=0 [ 75.363683][ T7022] Memory cgroup out of memory: Killed process 7153 (syz.0.329) total-vm:102164kB, anon-rss:1148kB, file-rss:23720kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 75.365073][ T7206] tmpfs: Invalid gid '0x00000000ffffffff' [ 75.365536][ T10] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 75.365556][ T10] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 75.367545][ T7206] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 75.367563][ T7206] CIFS mount error: No usable UNC path provided in device string! [ 75.367563][ T7206] [ 75.367723][ T7206] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 75.385669][ T6995] syz.0.291 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 75.386034][ T6018] usb 7-1: Manufacturer: syz [ 75.389558][ T6995] CPU: 1 UID: 0 PID: 6995 Comm: syz.0.291 Tainted: G L syzkaller #0 PREEMPT(full) [ 75.389583][ T6995] Tainted: [L]=SOFTLOCKUP [ 75.389588][ T6995] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.389598][ T6995] Call Trace: [ 75.389604][ T6995] [ 75.389610][ T6995] dump_stack_lvl+0x16c/0x1f0 [ 75.389634][ T6995] dump_header+0x101/0x960 [ 75.389663][ T6995] oom_kill_process+0x176/0x910 [ 75.389690][ T6995] out_of_memory+0x350/0x1700 [ 75.389715][ T6995] ? __lock_acquire+0x436/0x2890 [ 75.389737][ T6995] ? __pfx_out_of_memory+0x10/0x10 [ 75.389769][ T6995] mem_cgroup_out_of_memory+0x118/0x130 [ 75.389787][ T6995] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 75.389810][ T6995] ? do_raw_spin_unlock+0x172/0x230 [ 75.389836][ T6995] try_charge_memcg+0x695/0xd30 [ 75.389863][ T6995] ? __pfx_try_charge_memcg+0x10/0x10 [ 75.389886][ T6995] ? __print_lock_name+0xd0/0xe0 [ 75.389911][ T6995] ? rcu_read_unlock+0x17/0x60 [ 75.389942][ T6995] charge_memcg+0x8a/0x230 [ 75.389964][ T6995] __mem_cgroup_charge+0x2b/0x1e0 [ 75.389990][ T6995] filemap_add_folio+0xe6/0x610 [ 75.390009][ T6995] ? __pfx_filemap_add_folio+0x10/0x10 [ 75.390034][ T6995] __filemap_get_folio_mpol+0x511/0xc60 [ 75.390058][ T6995] filemap_fault+0x684/0x29d0 [ 75.390080][ T6995] ? __pfx_filemap_fault+0x10/0x10 [ 75.390118][ T6995] ? __pfx_filemap_map_pages+0x10/0x10 [ 75.390133][ T6995] __do_fault+0x10d/0x490 [ 75.390152][ T6995] ? __pfx_filemap_map_pages+0x10/0x10 [ 75.390167][ T6995] do_fault+0xae4/0x1ad0 [ 75.390186][ T6995] ? __pfx_filemap_map_pages+0x10/0x10 [ 75.390207][ T6995] __handle_mm_fault+0x1919/0x2bb0 [ 75.390240][ T6995] ? __pfx___handle_mm_fault+0x10/0x10 [ 75.390266][ T6995] ? __pte_offset_map_lock+0x174/0x310 [ 75.390288][ T6995] ? find_held_lock+0x2b/0x80 [ 75.390321][ T6995] ? follow_page_pte+0x5cf/0x1390 [ 75.390347][ T6995] handle_mm_fault+0x3fe/0xad0 [ 75.390377][ T6995] __get_user_pages+0x54e/0x3590 [ 75.390411][ T6995] ? __pfx___get_user_pages+0x10/0x10 [ 75.390433][ T6995] ? __kernel_write_iter+0x5a5/0xb10 [ 75.390460][ T6995] get_dump_page+0x257/0x3d0 [ 75.390482][ T6995] ? __pfx_get_dump_page+0x10/0x10 [ 75.390505][ T6995] ? dump_user_range+0x756/0xb70 [ 75.390536][ T6995] dump_user_range+0x195/0xb70 [ 75.390567][ T6995] ? __pfx_dump_user_range+0x10/0x10 [ 75.390594][ T6995] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 75.390620][ T6995] ? __pfx_writenote+0x10/0x10 [ 75.390643][ T6995] elf_core_dump+0x29c3/0x3c10 [ 75.390674][ T6995] ? __pfx_elf_core_dump+0x10/0x10 [ 75.390689][ T6995] ? kasan_save_stack+0x33/0x60 [ 75.390707][ T6995] ? kasan_save_track+0x14/0x30 [ 75.390724][ T6995] ? __kasan_kmalloc+0xaa/0xb0 [ 75.390740][ T6995] ? __kvmalloc_node_noprof+0x3ac/0xa40 [ 75.390758][ T6995] ? vfs_coredump+0x1dd9/0x55e0 [ 75.390782][ T6995] ? arch_do_signal_or_restart+0x8f/0x7e0 [ 75.390804][ T6995] ? irqentry_exit+0x38a/0x8c0 [ 75.390823][ T6995] ? asm_exc_page_fault+0x26/0x30 [ 75.390845][ T6995] ? 0xffffffffff600000 [ 75.390905][ T6995] ? vfs_coredump+0x2b85/0x55e0 [ 75.390929][ T6995] vfs_coredump+0x2b85/0x55e0 [ 75.390964][ T6995] ? __pfx_vfs_coredump+0x10/0x10 [ 75.390987][ T6995] ? __lock_acquire+0x436/0x2890 [ 75.391012][ T6995] ? __lock_acquire+0x436/0x2890 [ 75.391034][ T6995] ? lock_acquire+0x179/0x330 [ 75.391059][ T6995] ? lock_acquire+0x179/0x330 [ 75.391124][ T6995] ? arch_stack_walk+0xa6/0x100 [ 75.391157][ T6995] ? stack_trace_save+0x8e/0xc0 [ 75.391175][ T6995] ? __pfx_stack_trace_save+0x10/0x10 [ 75.391194][ T6995] ? stack_depot_save_flags+0x29/0x9b0 [ 75.391219][ T6995] ? __lock_acquire+0x436/0x2890 [ 75.391241][ T6995] ? kasan_save_stack+0x42/0x60 [ 75.391305][ T6995] ? proc_coredump_connector+0x2d1/0x4f0 [ 75.391327][ T6995] ? __pfx_proc_coredump_connector+0x10/0x10 [ 75.391353][ T6995] ? rcu_is_watching+0x12/0xc0 [ 75.391373][ T6995] get_signal+0x22e1/0x26d0 [ 75.391408][ T6995] ? __pfx_get_signal+0x10/0x10 [ 75.391440][ T6995] arch_do_signal_or_restart+0x8f/0x7e0 [ 75.391464][ T6995] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 75.391497][ T6995] ? do_user_addr_fault+0x926/0x1370 [ 75.391523][ T6995] irqentry_exit+0x38a/0x8c0 [ 75.391547][ T6995] asm_exc_page_fault+0x26/0x30 [ 75.391563][ T6995] RIP: 0033:0x7f6df738f7c9 [ 75.391581][ T6995] Code: Unable to access opcode bytes at 0x7f6df738f79f. [ 75.391588][ T6995] RSP: 002b:00007f6df82b0fe8 EFLAGS: 00010206 [ 75.391602][ T6995] RAX: 0000000000000000 RBX: 00007f6df75e6090 RCX: 00007f6df738f7c9 [ 75.391613][ T6995] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000a0400 [ 75.391622][ T6995] RBP: 00007f6df7413f91 R08: 0000000000000000 R09: 0000000000000000 [ 75.391632][ T6995] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 75.391641][ T6995] R13: 00007f6df75e6128 R14: 00007f6df75e6090 R15: 00007fffaeea1f98 [ 75.391667][ T6995] [ 75.391673][ T6995] memory: usage 307200kB, limit 307200kB, failcnt 27263 [ 75.394430][ T10] usb 6-1: Product: syz [ 75.422382][ T6995] memory+swap: usage 432124kB, limit 9007199254740988kB, failcnt 0 [ 75.424128][ T6018] usb 7-1: config 0 descriptor?? [ 75.428309][ T6995] kmem: usage 4788kB, limit 9007199254740988kB, failcnt 0 [ 75.429388][ T10] usb 6-1: Manufacturer: syz [ 75.431343][ T6995] Memory cgroup stats for /syz0 [ 75.433004][ T10] usb 6-1: SerialNumber: syz [ 75.443395][ T6995] : [ 75.447764][ T10] usb 6-1: config 0 descriptor?? [ 75.449845][ T6995] cache 309460992 [ 75.451647][ T10] hub 6-1:0.0: bad descriptor, ignoring hub [ 75.452334][ T6995] rss 155648 [ 75.454098][ T10] hub 6-1:0.0: probe with driver hub failed with error -5 [ 75.457223][ T10] usb 6-1: selecting invalid altsetting 0 [ 75.487834][ T6995] rss_huge 0 [ 75.515156][ T6018] rc_core: IR keymap rc-hauppauge not found [ 75.526857][ T6995] shmem 309432320 [ 75.528350][ T6018] Registered IR keymap rc-empty [ 75.528910][ T6995] mapped_file 4096 [ 75.531299][ T6018] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 75.531924][ T6995] dirty 0 [ 75.534426][ T6018] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input7 [ 75.537341][ T6995] writeback 0 [ 75.544220][ T7212] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 75.545359][ T6995] workingset_refault_anon 119 [ 75.545366][ T6995] workingset_refault_file 5682 [ 75.545371][ T6995] swap 127922176 [ 75.545375][ T6995] swapcached 57344 [ 75.545379][ T6995] pgpgin 130089 [ 75.545382][ T6995] pgpgout 54997 [ 75.545386][ T6995] pgfault 22664 [ 75.545390][ T6995] pgmajfault 328 [ 75.545394][ T6995] inactive_anon 271388672 [ 75.545398][ T6995] active_anon 38252544 [ 75.545402][ T6995] inactive_file 0 [ 75.545406][ T6995] active_file 12288 [ 75.545410][ T6995] unevictable 0 [ 75.545414][ T6995] hierarchical_memory_limit 314572800 [ 75.545419][ T6995] hierarchical_memsw_limit 9223372036854771712 [ 75.596323][ T7214] netlink: 'syz.3.350': attribute type 1 has an invalid length. [ 75.599935][ T6995] total_cache 309460992 [ 75.622309][ T7214] 8021q: adding VLAN 0 to HW filter on device bond3 [ 75.623147][ T6995] total_rss 155648 [ 75.628464][ T7212] bond3: option tlb_dynamic_lb: unable to set because the bond device is up [ 75.629358][ T6995] total_rss_huge 0 [ 75.633946][ T7212] program syz.3.350 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.634264][ T6995] total_shmem 309432320 [ 75.634271][ T6995] total_mapped_file 4096 [ 75.634275][ T6995] total_dirty 0 [ 75.634279][ T6995] total_writeback 0 [ 75.671726][ T6995] total_workingset_refault_anon 119 [ 75.673789][ T6995] total_workingset_refault_file 5682 [ 75.675625][ T6995] total_swap 127922176 [ 75.676937][ T6995] total_swapcached 57344 [ 75.678272][ T6995] total_pgpgin 130089 [ 75.679504][ T6995] total_pgpgout 54997 [ 75.680746][ T6995] total_pgfault 22664 [ 75.682056][ T6995] total_pgmajfault 328 [ 75.683347][ T6995] total_inactive_anon 271388672 [ 75.684889][ T6995] total_active_anon 38252544 [ 75.686932][ T6995] total_inactive_file 0 [ 75.687662][ T841] usb 7-1: USB disconnect, device number 5 [ 75.688498][ T6995] total_active_file 12288 [ 75.691826][ T6995] total_unevictable 0 [ 75.693254][ T6995] anon_cost 0 [ 75.694455][ T6995] file_cost 0 [ 75.695794][ T6995] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.136,pid=6496,uid=0 [ 75.709401][ T6995] Memory cgroup out of memory: Killed process 6496 (syz.0.136) total-vm:98324kB, anon-rss:1116kB, file-rss:20672kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 75.818726][ T6997] syz.0.291 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 75.821944][ T6997] CPU: 0 UID: 0 PID: 6997 Comm: syz.0.291 Tainted: G L syzkaller #0 PREEMPT(full) [ 75.821961][ T6997] Tainted: [L]=SOFTLOCKUP [ 75.821964][ T6997] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.821971][ T6997] Call Trace: [ 75.821975][ T6997] [ 75.821979][ T6997] dump_stack_lvl+0x16c/0x1f0 [ 75.821996][ T6997] dump_header+0x101/0x960 [ 75.822015][ T6997] oom_kill_process+0x176/0x910 [ 75.822033][ T6997] out_of_memory+0x350/0x1700 [ 75.822050][ T6997] ? __lock_acquire+0x436/0x2890 [ 75.822065][ T6997] ? __pfx_out_of_memory+0x10/0x10 [ 75.822085][ T6997] mem_cgroup_out_of_memory+0x118/0x130 [ 75.822096][ T6997] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 75.822109][ T6997] ? do_raw_spin_unlock+0x172/0x230 [ 75.822126][ T6997] try_charge_memcg+0x695/0xd30 [ 75.822143][ T6997] ? __pfx_try_charge_memcg+0x10/0x10 [ 75.822157][ T6997] ? __print_lock_name+0xd1/0xe0 [ 75.822173][ T6997] ? rcu_read_unlock+0x17/0x60 [ 75.822192][ T6997] charge_memcg+0x8a/0x230 [ 75.822206][ T6997] __mem_cgroup_charge+0x2b/0x1e0 [ 75.822222][ T6997] shmem_alloc_and_add_folio+0x50c/0xc20 [ 75.822243][ T6997] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 75.822260][ T6997] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 75.822281][ T6997] shmem_get_folio_gfp+0x67f/0x1610 [ 75.822300][ T6997] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 75.822321][ T6997] ? __pfx_timestamp_truncate+0x10/0x10 [ 75.822340][ T6997] shmem_write_begin+0x1a4/0x3b0 [ 75.822364][ T6997] ? __pfx_shmem_write_begin+0x10/0x10 [ 75.822374][ T6997] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 75.822390][ T6997] generic_perform_write+0x3c4/0x900 [ 75.822410][ T6997] ? __pfx_generic_perform_write+0x10/0x10 [ 75.822426][ T6997] ? generic_update_time+0xcf/0xf0 [ 75.822435][ T6997] ? mnt_put_write_access_file+0x45/0xf0 [ 75.822449][ T6997] ? file_update_time_flags+0x35c/0x520 [ 75.822461][ T6997] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 75.822473][ T6997] shmem_file_write_iter+0x10e/0x140 [ 75.822485][ T6997] __kernel_write_iter+0x31a/0xb10 [ 75.822500][ T6997] ? __pfx___kernel_write_iter+0x10/0x10 [ 75.822512][ T6997] ? __up_read+0x2d1/0x700 [ 75.822528][ T6997] ? dump_user_range+0x756/0xb70 [ 75.822543][ T6997] ? dump_user_range+0x423/0xb70 [ 75.822561][ T6997] dump_user_range+0x413/0xb70 [ 75.822580][ T6997] ? __pfx_dump_user_range+0x10/0x10 [ 75.822597][ T6997] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 75.822612][ T6997] ? __pfx_writenote+0x10/0x10 [ 75.822625][ T6997] elf_core_dump+0x29c3/0x3c10 [ 75.822642][ T6997] ? __pfx_elf_core_dump+0x10/0x10 [ 75.822651][ T6997] ? kasan_save_stack+0x33/0x60 [ 75.822662][ T6997] ? kasan_save_track+0x14/0x30 [ 75.822672][ T6997] ? __kasan_kmalloc+0xaa/0xb0 [ 75.822682][ T6997] ? __kvmalloc_node_noprof+0x3ac/0xa40 [ 75.822693][ T6997] ? vfs_coredump+0x1dd9/0x55e0 [ 75.822708][ T6997] ? arch_do_signal_or_restart+0x8f/0x7e0 [ 75.822722][ T6997] ? irqentry_exit+0x38a/0x8c0 [ 75.822734][ T6997] ? asm_exc_page_fault+0x26/0x30 [ 75.822747][ T6997] ? 0xffffffffff600000 [ 75.822779][ T6997] ? vfs_coredump+0x2b85/0x55e0 [ 75.822794][ T6997] vfs_coredump+0x2b85/0x55e0 [ 75.822815][ T6997] ? __pfx_vfs_coredump+0x10/0x10 [ 75.822830][ T6997] ? __lock_acquire+0x436/0x2890 [ 75.822845][ T6997] ? __lock_acquire+0x436/0x2890 [ 75.822858][ T6997] ? lock_acquire+0x179/0x330 [ 75.822873][ T6997] ? lock_acquire+0x179/0x330 [ 75.822894][ T6997] ? arch_stack_walk+0xa6/0x100 [ 75.822913][ T6997] ? stack_trace_save+0x8e/0xc0 [ 75.822924][ T6997] ? __pfx_stack_trace_save+0x10/0x10 [ 75.822936][ T6997] ? stack_depot_save_flags+0x29/0x9b0 [ 75.822952][ T6997] ? __lock_acquire+0x436/0x2890 [ 75.822965][ T6997] ? kasan_save_stack+0x42/0x60 [ 75.823000][ T6997] ? proc_coredump_connector+0x2d1/0x4f0 [ 75.823014][ T6997] ? __pfx_proc_coredump_connector+0x10/0x10 [ 75.823030][ T6997] ? rcu_is_watching+0x12/0xc0 [ 75.823042][ T6997] get_signal+0x22e1/0x26d0 [ 75.823077][ T6997] ? __pfx_get_signal+0x10/0x10 [ 75.823098][ T6997] arch_do_signal_or_restart+0x8f/0x7e0 [ 75.823113][ T6997] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 75.823132][ T6997] ? do_user_addr_fault+0x926/0x1370 [ 75.823149][ T6997] irqentry_exit+0x38a/0x8c0 [ 75.823164][ T6997] asm_exc_page_fault+0x26/0x30 [ 75.823173][ T6997] RIP: 0033:0x7f6df738f7c9 [ 75.823186][ T6997] Code: Unable to access opcode bytes at 0x7f6df738f79f. [ 75.823190][ T6997] RSP: 002b:00007f6df82b0fe8 EFLAGS: 00010206 [ 75.823200][ T6997] RAX: 0000000000000000 RBX: 00007f6df75e6090 RCX: 00007f6df738f7c9 [ 75.823206][ T6997] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000a0400 [ 75.823212][ T6997] RBP: 00007f6df7413f91 R08: 0000000000000000 R09: 0000000000000000 [ 75.823217][ T6997] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 75.823223][ T6997] R13: 00007f6df75e6128 R14: 00007f6df75e6090 R15: 00007fffaeea1f98 [ 75.823237][ T6997] [ 75.823252][ T6997] memory: usage 307200kB, limit 307200kB, failcnt 29791 [ 75.977754][ T6997] memory+swap: usage 431996kB, limit 9007199254740988kB, failcnt 0 [ 75.982704][ T6997] kmem: usage 4492kB, limit 9007199254740988kB, failcnt 0 [ 75.984912][ T6997] Memory cgroup stats for /syz0: [ 75.985038][ T6997] cache 309907456 [ 75.988811][ T6997] rss 16384 [ 75.989803][ T6997] rss_huge 0 [ 75.990846][ T6997] shmem 309870592 [ 75.992003][ T6997] mapped_file 0 [ 75.993091][ T6997] dirty 0 [ 75.994015][ T6997] writeback 0 [ 75.995136][ T6997] workingset_refault_anon 119 [ 75.996591][ T6997] workingset_refault_file 6954 [ 75.998153][ T6997] swap 127791104 [ 75.999356][ T6997] swapcached 49152 [ 76.000516][ T6997] pgpgin 131491 [ 76.001601][ T6997] pgpgout 56325 [ 76.002731][ T6997] pgfault 22776 [ 76.003822][ T6997] pgmajfault 420 [ 76.004967][ T6997] inactive_anon 51884032 [ 76.006551][ T6997] active_anon 258052096 [ 76.007903][ T6997] inactive_file 36864 [ 76.009146][ T6997] active_file 0 [ 76.010231][ T6997] unevictable 0 [ 76.011360][ T6997] hierarchical_memory_limit 314572800 [ 76.013006][ T6997] hierarchical_memsw_limit 9223372036854771712 [ 76.015008][ T6997] total_cache 309907456 [ 76.016397][ T6997] total_rss 16384 [ 76.017583][ T6997] total_rss_huge 0 [ 76.018793][ T6997] total_shmem 309870592 [ 76.020133][ T6997] total_mapped_file 0 [ 76.021396][ T6997] total_dirty 0 [ 76.022510][ T6997] total_writeback 0 [ 76.023732][ T6997] total_workingset_refault_anon 119 [ 76.025456][ T6997] total_workingset_refault_file 6954 [ 76.027132][ T6997] total_swap 127791104 [ 76.028553][ T6997] total_swapcached 49152 [ 76.029913][ T6997] total_pgpgin 131491 [ 76.031185][ T6997] total_pgpgout 56325 [ 76.032448][ T6997] total_pgfault 22776 [ 76.033710][ T6997] total_pgmajfault 420 [ 76.035075][ T6997] total_inactive_anon 51884032 [ 76.036739][ T6997] total_active_anon 258052096 [ 76.038250][ T6997] total_inactive_file 36864 [ 76.039700][ T6997] total_active_file 0 [ 76.040967][ T6997] total_unevictable 0 [ 76.042287][ T6997] anon_cost 0 [ 76.043368][ T6997] file_cost 0 [ 76.044434][ T6997] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.291,pid=7025,uid=0 [ 76.051428][ T6997] Memory cgroup out of memory: Killed process 7025 (syz.0.291) total-vm:49268kB, anon-rss:128kB, file-rss:2936kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 76.060591][ T7020] syz.0.291 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 76.063975][ T7020] CPU: 1 UID: 0 PID: 7020 Comm: syz.0.291 Tainted: G L syzkaller #0 PREEMPT(full) [ 76.063991][ T7020] Tainted: [L]=SOFTLOCKUP [ 76.063995][ T7020] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.064001][ T7020] Call Trace: [ 76.064005][ T7020] [ 76.064009][ T7020] dump_stack_lvl+0x16c/0x1f0 [ 76.064027][ T7020] dump_header+0x101/0x960 [ 76.064046][ T7020] oom_kill_process+0x176/0x910 [ 76.064064][ T7020] out_of_memory+0x350/0x1700 [ 76.064080][ T7020] ? __lock_acquire+0x436/0x2890 [ 76.064095][ T7020] ? __pfx_out_of_memory+0x10/0x10 [ 76.064115][ T7020] mem_cgroup_out_of_memory+0x118/0x130 [ 76.064126][ T7020] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 76.064140][ T7020] ? do_raw_spin_unlock+0x172/0x230 [ 76.064156][ T7020] try_charge_memcg+0x695/0xd30 [ 76.064173][ T7020] ? __pfx_try_charge_memcg+0x10/0x10 [ 76.064187][ T7020] ? __print_lock_name+0xd0/0xe0 [ 76.064204][ T7020] ? rcu_read_unlock+0x17/0x60 [ 76.064221][ T7020] charge_memcg+0x8a/0x230 [ 76.064236][ T7020] __mem_cgroup_charge+0x2b/0x1e0 [ 76.064252][ T7020] filemap_add_folio+0xe6/0x610 [ 76.064263][ T7020] ? __pfx_filemap_add_folio+0x10/0x10 [ 76.064277][ T7020] __filemap_get_folio_mpol+0x511/0xc60 [ 76.064291][ T7020] filemap_fault+0x684/0x29d0 [ 76.064304][ T7020] ? __pfx_filemap_fault+0x10/0x10 [ 76.064321][ T7020] ? __pfx_filemap_map_pages+0x10/0x10 [ 76.064333][ T7020] __do_fault+0x10d/0x490 [ 76.064346][ T7020] ? __pfx_filemap_map_pages+0x10/0x10 [ 76.064354][ T7020] do_fault+0xae4/0x1ad0 [ 76.064367][ T7020] ? __pfx_filemap_map_pages+0x10/0x10 [ 76.064378][ T7020] __handle_mm_fault+0x1919/0x2bb0 [ 76.064399][ T7020] ? __pfx___handle_mm_fault+0x10/0x10 [ 76.064415][ T7020] ? __pte_offset_map_lock+0x174/0x310 [ 76.064428][ T7020] ? find_held_lock+0x2b/0x80 [ 76.064448][ T7020] ? follow_page_pte+0x5cf/0x1390 [ 76.064464][ T7020] handle_mm_fault+0x3fe/0xad0 [ 76.064483][ T7020] __get_user_pages+0x54e/0x3590 [ 76.064502][ T7020] ? __pfx___get_user_pages+0x10/0x10 [ 76.064516][ T7020] ? __kernel_write_iter+0x5a5/0xb10 [ 76.064532][ T7020] get_dump_page+0x257/0x3d0 [ 76.064547][ T7020] ? __pfx_get_dump_page+0x10/0x10 [ 76.064561][ T7020] ? dump_user_range+0x756/0xb70 [ 76.064580][ T7020] dump_user_range+0x195/0xb70 [ 76.064599][ T7020] ? __pfx_dump_user_range+0x10/0x10 [ 76.064616][ T7020] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 76.064632][ T7020] ? __pfx_writenote+0x10/0x10 [ 76.064645][ T7020] elf_core_dump+0x29c3/0x3c10 [ 76.064662][ T7020] ? __pfx_elf_core_dump+0x10/0x10 [ 76.064671][ T7020] ? kasan_save_stack+0x33/0x60 [ 76.064682][ T7020] ? kasan_save_track+0x14/0x30 [ 76.064693][ T7020] ? __kasan_kmalloc+0xaa/0xb0 [ 76.064703][ T7020] ? __kvmalloc_node_noprof+0x3ac/0xa40 [ 76.064714][ T7020] ? vfs_coredump+0x1dd9/0x55e0 [ 76.064729][ T7020] ? arch_do_signal_or_restart+0x8f/0x7e0 [ 76.064743][ T7020] ? irqentry_exit+0x38a/0x8c0 [ 76.064756][ T7020] ? asm_exc_page_fault+0x26/0x30 [ 76.064769][ T7020] ? 0xffffffffff600000 [ 76.064800][ T7020] ? vfs_coredump+0x2b85/0x55e0 [ 76.064815][ T7020] vfs_coredump+0x2b85/0x55e0 [ 76.064836][ T7020] ? __pfx_vfs_coredump+0x10/0x10 [ 76.064851][ T7020] ? __lock_acquire+0x436/0x2890 [ 76.064866][ T7020] ? __lock_acquire+0x436/0x2890 [ 76.064879][ T7020] ? lock_acquire+0x179/0x330 [ 76.064893][ T7020] ? lock_acquire+0x179/0x330 [ 76.064914][ T7020] ? arch_stack_walk+0xa6/0x100 [ 76.064933][ T7020] ? stack_trace_save+0x8e/0xc0 [ 76.064945][ T7020] ? __pfx_stack_trace_save+0x10/0x10 [ 76.064956][ T7020] ? stack_depot_save_flags+0x29/0x9b0 [ 76.064972][ T7020] ? __lock_acquire+0x436/0x2890 [ 76.064985][ T7020] ? kasan_save_stack+0x42/0x60 [ 76.065019][ T7020] ? proc_coredump_connector+0x2d1/0x4f0 [ 76.065033][ T7020] ? __pfx_proc_coredump_connector+0x10/0x10 [ 76.065049][ T7020] ? rcu_is_watching+0x12/0xc0 [ 76.065061][ T7020] get_signal+0x22e1/0x26d0 [ 76.065092][ T7020] ? __pfx_get_signal+0x10/0x10 [ 76.065113][ T7020] arch_do_signal_or_restart+0x8f/0x7e0 [ 76.065129][ T7020] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 76.065149][ T7020] ? do_user_addr_fault+0x926/0x1370 [ 76.065166][ T7020] irqentry_exit+0x38a/0x8c0 [ 76.065185][ T7020] asm_exc_page_fault+0x26/0x30 [ 76.065198][ T7020] RIP: 0033:0x7f6df738f7c9 [ 76.065215][ T7020] Code: Unable to access opcode bytes at 0x7f6df738f79f. [ 76.065222][ T7020] RSP: 002b:00007f6df82b0fe8 EFLAGS: 00010206 [ 76.065236][ T7020] RAX: 0000000000000000 RBX: 00007f6df75e6090 RCX: 00007f6df738f7c9 [ 76.065246][ T7020] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000a0400 [ 76.065256][ T7020] RBP: 00007f6df7413f91 R08: 0000000000000000 R09: 0000000000000000 [ 76.065265][ T7020] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 76.065273][ T7020] R13: 00007f6df75e6128 R14: 00007f6df75e6090 R15: 00007fffaeea1f98 [ 76.065297][ T7020] [ 76.230637][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.233910][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.264048][ T7020] memory: usage 298816kB, limit 307200kB, failcnt 30106 [ 76.267912][ T7020] memory+swap: usage 412120kB, limit 9007199254740988kB, failcnt 0 [ 76.271136][ T7020] kmem: usage 4280kB, limit 9007199254740988kB, failcnt 0 [ 76.273998][ T7020] Memory cgroup stats for /syz0: [ 76.274116][ T7020] cache 297508864 [ 76.277844][ T7020] rss 16384 [ 76.279163][ T7020] rss_huge 0 [ 76.280506][ T7020] shmem 289689600 [ 76.282053][ T7020] mapped_file 0 [ 76.283512][ T7020] dirty 0 [ 76.284748][ T7020] writeback 0 [ 76.286186][ T7020] workingset_refault_anon 119 [ 76.288152][ T7020] workingset_refault_file 7046 [ 76.290111][ T7020] swap 116047872 [ 76.291593][ T7020] swapcached 61440 [ 76.293114][ T7020] pgpgin 135330 [ 76.294574][ T7020] pgpgout 63186 [ 76.301234][ T7020] pgfault 22916 [ 76.302507][ T7020] pgmajfault 423 [ 76.303961][ T7020] inactive_anon 48140288 [ 76.305405][ T7020] active_anon 241635328 [ 76.306744][ T7020] inactive_file 0 [ 76.307980][ T7020] active_file 7815168 [ 76.309299][ T7020] unevictable 0 [ 76.310438][ T7020] hierarchical_memory_limit 314572800 [ 76.312159][ T7020] hierarchical_memsw_limit 9223372036854771712 [ 76.314135][ T7020] total_cache 297508864 [ 76.316176][ T7020] total_rss 16384 [ 76.318490][ T7020] total_rss_huge 0 [ 76.319710][ T7020] total_shmem 289689600 [ 76.321035][ T7020] total_mapped_file 0 [ 76.322355][ T7020] total_dirty 0 [ 76.323530][ T7020] total_writeback 0 [ 76.324780][ T7020] total_workingset_refault_anon 119 [ 76.326894][ T7020] total_workingset_refault_file 7046 [ 76.329427][ T7020] total_swap 116047872 [ 76.330772][ T7020] total_swapcached 61440 [ 76.332122][ T7020] total_pgpgin 135330 [ 76.333411][ T7020] total_pgpgout 63186 [ 76.334698][ T7020] total_pgfault 22916 [ 76.336217][ T7020] total_pgmajfault 423 [ 76.337563][ T7020] total_inactive_anon 48140288 [ 76.339111][ T7020] total_active_anon 241635328 [ 76.340624][ T7020] total_inactive_file 0 [ 76.341990][ T7020] total_active_file 7815168 [ 76.343468][ T7020] total_unevictable 0 [ 76.344985][ T7020] anon_cost 0 [ 76.346533][ T7020] file_cost 0 [ 76.347714][ T7020] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.291,pid=7028,uid=0 [ 76.353599][ T7020] Memory cgroup out of memory: Killed process 7028 (syz.0.291) total-vm:49268kB, anon-rss:128kB, file-rss:2896kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 76.536001][ T7197] usb 6-1: reset high-speed USB device number 3 using dummy_hcd [ 76.686816][ T7197] usb 6-1: device firmware changed [ 76.689999][ T141] usb 6-1: USB disconnect, device number 3 [ 76.797242][ T7028] syz.0.291 (7028) used greatest stack depth: 18472 bytes left [ 76.797613][ T7261] netlink: 32 bytes leftover after parsing attributes in process `syz.3.366'. [ 76.820453][ T7262] bond2: entered promiscuous mode [ 76.822300][ T7262] 8021q: adding VLAN 0 to HW filter on device bond2 [ 76.825169][ T141] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 76.922857][ T7262] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 76.976364][ T141] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 76.978939][ T141] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 76.981926][ T141] usb 6-1: config 0 interface 0 has no altsetting 0 [ 76.993601][ T141] usb 6-1: string descriptor 0 read error: -22 [ 76.995766][ T141] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 76.998530][ T141] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 77.002461][ T141] usb 6-1: config 0 descriptor?? [ 77.005818][ T141] hub 6-1:0.0: bad descriptor, ignoring hub [ 77.007732][ T141] hub 6-1:0.0: probe with driver hub failed with error -5 [ 77.011340][ T141] usb 6-1: selecting invalid altsetting 0 [ 77.021272][ T7262] 8021q: adding VLAN 0 to HW filter on device bond2 [ 77.036255][ T7262] lo: entered promiscuous mode [ 77.041234][ T7262] bond2: (slave lo): Enslaving as a backup interface with an up link [ 77.051414][ T7262] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 77.076179][ T7269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.368'. [ 77.078967][ T7269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.368'. [ 77.125187][ T100] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 77.132564][ T100] bond2: (slave lo): link status up again after 0 ms [ 77.133565][ T7271] netlink: 20 bytes leftover after parsing attributes in process `syz.3.370'. [ 77.134965][ T100] bond2: (slave lo): failed to get link speed/duplex [ 77.137837][ T7271] netlink: 56 bytes leftover after parsing attributes in process `syz.3.370'. [ 77.235331][ T100] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 77.243528][ C1] sr 2:0:0:0: [sr0] tag#13 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 77.246801][ C1] sr 2:0:0:0: [sr0] tag#13 CDB: opcode=0xde (vendor) de 89 0b b6 4d c9 [ 77.256288][ T12] bond2: (slave lo): failed to get link speed/duplex [ 77.305060][ T40] kauditd_printk_skb: 161 callbacks suppressed [ 77.305071][ T40] audit: type=1400 audit(1765966070.033:608): avc: denied { create } for pid=7278 comm="syz.3.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.314482][ T40] audit: type=1400 audit(1765966070.043:609): avc: denied { ioctl } for pid=7278 comm="syz.3.373" path="socket:[17431]" dev="sockfs" ino=17431 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.322270][ T141] usb 6-1: USB disconnect, device number 4 [ 77.324988][ T7279] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 77.333291][ T40] audit: type=1400 audit(1765966070.043:610): avc: denied { bind } for pid=7278 comm="syz.3.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.340583][ T40] audit: type=1400 audit(1765966070.063:611): avc: denied { write } for pid=7278 comm="syz.3.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.364221][ T7281] mac80211_hwsim hwsim3 : renamed from wlan1 (while UP) [ 77.364237][ T40] audit: type=1400 audit(1765966070.093:612): avc: denied { ioctl } for pid=7280 comm="syz.3.374" path="socket:[17439]" dev="sockfs" ino=17439 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 77.396329][ T12] bond2: (slave lo): failed to get link speed/duplex [ 77.482934][ T7286] netlink: 'batadv0': attribute type 13 has an invalid length. [ 77.509298][ T7286] gretap0: refused to change device tx_queue_len [ 77.511600][ T7286] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 77.522997][ T7285] tipc: Enabled bearer , priority 27 [ 77.526713][ T40] audit: type=1400 audit(1765966070.263:613): avc: denied { write } for pid=7284 comm="syz.3.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 77.535169][ T12] bond2: (slave lo): failed to get link speed/duplex [ 77.568875][ T7022] syz.0.291 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 77.572244][ T7022] CPU: 2 UID: 0 PID: 7022 Comm: syz.0.291 Tainted: G L syzkaller #0 PREEMPT(full) [ 77.572261][ T7022] Tainted: [L]=SOFTLOCKUP [ 77.572264][ T7022] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.572271][ T7022] Call Trace: [ 77.572274][ T7022] [ 77.572278][ T7022] dump_stack_lvl+0x16c/0x1f0 [ 77.572295][ T7022] dump_header+0x101/0x960 [ 77.572315][ T7022] oom_kill_process+0x176/0x910 [ 77.572333][ T7022] out_of_memory+0x350/0x1700 [ 77.572349][ T7022] ? __lock_acquire+0x436/0x2890 [ 77.572363][ T7022] ? __pfx_out_of_memory+0x10/0x10 [ 77.572384][ T7022] mem_cgroup_out_of_memory+0x118/0x130 [ 77.572395][ T7022] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 77.572409][ T7022] ? do_raw_spin_unlock+0x172/0x230 [ 77.572425][ T7022] try_charge_memcg+0x695/0xd30 [ 77.572442][ T7022] ? __pfx_try_charge_memcg+0x10/0x10 [ 77.572457][ T7022] ? __print_lock_name+0xd1/0xe0 [ 77.572473][ T7022] ? rcu_read_unlock+0x17/0x60 [ 77.572492][ T7022] charge_memcg+0x8a/0x230 [ 77.572506][ T7022] __mem_cgroup_charge+0x2b/0x1e0 [ 77.572522][ T7022] filemap_add_folio+0xe6/0x610 [ 77.572533][ T7022] ? __pfx_filemap_add_folio+0x10/0x10 [ 77.572547][ T7022] __filemap_get_folio_mpol+0x511/0xc60 [ 77.572562][ T7022] filemap_fault+0x684/0x29d0 [ 77.572575][ T7022] ? __pfx_filemap_fault+0x10/0x10 [ 77.572592][ T7022] ? __pfx_filemap_map_pages+0x10/0x10 [ 77.572600][ T7022] __do_fault+0x10d/0x490 [ 77.572612][ T7022] ? __pfx_filemap_map_pages+0x10/0x10 [ 77.572620][ T7022] do_fault+0xae4/0x1ad0 [ 77.572633][ T7022] ? __pfx_filemap_map_pages+0x10/0x10 [ 77.572645][ T7022] __handle_mm_fault+0x1919/0x2bb0 [ 77.572665][ T7022] ? __pfx___handle_mm_fault+0x10/0x10 [ 77.572682][ T7022] ? __pte_offset_map_lock+0x174/0x310 [ 77.572695][ T7022] ? find_held_lock+0x2b/0x80 [ 77.572715][ T7022] ? follow_page_pte+0x5cf/0x1390 [ 77.572731][ T7022] handle_mm_fault+0x3fe/0xad0 [ 77.572750][ T7022] __get_user_pages+0x54e/0x3590 [ 77.572769][ T7022] ? __pfx___get_user_pages+0x10/0x10 [ 77.572783][ T7022] ? __kernel_write_iter+0x5a5/0xb10 [ 77.572799][ T7022] get_dump_page+0x257/0x3d0 [ 77.572814][ T7022] ? __pfx_get_dump_page+0x10/0x10 [ 77.572828][ T7022] ? dump_user_range+0x756/0xb70 [ 77.572847][ T7022] dump_user_range+0x195/0xb70 [ 77.572866][ T7022] ? __pfx_dump_user_range+0x10/0x10 [ 77.572883][ T7022] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 77.572898][ T7022] ? __pfx_writenote+0x10/0x10 [ 77.572912][ T7022] elf_core_dump+0x29c3/0x3c10 [ 77.572929][ T7022] ? __pfx_elf_core_dump+0x10/0x10 [ 77.572938][ T7022] ? kasan_save_stack+0x33/0x60 [ 77.572949][ T7022] ? kasan_save_track+0x14/0x30 [ 77.572960][ T7022] ? __kasan_kmalloc+0xaa/0xb0 [ 77.572970][ T7022] ? __kvmalloc_node_noprof+0x3ac/0xa40 [ 77.572981][ T7022] ? vfs_coredump+0x1dd9/0x55e0 [ 77.572996][ T7022] ? arch_do_signal_or_restart+0x8f/0x7e0 [ 77.573010][ T7022] ? irqentry_exit+0x38a/0x8c0 [ 77.573022][ T7022] ? asm_exc_page_fault+0x26/0x30 [ 77.573036][ T7022] ? 0xffffffffff600000 [ 77.573080][ T7022] ? vfs_coredump+0x2b85/0x55e0 [ 77.573106][ T7022] vfs_coredump+0x2b85/0x55e0 [ 77.573138][ T7022] ? __pfx_vfs_coredump+0x10/0x10 [ 77.573160][ T7022] ? __lock_acquire+0x436/0x2890 [ 77.573184][ T7022] ? __lock_acquire+0x436/0x2890 [ 77.573198][ T7022] ? lock_acquire+0x179/0x330 [ 77.573213][ T7022] ? lock_acquire+0x179/0x330 [ 77.573234][ T7022] ? arch_stack_walk+0xa6/0x100 [ 77.573253][ T7022] ? stack_trace_save+0x8e/0xc0 [ 77.573265][ T7022] ? __pfx_stack_trace_save+0x10/0x10 [ 77.573276][ T7022] ? stack_depot_save_flags+0x29/0x9b0 [ 77.573294][ T7022] ? __lock_acquire+0x436/0x2890 [ 77.573307][ T7022] ? kasan_save_stack+0x42/0x60 [ 77.573342][ T7022] ? proc_coredump_connector+0x2d1/0x4f0 [ 77.573356][ T7022] ? __pfx_proc_coredump_connector+0x10/0x10 [ 77.573372][ T7022] ? rcu_is_watching+0x12/0xc0 [ 77.573384][ T7022] get_signal+0x22e1/0x26d0 [ 77.573405][ T7022] ? __pfx_get_signal+0x10/0x10 [ 77.573424][ T7022] arch_do_signal_or_restart+0x8f/0x7e0 [ 77.573440][ T7022] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 77.573459][ T7022] ? do_user_addr_fault+0x926/0x1370 [ 77.573476][ T7022] irqentry_exit+0x38a/0x8c0 [ 77.573491][ T7022] asm_exc_page_fault+0x26/0x30 [ 77.573500][ T7022] RIP: 0033:0x7f6df738f7c9 [ 77.573511][ T7022] Code: Unable to access opcode bytes at 0x7f6df738f79f. [ 77.573516][ T7022] RSP: 002b:00007f6df82b0fe8 EFLAGS: 00010206 [ 77.573525][ T7022] RAX: 0000000000000000 RBX: 00007f6df75e6090 RCX: 00007f6df738f7c9 [ 77.573532][ T7022] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000a0400 [ 77.573537][ T7022] RBP: 00007f6df7413f91 R08: 0000000000000000 R09: 0000000000000000 [ 77.573543][ T7022] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 77.573549][ T7022] R13: 00007f6df75e6128 R14: 00007f6df75e6090 R15: 00007fffaeea1f98 [ 77.573563][ T7022] [ 77.573567][ T7022] memory: usage 307200kB, limit 307200kB, failcnt 41112 [ 77.613793][ T40] audit: type=1400 audit(1765966070.343:614): avc: denied { write } for pid=7289 comm="syz.3.377" name="001" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 77.645987][ T7022] memory+swap: usage 432152kB, limit 9007199254740988kB, failcnt 0 [ 77.652546][ T40] audit: type=1400 audit(1765966070.383:615): avc: denied { read write } for pid=7289 comm="syz.3.377" name="event2" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 77.654491][ T7022] kmem: usage 4356kB, limit 9007199254740988kB, failcnt 0 [ 77.655287][ T100] bond2: (slave lo): failed to get link speed/duplex [ 77.657036][ T40] audit: type=1400 audit(1765966070.383:616): avc: denied { open } for pid=7289 comm="syz.3.377" path="/dev/input/event2" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 77.660020][ T7022] Memory cgroup stats for [ 77.660444][ T40] audit: type=1400 audit(1765966070.383:617): avc: denied { ioctl } for pid=7289 comm="syz.3.377" path="/dev/input/event2" dev="devtmpfs" ino=947 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 77.662281][ T7022] /syz0: [ 77.781693][ T7022] cache 310013952 [ 77.784489][ T7022] rss 53248 [ 77.805221][ T7022] rss_huge 0 [ 77.807557][ T7022] shmem 309993472 [ 77.809738][ T7022] mapped_file 0 [ 77.809744][ T7022] dirty 0 [ 77.809748][ T7022] writeback 0 [ 77.809753][ T7022] workingset_refault_anon 131 [ 77.809757][ T7022] workingset_refault_file 12607 [ 77.809762][ T7022] swap 127950848 [ 77.809765][ T7022] swapcached 45056 [ 77.809769][ T7022] pgpgin 163462 [ 77.809773][ T7022] pgpgout 88262 [ 77.809777][ T7022] pgfault 24772 [ 77.809781][ T7022] pgmajfault 680 [ 77.809785][ T7022] inactive_anon 175841280 [ 77.809789][ T7022] active_anon 134250496 [ 77.809793][ T7022] inactive_file 20480 [ 77.809797][ T7022] active_file 0 [ 77.809801][ T7022] unevictable 0 [ 77.809805][ T7022] hierarchical_memory_limit 314572800 [ 77.809810][ T7022] hierarchical_memsw_limit 9223372036854771712 [ 77.809815][ T7022] total_cache 310013952 [ 77.809819][ T7022] total_rss 53248 [ 77.809823][ T7022] total_rss_huge 0 [ 77.809827][ T7022] total_shmem 309993472 [ 77.814535][ T7294] tmpfs: Bad value for 'mpol' [ 77.814790][ T7022] total_mapped_file 0 [ 77.814800][ T7022] total_dirty 0 [ 77.825928][ T7022] total_writeback 0 [ 77.847646][ T7022] total_workingset_refault_anon 131 [ 77.847656][ T7022] total_workingset_refault_file 12607 [ 77.847661][ T7022] total_swap 127950848 [ 77.847665][ T7022] total_swapcached 45056 [ 77.847670][ T7022] total_pgpgin 163462 [ 77.847674][ T7022] total_pgpgout 88262 [ 77.847678][ T7022] total_pgfault 24772 [ 77.847683][ T7022] total_pgmajfault 680 [ 77.847687][ T7022] total_inactive_anon 175841280 [ 77.847692][ T7022] total_active_anon 134250496 [ 77.847696][ T7022] total_inactive_file 20480 [ 77.847701][ T7022] total_active_file 0 [ 77.847705][ T7022] total_unevictable 0 [ 77.847709][ T7022] anon_cost 0 [ 77.847713][ T7022] file_cost 0 [ 77.847718][ T7022] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.291,pid=7001,uid=0 [ 77.847789][ T7022] Memory cgroup out of memory: Killed process 7001 (syz.0.291) total-vm:49268kB, anon-rss:0kB, file-rss:3080kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 77.866341][ T5930] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 77.893106][ T7013] syz.0.291 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 77.893173][ T7013] CPU: 1 UID: 0 PID: 7013 Comm: syz.0.291 Tainted: G L syzkaller #0 PREEMPT(full) [ 77.893196][ T7013] Tainted: [L]=SOFTLOCKUP [ 77.893202][ T7013] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.893212][ T7013] Call Trace: [ 77.893217][ T7013] [ 77.893224][ T7013] dump_stack_lvl+0x16c/0x1f0 [ 77.893249][ T7013] dump_header+0x101/0x960 [ 77.893279][ T7013] oom_kill_process+0x176/0x910 [ 77.893308][ T7013] out_of_memory+0x350/0x1700 [ 77.893334][ T7013] ? __lock_acquire+0x436/0x2890 [ 77.893357][ T7013] ? __pfx_out_of_memory+0x10/0x10 [ 77.893391][ T7013] mem_cgroup_out_of_memory+0x118/0x130 [ 77.893408][ T7013] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 77.893432][ T7013] ? do_raw_spin_unlock+0x172/0x230 [ 77.893459][ T7013] try_charge_memcg+0x695/0xd30 [ 77.893487][ T7013] ? __pfx_try_charge_memcg+0x10/0x10 [ 77.893510][ T7013] ? __print_lock_name+0xd1/0xe0 [ 77.893535][ T7013] ? rcu_read_unlock+0x17/0x60 [ 77.893566][ T7013] charge_memcg+0x8a/0x230 [ 77.893589][ T7013] __mem_cgroup_charge+0x2b/0x1e0 [ 77.893615][ T7013] shmem_alloc_and_add_folio+0x50c/0xc20 [ 77.893648][ T7013] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 77.893676][ T7013] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 77.893729][ T7013] shmem_get_folio_gfp+0x67f/0x1610 [ 77.893763][ T7013] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 77.893792][ T7013] ? __pfx_timestamp_truncate+0x10/0x10 [ 77.893822][ T7013] shmem_write_begin+0x1a4/0x3b0 [ 77.893842][ T7013] ? __pfx_shmem_write_begin+0x10/0x10 [ 77.893860][ T7013] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 77.893887][ T7013] generic_perform_write+0x3c4/0x900 [ 77.893923][ T7013] ? __pfx_generic_perform_write+0x10/0x10 [ 77.893948][ T7013] ? generic_update_time+0xcf/0xf0 [ 77.893963][ T7013] ? mnt_put_write_access_file+0x45/0xf0 [ 77.893986][ T7013] ? file_update_time_flags+0x35c/0x520 [ 77.894007][ T7013] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 77.894025][ T7013] shmem_file_write_iter+0x10e/0x140 [ 77.894047][ T7013] __kernel_write_iter+0x31a/0xb10 [ 77.894071][ T7013] ? __pfx___kernel_write_iter+0x10/0x10 [ 77.894091][ T7013] ? __up_read+0x2d1/0x700 [ 77.894121][ T7013] ? dump_user_range+0x756/0xb70 [ 77.894145][ T7013] ? dump_user_range+0x1b3/0xb70 [ 77.894174][ T7013] dump_user_range+0x413/0xb70 [ 77.894204][ T7013] ? __pfx_dump_user_range+0x10/0x10 [ 77.894231][ T7013] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 77.894255][ T7013] ? __pfx_writenote+0x10/0x10 [ 77.894278][ T7013] elf_core_dump+0x29c3/0x3c10 [ 77.894308][ T7013] ? __pfx_elf_core_dump+0x10/0x10 [ 77.894322][ T7013] ? kasan_save_stack+0x33/0x60 [ 77.894340][ T7013] ? kasan_save_track+0x14/0x30 [ 77.894356][ T7013] ? __kasan_kmalloc+0xaa/0xb0 [ 77.894372][ T7013] ? __kvmalloc_node_noprof+0x3ac/0xa40 [ 77.894389][ T7013] ? vfs_coredump+0x1dd9/0x55e0 [ 77.894411][ T7013] ? arch_do_signal_or_restart+0x8f/0x7e0 [ 77.894433][ T7013] ? irqentry_exit+0x38a/0x8c0 [ 77.894453][ T7013] ? asm_exc_page_fault+0x26/0x30 [ 77.894475][ T7013] ? 0xffffffffff600000 [ 77.894534][ T7013] ? vfs_coredump+0x2b85/0x55e0 [ 77.894557][ T7013] vfs_coredump+0x2b85/0x55e0 [ 77.894592][ T7013] ? __pfx_vfs_coredump+0x10/0x10 [ 77.894615][ T7013] ? __lock_acquire+0x436/0x2890 [ 77.894640][ T7013] ? __lock_acquire+0x436/0x2890 [ 77.894661][ T7013] ? lock_acquire+0x179/0x330 [ 77.894687][ T7013] ? lock_acquire+0x179/0x330 [ 77.894723][ T7013] ? arch_stack_walk+0xa6/0x100 [ 77.894755][ T7013] ? stack_trace_save+0x8e/0xc0 [ 77.894773][ T7013] ? __pfx_stack_trace_save+0x10/0x10 [ 77.894792][ T7013] ? stack_depot_save_flags+0x29/0x9b0 [ 77.894817][ T7013] ? __lock_acquire+0x436/0x2890 [ 77.894839][ T7013] ? kasan_save_stack+0x42/0x60 [ 77.894913][ T7013] ? proc_coredump_connector+0x2d1/0x4f0 [ 77.894936][ T7013] ? __pfx_proc_coredump_connector+0x10/0x10 [ 77.894963][ T7013] ? rcu_is_watching+0x12/0xc0 [ 77.894982][ T7013] get_signal+0x22e1/0x26d0 [ 77.895014][ T7013] ? __pfx_get_signal+0x10/0x10 [ 77.895064][ T7013] arch_do_signal_or_restart+0x8f/0x7e0 [ 77.895088][ T7013] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 77.895124][ T7013] ? do_user_addr_fault+0x926/0x1370 [ 77.895148][ T7013] irqentry_exit+0x38a/0x8c0 [ 77.895172][ T7013] asm_exc_page_fault+0x26/0x30 [ 77.895186][ T7013] RIP: 0033:0x7f6df738f7c9 [ 77.895204][ T7013] Code: Unable to access opcode bytes at 0x7f6df738f79f. [ 77.895212][ T7013] RSP: 002b:00007f6df82b0fe8 EFLAGS: 00010206 [ 77.895226][ T7013] RAX: 0000000000000000 RBX: 00007f6df75e6090 RCX: 00007f6df738f7c9 [ 77.895236][ T7013] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000a0400 [ 77.895246][ T7013] RBP: 00007f6df7413f91 R08: 0000000000000000 R09: 0000000000000000 [ 77.895256][ T7013] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 77.895266][ T7013] R13: 00007f6df75e6128 R14: 00007f6df75e6090 R15: 00007fffaeea1f98 [ 77.895290][ T7013] [ 77.896063][ T7013] memory: usage 307200kB, limit 307200kB, failcnt 41535 [ 77.896079][ T7013] memory+swap: usage 432152kB, limit 9007199254740988kB, failcnt 0 [ 77.896091][ T7013] kmem: usage 4328kB, limit 9007199254740988kB, failcnt 0 [ 77.896112][ T7013] Memory cgroup stats for /syz0: [ 77.896258][ T7013] cache 310042624 [ 77.896266][ T7013] rss 53248 [ 77.896274][ T7013] rss_huge 0 [ 77.896281][ T7013] shmem 310005760 [ 77.896288][ T7013] mapped_file 0 [ 77.896295][ T7013] dirty 0 [ 77.896302][ T7013] writeback 0 [ 77.896309][ T7013] workingset_refault_anon 131 [ 77.896317][ T7013] workingset_refault_file 12614 [ 77.896325][ T7013] swap 127950848 [ 77.896332][ T7013] swapcached 45056 [ 77.896339][ T7013] pgpgin 163478 [ 77.896346][ T7013] pgpgout 88271 [ 77.896352][ T7013] pgfault 24778 [ 77.896360][ T7013] pgmajfault 683 [ 77.896367][ T7013] inactive_anon 151900160 [ 77.896375][ T7013] active_anon 158203904 [ 77.896382][ T7013] inactive_file 28672 [ 77.896390][ T7013] active_file 0 [ 77.896397][ T7013] unevictable 0 [ 77.896404][ T7013] hierarchical_memory_limit 314572800 [ 77.896412][ T7013] hierarchical_memsw_limit 9223372036854771712 [ 77.896421][ T7013] total_cache 310042624 [ 77.896428][ T7013] total_rss 53248 [ 77.896435][ T7013] total_rss_huge 0 [ 77.896443][ T7013] total_shmem 310005760 [ 77.896450][ T7013] total_mapped_file 0 [ 77.896458][ T7013] total_dirty 0 [ 77.896464][ T7013] total_writeback 0 [ 77.896471][ T7013] total_workingset_refault_anon 131 [ 77.896480][ T7013] total_workingset_refault_file 12614 [ 77.896488][ T7013] total_swap 127950848 [ 77.896495][ T7013] total_swapcached 45056 [ 77.896503][ T7013] total_pgpgin 163478 [ 77.896511][ T7013] total_pgpgout 88271 [ 77.896518][ T7013] total_pgfault 24778 [ 77.896526][ T7013] total_pgmajfault 683 [ 77.896533][ T7013] total_inactive_anon 151900160 [ 77.896541][ T7013] total_active_anon 158203904 [ 77.896549][ T7013] total_inactive_file 28672 [ 77.896557][ T7013] total_active_file 0 [ 77.896564][ T7013] total_unevictable 0 [ 77.896572][ T7013] anon_cost 0 [ 77.896579][ T7013] file_cost 0 [ 77.896586][ T7013] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.291,pid=7005,uid=0 [ 77.896722][ T7013] Memory cgroup out of memory: Killed process 7005 (syz.0.291) total-vm:49268kB, anon-rss:0kB, file-rss:3064kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 77.898705][ T7030] syz.0.291 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 77.898723][ T7030] CPU: 2 UID: 0 PID: 7030 Comm: syz.0.291 Tainted: G L syzkaller #0 PREEMPT(full) [ 77.898737][ T7030] Tainted: [L]=SOFTLOCKUP [ 77.898741][ T7030] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.898746][ T7030] Call Trace: [ 77.898750][ T7030] [ 77.898754][ T7030] dump_stack_lvl+0x16c/0x1f0 [ 77.898771][ T7030] dump_header+0x101/0x960 [ 77.898789][ T7030] oom_kill_process+0x176/0x910 [ 77.898807][ T7030] out_of_memory+0x350/0x1700 [ 77.898824][ T7030] ? __lock_acquire+0x436/0x2890 [ 77.898838][ T7030] ? __pfx_out_of_memory+0x10/0x10 [ 77.898859][ T7030] mem_cgroup_out_of_memory+0x118/0x130 [ 77.898870][ T7030] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 77.898883][ T7030] ? do_raw_spin_unlock+0x172/0x230 [ 77.898900][ T7030] try_charge_memcg+0x695/0xd30 [ 77.898917][ T7030] ? __pfx_try_charge_memcg+0x10/0x10 [ 77.898931][ T7030] ? __print_lock_name+0xd0/0xe0 [ 77.898947][ T7030] ? rcu_read_unlock+0x17/0x60 [ 77.898966][ T7030] charge_memcg+0x8a/0x230 [ 77.898980][ T7030] __mem_cgroup_charge+0x2b/0x1e0 [ 77.898996][ T7030] filemap_add_folio+0xe6/0x610 [ 77.899007][ T7030] ? __pfx_filemap_add_folio+0x10/0x10 [ 77.899021][ T7030] __filemap_get_folio_mpol+0x511/0xc60 [ 77.899035][ T7030] filemap_fault+0x684/0x29d0 [ 77.899074][ T7030] ? __pfx_filemap_fault+0x10/0x10 [ 77.899096][ T7030] ? __pfx_filemap_map_pages+0x10/0x10 [ 77.899105][ T7030] __do_fault+0x10d/0x490 [ 77.899117][ T7030] ? __pfx_filemap_map_pages+0x10/0x10 [ 77.899125][ T7030] do_fault+0xae4/0x1ad0 [ 77.899138][ T7030] ? __pfx_filemap_map_pages+0x10/0x10 [ 77.899150][ T7030] __handle_mm_fault+0x1919/0x2bb0 [ 77.899169][ T7030] ? __pfx___handle_mm_fault+0x10/0x10 [ 77.899186][ T7030] ? __pte_offset_map_lock+0x174/0x310 [ 77.899199][ T7030] ? find_held_lock+0x2b/0x80 [ 77.899219][ T7030] ? follow_page_pte+0x5cf/0x1390 [ 77.899235][ T7030] handle_mm_fault+0x3fe/0xad0 [ 77.899254][ T7030] __get_user_pages+0x54e/0x3590 [ 77.899273][ T7030] ? __pfx___get_user_pages+0x10/0x10 [ 77.899287][ T7030] ? __kernel_write_iter+0x5a5/0xb10 [ 77.899303][ T7030] get_dump_page+0x257/0x3d0 [ 77.899317][ T7030] ? __pfx_get_dump_page+0x10/0x10 [ 77.899331][ T7030] ? dump_user_range+0x756/0xb70 [ 77.899350][ T7030] dump_user_range+0x195/0xb70 [ 77.899369][ T7030] ? __pfx_dump_user_range+0x10/0x10 [ 77.899386][ T7030] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 77.899401][ T7030] ? __pfx_writenote+0x10/0x10 [ 77.899415][ T7030] elf_core_dump+0x29c3/0x3c10 [ 77.899432][ T7030] ? __pfx_elf_core_dump+0x10/0x10 [ 77.899441][ T7030] ? kasan_save_stack+0x33/0x60 [ 77.899452][ T7030] ? kasan_save_track+0x14/0x30 [ 77.899463][ T7030] ? __kasan_kmalloc+0xaa/0xb0 [ 77.899473][ T7030] ? __kvmalloc_node_noprof+0x3ac/0xa40 [ 77.899485][ T7030] ? vfs_coredump+0x1dd9/0x55e0 [ 77.899499][ T7030] ? arch_do_signal_or_restart+0x8f/0x7e0 [ 77.899514][ T7030] ? irqentry_exit+0x38a/0x8c0 [ 77.899526][ T7030] ? asm_exc_page_fault+0x26/0x30 [ 77.899539][ T7030] ? 0xffffffffff600000 [ 77.899570][ T7030] ? vfs_coredump+0x2b85/0x55e0 [ 77.899585][ T7030] vfs_coredump+0x2b85/0x55e0 [ 77.899606][ T7030] ? __pfx_vfs_coredump+0x10/0x10 [ 77.899621][ T7030] ? __lock_acquire+0x436/0x2890 [ 77.899636][ T7030] ? __lock_acquire+0x436/0x2890 [ 77.899649][ T7030] ? lock_acquire+0x179/0x330 [ 77.899663][ T7030] ? lock_acquire+0x179/0x330 [ 77.899684][ T7030] ? arch_stack_walk+0xa6/0x100 [ 77.899703][ T7030] ? stack_trace_save+0x8e/0xc0 [ 77.899714][ T7030] ? __pfx_stack_trace_save+0x10/0x10 [ 77.899725][ T7030] ? stack_depot_save_flags+0x29/0x9b0 [ 77.899741][ T7030] ? __lock_acquire+0x436/0x2890 [ 77.899754][ T7030] ? kasan_save_stack+0x42/0x60 [ 77.899789][ T7030] ? proc_coredump_connector+0x2d1/0x4f0 [ 77.899802][ T7030] ? __pfx_proc_coredump_connector+0x10/0x10 [ 77.899818][ T7030] ? rcu_is_watching+0x12/0xc0 [ 77.899830][ T7030] get_signal+0x22e1/0x26d0 [ 77.899851][ T7030] ? __pfx_get_signal+0x10/0x10 [ 77.899870][ T7030] arch_do_signal_or_restart+0x8f/0x7e0 [ 77.899886][ T7030] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 77.899912][ T7030] ? do_user_addr_fault+0x926/0x1370 [ 77.899935][ T7030] irqentry_exit+0x38a/0x8c0 [ 77.899958][ T7030] asm_exc_page_fault+0x26/0x30 [ 77.899972][ T7030] RIP: 0033:0x7f6df738f7c9 [ 77.899989][ T7030] Code: Unable to access opcode bytes at 0x7f6df738f79f. [ 77.900021][ T7030] RSP: 002b:00007f6df82b0fe8 EFLAGS: 00010206 [ 77.900032][ T7030] RAX: 0000000000000000 RBX: 00007f6df75e6090 RCX: 00007f6df738f7c9 [ 77.900042][ T7030] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000a0400 [ 77.900047][ T7030] RBP: 00007f6df7413f91 R08: 0000000000000000 R09: 0000000000000000 [ 77.900054][ T7030] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 77.900059][ T7030] R13: 00007f6df75e6128 R14: 00007f6df75e6090 R15: 00007fffaeea1f98 [ 77.900073][ T7030] [ 77.900077][ T7030] memory: usage 307200kB, limit 307200kB, failcnt 41557 [ 77.900089][ T7030] memory+swap: usage 432152kB, limit 9007199254740988kB, failcnt 0 [ 77.900098][ T7030] kmem: usage 4320kB, limit 9007199254740988kB, failcnt 0 [ 77.900104][ T7030] Memory cgroup stats for /syz0: [ 77.900163][ T7030] cache 310042624 [ 77.900168][ T7030] rss 53248 [ 77.900172][ T7030] rss_huge 0 [ 77.900176][ T7030] shmem 310013952 [ 77.900180][ T7030] mapped_file 4096 [ 77.900183][ T7030] dirty 0 [ 77.900187][ T7030] writeback 0 [ 77.900191][ T7030] workingset_refault_anon 131 [ 77.900195][ T7030] workingset_refault_file 12614 [ 77.900200][ T7030] swap 127950848 [ 77.900204][ T7030] swapcached 45056 [ 77.900210][ T7030] pgpgin 163481 [ 77.900214][ T7030] pgpgout 88274 [ 77.900232][ T7030] pgfault 24779 [ 77.900238][ T7030] pgmajfault 685 [ 77.900242][ T7030] inactive_anon 51978240 [ 77.900249][ T7030] active_anon 258134016 [ 77.900253][ T7030] inactive_file 16384 [ 77.900257][ T7030] active_file 0 [ 77.900261][ T7030] unevictable 0 [ 77.900265][ T7030] hierarchical_memory_limit 314572800 [ 77.900270][ T7030] hierarchical_memsw_limit 9223372036854771712 [ 77.900274][ T7030] total_cache 310042624 [ 77.900279][ T7030] total_rss 53248 [ 77.900282][ T7030] total_rss_huge 0 [ 77.900286][ T7030] total_shmem 310013952 [ 77.900290][ T7030] total_mapped_file 4096 [ 77.900295][ T7030] total_dirty 0 [ 77.900302][ T7030] total_writeback 0 [ 77.900307][ T7030] total_workingset_refault_anon 131 [ 77.900314][ T7030] total_workingset_refault_file 12614 [ 77.900320][ T7030] total_swap 127950848 [ 77.900326][ T7030] total_swapcached 45056 [ 77.900332][ T7030] total_pgpgin 163481 [ 77.900338][ T7030] total_pgpgout 88274 [ 77.900345][ T7030] total_pgfault 24779 [ 77.900426][ T7030] total_pgmajfault 685 [ 77.900432][ T7030] total_inactive_anon 51978240 [ 77.900439][ T7030] total_active_anon 258134016 [ 77.900446][ T7030] total_inactive_file 16384 [ 77.900450][ T7030] total_active_file 0 [ 77.900454][ T7030] total_unevictable 0 [ 77.900461][ T7030] anon_cost 0 [ 77.900469][ T7030] file_cost 0 [ 77.900474][ T7030] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.291,pid=7014,uid=0 [ 77.900569][ T7030] Memory cgroup out of memory: Killed process 7014 (syz.0.291) total-vm:49268kB, anon-rss:0kB, file-rss:2920kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 77.915657][ T7007] syz.0.291 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 77.915737][ T7007] CPU: 1 UID: 0 PID: 7007 Comm: syz.0.291 Tainted: G L syzkaller #0 PREEMPT(full) [ 77.915752][ T7007] Tainted: [L]=SOFTLOCKUP [ 77.915755][ T7007] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.915762][ T7007] Call Trace: [ 77.915766][ T7007] [ 77.915770][ T7007] dump_stack_lvl+0x16c/0x1f0 [ 77.915786][ T7007] dump_header+0x101/0x960 [ 77.915805][ T7007] oom_kill_process+0x176/0x910 [ 77.915823][ T7007] out_of_memory+0x350/0x1700 [ 77.915839][ T7007] ? __lock_acquire+0x436/0x2890 [ 77.915854][ T7007] ? __pfx_out_of_memory+0x10/0x10 [ 77.915874][ T7007] mem_cgroup_out_of_memory+0x118/0x130 [ 77.915885][ T7007] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 77.915898][ T7007] ? do_raw_spin_unlock+0x172/0x230 [ 77.915915][ T7007] try_charge_memcg+0x695/0xd30 [ 77.915932][ T7007] ? __pfx_try_charge_memcg+0x10/0x10 [ 77.915946][ T7007] ? __print_lock_name+0xd0/0xe0 [ 77.915962][ T7007] ? rcu_read_unlock+0x17/0x60 [ 77.915981][ T7007] charge_memcg+0x8a/0x230 [ 77.915995][ T7007] __mem_cgroup_charge+0x2b/0x1e0 [ 77.916011][ T7007] shmem_alloc_and_add_folio+0x50c/0xc20 [ 77.916031][ T7007] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 77.916049][ T7007] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 77.916069][ T7007] shmem_get_folio_gfp+0x67f/0x1610 [ 77.916089][ T7007] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 77.916113][ T7007] ? __pfx_timestamp_truncate+0x10/0x10 [ 77.916131][ T7007] shmem_write_begin+0x1a4/0x3b0 [ 77.916142][ T7007] ? __pfx_shmem_write_begin+0x10/0x10 [ 77.916152][ T7007] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 77.916168][ T7007] generic_perform_write+0x3c4/0x900 [ 77.916188][ T7007] ? __pfx_generic_perform_write+0x10/0x10 [ 77.916203][ T7007] ? generic_update_time+0xcf/0xf0 [ 77.916212][ T7007] ? mnt_put_write_access_file+0x45/0xf0 [ 77.916227][ T7007] ? file_update_time_flags+0x35c/0x520 [ 77.916239][ T7007] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 77.916251][ T7007] shmem_file_write_iter+0x10e/0x140 [ 77.916263][ T7007] __kernel_write_iter+0x31a/0xb10 [ 77.916278][ T7007] ? __pfx___kernel_write_iter+0x10/0x10 [ 77.916291][ T7007] ? __up_read+0x2d1/0x700 [ 77.916306][ T7007] ? dump_user_range+0x756/0xb70 [ 77.916326][ T7007] dump_user_range+0x413/0xb70 [ 77.916359][ T7007] ? __pfx_dump_user_range+0x10/0x10 [ 77.916378][ T7007] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 77.916393][ T7007] ? __pfx_writenote+0x10/0x10 [ 77.916407][ T7007] elf_core_dump+0x29c3/0x3c10 [ 77.916424][ T7007] ? __pfx_elf_core_dump+0x10/0x10 [ 77.916433][ T7007] ? kasan_save_stack+0x33/0x60 [ 77.916444][ T7007] ? kasan_save_track+0x14/0x30 [ 77.916455][ T7007] ? __kasan_kmalloc+0xaa/0xb0 [ 77.916465][ T7007] ? __kvmalloc_node_noprof+0x3ac/0xa40 [ 77.916477][ T7007] ? vfs_coredump+0x1dd9/0x55e0 [ 77.916493][ T7007] ? arch_do_signal_or_restart+0x8f/0x7e0 [ 77.916512][ T7007] ? irqentry_exit+0x38a/0x8c0 [ 77.916529][ T7007] ? asm_exc_page_fault+0x26/0x30 [ 77.916552][ T7007] ? 0xffffffffff600000 [ 77.916604][ T7007] ? vfs_coredump+0x2b85/0x55e0 [ 77.916621][ T7007] vfs_coredump+0x2b85/0x55e0 [ 77.916642][ T7007] ? __pfx_vfs_coredump+0x10/0x10 [ 77.916657][ T7007] ? __lock_acquire+0x436/0x2890 [ 77.916672][ T7007] ? __lock_acquire+0x436/0x2890 [ 77.916686][ T7007] ? lock_acquire+0x179/0x330 [ 77.916701][ T7007] ? lock_acquire+0x179/0x330 [ 77.916722][ T7007] ? arch_stack_walk+0xa6/0x100 [ 77.916740][ T7007] ? stack_trace_save+0x8e/0xc0 [ 77.916752][ T7007] ? __pfx_stack_trace_save+0x10/0x10 [ 77.916763][ T7007] ? stack_depot_save_flags+0x29/0x9b0 [ 77.916780][ T7007] ? __lock_acquire+0x436/0x2890 [ 77.916793][ T7007] ? kasan_save_stack+0x42/0x60 [ 77.916828][ T7007] ? proc_coredump_connector+0x2d1/0x4f0 [ 77.916842][ T7007] ? __pfx_proc_coredump_connector+0x10/0x10 [ 77.916858][ T7007] ? rcu_is_watching+0x12/0xc0 [ 77.916870][ T7007] get_signal+0x22e1/0x26d0 [ 77.916890][ T7007] ? __pfx_get_signal+0x10/0x10 [ 77.916910][ T7007] arch_do_signal_or_restart+0x8f/0x7e0 [ 77.916925][ T7007] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 77.916944][ T7007] ? do_user_addr_fault+0x926/0x1370 [ 77.916960][ T7007] irqentry_exit+0x38a/0x8c0 [ 77.916975][ T7007] asm_exc_page_fault+0x26/0x30 [ 77.916984][ T7007] RIP: 0033:0x7f6df738f7c9 [ 77.916996][ T7007] Code: Unable to access opcode bytes at 0x7f6df738f79f. [ 77.917000][ T7007] RSP: 002b:00007f6df82b0fe8 EFLAGS: 00010206 [ 77.917008][ T7007] RAX: 0000000000000000 RBX: 00007f6df75e6090 RCX: 00007f6df738f7c9 [ 77.917015][ T7007] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000a0400 [ 77.917020][ T7007] RBP: 00007f6df7413f91 R08: 0000000000000000 R09: 0000000000000000 [ 77.917026][ T7007] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 77.917032][ T7007] R13: 00007f6df75e6128 R14: 00007f6df75e6090 R15: 00007fffaeea1f98 [ 77.917045][ T7007] [ 77.922418][ T7007] memory: usage 307200kB, limit 307200kB, failcnt 41645 [ 77.936544][ T7305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.382'. [ 78.071611][ T7007] memory+swap: usage 430176kB, limit 9007199254740988kB, failcnt 0 [ 78.295253][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 78.298772][ T7007] kmem: usage 4252kB, limit 9007199254740988kB, failcnt 0 [ 78.384112][ T7001] syz.0.291 (7001) used greatest stack depth: 18008 bytes left [ 78.384839][ T7007] Memory cgroup stats for /syz0: [ 78.726433][ T7007] cache 209285120 [ 78.726444][ T7007] rss 86016 [ 78.726451][ T7007] rss_huge 0 [ 78.726457][ T7007] shmem 201953280 [ 78.726464][ T7007] mapped_file 4694016 [ 78.726471][ T7007] dirty 0 [ 78.726477][ T7007] writeback 0 [ 78.726484][ T7007] workingset_refault_anon 169 [ 78.726491][ T7007] workingset_refault_file 15007 [ 78.726499][ T7007] swap 125550592 [ 78.726505][ T7007] swapcached 94208 [ 78.726512][ T7007] pgpgin 175688 [ 78.726519][ T7007] pgpgout 125060 [ 78.726525][ T7007] pgfault 25720 [ 78.726532][ T7007] pgmajfault 746 [ 78.726538][ T7007] inactive_anon 103485440 [ 78.726545][ T7007] active_anon 98250752 [ 78.726552][ T7007] inactive_file 4788224 [ 78.726558][ T7007] active_file 2543616 [ 78.726565][ T7007] unevictable 0 [ 78.726572][ T7007] hierarchical_memory_limit 314572800 [ 78.726579][ T7007] hierarchical_memsw_limit 9223372036854771712 [ 78.726587][ T7007] total_cache 209285120 [ 78.726594][ T7007] total_rss 86016 [ 78.726601][ T7007] total_rss_huge 0 [ 78.726607][ T7007] total_shmem 201953280 [ 78.726614][ T7007] total_mapped_file 4694016 [ 78.726622][ T7007] total_dirty 0 [ 78.726628][ T7007] total_writeback 0 [ 78.726635][ T7007] total_workingset_refault_anon 169 [ 78.726643][ T7007] total_workingset_refault_file 15007 [ 78.726651][ T7007] total_swap 125550592 [ 78.726657][ T7007] total_swapcached 94208 [ 78.726665][ T7007] total_pgpgin 175688 [ 78.726672][ T7007] total_pgpgout 125060 [ 78.726678][ T7007] total_pgfault 25720 [ 78.726685][ T7007] total_pgmajfault 746 [ 78.726692][ T7007] total_inactive_anon 103485440 [ 78.726698][ T7007] total_active_anon 98250752 [ 78.726705][ T7007] total_inactive_file 4788224 [ 78.726712][ T7007] total_active_file 2543616 [ 78.726718][ T7007] total_unevictable 0 [ 78.726725][ T7007] anon_cost 0 [ 78.726732][ T7007] file_cost 0 [ 78.726739][ T7007] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.291,pid=7000,uid=0 [ 78.726952][ T7007] Memory cgroup out of memory: Killed process 7000 (syz.0.291) total-vm:49268kB, anon-rss:0kB, file-rss:3504kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 78.799706][ T7320] netlink: 'syz.0.385': attribute type 3 has an invalid length. [ 78.867187][ T7319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.386'. [ 78.875001][ T7319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.386'. [ 78.880528][ T7324] netlink: 'syz.3.388': attribute type 10 has an invalid length. [ 78.882988][ T7324] netlink: 228 bytes leftover after parsing attributes in process `syz.3.388'. [ 78.889591][ T7328] netlink: 'syz.3.388': attribute type 10 has an invalid length. [ 78.892134][ T7328] netlink: 228 bytes leftover after parsing attributes in process `syz.3.388'. [ 78.895556][ T7326] netlink: 'syz.1.387': attribute type 5 has an invalid length. [ 78.932648][ T7331] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7331 comm=syz.1.389 [ 78.963137][ T7331] netlink: 'syz.1.389': attribute type 1 has an invalid length. [ 78.980007][ T7331] bond1: (slave bridge1): making interface the new active one [ 78.982550][ T7331] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 79.011496][ T7336] netlink: 16 bytes leftover after parsing attributes in process `syz.1.391'. [ 79.017247][ T7334] team0 (unregistering): Port device team_slave_0 removed [ 79.025465][ T7334] team0 (unregistering): Port device team_slave_1 removed [ 79.032603][ T7334] team0 (unregistering): Port device bridge1 removed [ 79.101476][ T7343] netlink: 'syz.3.394': attribute type 8 has an invalid length. [ 79.104527][ T7344] netlink: 'syz.3.394': attribute type 8 has an invalid length. [ 79.107697][ T7344] faux_driver vkms: [drm] Unknown color mode 256; guessing buffer size. [ 79.329875][ T7361] fuse: Unknown parameter '000000000000000000000040x0000000000000005' [ 79.386955][ T7362] netlink: 'syz.0.400': attribute type 5 has an invalid length. [ 79.389823][ T7362] netlink: 'syz.0.400': attribute type 2 has an invalid length. [ 79.405214][ T60] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 79.516914][ T5930] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 79.521363][ T7364] nfs4: Bad value for 'source' [ 79.559916][ T60] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 79.562937][ T60] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.566712][ T60] usb 6-1: Product: syz [ 79.568217][ T60] usb 6-1: Manufacturer: syz [ 79.569874][ T60] usb 6-1: SerialNumber: syz [ 79.573210][ T60] usb 6-1: config 0 descriptor?? [ 79.782962][ T60] usb 6-1: USB disconnect, device number 5 [ 80.059821][ T7392] vlan4: entered promiscuous mode [ 80.062032][ T7392] bridge0: entered promiscuous mode [ 80.682684][ T7431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.686664][ T7431] batadv_slave_1: entered allmulticast mode [ 80.697268][ T7431] Bluetooth: MGMT ver 1.23 [ 80.706849][ T7430] 9pnet_fd: Insufficient options for proto=fd [ 80.955834][ T7438] Process accounting resumed [ 81.003421][ T7442] bond3 (unregistering): Released all slaves [ 81.462479][ T7485] SELinux: policydb version 1402900228 does not match my version range 15-35 [ 81.475562][ T7485] SELinux: failed to load policy [ 81.747280][ T59] hid_parser_main: 120 callbacks suppressed [ 81.747292][ T59] hid-generic 0005:00B6:0009.0003: unknown main item tag 0x0 [ 81.751594][ T59] hid-generic 0005:00B6:0009.0003: unknown main item tag 0x0 [ 81.753901][ T59] hid-generic 0005:00B6:0009.0003: unknown main item tag 0x0 [ 81.757162][ T59] hid-generic 0005:00B6:0009.0003: unknown main item tag 0x0 [ 81.761610][ T59] hid-generic 0005:00B6:0009.0003: unknown main item tag 0x0 [ 81.764940][ T59] hid-generic 0005:00B6:0009.0003: unknown main item tag 0x0 [ 81.767726][ T59] hid-generic 0005:00B6:0009.0003: unknown main item tag 0x0 [ 81.770154][ T59] hid-generic 0005:00B6:0009.0003: unknown main item tag 0x0 [ 81.772594][ T59] hid-generic 0005:00B6:0009.0003: unknown main item tag 0x0 [ 81.774938][ T59] hid-generic 0005:00B6:0009.0003: unknown main item tag 0x0 [ 81.795905][ T59] hid-generic 0005:00B6:0009.0003: hidraw1: BLUETOOTH HID v1ade12.f3 Device [syz0] on syz1 [ 82.025206][ T853] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 82.155419][ T12] net_ratelimit: 34 callbacks suppressed [ 82.155431][ T12] bond2: (slave lo): failed to get link speed/duplex [ 82.275211][ T12] bond2: (slave lo): failed to get link speed/duplex [ 82.395225][ T1154] bond2: (slave lo): failed to get link speed/duplex [ 82.505314][ T61] bond2: (slave lo): failed to get link speed/duplex [ 82.626485][ T12] bond2: (slave lo): failed to get link speed/duplex [ 82.724255][ T40] kauditd_printk_skb: 97 callbacks suppressed [ 82.724267][ T40] audit: type=1400 audit(1765966075.453:715): avc: denied { bind } for pid=7549 comm="syz.0.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 82.732144][ T40] audit: type=1400 audit(1765966075.453:716): avc: denied { listen } for pid=7549 comm="syz.0.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 82.745399][ T12] bond2: (slave lo): failed to get link speed/duplex [ 82.824853][ T7556] lo speed is unknown, defaulting to 1000 [ 82.830499][ T7556] lo speed is unknown, defaulting to 1000 [ 82.834362][ T7556] lo speed is unknown, defaulting to 1000 [ 82.856229][ T730] bond2: (slave lo): failed to get link speed/duplex [ 82.873762][ T7557] : renamed from lo (while UP) [ 82.913563][ T7556] infiniband sz1: set active [ 82.916364][ T59] speed is unknown, defaulting to 1000 [ 82.918597][ T7556] infiniband sz1: added [ 82.922163][ T7556] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 82.923654][ T7556] infiniband sz1: Couldn't open port 1 [ 82.940165][ T7556] RDS/IB: sz1: added [ 82.941643][ T7556] smc: adding ib device sz1 with port count 1 [ 82.943739][ T7556] smc: ib device sz1 port 1 has no pnetid [ 82.946677][ T59] speed is unknown, defaulting to 1000 [ 82.950084][ T7556] speed is unknown, defaulting to 1000 [ 82.965503][ T12] bond2: (slave lo): failed to get link speed/duplex [ 83.029136][ T40] audit: type=1400 audit(1765966075.763:717): avc: denied { lock } for pid=7562 comm="syz.1.467" path="socket:[19571]" dev="sockfs" ino=19571 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 83.042380][ T7556] speed is unknown, defaulting to 1000 [ 83.059624][ T40] audit: type=1400 audit(1765966075.793:718): avc: denied { write } for pid=7566 comm="syz.1.468" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 83.059906][ T7567] random: crng reseeded on system resumption [ 83.066739][ T40] audit: type=1400 audit(1765966075.793:719): avc: denied { open } for pid=7566 comm="syz.1.468" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 83.076562][ T100] bond2: (slave lo): failed to get link speed/duplex [ 83.082590][ T40] audit: type=1400 audit(1765966075.813:720): avc: denied { ioctl } for pid=7566 comm="syz.1.468" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x330d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 83.090318][ T40] audit: type=1400 audit(1765966075.813:721): avc: denied { name_bind } for pid=7566 comm="syz.1.468" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 83.126203][ T7556] speed is unknown, defaulting to 1000 [ 83.185657][ T61] bond2: (slave lo): failed to get link speed/duplex [ 83.209993][ T7556] speed is unknown, defaulting to 1000 [ 83.260369][ T7572] misc userio: The device must be registered before sending interrupts [ 83.290725][ T7556] speed is unknown, defaulting to 1000 [ 83.500124][ T40] audit: type=1400 audit(1765966076.233:722): avc: denied { read } for pid=7579 comm="syz.3.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 83.523270][ T40] audit: type=1400 audit(1765966076.253:723): avc: denied { append } for pid=7584 comm="syz.1.473" name="comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 83.550442][ T40] audit: type=1400 audit(1765966076.283:724): avc: denied { setopt } for pid=7579 comm="syz.3.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 83.560187][ T7580] __nla_validate_parse: 20 callbacks suppressed [ 83.560197][ T7580] netlink: 52 bytes leftover after parsing attributes in process `syz.3.472'. [ 83.604500][ T7591] validate_nla: 4 callbacks suppressed [ 83.604509][ T7591] netlink: 'syz.1.473': attribute type 142 has an invalid length. [ 83.645537][ T7595] raw_sendmsg: syz.3.476 forgot to set AF_INET. Fix it! [ 83.751438][ T7602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.479'. [ 83.907542][ T7625] netlink: 28 bytes leftover after parsing attributes in process `syz.1.485'. [ 83.913819][ T7627] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7627 comm=syz.0.486 [ 84.606565][ T853] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 84.609779][ T853] usb 7-1: can't read configurations, error -71 [ 84.663115][ T7644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.490'. [ 84.878931][ T7646] geneve2: entered allmulticast mode [ 84.917088][ T7657] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2627983726/2627983728 [ 84.921198][ T7657] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2627983726/2627983728 [ 85.020315][ T7674] netlink: 36 bytes leftover after parsing attributes in process `syz.2.500'. [ 85.025007][ T7674] netlink: 12 bytes leftover after parsing attributes in process `syz.2.500'. [ 85.033580][ T7674] netlink: 'syz.2.500': attribute type 10 has an invalid length. [ 85.060394][ T7674] team0: Port device dummy0 added [ 85.153224][ T7677] netlink: 16 bytes leftover after parsing attributes in process `syz.0.503'. [ 85.390877][ T7709] kvm: pic: non byte write [ 85.394905][ T7709] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns [ 85.402406][ T7709] kvm: pic: non byte write [ 85.547853][ T7723] FAT-fs (nullb0): bogus number of reserved sectors [ 85.550521][ T7723] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 85.995184][ T59] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 86.015057][ T7748] team0: Port device dummy0 removed [ 86.019999][ T7748] bridge_slave_0: left allmulticast mode [ 86.022162][ T7748] bridge_slave_0: left promiscuous mode [ 86.025738][ T7748] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.034312][ T7748] bridge_slave_1: left allmulticast mode [ 86.039268][ T7748] bridge_slave_1: left promiscuous mode [ 86.041529][ T7748] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.048494][ T7748] bond0: (slave bond_slave_0): Releasing backup interface [ 86.051674][ T7748] bond_slave_0: left promiscuous mode [ 86.059349][ T7748] bond0: (slave bond_slave_1): Releasing backup interface [ 86.062263][ T7748] bond_slave_1: left promiscuous mode [ 86.069952][ T7748] team0: Port device team_slave_0 removed [ 86.076433][ T7748] team0: Port device team_slave_1 removed [ 86.079148][ T7748] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.081828][ T7748] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.086843][ T7748] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.089530][ T7748] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.122739][ T7749] team0: Mode "loadblance" not found [ 86.129132][ T7748] netlink: 'syz.2.524': attribute type 10 has an invalid length. [ 86.134230][ T7748] team0: Port device dummy0 added [ 86.155159][ T59] usb 5-1: Using ep0 maxpacket: 32 [ 86.158654][ T59] usb 5-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 86.163066][ T59] usb 5-1: config 1 interface 0 has no altsetting 0 [ 86.176727][ T59] usb 5-1: New USB device found, idVendor=05ac, idProduct=021f, bcdDevice= 0.40 [ 86.179699][ T59] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.182317][ T59] usb 5-1: Product: ⣏ [ 86.183718][ T59] usb 5-1: Manufacturer: ဎ [ 86.185332][ T59] usb 5-1: SerialNumber: э [ 86.417594][ T59] usbhid 5-1:1.0: can't add hid device: -71 [ 86.419767][ T59] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 86.423506][ T59] usb 5-1: USB disconnect, device number 6 [ 86.455287][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 86.457867][ T53] cfg80211: failed to load regulatory.db [ 86.479104][ T7777] netlink: 20 bytes leftover after parsing attributes in process `syz.0.535'. [ 86.497567][ T7777] netlink: 16 bytes leftover after parsing attributes in process `syz.0.535'. [ 86.503367][ T7778] netlink: 'syz.1.532': attribute type 2 has an invalid length. [ 86.506284][ T7778] netlink: 68 bytes leftover after parsing attributes in process `syz.1.532'. [ 86.877720][ T7794] syz.0.540 (7794): drop_caches: 2 [ 86.884501][ T7808] netlink: 'syz.3.544': attribute type 28 has an invalid length. [ 86.892264][ T7808] netlink: 'syz.3.544': attribute type 3 has an invalid length. [ 86.963084][ T7823] bond2: (slave lo): Removing an active aggregator [ 86.968458][ T7823] bond2: (slave lo): Releasing backup interface [ 86.971824][ T7823] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 86.975053][ T7823] lo: left promiscuous mode [ 86.986305][ T7823] bridge_slave_0: left allmulticast mode [ 86.988692][ T7823] bridge_slave_0: left promiscuous mode [ 86.991178][ T7823] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.000181][ T7823] bridge_slave_1: left allmulticast mode [ 87.002557][ T7823] bridge_slave_1: left promiscuous mode [ 87.005047][ T7823] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.019118][ T7823] bond0: (slave bond_slave_0): Releasing backup interface [ 87.026316][ T7823] bond0: (slave bond_slave_1): Releasing backup interface [ 87.032451][ T7823] team0: Port device team_slave_0 removed [ 87.037039][ T7823] team0: Port device team_slave_1 removed [ 87.039344][ T7823] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.041754][ T7823] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.045262][ T7823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.047681][ T7823] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.059592][ T7828] syz_tun: entered allmulticast mode [ 87.085029][ T7831] team0: Mode "loadblance" not found [ 87.091107][ T7828] syz_tun: left allmulticast mode [ 87.095329][ T7823] netlink: 'syz.0.549': attribute type 10 has an invalid length. [ 87.103157][ T7823] team0: Port device dummy0 added [ 87.175373][ T7843] net_ratelimit: 28 callbacks suppressed [ 87.175384][ T7843] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 87.184601][ T7843] program syz.2.554 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.244757][ T7848] netlink: 'syz.3.557': attribute type 10 has an invalid length. [ 87.291658][ T7852] trusted_key: encrypted_key: insufficient parameters specified [ 87.357893][ T7858] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 87.360827][ T7858] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 87.367558][ T7858] vhci_hcd vhci_hcd.0: Device attached [ 87.552819][ T7871] bond0: (slave syz_tun): Releasing backup interface [ 87.556961][ T7871] batman_adv: batadv0: Removing interface: dummy0 [ 87.560878][ T7871] bridge_slave_0: left allmulticast mode [ 87.563256][ T7871] bridge_slave_0: left promiscuous mode [ 87.567004][ T7871] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.572077][ T7871] bridge_slave_1: left allmulticast mode [ 87.574531][ T7871] bridge_slave_1: left promiscuous mode [ 87.578937][ T7871] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.586163][ T7871] bond0: (slave bond_slave_0): Releasing backup interface [ 87.590905][ T7871] bond0: (slave bond_slave_1): Releasing backup interface [ 87.597149][ T7871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.599582][ T7871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.603105][ T7871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.605673][ T7871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.608974][ T7871] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 87.616833][ T59] speed is unknown, defaulting to 1000 [ 87.635267][ T10] usb 38-1: SetAddress Request (2) to port 0 [ 87.637472][ T10] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 87.871421][ T40] kauditd_printk_skb: 46 callbacks suppressed [ 87.871431][ T40] audit: type=1400 audit(1765966080.603:771): avc: denied { checkpoint_restore } for pid=7889 comm="syz.1.568" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 87.899727][ T40] audit: type=1400 audit(1765966080.633:772): avc: denied { map } for pid=7894 comm="syz.1.569" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 87.907433][ T40] audit: type=1400 audit(1765966080.633:773): avc: denied { execute } for pid=7894 comm="syz.1.569" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 87.917804][ T40] audit: type=1400 audit(1765966080.653:774): avc: denied { create } for pid=7897 comm="syz.3.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 87.925468][ T40] audit: type=1400 audit(1765966080.663:775): avc: denied { ioctl } for pid=7897 comm="syz.3.570" path="socket:[18311]" dev="sockfs" ino=18311 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 87.936875][ T7898] netlink: 'syz.3.570': attribute type 1 has an invalid length. [ 87.939842][ T7895] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.939888][ T7895] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.967908][ T40] audit: type=1400 audit(1765966080.703:776): avc: denied { relabelfrom } for pid=7897 comm="syz.3.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 87.974283][ T40] audit: type=1400 audit(1765966080.703:777): avc: denied { relabelto } for pid=7897 comm="syz.3.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 88.100226][ T7895] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.103467][ T7895] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.105156][ T40] audit: type=1400 audit(1765966080.843:778): avc: denied { sqpoll } for pid=7899 comm="syz.2.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 88.113551][ T40] audit: type=1400 audit(1765966080.843:779): avc: denied { write } for pid=7899 comm="syz.2.571" path="socket:[17254]" dev="sockfs" ino=17254 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 88.190862][ T7859] vhci_hcd: connection reset by peer [ 88.196998][ T100] vhci_hcd vhci_hcd.0: stop threads [ 88.199212][ T100] vhci_hcd vhci_hcd.0: release socket [ 88.201497][ T100] vhci_hcd vhci_hcd.0: disconnect device [ 88.794113][ T40] audit: type=1400 audit(1765966081.523:780): avc: denied { getattr } for pid=7915 comm="syz.0.576" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 88.818184][ T7921] ieee802154 phy0 wpan0: encryption failed: -22 [ 88.820256][ T7921] ieee802154 phy0 wpan0: encryption failed: -22 [ 89.051700][ T7895] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.054965][ T7895] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.082801][ T7906] speed is unknown, defaulting to 1000 [ 89.157038][ T7895] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.160244][ T7895] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.249018][ T61] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.251926][ T61] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.271898][ T61] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.275035][ T61] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.280596][ T61] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.283860][ T61] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.301582][ T100] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.306738][ T100] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.860634][ T7934] __nla_validate_parse: 9 callbacks suppressed [ 91.860645][ T7934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.581'. [ 91.866053][ T7934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.581'. [ 91.868796][ T7934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.581'. [ 91.871570][ T7934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.581'. [ 91.877297][ T7934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.581'. [ 91.881869][ T7929] cgroup: Unknown subsys name 'smackfsdef' [ 91.912646][ T7945] netlink: 72 bytes leftover after parsing attributes in process `syz.2.585'. [ 91.916241][ T7945] netlink: 96 bytes leftover after parsing attributes in process `syz.2.585'. [ 91.939956][ T7945] netlink: 172 bytes leftover after parsing attributes in process `syz.2.585'. [ 91.968480][ T7952] netlink: 172 bytes leftover after parsing attributes in process `syz.1.587'. [ 91.990295][ T7956] binder: 7955:7956 ioctl c0306201 200000000180 returned -14 [ 91.993419][ T7956] binder: 7955:7956 ioctl 894b 200000000200 returned -22 [ 92.084854][ T7966] IPVS: length: 59 != 8 [ 92.120920][ T7970] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.594'. [ 92.134463][ T7970] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 92.168041][ T7979] netlink: 'syz.3.597': attribute type 21 has an invalid length. [ 92.258017][ T7985] Cannot find add_set index 65532 as target [ 92.344064][ T7999] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 92.346080][ T7999] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 92.348067][ T7999] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 92.481218][ T8018] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3494536612 (27956292896 ns) > initial count (3818115376 ns). Using initial count to start timer. [ 92.487270][ T8020] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3494536612 (27956292896 ns) > initial count (3818115376 ns). Using initial count to start timer. [ 92.613450][ T8028] exFAT-fs (nbd3): unable to read boot sector [ 92.616403][ T8028] exFAT-fs (nbd3): failed to read boot sector [ 92.618591][ T8028] exFAT-fs (nbd3): failed to recognize exfat type [ 92.695315][ T10] usb 38-1: device descriptor read/8, error -110 [ 92.729296][ T8030] overlay: ./file0 is not a directory [ 92.737396][ T59] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 92.807712][ T8044] hsr_slave_0: left promiscuous mode [ 92.811299][ T8044] hsr_slave_1: left promiscuous mode [ 92.847274][ T8049] team0: No ports can be present during mode change [ 92.886208][ T59] usb 6-1: Using ep0 maxpacket: 16 [ 92.892221][ T59] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 92.901134][ T8053] netlink: 'syz.2.622': attribute type 32 has an invalid length. [ 92.902017][ T59] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 92.907561][ T59] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.910774][ T59] usb 6-1: Product: syz [ 92.912524][ T59] usb 6-1: Manufacturer: syz [ 92.914473][ T59] usb 6-1: SerialNumber: syz [ 92.933857][ T59] usb 6-1: config 0 descriptor?? [ 92.940736][ T59] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 92.944592][ T59] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 92.976797][ T6018] IPVS: starting estimator thread 0... [ 93.049266][ T8054] netlink: 'syz.2.622': attribute type 32 has an invalid length. [ 93.066365][ T8069] IPVS: using max 46 ests per chain, 110400 per kthread [ 93.096004][ T10] usb usb38-port1: attempt power cycle [ 93.136377][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 93.136391][ T40] audit: type=1400 audit(1765966085.873:794): avc: denied { create } for pid=8085 comm="syz.3.628" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 93.151629][ T40] audit: type=1400 audit(1765966085.883:795): avc: denied { create } for pid=8085 comm="syz.3.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 93.157946][ T40] audit: type=1400 audit(1765966085.883:796): avc: denied { getopt } for pid=8085 comm="syz.3.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 93.207349][ T59] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 93.230612][ T40] audit: type=1400 audit(1765966085.963:797): avc: denied { setopt } for pid=8089 comm="syz.0.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 93.253799][ T8095] team0: Port device dummy0 removed [ 93.259796][ T8095] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 93.273044][ T59] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 93.277484][ T59] em28xx 6-1:0.0: board has no eeprom [ 93.313091][ T40] audit: type=1400 audit(1765966086.043:798): avc: denied { append } for pid=8100 comm="syz.3.633" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 93.335428][ T59] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 93.339886][ T59] em28xx 6-1:0.0: dvb set to bulk mode. [ 93.343699][ T841] em28xx 6-1:0.0: Binding DVB extension [ 93.352026][ T8023] em28xx 6-1:0.0: reading from i2c device at 0x6 failed (error=-5) [ 93.352649][ T59] usb 6-1: USB disconnect, device number 6 [ 93.355458][ T40] audit: type=1400 audit(1765966086.083:799): avc: denied { bind } for pid=8108 comm="syz.3.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 93.358185][ T59] em28xx 6-1:0.0: Disconnecting em28xx [ 93.383054][ T841] em28xx 6-1:0.0: Registering input extension [ 93.386837][ T59] em28xx 6-1:0.0: Closing input extension [ 93.419538][ T40] audit: type=1400 audit(1765966086.153:800): avc: denied { ioctl } for pid=8108 comm="syz.3.635" path="socket:[21715]" dev="sockfs" ino=21715 ioctlcmd=0xab05 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 93.430041][ T40] audit: type=1400 audit(1765966086.153:801): avc: denied { write } for pid=8108 comm="syz.3.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 93.459950][ T8023] ieee802154 phy0 wpan0: encryption failed: -22 [ 93.462341][ T59] em28xx 6-1:0.0: Freeing device [ 93.655676][ T6020] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 93.676016][ T10] usb usb38-port1: unable to enumerate USB device [ 93.785219][ T6020] usb 7-1: device descriptor read/64, error -71 [ 94.045360][ T6020] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 94.131056][ T8129] team0: Port device dummy0 removed [ 94.146650][ T8129] bond1: (slave ip6gre1): Releasing backup interface [ 94.148820][ T8129] ip6gre1: left promiscuous mode [ 94.175216][ T6020] usb 7-1: device descriptor read/64, error -71 [ 94.185437][ T141] skbuff: skb_under_panic: text:ffffffff8a3d2240 len:116 put:40 head:ffff888034219000 data:ffff888034218fe8 tail:0x5c end:0x6c0 dev:bond1 [ 94.190498][ T141] ------------[ cut here ]------------ [ 94.192320][ T141] kernel BUG at net/core/skbuff.c:213! [ 94.194137][ T141] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 94.196724][ T141] CPU: 1 UID: 0 PID: 141 Comm: kworker/1:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 94.201029][ T141] Tainted: [L]=SOFTLOCKUP [ 94.202477][ T141] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 94.205993][ T141] Workqueue: mld mld_ifc_work [ 94.207579][ T141] RIP: 0010:skb_panic+0x157/0x1d0 [ 94.209094][ T141] Code: b6 04 01 84 c0 74 04 3c 03 7e 21 41 56 8b 4b 70 45 89 e8 48 c7 c7 60 cd c2 8c 41 57 56 48 89 ee 52 4c 89 e2 e8 ba 15 5e f8 90 <0f> 0b 4c 89 4c 24 10 48 89 54 24 08 48 89 34 24 e8 54 59 ea f8 4c [ 94.215072][ T141] RSP: 0018:ffffc90002797680 EFLAGS: 00010286 [ 94.217012][ T141] RAX: 0000000000000087 RBX: ffff88803dc2e3c0 RCX: ffffffff819c8f65 [ 94.219548][ T141] RDX: 0000000000000000 RSI: ffffffff819d0b49 RDI: 0000000000000005 [ 94.222073][ T141] RBP: ffffffff8cc2e060 R08: 0000000000000005 R09: 0000000000000000 [ 94.225294][ T141] R10: 0000000080000000 R11: ffff88802307d4b0 R12: ffffffff8a3d2240 [ 94.228696][ T141] R13: 0000000000000028 R14: ffff888056fb0120 R15: 00000000000006c0 [ 94.232161][ T141] FS: 0000000000000000(0000) GS:ffff8880d69f6000(0000) knlGS:0000000000000000 [ 94.236055][ T141] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.238929][ T141] CR2: 00007f6df7375440 CR3: 000000002b0fa000 CR4: 0000000000352ef0 [ 94.242256][ T141] Call Trace: [ 94.243463][ T141] [ 94.244502][ T141] ? ip6gre_header+0xc0/0x8d0 [ 94.246062][ T141] skb_push+0xca/0xf0 [ 94.247369][ T141] ip6gre_header+0xc0/0x8d0 [ 94.248864][ T141] ? __pfx_ip6gre_header+0x10/0x10 [ 94.250512][ T141] ? find_held_lock+0x2b/0x80 [ 94.252025][ T141] ? __pfx_ip6gre_header+0x10/0x10 [ 94.253686][ T141] neigh_connected_output+0x366/0x620 [ 94.255766][ T141] ip6_finish_output2+0xad1/0x1cf0 [ 94.257806][ T141] ? ip6_dst_mtu_maybe_forward.constprop.0+0x1be/0x530 [ 94.260012][ T141] __ip6_finish_output+0x3cd/0x1010 [ 94.261707][ T141] ip6_output+0x253/0x710 [ 94.263158][ T141] dst_output+0xa8/0x4b0 [ 94.264533][ T141] mld_sendpack+0xa30/0xed0 [ 94.266138][ T141] ? __pfx_mld_sendpack+0x10/0x10 [ 94.267786][ T141] mld_ifc_work+0x740/0xbf0 [ 94.269286][ T141] process_one_work+0x9ba/0x1b20 [ 94.270881][ T141] ? __pfx_process_one_work+0x10/0x10 [ 94.272644][ T141] ? assign_work+0x1a0/0x250 [ 94.274189][ T141] worker_thread+0x6c8/0xf10 [ 94.275774][ T141] ? __kthread_parkme+0x19e/0x250 [ 94.277402][ T141] ? __pfx_worker_thread+0x10/0x10 [ 94.279122][ T141] kthread+0x3c5/0x780 [ 94.280508][ T141] ? __pfx_kthread+0x10/0x10 [ 94.282008][ T141] ? rcu_is_watching+0x12/0xc0 [ 94.283617][ T141] ? __pfx_kthread+0x10/0x10 [ 94.285183][ T141] ret_from_fork+0x983/0xb10 [ 94.286704][ T141] ? __pfx_ret_from_fork+0x10/0x10 [ 94.288404][ T141] ? __switch_to+0x7af/0x10d0 [ 94.290000][ T141] ? __pfx_kthread+0x10/0x10 [ 94.292057][ T141] ret_from_fork_asm+0x1a/0x30 [ 94.294176][ T141] [ 94.295600][ T141] Modules linked in: [ 94.297535][ T6020] usb usb7-port1: attempt power cycle [ 94.297951][ T141] ---[ end trace 0000000000000000 ]--- [ 94.312064][ T141] RIP: 0010:skb_panic+0x157/0x1d0 [ 94.314303][ T141] Code: b6 04 01 84 c0 74 04 3c 03 7e 21 41 56 8b 4b 70 45 89 e8 48 c7 c7 60 cd c2 8c 41 57 56 48 89 ee 52 4c 89 e2 e8 ba 15 5e f8 90 <0f> 0b 4c 89 4c 24 10 48 89 54 24 08 48 89 34 24 e8 54 59 ea f8 4c [ 94.322671][ T141] RSP: 0018:ffffc90002797680 EFLAGS: 00010286 [ 94.325381][ T141] RAX: 0000000000000087 RBX: ffff88803dc2e3c0 RCX: ffffffff819c8f65 [ 94.328811][ T141] RDX: 0000000000000000 RSI: ffffffff819d0b49 RDI: 0000000000000005 [ 94.331780][ T141] RBP: ffffffff8cc2e060 R08: 0000000000000005 R09: 0000000000000000 [ 94.334336][ T141] R10: 0000000080000000 R11: ffff88802307d4b0 R12: ffffffff8a3d2240 [ 94.337308][ T141] R13: 0000000000000028 R14: ffff888056fb0120 R15: 00000000000006c0 [ 94.339899][ T141] FS: 0000000000000000(0000) GS:ffff8880d69f6000(0000) knlGS:0000000000000000 [ 94.342807][ T141] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.344972][ T141] CR2: 00007f6df7375440 CR3: 000000002d494000 CR4: 0000000000352ef0 [ 94.347866][ T141] Kernel panic - not syncing: Fatal exception [ 94.350528][ T141] Kernel Offset: disabled [ 94.351966][ T141] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:08:07 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000013 RBX=0000000000000001 RCX=ffff88810a426ae0 RDX=ffff88810a4265a0 RSI=ffff88810a426ac0 RDI=ffff88810a426000 RBP=ffffc9000460f8b0 RSP=ffffc9000460f850 R8 =0000000000000000 R9 =0000000000000027 R10=ffff88810a426aa0 R11=0000000000000008 R12=ffff88801b442640 R13=0000000000000000 R14=0000000000000000 R15=ffffea0004290980 RIP=ffffffff821d5228 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055555b836500 ffffffff 00c00000 GS =0000 ffff8880d68f6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9b1a7b6ad8 CR3=000000002d181000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcf6491d00 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9b1a615050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9b1a61505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9b1a615057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9b1a61506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9b1a6150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9b1a6151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff853263a5 RDI=ffffffff9aeecc40 RBP=ffffffff9aeecc00 RSP=ffffc90002796f88 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6b726f776b205043 R12=0000000000000000 R13=000000000000002e R14=ffffffff9aeecc00 R15=ffffffff85326340 RIP=ffffffff853263cf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69f6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f6df7375440 CR3=000000002b0fa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff19f80930 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0433a15050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0433a1505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0433a15057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0433a1506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0433a150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0433a151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 00000000000001a0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000098a4c RBX=0000000000000002 RCX=ffffffff8b7806d9 RDX=ffffed100d4c673e RSI=ffffffff8bf2b300 RDI=ffffffff819347ed RBP=ffffed1003bda930 RSP=ffffc90000187de8 R8 =0000000000000000 R9 =ffffed100d4c673d R10=ffff88806a6339eb R11=0000000000000000 R12=0000000000000002 R13=ffff88801ded4980 R14=ffffffff9088afd0 R15=0000000000000000 RIP=ffffffff8b77edcf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6af6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c279fff CR3=000000005a670000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004090001 Opmask01=0000000000000054 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0064656c62616e65 5f65727573736572 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6df7415050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6df741505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6df7415057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6df741506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6df74150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6df74151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65e745917590d0bb 264173eaa84350de 46b36bd43e2f5b1b 9c4b74f43b787f49 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0e64f71a5a96181c 1b5a677ea8bb2518 b9401ad802520004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f60e4ce10e872216 22c564ee37df2731 91aa060068b1f4a4 8cce38e3b1a54f8a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bc1f50a106d4b19b 9f53448d0088efb5 df732f3fde976bf3 4a69bc0270e9cb5a ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b434943f90a35772 c637f5d595578efc b40a1b004a55d4e7 e3fb00e087d89945 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 88d4782773b8ce4e 3f25626dc0cb3156 b6eaf60e4ce10e87 221622c564ee37df ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 273191aa060068b1 f4a48cce38e3b1a5 4f8a0e64f71a5a96 181c1b5a677ea8bb ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=ffff88805cb4b000 RCX=0000000000000040 RDX=0000000000000000 RSI=000020000007a000 RDI=ffff88805cb4bfc0 RBP=0000200000079040 RSP=ffffc9000365fa20 R8 =0000000000000001 R9 =ffffed100b9697ff R10=ffff88805cb4bfff R11=0000000000000000 R12=0000200000000040 R13=ffffc9000365fd90 R14=0000000000001000 R15=dffffc0000000000 RIP=ffffffff81001280 RFL=00040046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f6df82d26c0 ffffffff 00c00000 GS =0000 ffff8880d6bf6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000020000007a000 CR3=000000005a670000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffaeea2320 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6df7415050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6df741505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6df7415057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6df741506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6df74150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6df74151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000020 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000bb0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000020 0000000000000000 0000000000000000 0000000000000bb0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000