last executing test programs: 7m12.434245673s ago: executing program 2 (id=148): rt_sigtimedwait(&(0x7f0000000100)={[0x3ff]}, 0x0, 0x0, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000140)='./bus\x00', 0xc) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 7m9.52842051s ago: executing program 2 (id=164): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) r0 = syz_io_uring_setup(0x8dd, &(0x7f0000000440)={0x0, 0x1b7, 0x400, 0x8, 0x20000fe}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_usb_connect(0x2, 0x24, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x29, 0x0, 0x0, 0x204}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 7m8.846728596s ago: executing program 2 (id=170): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0xea84, 0xf}}]}, {0x15}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x45}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x44e3) 7m8.771515259s ago: executing program 2 (id=171): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xd, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$tipc(0x1e, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) splice(r0, 0x0, r1, 0x0, 0x406f413, 0x0) 7m8.703612947s ago: executing program 2 (id=172): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x800, 0x0) 7m8.64295441s ago: executing program 2 (id=173): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) socket$phonet_pipe(0x23, 0x5, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x1, 0x0, 0x7fffffff, 0x8000000000000, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000280)={0x3ff, 0x800, 0x5, 0x0, 0xfffffffffffffff9, 0x100000}, 0x0, 0x0) close(0x4) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 6m56.406360353s ago: executing program 3 (id=293): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x13, 0x65, 0xffff, 0x1000, 0x6, '9P2000'}, 0x13) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff8, 0x4, 0x0, 0x2, 0x0, 0x0, 0x20, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20400, 0x38) 6m56.373843475s ago: executing program 3 (id=294): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000180)={0x2c, 0xa, r2}, 0x10) recvmmsg(r0, &(0x7f0000003c80)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x40012000, 0x0) 6m56.121435917s ago: executing program 3 (id=295): ioperm(0x9, 0x2, 0x8000000000000001) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) 6m56.007167317s ago: executing program 3 (id=296): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x1cba8c72}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x177ffb498171ed1, 0x8040010) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 6m55.962444127s ago: executing program 3 (id=297): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 6m55.934113564s ago: executing program 3 (id=298): socket$packet(0x11, 0xa, 0x300) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0xa) r2 = dup(r1) r3 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d1) syz_emit_ethernet(0x47, &(0x7f0000000180)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x11, 0x11, 0x0, @private1, @mcast2, {[], {0xfffc, 0xe22, 0x11, 0x0, @opaque="c4e349a5c7407bebfb"}}}}}}, 0x0) 6m53.482184531s ago: executing program 32 (id=173): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) socket$phonet_pipe(0x23, 0x5, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x1, 0x0, 0x7fffffff, 0x8000000000000, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000280)={0x3ff, 0x800, 0x5, 0x0, 0xfffffffffffffff9, 0x100000}, 0x0, 0x0) close(0x4) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 6m40.919606311s ago: executing program 33 (id=298): socket$packet(0x11, 0xa, 0x300) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0xa) r2 = dup(r1) r3 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d1) syz_emit_ethernet(0x47, &(0x7f0000000180)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x11, 0x11, 0x0, @private1, @mcast2, {[], {0xfffc, 0xe22, 0x11, 0x0, @opaque="c4e349a5c7407bebfb"}}}}}}, 0x0) 9.016634193s ago: executing program 1 (id=2582): sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x112) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000840}, 0x20000050) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) 8.937175003s ago: executing program 1 (id=2584): sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) recvmmsg$unix(r5, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x28, 0x2b, 0xb, 0x20000000, 0x0, {0x5}, [@typed={0xa, 0x3, 0x0, 0x0, @str='{yzr\n\xe1'}, @nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0xe8, 0x0, 0x0, @binary}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x3517, 0x173d, 0x42, 0x0, 0x0) 7.680733731s ago: executing program 1 (id=2591): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x206) mkdirat(0xffffffffffffffff, 0x0, 0x22) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x3, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x501b, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x5) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 5.759845011s ago: executing program 5 (id=2593): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0x1}, 0x0, 0x0}, 0x1c) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) rmdir(&(0x7f0000000240)='./file1\x00') chdir(&(0x7f00000001c0)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 5.757091922s ago: executing program 1 (id=2594): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed39", 0x10}], 0x1}}], 0x1, 0x20008000) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x3, 0x248a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0xf439, 0xffffffffffffffff}) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = memfd_secret(0x80000) ftruncate(r1, 0x3) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x8, 0x5, 0x0) ptrace(0x10, r2) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000"], 0x0) 4.786264211s ago: executing program 4 (id=2596): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdbfa, {0x4}}, 0x14}}, 0x40800) r2 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) madvise(&(0x7f00001c1000/0x3000)=nil, 0x3000, 0x9) r3 = io_uring_setup(0x3e48, &(0x7f00000001c0)={0x0, 0xffffffff, 0x2, 0x0, 0x302}) r4 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x18, 0x0}, 0x8) r8 = openat$hpet(0xffffff9c, &(0x7f0000000100), 0x44040, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r3, &(0x7f0000000140)={0x40000010}) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r7, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, {0x2}}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, 0x0, &(0x7f0000000b00)) 4.681798067s ago: executing program 0 (id=2597): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) removexattr(0x0, &(0x7f0000000240)=@known='user.incfs.metadata\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x51e1, 0x3ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r2, r1, 0x0, 0x578410eb) 4.68162966s ago: executing program 4 (id=2598): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r3, 0x0, r5, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r4, 0x407, 0x100004) write$eventfd(r4, &(0x7f0000000240), 0xffffff14) 3.835642783s ago: executing program 5 (id=2599): r0 = socket$pptp(0x18, 0x1, 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000019c0)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast1, 0x14, 0x6c}, @in=@empty=0x14, {0x0, 0x0, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x0, 0x0, 0x2, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0xffff5df8}]}, 0x140}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) 3.303746615s ago: executing program 0 (id=2601): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) socket$inet(0x2, 0x3, 0x6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf97ba11}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r6, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) 3.246915324s ago: executing program 4 (id=2603): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = inotify_init() ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x3ffc, 0x0, 0x0, 0x15, "ffff00"}) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, 0x0) getpid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(r2, &(0x7f00000000c0)='.\x00', 0x5000009) r3 = open(&(0x7f0000000180)='./bus\x00', 0x189a7c, 0x113) r4 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) pwritev2(r4, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37fffee, 0x4002011, r3, 0x0) 3.244691624s ago: executing program 0 (id=2604): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004340)=""/102376, 0x18fe8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xe, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r2) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r4, 0x400, 0x1) r5 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) sendmmsg(r1, &(0x7f00000006c0)=[{{&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @empty}, 0x3, 0x1, 0x0, 0x4}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000380)="f0b23a4f935659b1e45d1daa71469b022b0381ab492750106930d4d1dded70544f475f6165eac725ec22b55daa109554b3b628b1931bc71585bc652aca4e53b6b735892dfeb8f7979ae16f6914bb437e6bcd60311b84d92199166d789648ce1db5300872e95aabba7ef5c5caa0b411baf80bb885f1de72eeb60b57bc6fb0616d5ea019f6bc2cf0d36ff2b6c88301da75e4a07bdba5547a2068b262f8113227904bb5196f94903714df1e647734b080802ea7086cf6e5ac538f652ee2a3eb5e9a4d9b3847aa255fe13218257871016c327c493e", 0xd3}, {0x0}, {&(0x7f0000000100)="3b7d9df0fa3f18c115ad2a60b9d5bdb6f9d2d3778064dbb39c01ee7ca80ed70d0c96c76ca4e489fb145e6d6856f8a439e4c035d7b4eb0bb2b0dd79eb377c56c3afd8e61cd622775f1d7edf0255dcb360e6ec7855b44dffe2", 0x58}], 0x3, &(0x7f0000000480)=[{0xc, 0x117, 0x50000000}, {0xc, 0x107, 0x9}, {0x4c, 0x104, 0x3, "fd5d72a0737c577edb49dd22ba398bc586b8ddd29ed2e031c24f4ccb1a1c7e0eff71441593e88594a81254e059241888555e2d299bd044bcc6aab36a9e71cbe9"}, {0xc, 0x1, 0x4}], 0x70}}], 0x1, 0x4004) write$binfmt_script(r5, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2.863470786s ago: executing program 5 (id=2605): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) 2.244933072s ago: executing program 0 (id=2606): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2.244701128s ago: executing program 1 (id=2607): r0 = io_uring_setup(0xbbc, &(0x7f00000001c0)={0x0, 0x800000, 0x2, 0x4, 0x112}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x94) r3 = socket(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmsg$nfc_llcp(r3, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x4, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x4000006, 0x1, 0x4}) io_uring_enter(r0, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) 2.063685651s ago: executing program 4 (id=2608): getpgid(0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x0, 0x4001000, 0x4a}, 0x2c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000726e87fa8c000000000000009f05c39950f548df5fe6"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = syz_open_dev$vim2m(&(0x7f0000000400), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc0f8565c, &(0x7f0000000440)={0x0, 0xe8d, 0x1, {0x1, @win={{0x0, 0xffffffff, 0x100000, 0x4}, 0x0, 0x195, 0x0, 0x0, 0x0, 0xfd}}}) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0xfc, 0x0, 0x1, 0xffffffff, 0x275d2af6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) 1.763914835s ago: executing program 5 (id=2609): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x6}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x28, 0x10, 0x801, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x8028}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x5b4efbb362ec214f}, 0x0) 1.747506982s ago: executing program 4 (id=2610): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0xffffffffffffff08, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a69702c706f72742c697000140007800800084000002f5408000640"], 0x60}}, 0xc000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x44084) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4049000) 41.030236ms ago: executing program 1 (id=2611): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) removexattr(0x0, &(0x7f0000000240)=@known='user.incfs.metadata\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x51e1, 0x3ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r2, r1, 0x0, 0x578410eb) 40.789685ms ago: executing program 4 (id=2612): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x24, 0x5, 0x0, 0x0, 0x9, 0x8}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) socket$key(0xf, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xa) r4 = dup(r3) r5 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d1) 40.58981ms ago: executing program 5 (id=2613): connect$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x80000001, @local, 0x8, 0x3}, 0x20) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000280)) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x1010, r3, 0x80000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, 0x0) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, 0x0, 0x0) r4 = fcntl$dupfd(r1, 0x406, r2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x14, r6, 0x333, 0x0, 0x4}, 0x14}}, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000800)=""/251, 0x0, 0x1000}) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) close_range(r0, 0xffffffffffffffff, 0x0) 37.072952ms ago: executing program 0 (id=2614): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbfs(0x0, 0x8, 0x101301) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000020601040000000000000000000000000c00078008000640000000010500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e657400000000bffb2648c216955eadf2594f9a8b282112759761b8fbd6cd305a1b3bfee9337edf84371ab0475b8ec7c4416bd2d503c975aaed22ca96f54d7d7cc8c0"], 0x54}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x53, 0x3, 0x8, 0x2, 0xb, 0x0, 0x1}, 0x0, &(0x7f0000000280)={0x3fd, 0x252c, 0x2000000000000, 0x2, 0x0, 0x9, 0x466}, 0x0, 0x0) 12.001695ms ago: executing program 0 (id=2615): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x9a1241, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4048aecb, &(0x7f0000001440)={{0x1, 0x0, 0x80, {0x4000, 0x10000, 0x2}}, "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", "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"}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000640)={0x44, r2, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xfffffffe}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4888}, 0x20000804) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}, @IPSET_ATTR_MARKMASK={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4) r9 = ioctl$KVM_GET_STATS_FD_vm(r7, 0xaece) ioctl$KDFONTOP_SET(r9, 0x4b72, &(0x7f0000000080)={0x0, 0x1, 0xb, 0x11, 0x1b7, &(0x7f0000000680)="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"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x100, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x1}, 0x48) 0s ago: executing program 5 (id=2616): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = inotify_init() ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x3ffc, 0x0, 0x0, 0x15, "ffff00"}) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, 0x0) getpid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(r2, &(0x7f00000000c0)='.\x00', 0x5000009) r3 = open(&(0x7f0000000180)='./bus\x00', 0x189a7c, 0x113) r4 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) pwritev2(r4, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37fffee, 0x4002011, r3, 0x0) kernel console output (not intermixed with test programs): yz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 274.606980][T23860] tipc: Enabling of bearer rejected, failed to enable media [ 275.929436][T23878] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1659'. [ 275.937233][T23879] geneve2: entered promiscuous mode [ 275.945111][ T7977] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.947920][ T7977] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.052448][T23878] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.055411][T23878] bond_slave_0: left promiscuous mode [ 276.057972][T23878] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.061039][T23878] bond_slave_1: left promiscuous mode [ 276.063092][T23878] bond0 (unregistering): Released all slaves [ 276.072667][ T7977] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.076686][ T7977] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.426339][ T9037] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 276.584554][ T9037] usb 9-1: Using ep0 maxpacket: 8 [ 276.604988][ T9037] usb 9-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 276.616668][ T9037] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.620926][ T9037] usb 9-1: Product: syz [ 276.622469][ T9037] usb 9-1: Manufacturer: syz [ 276.624835][ T9037] usb 9-1: SerialNumber: syz [ 276.630429][ T9037] usb 9-1: config 0 descriptor?? [ 276.636536][ T9037] option 9-1:0.0: GSM modem (1-port) converter detected [ 276.637118][T23890] tipc: Enabled bearer , priority 10 [ 276.648660][T23890] tipc: Enabling of bearer rejected, failed to enable media [ 276.930122][ T24] usb 9-1: USB disconnect, device number 10 [ 276.933480][ T24] option 9-1:0.0: device disconnected [ 277.733388][T23915] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 280.043136][T23948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1676'. [ 281.515187][T23970] loop8: detected capacity change from 0 to 7 [ 281.552808][T23970] Dev loop8: unable to read RDB block 7 [ 281.562006][T23970] loop8: AHDI p1 p2 p3 [ 281.563840][T23970] loop8: partition table partially beyond EOD, truncated [ 281.590099][T23979] netlink: 'syz.1.1684': attribute type 10 has an invalid length. [ 281.684656][T23970] loop8: p1 start 1601398130 is beyond EOD, truncated [ 281.687653][T23970] loop8: p2 start 1702059890 is beyond EOD, truncated [ 281.751378][T23977] Dev loop8: unable to read RDB block 7 [ 281.753216][T23977] loop8: AHDI p1 p2 p3 [ 281.759036][T23977] loop8: partition table partially beyond EOD, truncated [ 281.779358][T23977] loop8: p1 start 1601398130 is beyond EOD, truncated [ 281.781885][T23977] loop8: p2 start 1702059890 is beyond EOD, truncated [ 281.849443][T23978] Dev loop8: unable to read RDB block 7 [ 281.860925][T23978] loop8: AHDI p1 p2 p3 [ 281.862846][T23978] loop8: partition table partially beyond EOD, truncated [ 281.867339][T23978] loop8: p1 start 1601398130 is beyond EOD, truncated [ 281.870181][T23978] loop8: p2 start 1702059890 is beyond EOD, truncated [ 281.901176][T23982] capability: warning: `syz.1.1685' uses 32-bit capabilities (legacy support in use) [ 282.265813][T23988] netlink: 4400 bytes leftover after parsing attributes in process `syz.1.1686'. [ 283.468449][T24006] tipc: Enabled bearer , priority 0 [ 283.568329][T24008] tipc: Enabling of bearer rejected, already enabled [ 284.127334][T24026] 9pnet_fd: p9_fd_create_unix (24026): address too long: ./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 284.308575][T24028] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1696'. [ 284.347147][T24028] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1696'. [ 284.365706][T24028] netlink: 'syz.5.1696': attribute type 9 has an invalid length. [ 284.722336][T24032] team0: Port device team_slave_0 removed [ 284.906340][T24044] lo speed is unknown, defaulting to 1000 [ 285.208214][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 285.208230][ T40] audit: type=1800 audit(1758684174.407:947): pid=24049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1702" name="bus" dev="ramfs" ino=31484 res=0 errno=0 [ 285.531812][T24064] lo speed is unknown, defaulting to 1000 [ 285.546842][T24044] lo speed is unknown, defaulting to 1000 [ 285.700900][T24058] netlink: 'syz.4.1703': attribute type 13 has an invalid length. [ 285.912265][ T5991] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 285.919449][T24072] netlink: 'syz.1.1708': attribute type 1 has an invalid length. [ 286.000467][T24058] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 286.005613][T24064] lo speed is unknown, defaulting to 1000 [ 286.460900][T24080] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1711'. [ 286.560060][T24082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1712'. [ 287.844695][ T40] audit: type=1800 audit(1758684177.037:948): pid=24110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1717" name="bus" dev="ramfs" ino=33566 res=0 errno=0 [ 288.441631][T24114] lo speed is unknown, defaulting to 1000 [ 288.632223][T24119] lo speed is unknown, defaulting to 1000 [ 288.634946][T24114] lo speed is unknown, defaulting to 1000 [ 288.845433][T24114] netlink: 'syz.1.1719': attribute type 13 has an invalid length. [ 289.334307][T24114] syz.1.1719: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 289.340058][T24114] CPU: 3 UID: 0 PID: 24114 Comm: syz.1.1719 Not tainted syzkaller #0 PREEMPT(full) [ 289.340073][T24114] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 289.340080][T24114] Call Trace: [ 289.340084][T24114] [ 289.340088][T24114] dump_stack_lvl+0x16c/0x1f0 [ 289.340129][T24114] warn_alloc+0x248/0x3a0 [ 289.340149][T24114] ? __pfx_warn_alloc+0x10/0x10 [ 289.340167][T24114] ? pfifo_fast_change_tx_queue_len+0x156/0xbb0 [ 289.340183][T24114] ? __vmalloc_node_noprof+0xad/0xf0 [ 289.340195][T24114] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 289.340205][T24114] ? dev_qdisc_change_tx_queue_len+0x169/0x380 [ 289.340221][T24114] ? netif_change_tx_queue_len+0x1a1/0x1e0 [ 289.340241][T24114] ? pfifo_fast_change_tx_queue_len+0x156/0xbb0 [ 289.340259][T24114] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 289.340271][T24114] ? ___kmalloc_large_node+0xed/0x160 [ 289.340290][T24114] __kvmalloc_node_noprof+0x30a/0x620 [ 289.340302][T24114] ? pfifo_fast_change_tx_queue_len+0x156/0xbb0 [ 289.340317][T24114] ? pfifo_fast_change_tx_queue_len+0x156/0xbb0 [ 289.340334][T24114] ? pfifo_fast_change_tx_queue_len+0x156/0xbb0 [ 289.340348][T24114] pfifo_fast_change_tx_queue_len+0x156/0xbb0 [ 289.340364][T24114] ? __pfx_dev_deactivate_many+0x10/0x10 [ 289.340379][T24114] ? ib_device_get_by_netdev+0x121/0x520 [ 289.340391][T24114] ? vxlan_netdevice_event+0x11f/0x370 [ 289.340405][T24114] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 289.340419][T24114] ? __pfx_pfifo_fast_change_tx_queue_len+0x10/0x10 [ 289.340432][T24114] ? dev_deactivate+0x15c/0x1c0 [ 289.340451][T24114] ? __pfx_pfifo_fast_change_tx_queue_len+0x10/0x10 [ 289.340465][T24114] dev_qdisc_change_tx_queue_len+0x169/0x380 [ 289.340484][T24114] netif_change_tx_queue_len+0x1a1/0x1e0 [ 289.340501][T24114] ? __pfx_netif_change_tx_queue_len+0x10/0x10 [ 289.340519][T24114] ? netif_change_flags+0x10d/0x160 [ 289.340536][T24114] do_setlink.constprop.0+0xd00/0x4380 [ 289.340555][T24114] ? __pfx_console_unlock+0x10/0x10 [ 289.340567][T24114] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 289.340587][T24114] ? __lock_acquire+0xb97/0x1ce0 [ 289.340607][T24114] ? __mutex_trylock_common+0xe9/0x250 [ 289.340621][T24114] ? __pfx___mutex_trylock_common+0x10/0x10 [ 289.340636][T24114] ? __pfx___might_resched+0x10/0x10 [ 289.340648][T24114] ? rcu_is_watching+0x12/0xc0 [ 289.340659][T24114] ? trace_contention_end+0xdd/0x130 [ 289.340673][T24114] ? __mutex_lock+0x1c5/0x1060 [ 289.340694][T24114] ? __nla_validate_parse+0x600/0x2880 [ 289.340708][T24114] ? rcu_is_watching+0x12/0xc0 [ 289.340720][T24114] ? __pfx___mutex_lock+0x10/0x10 [ 289.340745][T24114] rtnl_newlink+0x18e0/0x2000 [ 289.340766][T24114] ? __pfx_rtnl_newlink+0x10/0x10 [ 289.340782][T24114] ? __kernel_text_address+0xd/0x40 [ 289.340792][T24114] ? unwind_get_return_address+0x59/0xa0 [ 289.340804][T24114] ? arch_stack_walk+0xa6/0x100 [ 289.340821][T24114] ? __lock_acquire+0x62e/0x1ce0 [ 289.340837][T24114] ? rcu_is_watching+0x12/0xc0 [ 289.340852][T24114] ? find_held_lock+0x2b/0x80 [ 289.340861][T24114] ? __pfx_rtnl_newlink+0x10/0x10 [ 289.340877][T24114] ? __pfx_rtnl_newlink+0x10/0x10 [ 289.340893][T24114] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 289.340902][T24114] ? __pfx_rtnl_newlink+0x10/0x10 [ 289.340919][T24114] rtnetlink_rcv_msg+0x95b/0xe90 [ 289.340930][T24114] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 289.340942][T24114] ? __lock_acquire+0x62e/0x1ce0 [ 289.340959][T24114] netlink_rcv_skb+0x158/0x420 [ 289.340975][T24114] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 289.340986][T24114] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 289.341007][T24114] ? netlink_deliver_tap+0x1ae/0xd30 [ 289.341022][T24114] ? is_vmalloc_addr+0x86/0xa0 [ 289.341036][T24114] netlink_unicast+0x5a7/0x870 [ 289.341055][T24114] ? __pfx_netlink_unicast+0x10/0x10 [ 289.341071][T24114] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 289.341103][T24114] netlink_sendmsg+0x8d1/0xdd0 [ 289.341126][T24114] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.341145][T24114] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 289.341159][T24114] ____sys_sendmsg+0xa98/0xc70 [ 289.341173][T24114] ? __pfx_____sys_sendmsg+0x10/0x10 [ 289.341184][T24114] ? get_compat_msghdr+0x11a/0x170 [ 289.341202][T24114] ? __pfx_futex_wake_mark+0x10/0x10 [ 289.341221][T24114] ___sys_sendmsg+0x134/0x1d0 [ 289.341238][T24114] ? __pfx____sys_sendmsg+0x10/0x10 [ 289.341260][T24114] ? find_held_lock+0x2b/0x80 [ 289.341280][T24114] __sys_sendmsg+0x16d/0x220 [ 289.341296][T24114] ? __pfx___sys_sendmsg+0x10/0x10 [ 289.341311][T24114] ? __ia32_sys_futex_time32+0x1d9/0x460 [ 289.341332][T24114] ? rcu_is_watching+0x12/0xc0 [ 289.341345][T24114] __do_fast_syscall_32+0x7c/0x300 [ 289.341363][T24114] do_fast_syscall_32+0x32/0x80 [ 289.341372][T24114] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 289.341386][T24114] RIP: 0023:0xf70be579 [ 289.341394][T24114] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 289.341405][T24114] RSP: 002b:00000000f54ae55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 289.341415][T24114] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000180 [ 289.341421][T24114] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 289.341427][T24114] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 289.341433][T24114] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 289.341439][T24114] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 289.341452][T24114] [ 289.341500][T24114] Mem-Info: [ 289.541526][T24114] active_anon:7404 inactive_anon:4883 isolated_anon:11 [ 289.541526][T24114] active_file:1439 inactive_file:1880 isolated_file:3 [ 289.541526][T24114] unevictable:1768 dirty:460 writeback:0 [ 289.541526][T24114] slab_reclaimable:6953 slab_unreclaimable:67697 [ 289.541526][T24114] mapped:32464 shmem:12734 pagetables:1657 [ 289.541526][T24114] sec_pagetables:330 bounce:0 [ 289.541526][T24114] kernel_misc_reclaimable:0 [ 289.541526][T24114] free:35198 free_pcp:1575 free_cma:0 [ 289.557096][T24114] Node 0 active_anon:2044kB inactive_anon:8kB active_file:796kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:3464kB dirty:120kB writeback:0kB shmem:4652kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8632kB pagetables:1816kB sec_pagetables:1176kB all_unreclaimable? yes Balloon:0kB [ 289.567282][T24114] Node 1 active_anon:27572kB inactive_anon:19524kB active_file:4960kB inactive_file:7520kB unevictable:3536kB isolated(anon):44kB isolated(file):12kB mapped:126392kB dirty:1720kB writeback:0kB shmem:46284kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8376kB pagetables:4812kB sec_pagetables:144kB all_unreclaimable? no Balloon:0kB [ 289.578157][T24114] Node 0 DMA free:2156kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 289.590178][T24114] lowmem_reserve[]: 0 288 288 288 288 [ 289.592273][T24114] Node 0 DMA32 free:16016kB boost:0kB min:13220kB low:16524kB high:19828kB reserved_highatomic:2048KB free_highatomic:224KB active_anon:2044kB inactive_anon:8kB active_file:796kB inactive_file:0kB unevictable:3536kB writepending:120kB present:1032196kB managed:295076kB mlocked:0kB bounce:0kB free_pcp:1916kB local_pcp:0kB free_cma:0kB [ 289.602459][T24114] lowmem_reserve[]: 0 0 0 0 0 [ 289.604042][T24114] Node 1 DMA32 free:122708kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:2048KB free_highatomic:532KB active_anon:27672kB inactive_anon:19524kB active_file:4960kB inactive_file:7520kB unevictable:3536kB writepending:1720kB present:1048432kB managed:948220kB mlocked:0kB bounce:0kB free_pcp:4344kB local_pcp:1100kB free_cma:0kB [ 289.614600][T24114] lowmem_reserve[]: 0 0 0 0 0 [ 289.617356][T24114] Node 0 DMA: 9*4kB (UE) 7*8kB (UE) 5*16kB (UE) 10*32kB (UE) 4*64kB (E) 1*128kB (E) 1*256kB (E) 0*512kB 1*1024kB (E) 0*2048kB 0*4096kB = 2156kB [ 289.651784][T24114] Node 0 DMA32: 2*4kB (U) 5*8kB (UMEH) 9*16kB (UEH) 129*32kB (UMEH) 69*64kB (UME) 21*128kB (UME) 12*256kB (UME) 3*512kB (ME) 0*1024kB 0*2048kB 0*4096kB = 16032kB [ 289.659265][T24114] Node 1 DMA32: 446*4kB (UMEH) 286*8kB (MEH) 247*16kB (UME) 154*32kB (MEH) 209*64kB (UMEH) 194*128kB (UMEH) 87*256kB (UME) 49*512kB (UME) 20*1024kB (UME) 2*2048kB (UM) 0*4096kB = 123096kB [ 289.667032][T24114] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 289.670939][T24114] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 289.674665][T24114] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 289.678780][T24114] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 289.682521][T24114] 16307 total pagecache pages [ 289.684885][T24114] 283 pages in swap cache [ 289.686883][T24114] Free swap = 69032kB [ 289.688413][T24114] Total swap = 124996kB [ 289.690562][T24114] 524155 pages RAM [ 289.692235][T24114] 0 pages HighMem/MovableOnly [ 289.694217][T24114] 209491 pages reserved [ 289.696130][T24114] 0 pages cma reserved [ 289.699539][T24114] ip6gretap0: refused to change device tx_queue_len [ 289.702630][T24114] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 289.708730][ T9037] lo speed is unknown, defaulting to 1000 [ 289.711496][ T9037] syz2: Port: 1 Link ACTIVE [ 289.712685][T24119] lo speed is unknown, defaulting to 1000 [ 289.754866][T24136] tipc: Enabling of bearer rejected, already enabled [ 289.760636][T24136] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1514) ! [ 289.774063][T24134] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.907603][T24143] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1726'. [ 290.612368][T24159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.639819][T24158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.732552][ T40] audit: type=1800 audit(1758684179.937:949): pid=24160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1731" name="bus" dev="ramfs" ino=31602 res=0 errno=0 [ 291.200099][T24163] netlink: 'syz.1.1733': attribute type 4 has an invalid length. [ 291.203331][T24163] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1733'. [ 291.870358][T24177] lo speed is unknown, defaulting to 1000 [ 291.989258][T24177] lo speed is unknown, defaulting to 1000 [ 292.255704][ T6053] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 292.408612][ T6053] usb 9-1: Using ep0 maxpacket: 16 [ 292.423690][ T6053] usb 9-1: config 33 has 0 interfaces, different from the descriptor's value: 9 [ 292.432096][ T6053] usb 9-1: New USB device found, idVendor=1fd2, idProduct=6006, bcdDevice= 0.00 [ 292.439130][T24177] netlink: 'syz.0.1735': attribute type 13 has an invalid length. [ 292.445146][ T6053] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.466971][T24177] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 292.790206][ T9711] usb 9-1: USB disconnect, device number 11 [ 293.124628][T24189] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 293.126895][T24189] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 293.140783][T24189] vhci_hcd vhci_hcd.0: Device attached [ 293.411916][T24190] vhci_hcd: connection closed [ 293.413586][ T61] vhci_hcd: stop threads [ 293.419255][ T61] vhci_hcd: release socket [ 293.423319][ T61] vhci_hcd: disconnect device [ 293.425853][ T9711] usb 48-1: SetAddress Request (2) to port 0 [ 293.429769][ T9711] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 294.203004][T24209] tipc: Enabled bearer , priority 0 [ 294.206296][T24209] syzkaller0: entered promiscuous mode [ 294.208156][T24209] syzkaller0: entered allmulticast mode [ 294.244724][T24209] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1514) ! [ 294.276458][T24209] tipc: Resetting bearer [ 294.385681][T24208] tipc: Resetting bearer [ 294.442965][T24208] tipc: Disabling bearer [ 294.451603][T24215] tipc: Enabling of bearer rejected, failed to enable media [ 294.470511][T24217] blkio.reset_stats is deprecated [ 294.478271][T24217] netlink: 'syz.4.1745': attribute type 4 has an invalid length. [ 294.481361][T24217] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1745'. [ 297.182492][T24237] netlink: 'syz.4.1752': attribute type 33 has an invalid length. [ 297.185669][T24237] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1752'. [ 297.193804][T24237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1752'. [ 297.234590][T24222] netlink: 'syz.5.1749': attribute type 1 has an invalid length. [ 297.815786][ T8294] lo speed is unknown, defaulting to 1000 [ 297.818333][ T8294] syz2: Port: 1 Link DOWN [ 298.351161][ T5991] Bluetooth: hci0: hcon ffff888051c48000 sent 1 < count 65535 [ 298.370690][ T5991] Bluetooth: hci0: hcon ffff888051c48000 sent 0 < count 169 [ 298.373047][ T5991] Bluetooth: hci0: hcon ffff888051c48000 sent 0 < count 2 [ 298.504753][ T9711] usb 48-1: device descriptor read/8, error -110 [ 298.555163][T24272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1761'. [ 298.558959][T24272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1761'. [ 298.873873][ T9711] usb 48-1: SetAddress Request (3) to port 0 [ 298.876469][ T9711] usb 48-1: new SuperSpeed USB device number 3 using vhci_hcd [ 299.554117][T24286] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 299.556887][T24286] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 299.574930][T24286] vhci_hcd vhci_hcd.0: Device attached [ 299.884601][ T9715] usb 46-1: SetAddress Request (2) to port 0 [ 299.886612][ T9715] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 300.293680][T24287] vhci_hcd: connection reset by peer [ 300.296106][ T7995] vhci_hcd: stop threads [ 300.297839][ T7995] vhci_hcd: release socket [ 300.299392][ T7995] vhci_hcd: disconnect device [ 301.558973][T24324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1774'. [ 301.562610][T24324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1774'. [ 302.585760][T24337] tipc: Enabled bearer , priority 0 [ 302.598618][T24337] syzkaller0: entered promiscuous mode [ 302.600957][T24337] syzkaller0: entered allmulticast mode [ 302.734388][T24339] tipc: Resetting bearer [ 302.785563][T24335] tipc: Resetting bearer [ 302.854367][T24335] tipc: Disabling bearer [ 303.936158][ T9711] usb 48-1: device descriptor read/8, error -110 [ 304.044867][ T9711] usb usb48-port1: attempt power cycle [ 304.171787][T24362] bond2: left promiscuous mode [ 304.179092][ T9711] usb 48-1: SetAddress Request (4) to port 0 [ 304.190869][T24362] vlan3: left promiscuous mode [ 304.192073][ T9711] usb 48-1: new SuperSpeed USB device number 4 using vhci_hcd [ 304.194301][T24362] bond4: left promiscuous mode [ 304.196846][T24362] gretap1: left promiscuous mode [ 304.198669][T24362] vlan3: left allmulticast mode [ 304.200397][T24362] bond4: left allmulticast mode [ 304.202144][T24362] gretap1: left allmulticast mode [ 304.214942][T24362] wireguard0: left promiscuous mode [ 304.216643][T24362] wireguard0: left allmulticast mode [ 304.225093][T24362] geneve2: left promiscuous mode [ 304.233292][ T9037] lo speed is unknown, defaulting to 1000 [ 304.233399][ T7998] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.235448][ T9037] syz0: Port: 1 Link DOWN [ 304.238684][ T7998] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.249485][ T9037] lo speed is unknown, defaulting to 1000 [ 304.249507][ T7998] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.268680][ T7998] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.272769][ T7998] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.277427][ T7998] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.281311][ T7998] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.285491][ T7998] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.024588][ T9715] usb 46-1: device descriptor read/8, error -110 [ 305.285258][ T40] audit: type=1326 audit(1758684194.497:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24378 comm="syz.0.1793" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705e579 code=0x0 [ 305.535574][ T9715] usb usb46-port1: attempt power cycle [ 306.180740][ T9715] usb usb46-port1: unable to enumerate USB device [ 308.700788][ T40] audit: type=1326 audit(1758684197.907:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24431 comm="syz.5.1807" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 308.737892][ T40] audit: type=1326 audit(1758684197.907:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24431 comm="syz.5.1807" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 308.794702][ T40] audit: type=1326 audit(1758684197.907:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24431 comm="syz.5.1807" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 308.811829][ T40] audit: type=1326 audit(1758684197.907:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24431 comm="syz.5.1807" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 308.821539][ T40] audit: type=1326 audit(1758684197.907:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24431 comm="syz.5.1807" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf704e5a7 code=0x7ffc0000 [ 308.844720][ T40] audit: type=1326 audit(1758684197.907:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24431 comm="syz.5.1807" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 308.854930][ T40] audit: type=1326 audit(1758684197.907:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24431 comm="syz.5.1807" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 308.862856][ T40] audit: type=1326 audit(1758684197.907:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24431 comm="syz.5.1807" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 308.871362][ T40] audit: type=1326 audit(1758684197.907:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24431 comm="syz.5.1807" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 309.295328][ T9711] usb 48-1: device descriptor read/8, error -110 [ 309.534556][ T9711] usb 48-1: SetAddress Request (5) to port 0 [ 309.536631][ T9711] usb 48-1: new SuperSpeed USB device number 5 using vhci_hcd [ 310.043220][T24472] 8021q: VLANs not supported on ip6gre0 [ 311.425216][T24497] tipc: Started in network mode [ 311.427413][T24497] tipc: Node identity 4, cluster identity 4711 [ 311.430010][T24497] tipc: Node number set to 4 [ 311.812320][T24502] netlink: 'syz.5.1828': attribute type 1 has an invalid length. [ 311.825216][T24502] 8021q: adding VLAN 0 to HW filter on device bond7 [ 311.861980][T24502] 8021q: adding VLAN 0 to HW filter on device bond7 [ 311.864393][T24502] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 311.873121][T24502] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 311.918920][T24509] gretap1: entered promiscuous mode [ 311.923915][T24509] bond7: (slave gretap1): making interface the new active one [ 311.930235][T24509] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 312.014204][T24502] macvlan0: entered promiscuous mode [ 312.016420][T24502] macvlan0: entered allmulticast mode [ 312.021485][T24502] bond7: entered promiscuous mode [ 312.026990][T24502] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 312.042517][T24502] bond7: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 312.052790][T24502] bond7: left promiscuous mode [ 312.134596][ T24] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 312.317254][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 312.322561][ T24] usb 9-1: unable to get BOS descriptor or descriptor too short [ 312.327366][ T24] usb 9-1: config 4 interface 0 has no altsetting 0 [ 312.333423][ T24] usb 9-1: string descriptor 0 read error: -22 [ 312.337859][ T24] usb 9-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 312.341965][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.355569][ T24] usb 9-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 312.364997][ T24] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 312.369650][ T24] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 312.373200][ T24] usb 9-1: media controller created [ 312.396524][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 312.566801][ T24] zl10353_read_register: readreg error (reg=127, ret==0) [ 312.602411][ T24] usb 9-1: USB disconnect, device number 12 [ 313.624153][T24549] netlink: 'syz.4.1844': attribute type 1 has an invalid length. [ 313.650440][T24549] 8021q: adding VLAN 0 to HW filter on device bond6 [ 313.716544][T24549] bond6: (slave veth3): Enslaving as an active interface with a down link [ 313.738431][ T5991] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 313.742554][ T5991] CPU: 1 UID: 0 PID: 5991 Comm: kworker/u33:7 Not tainted syzkaller #0 PREEMPT(full) [ 313.742572][ T5991] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 313.742581][ T5991] Workqueue: hci3 hci_rx_work [ 313.742600][ T5991] Call Trace: [ 313.742605][ T5991] [ 313.742610][ T5991] dump_stack_lvl+0x16c/0x1f0 [ 313.742629][ T5991] sysfs_warn_dup+0x7f/0xa0 [ 313.742644][ T5991] sysfs_create_dir_ns+0x24b/0x2b0 [ 313.742658][ T5991] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 313.742671][ T5991] ? find_held_lock+0x2b/0x80 [ 313.742685][ T5991] ? do_raw_spin_unlock+0x172/0x230 [ 313.742702][ T5991] kobject_add_internal+0x2c4/0x9b0 [ 313.742717][ T5991] kobject_add+0x16e/0x240 [ 313.742728][ T5991] ? __pfx_kobject_add+0x10/0x10 [ 313.742739][ T5991] ? do_raw_spin_unlock+0x172/0x230 [ 313.742756][ T5991] ? kobject_put+0xab/0x5a0 [ 313.742769][ T5991] device_add+0x288/0x1aa0 [ 313.742782][ T5991] ? __pfx_dev_set_name+0x10/0x10 [ 313.742795][ T5991] ? __pfx_device_add+0x10/0x10 [ 313.742812][ T5991] ? mgmt_send_event_skb+0x2fb/0x460 [ 313.742831][ T5991] hci_conn_add_sysfs+0x17e/0x230 [ 313.742848][ T5991] le_conn_complete_evt+0x1075/0x1d70 [ 313.742863][ T5991] ? preempt_count_sub+0x130/0x160 [ 313.742880][ T5991] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 313.742894][ T5991] ? hci_event_packet+0x459/0x11c0 [ 313.742912][ T5991] hci_le_conn_complete_evt+0x23c/0x370 [ 313.742930][ T5991] hci_le_meta_evt+0x354/0x5e0 [ 313.742945][ T5991] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 313.742961][ T5991] hci_event_packet+0x682/0x11c0 [ 313.742975][ T5991] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 313.742990][ T5991] ? __pfx_hci_event_packet+0x10/0x10 [ 313.743005][ T5991] ? kcov_remote_start+0x3c9/0x6d0 [ 313.743020][ T5991] ? lockdep_hardirqs_on+0x7c/0x110 [ 313.743039][ T5991] hci_rx_work+0x2c5/0x16b0 [ 313.743055][ T5991] ? rcu_is_watching+0x12/0xc0 [ 313.743068][ T5991] process_one_work+0x9cf/0x1b70 [ 313.743090][ T5991] ? __pfx_process_one_work+0x10/0x10 [ 313.743111][ T5991] ? assign_work+0x1a0/0x250 [ 313.743128][ T5991] worker_thread+0x6c8/0xf10 [ 313.743143][ T5991] ? __kthread_parkme+0x19e/0x250 [ 313.743156][ T5991] ? __pfx_worker_thread+0x10/0x10 [ 313.743166][ T5991] kthread+0x3c5/0x780 [ 313.743182][ T5991] ? __pfx_kthread+0x10/0x10 [ 313.743198][ T5991] ? rcu_is_watching+0x12/0xc0 [ 313.743208][ T5991] ? __pfx_kthread+0x10/0x10 [ 313.743224][ T5991] ret_from_fork+0x56d/0x730 [ 313.743240][ T5991] ? __pfx_kthread+0x10/0x10 [ 313.743256][ T5991] ret_from_fork_asm+0x1a/0x30 [ 313.743276][ T5991] [ 313.743291][ T5991] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 313.761616][T24549] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 313.763208][ T5991] Bluetooth: hci3: failed to register connection device [ 313.790747][T24549] vlan4: entered allmulticast mode [ 313.862770][T24549] veth0_to_bond: entered allmulticast mode [ 313.867017][T24549] veth0_to_bond: entered promiscuous mode [ 313.870777][T24549] veth0_to_bond: left promiscuous mode [ 313.873829][T24549] veth0_to_bond: entered promiscuous mode [ 313.876526][T24549] bond6: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 313.883926][T24549] veth0_to_bond: left promiscuous mode [ 313.916512][T24556] tipc: Enabled bearer , priority 10 [ 314.575482][ T9711] usb 48-1: device descriptor read/8, error -110 [ 314.621350][T24567] tipc: Enabled bearer , priority 0 [ 314.625370][T24567] syzkaller0: entered promiscuous mode [ 314.627721][T24567] syzkaller0: entered allmulticast mode [ 314.651655][T24567] tipc: Resetting bearer [ 314.660006][T24566] tipc: Resetting bearer [ 314.671361][T24566] tipc: Disabling bearer [ 314.685250][ T9711] usb usb48-port1: unable to enumerate USB device [ 314.898427][ T40] kauditd_printk_skb: 484 callbacks suppressed [ 314.898440][ T40] audit: type=1800 audit(1758684204.107:1444): pid=24574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1851" name="nullb0" dev="tmpfs" ino=2714 res=0 errno=0 [ 315.892238][ T40] audit: type=1326 audit(1758684205.097:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24596 comm="syz.5.1859" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 315.907203][ T40] audit: type=1326 audit(1758684205.097:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24596 comm="syz.5.1859" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 315.921593][ T40] audit: type=1326 audit(1758684205.097:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24596 comm="syz.5.1859" exe="/syz-executor" sig=0 arch=40000003 syscall=374 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 315.934586][ T40] audit: type=1326 audit(1758684205.097:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24596 comm="syz.5.1859" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 315.944796][ T40] audit: type=1326 audit(1758684205.097:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24596 comm="syz.5.1859" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 315.955361][ T40] audit: type=1326 audit(1758684205.097:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24596 comm="syz.5.1859" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 315.974670][ T40] audit: type=1326 audit(1758684205.097:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24596 comm="syz.5.1859" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 315.988574][ T40] audit: type=1326 audit(1758684205.097:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24596 comm="syz.5.1859" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 315.998693][ T40] audit: type=1326 audit(1758684205.097:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24596 comm="syz.5.1859" exe="/syz-executor" sig=0 arch=40000003 syscall=343 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 316.110826][T24604] netlink: 'syz.4.1861': attribute type 1 has an invalid length. [ 316.158958][T24604] 8021q: adding VLAN 0 to HW filter on device bond7 [ 316.213652][T24604] 8021q: adding VLAN 0 to HW filter on device bond7 [ 316.218174][T24604] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 316.225919][T24604] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 316.260238][T24607] gretap2: entered promiscuous mode [ 316.268563][T24607] bond7: (slave gretap2): making interface the new active one [ 316.272015][T24607] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 316.303243][T24607] macvlan2: entered promiscuous mode [ 316.315582][T24607] macvlan2: entered allmulticast mode [ 316.319048][T24607] bond7: entered promiscuous mode [ 316.322363][T24607] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 316.340862][T24607] bond7: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 316.350829][T24607] bond7: left promiscuous mode [ 316.678920][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.681508][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.907382][T24620] netlink: 'syz.0.1864': attribute type 10 has an invalid length. [ 316.917037][T24620] bridge0: entered promiscuous mode [ 316.925869][T24620] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 316.946392][T24615] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 317.200125][T24625] delete_channel: no stack [ 317.643698][T24637] tipc: Enabled bearer , priority 0 [ 317.646721][T24637] syzkaller0: entered promiscuous mode [ 317.648577][T24637] syzkaller0: entered allmulticast mode [ 317.655567][T24637] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 317.680391][T24637] tipc: Resetting bearer [ 317.687625][T24636] tipc: Resetting bearer [ 317.699981][T24636] tipc: Disabling bearer [ 322.083579][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 322.083590][ T40] audit: type=1326 audit(1758684440.296:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24702 comm="syz.0.1886" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 322.113681][ T40] audit: type=1326 audit(1758684440.296:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24702 comm="syz.0.1886" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 322.123063][ T40] audit: type=1326 audit(1758684440.296:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24702 comm="syz.0.1886" exe="/syz-executor" sig=0 arch=40000003 syscall=374 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 322.132415][ T40] audit: type=1326 audit(1758684440.296:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24702 comm="syz.0.1886" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 322.141827][ T40] audit: type=1326 audit(1758684440.296:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24702 comm="syz.0.1886" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 322.151808][ T40] audit: type=1326 audit(1758684440.306:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24702 comm="syz.0.1886" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 322.238120][ T40] audit: type=1326 audit(1758684440.306:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24702 comm="syz.0.1886" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 322.304945][ T40] audit: type=1326 audit(1758684440.306:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24702 comm="syz.0.1886" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 322.317932][ T40] audit: type=1326 audit(1758684440.306:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24702 comm="syz.0.1886" exe="/syz-executor" sig=0 arch=40000003 syscall=343 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 322.325927][ T40] audit: type=1326 audit(1758684669.310:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24702 comm="syz.0.1886" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 324.236506][T24740] netlink: 'syz.1.1896': attribute type 1 has an invalid length. [ 324.250082][T24740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.353356][T24740] bond0: (slave veth13): Enslaving as an active interface with a down link [ 324.366672][T24744] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 324.663454][T24740] vlan0: entered allmulticast mode [ 324.665183][T24740] veth0_to_bond: entered allmulticast mode [ 324.667619][T24740] veth0_to_bond: entered promiscuous mode [ 324.670498][T24740] veth0_to_bond: left promiscuous mode [ 324.672904][T24740] veth0_to_bond: entered promiscuous mode [ 324.675659][T24740] bond0: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 324.683191][T24740] veth0_to_bond: left promiscuous mode [ 325.179975][T24752] netlink: 'syz.0.1898': attribute type 1 has an invalid length. [ 325.200061][T24752] 8021q: adding VLAN 0 to HW filter on device bond5 [ 325.238901][T24752] 8021q: adding VLAN 0 to HW filter on device bond5 [ 325.241881][T24752] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 325.247764][T24752] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 325.258907][T24755] tipc: Enabled bearer , priority 0 [ 325.262150][T24755] syzkaller0: entered promiscuous mode [ 325.263906][T24755] syzkaller0: entered allmulticast mode [ 325.278394][T24755] tipc: Resetting bearer [ 325.287193][T24757] gretap2: entered promiscuous mode [ 325.291979][T24757] bond5: (slave gretap2): making interface the new active one [ 325.297153][T24757] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 325.301258][T24754] tipc: Resetting bearer [ 325.317574][T24754] tipc: Disabling bearer [ 325.336745][T24757] macvlan0: entered promiscuous mode [ 325.338923][T24757] macvlan0: entered allmulticast mode [ 325.341611][T24757] bond5: entered promiscuous mode [ 325.344311][T24757] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 325.352619][T24757] bond5: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 325.360146][T24757] bond5: left promiscuous mode [ 326.372401][T24776] tipc: Cannot configure node identity twice [ 326.877874][T24787] gretap2: left promiscuous mode [ 327.627995][T24802] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 328.279294][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 328.279305][ T40] audit: type=1326 audit(1758684675.490:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24804 comm="syz.1.1910" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 328.289627][ T40] audit: type=1326 audit(1758684675.490:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24804 comm="syz.1.1910" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 328.298805][ T40] audit: type=1326 audit(1758684675.490:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24804 comm="syz.1.1910" exe="/syz-executor" sig=0 arch=40000003 syscall=374 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 328.308041][ T40] audit: type=1326 audit(1758684675.490:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24804 comm="syz.1.1910" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 328.317340][ T40] audit: type=1326 audit(1758684675.490:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24804 comm="syz.1.1910" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 328.327456][ T40] audit: type=1326 audit(1758684675.490:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24804 comm="syz.1.1910" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 328.336915][ T40] audit: type=1326 audit(1758684675.490:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24804 comm="syz.1.1910" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 328.347515][ T40] audit: type=1326 audit(1758684675.490:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24804 comm="syz.1.1910" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 328.356537][ T40] audit: type=1326 audit(1758684675.490:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24804 comm="syz.1.1910" exe="/syz-executor" sig=0 arch=40000003 syscall=343 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 328.366581][ T40] audit: type=1326 audit(1758684904.504:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24804 comm="syz.1.1910" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 329.436362][T24821] tipc: Cannot configure node identity twice [ 330.095986][T24834] netlink: 'syz.0.1920': attribute type 1 has an invalid length. [ 330.136457][T24834] 8021q: adding VLAN 0 to HW filter on device bond6 [ 330.204705][T24834] bond6: (slave veth7): Enslaving as an active interface with a down link [ 330.263994][T24834] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 330.281468][T24834] vlan1: entered allmulticast mode [ 330.284259][T24834] veth0_to_bond: entered allmulticast mode [ 330.289039][T24834] veth0_to_bond: entered promiscuous mode [ 330.292332][T24834] veth0_to_bond: left promiscuous mode [ 330.294730][T24834] veth0_to_bond: entered promiscuous mode [ 330.297454][T24834] bond6: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 330.338280][T24834] veth0_to_bond: left promiscuous mode [ 334.029115][ T40] kauditd_printk_skb: 32 callbacks suppressed [ 334.029131][ T40] audit: type=1326 audit(1758684910.244:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24862 comm="syz.5.1927" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 334.049747][ T40] audit: type=1326 audit(1758684910.254:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24862 comm="syz.5.1927" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 334.056755][ T40] audit: type=1326 audit(1758684910.254:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24862 comm="syz.5.1927" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 334.064997][ T40] audit: type=1326 audit(1758684910.254:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24862 comm="syz.5.1927" exe="/syz-executor" sig=0 arch=40000003 syscall=196 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 334.073212][ T40] audit: type=1326 audit(1758684910.254:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24862 comm="syz.5.1927" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 334.366036][T24868] netlink: 'syz.4.1929': attribute type 1 has an invalid length. [ 334.378804][T24868] 8021q: adding VLAN 0 to HW filter on device bond8 [ 334.382283][T24865] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1931'. [ 334.457035][T24865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.460844][T24865] bond0 (unregistering): Released all slaves [ 334.474619][T24868] 8021q: adding VLAN 0 to HW filter on device bond8 [ 334.476870][T24868] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 334.480715][T24868] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 334.494136][T24872] macvlan2: entered promiscuous mode [ 334.497880][T24872] macvlan2: entered allmulticast mode [ 334.500873][T24872] bond8: entered promiscuous mode [ 334.503779][T24872] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 334.516517][T24872] bond8: left promiscuous mode [ 334.682149][T24880] netlink: 'syz.1.1934': attribute type 1 has an invalid length. [ 334.721454][T24880] 8021q: adding VLAN 0 to HW filter on device bond6 [ 334.745274][T24880] 8021q: adding VLAN 0 to HW filter on device bond6 [ 334.749190][T24880] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 334.756897][T24880] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 334.831746][T24886] veth15: entered promiscuous mode [ 334.841872][T24886] bond6: (slave veth15): Enslaving as an active interface with a down link [ 334.936006][T24880] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1934'. [ 334.939803][T24880] 8021q: adding VLAN 0 to HW filter on device bond6 [ 337.779326][T24910] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1941'. [ 337.906767][T24910] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 337.921381][T24910] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.927385][T24910] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 337.930819][T24910] bond0 (unregistering): Released all slaves [ 340.683928][T24954] netlink: 'syz.5.1948': attribute type 1 has an invalid length. [ 340.706348][T24954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.740155][T24954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.743410][T24954] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 340.749005][T24954] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 340.815249][T24957] veth15: entered promiscuous mode [ 340.821822][T24957] bond0: (slave veth15): Enslaving as an active interface with a down link [ 340.880989][T24954] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1948'. [ 340.885226][T24954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.193100][T25009] netlink: 'syz.4.1960': attribute type 1 has an invalid length. [ 344.210296][T25009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.228935][T25009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.231814][T25009] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address [ 344.237392][T25009] bond0: (slave vxcan1): Error -95 calling set_mac_address [ 344.311230][T25016] veth5: entered promiscuous mode [ 344.317572][T25016] bond0: (slave veth5): Enslaving as an active interface with a down link [ 344.412745][T25009] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1960'. [ 344.416408][T25009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.790912][T25045] netlink: 4400 bytes leftover after parsing attributes in process `syz.5.1967'. [ 345.810839][T25045] debugfs: 'Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç' already exists in 'ieee80211' [ 346.789971][T25067] netlink: 4400 bytes leftover after parsing attributes in process `syz.4.1979'. [ 346.810331][T25067] debugfs: 'Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç' already exists in 'ieee80211' [ 351.589953][T25116] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1978'. [ 351.777908][T25116] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 351.780950][T25116] bridge0: left promiscuous mode [ 351.782934][T25116] bond0 (unregistering): Released all slaves [ 353.378430][T25132] delete_channel: no stack [ 354.967625][T25164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1994'. [ 355.558702][T25168] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 355.561418][T25168] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 355.566583][T25168] vhci_hcd vhci_hcd.0: Device attached [ 356.067958][T25174] netlink: 'syz.0.1997': attribute type 4 has an invalid length. [ 356.125152][T25169] vhci_hcd: connection closed [ 356.125364][ T8013] vhci_hcd: stop threads [ 356.129325][ T8013] vhci_hcd: release socket [ 356.132477][ T8013] vhci_hcd: disconnect device [ 356.144647][ T9715] usb 46-1: enqueue for inactive port 0 [ 356.815969][T25182] delete_channel: no stack [ 356.860779][ T9715] usb usb46-port1: attempt power cycle [ 357.785525][ T9715] usb usb46-port1: unable to enumerate USB device [ 358.645689][T25209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2006'. [ 359.480242][T25222] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 359.489579][T25222] cramfs: wrong magic [ 359.852243][T25233] tipc: Enabling of bearer rejected, already enabled [ 362.677057][T25264] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.2016'. [ 362.689122][T25264] debugfs: 'Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç' already exists in 'ieee80211' [ 362.902807][T25265] udevd[25265]: failed to send result of seq 21976 to main daemon: Connection refused [ 363.286988][T25267] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2020'. [ 363.535743][T25280] tipc: Enabling of bearer rejected, failed to enable media [ 363.853805][T25290] netlink: 'syz.0.2029': attribute type 5 has an invalid length. [ 363.858743][T25290] netlink: 'syz.0.2029': attribute type 7 has an invalid length. [ 364.081764][T25290] : entered promiscuous mode [ 364.703509][T25295] netlink: 'gtp': attribute type 4 has an invalid length. [ 366.132418][T25326] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2034'. [ 367.774187][T25330] netlink: 'syz.1.2036': attribute type 5 has an invalid length. [ 367.777860][T25330] netlink: 'syz.1.2036': attribute type 7 has an invalid length. [ 367.789003][T25330] : entered promiscuous mode [ 368.404580][ T9029] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 368.674606][ T9029] usb 10-1: Using ep0 maxpacket: 32 [ 368.679367][ T9029] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.684080][ T9029] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.690625][ T9029] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 368.694406][ T9029] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.708046][ T9029] usb 10-1: config 0 descriptor?? [ 369.152461][ T9029] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 369.450822][ T6053] usb 10-1: USB disconnect, device number 5 [ 370.557918][T25388] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 370.565782][T25388] cramfs: wrong magic [ 371.685344][T25407] tipc: Enabled bearer , priority 0 [ 371.688757][T25407] syzkaller0: entered promiscuous mode [ 371.691479][T25407] syzkaller0: entered allmulticast mode [ 371.719238][T25407] tipc: Resetting bearer [ 371.724391][T25406] tipc: Resetting bearer [ 371.746874][T25406] tipc: Disabling bearer [ 372.226659][ T5991] Bluetooth: hci0: unexpected event for opcode 0x202d [ 373.329900][ T40] audit: type=1326 audit(1758684949.544:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25439 comm="syz.4.2064" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 373.337178][ T40] audit: type=1326 audit(1758684949.544:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25439 comm="syz.4.2064" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 373.358133][ T40] audit: type=1326 audit(1758684949.544:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25439 comm="syz.4.2064" exe="/syz-executor" sig=0 arch=40000003 syscall=321 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 373.365681][ T40] audit: type=1326 audit(1758684949.544:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25439 comm="syz.4.2064" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 373.373593][ T40] audit: type=1326 audit(1758684949.544:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25439 comm="syz.4.2064" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 373.382885][ T40] audit: type=1326 audit(1758684949.544:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25439 comm="syz.4.2064" exe="/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 373.397397][ T40] audit: type=1326 audit(1758684949.544:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25439 comm="syz.4.2064" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 373.406088][ T40] audit: type=1326 audit(1758684949.544:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25439 comm="syz.4.2064" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 373.414202][ T40] audit: type=1326 audit(1758684949.544:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25439 comm="syz.4.2064" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 373.425572][ T40] audit: type=1326 audit(1758684949.544:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25439 comm="syz.4.2064" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 375.332773][T25471] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 375.335460][T25471] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 375.350782][T25471] vhci_hcd vhci_hcd.0: Device attached [ 375.372797][T25471] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(15) [ 375.375616][T25471] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 375.380211][T25471] vhci_hcd vhci_hcd.0: Device attached [ 375.539663][ T9029] vhci_hcd: vhci_device speed not set [ 375.846881][ T9029] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 375.872320][T25476] vhci_hcd: connection closed [ 375.872535][T25473] vhci_hcd: connection reset by peer [ 375.877079][ T8007] vhci_hcd: stop threads [ 375.884528][ T8007] vhci_hcd: release socket [ 375.886054][ T8007] vhci_hcd: disconnect device [ 375.887661][ T8007] vhci_hcd: stop threads [ 375.889405][ T8007] vhci_hcd: release socket [ 375.894518][ T8007] vhci_hcd: disconnect device [ 376.459169][T25492] tipc: Enabled bearer , priority 0 [ 376.504758][T25492] syzkaller0: entered promiscuous mode [ 376.506618][T25492] syzkaller0: entered allmulticast mode [ 376.567984][T25492] tipc: Resetting bearer [ 376.571688][T25491] tipc: Resetting bearer [ 376.585871][T25491] tipc: Disabling bearer [ 377.738461][T25509] 8021q: adding VLAN 0 to HW filter on device bond8 [ 377.754331][T25511] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 377.769273][T25511] bond8: (slave macvlan0): Enslaving as a backup interface with a down link [ 377.799316][T25509] bridge_slave_0: left allmulticast mode [ 377.801623][T25509] bridge_slave_0: left promiscuous mode [ 377.804141][T25509] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.828029][T25509] bridge_slave_1: left allmulticast mode [ 377.833788][T25509] bridge_slave_1: left promiscuous mode [ 377.846195][T25509] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.871307][T25509] bond6: (slave veth0_to_bond): Releasing active interface [ 377.879974][T25509] team0: Port device team_slave_1 removed [ 377.887095][T25509] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.891870][T25509] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.902102][T25509] bond1: (slave bond2): Releasing backup interface [ 377.912210][T25509] bond3: (slave ip6gretap1): Releasing active interface [ 377.915416][T25509] bond3: (slave ip6gretap1): the permanent HWaddr of slave - c6:aa:be:61:4c:ed - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 377.957250][T25509] bond3: (slave veth5): Releasing active interface [ 377.969860][T25509] bond4: (slave erspan1): Releasing active interface [ 377.986073][T25509] bond5: (slave veth9): Releasing active interface [ 378.006456][T25509] bond6: (slave veth13): Releasing active interface [ 378.016982][T25509] bond7: (slave gretap1): Releasing active interface [ 378.020222][T25509] bond0: (slave veth15): Releasing active interface [ 378.025391][T25509] bond8: (slave macvlan0): Releasing backup interface [ 378.097641][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.099900][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.156757][T25517] usb usb5: usbfs: process 25517 (syz.4.2085) did not claim interface 0 before use [ 378.261337][T25529] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.996062][T25537] hsr0: entered allmulticast mode [ 378.997733][T25537] hsr_slave_0: entered allmulticast mode [ 378.999936][T25537] hsr_slave_1: entered allmulticast mode [ 379.004161][T25537] hsr_slave_0: left promiscuous mode [ 379.007095][T25537] hsr_slave_1: left promiscuous mode [ 379.030014][T25537] hsr0 (unregistering): left allmulticast mode [ 380.785152][T25562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2096'. [ 380.964655][ T9029] vhci_hcd: vhci_device speed not set [ 381.805012][T25586] tipc: Enabling of bearer rejected, already enabled [ 383.151723][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 383.151740][ T40] audit: type=1804 audit(1758684959.364:1583): pid=25614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2112" name="/newroot/387/bus" dev="tmpfs" ino=2079 res=1 errno=0 [ 384.400076][T25630] tipc: Enabling of bearer rejected, failed to enable media [ 384.803806][ T6053] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 384.807591][ T6053] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 384.810281][ T6053] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 384.813404][ T6053] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 384.816517][ T6053] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 384.821760][ T6053] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 384.824727][ T6053] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 384.827193][ T6053] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 384.829750][ T6053] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 384.832154][ T6053] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 384.839090][ T6053] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [syz0] on syz0 [ 385.039474][ T40] audit: type=1326 audit(1758684961.254:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25647 comm="syz.0.2122" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 385.053424][ T40] audit: type=1326 audit(1758684961.254:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25647 comm="syz.0.2122" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 385.074183][ T40] audit: type=1326 audit(1758684961.254:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25647 comm="syz.0.2122" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 385.090790][ T40] audit: type=1326 audit(1758684961.254:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25647 comm="syz.0.2122" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 385.102756][ T40] audit: type=1326 audit(1758684961.254:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25647 comm="syz.0.2122" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 385.112516][ T40] audit: type=1326 audit(1758684961.254:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25647 comm="syz.0.2122" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 385.122143][ T40] audit: type=1326 audit(1758684961.254:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25647 comm="syz.0.2122" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 385.133123][ T40] audit: type=1326 audit(1758684961.254:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25647 comm="syz.0.2122" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 385.144689][ T40] audit: type=1326 audit(1758684961.254:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25647 comm="syz.0.2122" exe="/syz-executor" sig=0 arch=40000003 syscall=187 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 387.594118][T25693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.637640][T25693] syz_tun: left allmulticast mode [ 387.639289][T25693] syz_tun: left promiscuous mode [ 387.640949][T25693] bridge0: port 1(syz_tun) entered disabled state [ 387.655339][T25693] bond6: (slave veth0_to_bond): Releasing active interface [ 387.933812][T25693] bond1: (slave geneve2): Releasing active interface [ 387.940010][T25693] bond3: (slave gretap1): Releasing active interface [ 387.946256][T25693] bond4: (slave veth3): Releasing active interface [ 387.951105][T25693] bond5: (slave gretap2): Releasing active interface [ 387.956807][T25693] bond6: (slave veth7): Releasing active interface [ 389.201537][ T5991] Bluetooth: hci1: unexpected event for opcode 0x202d [ 390.871033][T25741] 8021q: adding VLAN 0 to HW filter on device bond7 [ 390.892125][T25741] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 390.895606][T25741] bond7: (slave macvlan0): Enslaving as a backup interface with a down link [ 390.942048][T25741] syz_tun: left allmulticast mode [ 390.944505][T25741] syz_tun: left promiscuous mode [ 390.947254][T25741] bridge0: port 3(syz_tun) entered disabled state [ 390.961704][T25741] bridge_slave_0: left allmulticast mode [ 390.964101][T25741] bridge_slave_0: left promiscuous mode [ 390.977290][T25741] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.983603][T25741] bridge_slave_1: left allmulticast mode [ 390.987169][T25741] bridge_slave_1: left promiscuous mode [ 390.989678][T25741] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.009350][T25741] bond0: (slave veth0_to_bond): Releasing active interface [ 391.026680][T25741] team0: Port device team_slave_1 removed [ 391.031340][T25741] bond1: (slave gretap1): Releasing active interface [ 391.033809][T25741] gretap1: left allmulticast mode [ 391.039678][T25741] bond3: left allmulticast mode [ 391.041641][T25741] bond3: left promiscuous mode [ 391.043558][T25741] bridge4: port 1(bond3) entered disabled state [ 391.051398][T25741] geneve2: left allmulticast mode [ 391.053638][T25741] geneve2: left promiscuous mode [ 391.058549][T25741] bridge4: port 2(geneve2) entered disabled state [ 391.066547][T25741] bond0: (slave veth13): Releasing active interface [ 391.091977][T25741] bond6: (slave veth15): Releasing active interface [ 391.151624][T25741] bond7: (slave macvlan0): Releasing backup interface [ 391.194710][ T9029] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 391.227502][ T40] kauditd_printk_skb: 40 callbacks suppressed [ 391.227517][ T40] audit: type=1800 audit(1758684967.444:1633): pid=25751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2148" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 391.364610][ T9029] usb 9-1: Using ep0 maxpacket: 8 [ 391.368739][ T9029] usb 9-1: config 0 interface 0 has no altsetting 0 [ 391.371341][ T9029] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 391.374911][ T9029] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.381512][ T9029] usb 9-1: config 0 descriptor?? [ 391.801295][ T9029] mcp2221 0003:04D8:00DD.0006: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 392.801219][ T9029] usb 9-1: USB disconnect, device number 13 [ 393.764649][T25787] 8021q: adding VLAN 0 to HW filter on device bond9 [ 393.792269][T25787] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 393.797694][T25787] bond9: (slave macvlan2): Enslaving as a backup interface with a down link [ 393.810722][T25787] bridge_slave_0: left allmulticast mode [ 393.813050][T25787] bridge_slave_0: left promiscuous mode [ 393.816617][T25787] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.820391][T25787] bridge_slave_1: left allmulticast mode [ 393.822288][T25787] bridge_slave_1: left promiscuous mode [ 393.824284][T25787] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.829041][T25787] bond6: (slave veth0_to_bond): Releasing active interface [ 393.833483][T25787] team0: Port device team_slave_0 removed [ 393.840581][T25787] team0: Port device team_slave_1 removed [ 393.842586][T25787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.845983][T25787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.851993][T25787] bond1: (slave bond2): Releasing active interface [ 393.859041][T25787] bond4: (slave gretap1): Releasing active interface [ 393.866682][T25787] bond6: (slave veth3): Releasing active interface [ 393.874977][T25787] bond7: (slave gretap2): Releasing active interface [ 393.878877][T25787] bond0: (slave veth5): Releasing active interface [ 393.891065][T25787] bond9: (slave macvlan2): Releasing backup interface [ 394.832026][T25810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2165'. [ 399.859152][T25882] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2184'. [ 401.155251][T25911] tipc: Enabled bearer , priority 0 [ 401.161521][T25911] syzkaller0: entered promiscuous mode [ 401.164049][T25911] syzkaller0: entered allmulticast mode [ 401.186259][T25911] tipc: Resetting bearer [ 401.191252][T25910] tipc: Resetting bearer [ 401.202304][T25910] tipc: Disabling bearer [ 401.470355][T25916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2200'. [ 402.531018][T25928] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 402.745069][T25932] netlink: 136784 bytes leftover after parsing attributes in process `syz.4.2196'. [ 402.752506][T25932] netlink: zone id is out of range [ 402.754752][T25932] netlink: zone id is out of range [ 402.756806][T25932] netlink: zone id is out of range [ 402.758867][T25932] netlink: zone id is out of range [ 402.760896][T25932] netlink: zone id is out of range [ 402.762979][T25932] netlink: zone id is out of range [ 402.765132][T25932] netlink: zone id is out of range [ 402.767236][T25932] netlink: zone id is out of range [ 402.769426][T25932] netlink: zone id is out of range [ 402.771474][T25932] netlink: zone id is out of range [ 403.159920][ T24] hid_parser_main: 33 callbacks suppressed [ 403.159933][ T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 403.175326][ T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 403.178110][ T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 403.180764][ T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 403.183211][ T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 403.186204][ T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 403.194562][ T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 403.196988][ T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 403.200953][ T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 403.203493][ T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 403.213177][ T24] hid-generic 0000:0000:0000.0007: hidraw1: HID v0.00 Device [syz0] on syz0 [ 404.425991][T25961] tipc: Enabling of bearer rejected, failed to enable media [ 404.745916][T25975] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2207'. [ 405.684562][ T6053] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 405.849073][ T6053] usb 10-1: Using ep0 maxpacket: 8 [ 405.853517][ T6053] usb 10-1: config 0 interface 0 has no altsetting 0 [ 405.856969][ T6053] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 405.861138][ T6053] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.875390][ T6053] usb 10-1: config 0 descriptor?? [ 406.246033][T26004] block nbd0: server does not support multiple connections per device. [ 406.249186][T26004] block nbd0: shutting down sockets [ 406.310651][ T6053] mcp2221 0003:04D8:00DD.0008: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 406.901363][T26014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2224'. [ 407.131590][ T9715] usb 10-1: USB disconnect, device number 6 [ 407.917892][T26038] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2222'. [ 407.924513][ T9029] lo speed is unknown, defaulting to 1000 [ 408.102300][T26043] bridge0: port 1(erspan0) entered blocking state [ 408.106174][T26043] bridge0: port 1(erspan0) entered disabled state [ 408.108321][T26043] erspan0: entered allmulticast mode [ 408.113876][T26043] erspan0: entered promiscuous mode [ 412.393904][T26107] netlink: 136784 bytes leftover after parsing attributes in process `syz.0.2242'. [ 412.397459][T26107] net_ratelimit: 4052 callbacks suppressed [ 412.397470][T26107] netlink: zone id is out of range [ 412.402175][T26107] netlink: zone id is out of range [ 412.404312][T26107] netlink: zone id is out of range [ 412.406447][T26107] netlink: zone id is out of range [ 412.408179][T26107] netlink: zone id is out of range [ 412.409903][T26107] netlink: zone id is out of range [ 412.412607][T26107] netlink: zone id is out of range [ 412.416283][T26107] netlink: zone id is out of range [ 412.422614][T26107] netlink: zone id is out of range [ 412.426711][T26107] netlink: zone id is out of range [ 413.409206][T26122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2245'. [ 415.633351][T26161] gtp0: entered promiscuous mode [ 415.828160][T26166] netlink: 'syz.5.2261': attribute type 10 has an invalid length. [ 415.850278][T26166] syz_tun: entered promiscuous mode [ 416.415026][T26176] lo speed is unknown, defaulting to 1000 [ 416.490105][T26176] lo speed is unknown, defaulting to 1000 [ 417.477318][T26198] netlink: 'syz.4.2269': attribute type 11 has an invalid length. [ 417.480691][T26198] netlink: 212 bytes leftover after parsing attributes in process `syz.4.2269'. [ 417.486934][T26198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2269'. [ 417.654196][T26203] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2271'. [ 417.660967][T26203] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2271'. [ 417.665434][T26203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2271'. [ 418.156416][ T40] audit: type=1326 audit(1758684994.364:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26211 comm="syz.1.2275" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x0 [ 418.387117][T26222] No control pipe specified [ 418.391006][T26222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2278'. [ 418.626361][T26225] tipc: Enabled bearer , priority 0 [ 418.631601][T26225] syzkaller0: entered promiscuous mode [ 418.637669][T26225] syzkaller0: entered allmulticast mode [ 418.682543][T26225] tipc: Resetting bearer [ 418.697484][T26224] tipc: Resetting bearer [ 418.732716][T26224] tipc: Disabling bearer [ 419.857766][T26517] netlink: 'syz.5.2283': attribute type 11 has an invalid length. [ 419.860234][T26517] netlink: 212 bytes leftover after parsing attributes in process `syz.5.2283'. [ 419.863805][T26517] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2283'. [ 419.880760][T26517] erspan0: left allmulticast mode [ 419.882308][T26517] erspan0: left promiscuous mode [ 419.884029][T26517] bridge0: port 1(erspan0) entered disabled state [ 419.909534][T27333] netlink: 136784 bytes leftover after parsing attributes in process `syz.0.2284'. [ 419.912915][T27333] net_ratelimit: 4058 callbacks suppressed [ 419.912925][T27333] netlink: zone id is out of range [ 419.918397][T27333] netlink: zone id is out of range [ 419.920290][T27333] netlink: zone id is out of range [ 419.922501][T27333] netlink: zone id is out of range [ 419.924556][T27333] netlink: zone id is out of range [ 419.927013][T27333] netlink: zone id is out of range [ 419.929125][T27333] netlink: zone id is out of range [ 419.931283][T27333] netlink: zone id is out of range [ 419.933375][T27333] netlink: zone id is out of range [ 419.936693][T27333] netlink: zone id is out of range [ 419.942927][T27338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2286'. [ 419.988756][T27341] IPVS: length: 139 != 8 [ 420.198852][T27355] netlink: 'syz.0.2290': attribute type 1 has an invalid length. [ 420.209808][T27355] bond7: entered promiscuous mode [ 420.211701][T27355] 8021q: adding VLAN 0 to HW filter on device bond7 [ 420.241008][T27355] 8021q: adding VLAN 0 to HW filter on device bond7 [ 420.244224][T27355] bond7: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 420.248950][T27355] bond7: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 420.258185][T27355] bond7: (slave ip6gre1): making interface the new active one [ 420.261367][T27355] ip6gre1: entered promiscuous mode [ 420.265276][T27355] bond7: (slave ip6gre1): Enslaving as an active interface with an up link [ 420.387558][T27361] team0: Mode changed to "random" [ 420.391096][T27361] tipc: Enabled bearer , priority 0 [ 420.425268][T27363] No control pipe specified [ 421.502245][ T40] audit: type=1326 audit(1758684997.714:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27377 comm="syz.5.2299" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 421.510980][ T40] audit: type=1326 audit(1758684997.714:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27377 comm="syz.5.2299" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 421.519925][ T40] audit: type=1326 audit(1758684997.714:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27377 comm="syz.5.2299" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 421.528751][ T40] audit: type=1326 audit(1758684997.714:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27377 comm="syz.5.2299" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 421.537979][ T40] audit: type=1326 audit(1758684997.714:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27377 comm="syz.5.2299" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 421.545996][ T40] audit: type=1326 audit(1758684997.714:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27377 comm="syz.5.2299" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 421.555528][ T40] audit: type=1326 audit(1758684997.714:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27377 comm="syz.5.2299" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 421.563912][ T40] audit: type=1326 audit(1758684997.714:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27377 comm="syz.5.2299" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 421.572122][ T40] audit: type=1326 audit(1758684997.714:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27377 comm="syz.5.2299" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 422.316086][T27397] syz.5.2304 (27397): /proc/27397/oom_adj is deprecated, please use /proc/27397/oom_score_adj instead. [ 422.451142][T27400] netlink: 'syz.5.2304': attribute type 1 has an invalid length. [ 424.574167][T27427] lo speed is unknown, defaulting to 1000 [ 424.911033][T27427] lo speed is unknown, defaulting to 1000 [ 426.566149][T27459] __nla_validate_parse: 4 callbacks suppressed [ 426.566162][T27459] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2318'. [ 426.795245][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 426.795266][ T40] audit: type=1326 audit(1758685003.004:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27465 comm="syz.4.2324" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 426.815254][ T40] audit: type=1326 audit(1758685003.004:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27465 comm="syz.4.2324" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 426.824233][ T40] audit: type=1326 audit(1758685003.014:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27465 comm="syz.4.2324" exe="/syz-executor" sig=0 arch=40000003 syscall=164 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 426.839886][ T40] audit: type=1326 audit(1758685003.014:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27465 comm="syz.4.2324" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 426.849054][ T40] audit: type=1326 audit(1758685003.014:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27465 comm="syz.4.2324" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 426.858835][ T40] audit: type=1326 audit(1758685003.014:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27465 comm="syz.4.2324" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 426.868510][ T40] audit: type=1326 audit(1758685003.014:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27465 comm="syz.4.2324" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 426.878368][ T40] audit: type=1326 audit(1758685003.014:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27465 comm="syz.4.2324" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 426.887913][ T40] audit: type=1326 audit(1758685003.014:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27465 comm="syz.4.2324" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 426.898463][ T40] audit: type=1326 audit(1758685003.014:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27465 comm="syz.4.2324" exe="/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 427.123637][T27475] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 427.126405][T27475] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 427.199352][T27481] lo speed is unknown, defaulting to 1000 [ 427.385070][T27475] vhci_hcd vhci_hcd.0: Device attached [ 427.725598][T27476] vhci_hcd: connection closed [ 427.725810][ T7956] vhci_hcd: stop threads [ 427.728743][ T7956] vhci_hcd: release socket [ 427.731312][ T7956] vhci_hcd: disconnect device [ 427.754586][ T9715] vhci_hcd: vhci_device speed not set [ 427.758577][T27481] lo speed is unknown, defaulting to 1000 [ 429.278004][T27510] 9pnet_fd: Insufficient options for proto=fd [ 429.984943][T27530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2338'. [ 430.285363][T27534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2339'. [ 430.476698][T27538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2340'. [ 430.480796][T27538] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2340'. [ 430.528416][T27538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2340'. [ 431.766856][T27559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2346'. [ 432.141001][T27563] block nbd5: Attempted send on invalid socket [ 432.143456][T27563] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 432.147627][T27563] block nbd5: Attempted send on invalid socket [ 432.149586][T27563] I/O error, dev nbd5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 432.152936][T27563] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 432.158130][T27563] block nbd5: Attempted send on invalid socket [ 432.160208][T27563] I/O error, dev nbd5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 432.163826][T27563] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 432.168342][T27563] block nbd5: Attempted send on invalid socket [ 432.173388][T27563] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 432.175071][T27572] net_ratelimit: 4060 callbacks suppressed [ 432.175085][T27572] netlink: zone id is out of range [ 432.177955][T27563] block nbd5: Attempted send on invalid socket [ 432.179687][T27572] netlink: zone id is out of range [ 432.181764][T27563] I/O error, dev nbd5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 432.184263][T27572] netlink: zone id is out of range [ 432.186868][T27563] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 432.190273][T27572] netlink: zone id is out of range [ 432.193458][T27563] block nbd5: Attempted send on invalid socket [ 432.205995][T27572] netlink: zone id is out of range [ 432.211123][T27563] I/O error, dev nbd5, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 432.212881][T27572] netlink: zone id is out of range [ 432.212888][T27572] netlink: zone id is out of range [ 432.217527][T27563] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 432.220884][T27572] netlink: zone id is out of range [ 432.226831][ T8510] block nbd5: Attempted send on invalid socket [ 432.229685][ T8510] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 432.229836][T27572] netlink: zone id is out of range [ 432.234087][T27563] block nbd5: Attempted send on invalid socket [ 432.235897][T27572] netlink: zone id is out of range [ 432.240846][T27563] I/O error, dev nbd5, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 432.244685][T27563] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 432.248735][T27563] block nbd5: Attempted send on invalid socket [ 432.251455][T27563] I/O error, dev nbd5, sector 4096 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 432.255766][T27563] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 432.259766][T27563] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 432.528020][T27587] gtp0: entered promiscuous mode [ 433.587376][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 433.587392][ T40] audit: type=1326 audit(1758685009.804:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27590 comm="syz.5.2356" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x0 [ 433.679775][ T40] audit: type=1326 audit(1758685009.894:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27592 comm="syz.1.2357" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 433.687290][ T40] audit: type=1326 audit(1758685009.894:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27592 comm="syz.1.2357" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 433.694903][ T40] audit: type=1326 audit(1758685009.894:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27592 comm="syz.1.2357" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 433.702090][ T40] audit: type=1326 audit(1758685009.894:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27592 comm="syz.1.2357" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 433.710580][ T40] audit: type=1326 audit(1758685009.894:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27592 comm="syz.1.2357" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 433.718524][ T40] audit: type=1326 audit(1758685009.894:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27592 comm="syz.1.2357" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 433.726281][ T40] audit: type=1326 audit(1758685009.894:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27592 comm="syz.1.2357" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 433.734039][ T40] audit: type=1326 audit(1758685009.894:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27592 comm="syz.1.2357" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 433.741617][ T40] audit: type=1326 audit(1758685009.894:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27592 comm="syz.1.2357" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 435.400456][T27612] tipc: Cannot configure node identity twice [ 435.886937][T27633] vhci_hcd vhci_hcd.0: port 0 already used [ 437.818619][T27666] netlink: 'syz.4.2373': attribute type 1 has an invalid length. [ 437.840924][T27666] bond10: entered promiscuous mode [ 437.842755][T27666] 8021q: adding VLAN 0 to HW filter on device bond10 [ 437.888409][T27666] 8021q: adding VLAN 0 to HW filter on device bond10 [ 437.890762][T27666] bond10: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 437.894993][T27666] bond10: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 437.908781][T27666] bond10: (slave ip6gre2): making interface the new active one [ 437.911886][T27666] ip6gre2: entered promiscuous mode [ 437.914166][T27666] bond10: (slave ip6gre2): Enslaving as an active interface with an up link [ 439.065626][T27687] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 439.069877][T27687] cramfs: wrong magic [ 439.538126][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.906977][T27718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2383'. [ 440.913985][T27718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2383'. [ 440.956333][T27718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2383'. [ 443.622982][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 443.623025][ T40] audit: type=1326 audit(1758685019.834:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27745 comm="syz.4.2391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 443.633168][ T40] audit: type=1326 audit(1758685019.834:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27745 comm="syz.4.2391" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 443.640375][ T40] audit: type=1326 audit(1758685019.834:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27745 comm="syz.4.2391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 443.649337][ T40] audit: type=1326 audit(1758685019.834:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27745 comm="syz.4.2391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 443.664650][ T40] audit: type=1326 audit(1758685019.834:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27745 comm="syz.4.2391" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 443.675033][ T40] audit: type=1326 audit(1758685019.834:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27745 comm="syz.4.2391" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 443.687399][ T40] audit: type=1326 audit(1758685019.834:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27745 comm="syz.4.2391" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 443.700857][ T40] audit: type=1326 audit(1758685019.834:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27745 comm="syz.4.2391" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 443.716977][ T40] audit: type=1326 audit(1758685019.834:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27745 comm="syz.4.2391" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 443.834699][ T40] audit: type=1326 audit(1758685019.834:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27745 comm="syz.4.2391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 448.354962][T28683] netlink: 'syz.5.2407': attribute type 10 has an invalid length. [ 448.432948][T28682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 448.875731][T28688] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2408'. [ 450.072520][T28712] overlayfs: missing 'lowerdir' [ 451.647012][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 451.647028][ T40] audit: type=1804 audit(1758685027.864:1707): pid=28741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2422" name="/newroot/486/bus" dev="tmpfs" ino=2640 res=1 errno=0 [ 453.121701][T28750] overlayfs: missing 'lowerdir' [ 453.423208][ T40] audit: type=1326 audit(1758685029.634:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28754 comm="syz.4.2431" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ce579 code=0x0 [ 453.552585][T28761] 9pnet_fd: Insufficient options for proto=fd [ 453.745480][T28765] tipc: Enabling of bearer rejected, already enabled [ 455.755778][T28797] netlink: 'syz.0.2442': attribute type 10 has an invalid length. [ 455.780933][T28796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.531444][T28824] syz_tun: entered allmulticast mode [ 456.542734][T28823] syz_tun: left allmulticast mode [ 456.637668][T28827] netlink: 'syz.1.2446': attribute type 1 has an invalid length. [ 457.005902][T28827] bond8: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 457.055871][ T7960] net_ratelimit: 165 callbacks suppressed [ 457.055889][ T7960] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 457.058246][T28827] 8021q: adding VLAN 0 to HW filter on device bond8 [ 457.120776][T28827] veth17: entered promiscuous mode [ 457.127743][T28827] bond8: (slave veth17): Enslaving as a backup interface with a down link [ 457.164667][ T68] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 458.229391][ T5991] Bluetooth: hci0: unexpected event for opcode 0x2029 [ 458.460622][T28858] netlink: 'syz.4.2456': attribute type 10 has an invalid length. [ 458.487163][T28857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 462.279067][ T5991] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 462.282573][ T5991] Bluetooth: hci0: Injecting HCI hardware error event [ 462.287150][ T5991] Bluetooth: hci0: hardware error 0x00 [ 462.703222][T28930] netlink: 'syz.5.2473': attribute type 5 has an invalid length. [ 462.717931][T28930] netlink: 'syz.5.2473': attribute type 1 has an invalid length. [ 462.724833][T28930] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2473'. [ 462.883678][T28933] vlan1: entered promiscuous mode [ 462.887754][T28933] vlan1: entered allmulticast mode [ 462.890470][T28933] hsr_slave_1: entered allmulticast mode [ 463.006984][T28933] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2474'. [ 464.334574][ T5991] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 464.351633][ T40] audit: type=1326 audit(1758685040.564:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28947 comm="syz.0.2478" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705e579 code=0x0 [ 464.564549][ T8294] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 464.714616][ T8294] usb 9-1: Using ep0 maxpacket: 32 [ 464.719049][ T8294] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 464.721932][ T8294] usb 9-1: config 0 has no interface number 0 [ 464.724273][ T8294] usb 9-1: config 0 interface 184 has no altsetting 0 [ 464.730285][ T8294] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 464.734119][ T8294] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.738158][ T8294] usb 9-1: Product: syz [ 464.740290][ T8294] usb 9-1: Manufacturer: syz [ 464.742391][ T8294] usb 9-1: SerialNumber: syz [ 464.747992][ T8294] usb 9-1: config 0 descriptor?? [ 464.752747][ T8294] smsc75xx v1.0.0 [ 465.372649][ T8294] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 465.377203][ T8294] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 465.380953][ T8294] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 465.387150][ T8294] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -32 [ 466.863614][T28945] syz.4.2477 invoked oom-killer: gfp_mask=0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), order=0, oom_score_adj=1000 [ 466.869183][T28945] CPU: 1 UID: 0 PID: 28945 Comm: syz.4.2477 Not tainted syzkaller #0 PREEMPT(full) [ 466.869208][T28945] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 466.869219][T28945] Call Trace: [ 466.869225][T28945] [ 466.869232][T28945] dump_stack_lvl+0x16c/0x1f0 [ 466.869263][T28945] dump_header+0x101/0x930 [ 466.869280][T28945] oom_kill_process+0x272/0xa40 [ 466.869294][T28945] ? oom_cpuset_eligible.isra.0+0x199/0x2d0 [ 466.869309][T28945] out_of_memory+0x1405/0x1700 [ 466.869326][T28945] ? __pfx_out_of_memory+0x10/0x10 [ 466.869344][T28945] __alloc_frozen_pages_noprof+0x1d53/0x23f0 [ 466.869367][T28945] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 466.869382][T28945] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 466.869400][T28945] ? policy_nodemask+0xea/0x4e0 [ 466.869422][T28945] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 466.869439][T28945] ? policy_nodemask+0xea/0x4e0 [ 466.869455][T28945] alloc_pages_mpol+0x1fb/0x550 [ 466.869470][T28945] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 466.869486][T28945] ? filemap_get_entry+0x1a7/0x3b0 [ 466.869503][T28945] folio_alloc_noprof+0x20/0x2d0 [ 466.869519][T28945] filemap_alloc_folio_noprof+0x3a1/0x470 [ 466.869532][T28945] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 466.869548][T28945] __filemap_get_folio+0x5e1/0xc30 [ 466.869566][T28945] filemap_fault+0x661/0x2930 [ 466.869584][T28945] ? __pfx_filemap_fault+0x10/0x10 [ 466.869606][T28945] ? __pfx_filemap_map_pages+0x10/0x10 [ 466.869619][T28945] __do_fault+0x10d/0x490 [ 466.869634][T28945] ? __pfx_filemap_map_pages+0x10/0x10 [ 466.869647][T28945] do_pte_missing+0xf50/0x3ba0 [ 466.869658][T28945] ? find_held_lock+0x2b/0x80 [ 466.869670][T28945] ? __handle_mm_fault+0x14fd/0x2a50 [ 466.869684][T28945] __handle_mm_fault+0x152a/0x2a50 [ 466.869700][T28945] ? __pfx___handle_mm_fault+0x10/0x10 [ 466.869713][T28945] ? lock_vma_under_rcu+0x1eb/0x530 [ 466.869729][T28945] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 466.869746][T28945] handle_mm_fault+0x589/0xd10 [ 466.869757][T28945] ? rcu_watching_snap_stopped_since+0xc1/0x110 [ 466.869772][T28945] do_user_addr_fault+0x60c/0x1370 [ 466.869792][T28945] ? rcu_is_watching+0x12/0xc0 [ 466.869805][T28945] exc_page_fault+0x5c/0xb0 [ 466.869822][T28945] asm_exc_page_fault+0x26/0x30 [ 466.869832][T28945] RIP: 0023:0xf72238d9 [ 466.869847][T28945] Code: Unable to access opcode bytes at 0xf72238af. [ 466.869852][T28945] RSP: 002b:00000000ff841e60 EFLAGS: 00010286 [ 466.869861][T28945] RAX: 00000000f74659f0 RBX: 0000000000000001 RCX: 0000000000000000 [ 466.869868][T28945] RDX: 0000000000000000 RSI: 00000000f7465ff4 RDI: 00000000ff841eac [ 466.869874][T28945] RBP: 00000000f7465ff4 R08: 0000000000000000 R09: 0000000000000000 [ 466.869880][T28945] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 466.869887][T28945] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 466.869901][T28945] [ 466.869905][T28945] Mem-Info: [ 466.969464][T28945] active_anon:0 inactive_anon:299 isolated_anon:0 [ 466.969464][T28945] active_file:33 inactive_file:45 isolated_file:0 [ 466.969464][T28945] unevictable:1768 dirty:0 writeback:0 [ 466.969464][T28945] slab_reclaimable:6739 slab_unreclaimable:69654 [ 466.969464][T28945] mapped:24644 shmem:1768 pagetables:1642 [ 466.969464][T28945] sec_pagetables:342 bounce:0 [ 466.969464][T28945] kernel_misc_reclaimable:0 [ 466.969464][T28945] free:15267 free_pcp:173 free_cma:0 [ 466.984065][T28945] Node 0 active_anon:0kB inactive_anon:172kB active_file:0kB inactive_file:216kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:3192kB dirty:0kB writeback:0kB shmem:3664kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8248kB pagetables:1752kB sec_pagetables:1192kB all_unreclaimable? yes Balloon:0kB [ 466.994064][T28945] Node 1 active_anon:0kB inactive_anon:200kB active_file:228kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:95384kB dirty:0kB writeback:0kB shmem:3408kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8648kB pagetables:4816kB sec_pagetables:176kB all_unreclaimable? yes Balloon:0kB [ 467.015558][T28945] Node 0 DMA free:1860kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 467.049526][T28945] lowmem_reserve[]: 0 288 288 288 288 [ 467.051340][T28945] Node 0 DMA32 free:11868kB boost:0kB min:13220kB low:16524kB high:19828kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:176kB active_file:0kB inactive_file:216kB unevictable:3536kB writepending:0kB present:1032196kB managed:295076kB mlocked:0kB bounce:0kB free_pcp:136kB local_pcp:24kB free_cma:0kB [ 467.094544][T28945] lowmem_reserve[]: 0 0 0 0 0 [ 467.096825][T28945] Node 1 DMA32 free:46988kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:924kB active_file:60kB inactive_file:108kB unevictable:3536kB writepending:0kB present:1048432kB managed:948220kB mlocked:0kB bounce:0kB free_pcp:604kB local_pcp:108kB free_cma:0kB [ 467.117782][T28945] lowmem_reserve[]: 0 0 0 0 0 [ 467.119711][T28945] Node 0 DMA: 6*4kB (UM) 5*8kB (UM) 3*16kB (M) 3*32kB (UM) 4*64kB (M) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 1872kB [ 467.124399][T28945] Node 0 DMA32: 173*4kB (ME) 130*8kB (ME) 75*16kB (UME) 102*32kB (UME) 39*64kB (UME) 8*128kB (UME) 5*256kB (UME) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 11508kB [ 467.133308][T28945] Node 1 DMA32: 108*4kB (UM) 202*8kB (UM) 243*16kB (UME) 192*32kB (UME) 81*64kB (UME) 50*128kB (ME) 21*256kB (ME) 9*512kB (M) 13*1024kB (M) 0*2048kB 0*4096kB = 46960kB [ 467.159904][T28945] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 467.162940][T28945] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 467.182689][T28945] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 467.200386][T28945] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 467.203787][T28945] 2125 total pagecache pages [ 467.215185][T28945] 247 pages in swap cache [ 467.217086][T28945] Free swap = 8020kB [ 467.218829][T28945] Total swap = 124996kB [ 467.220608][T28945] 524155 pages RAM [ 467.222255][T28945] 0 pages HighMem/MovableOnly [ 467.224244][T28945] 209491 pages reserved [ 467.252768][T28945] 0 pages cma reserved [ 467.254809][T28945] Unreclaimable slab info: [ 467.257320][T28945] Name Used Total [ 467.260127][T28945] pid_3 31KB 31KB [ 467.262819][T28945] pid_2 157KB 307KB [ 467.267097][T28945] bio-360 7KB 7KB [ 467.269037][T28945] bio-424 8KB 8KB [ 467.270958][T28945] bio-440 8KB 8KB [ 467.273549][T28945] bio-536 15KB 15KB [ 467.276549][T28945] zspage-zswap1 149KB 149KB [ 467.279420][T28945] zs_handle-zswap1 213KB 220KB [ 467.281995][T28945] zswap_entry 566KB 616KB [ 467.284332][T28945] AF_VSOCK 122KB 122KB [ 467.295839][T28945] sw_flow_stats 4KB 4KB [ 467.300426][T28945] sw_flow 15KB 15KB [ 467.302877][T28945] batadv_tt_change_cache 16KB 16KB [ 467.322716][T28945] batadv_tl_cache 16KB 16KB [ 467.334505][T28945] ceph_osd_request 95KB 95KB [ 467.336968][T28945] ceph_msg 23KB 23KB [ 467.339530][T28945] IEEE-802.15.4-MAC 93KB 93KB [ 467.342104][T28945] p9_req_t 31KB 31KB [ 467.371511][T28945] SMC6 122KB 122KB [ 467.374092][T28945] SMC 122KB 122KB [ 467.386060][T28945] TIPC 123KB 123KB [ 467.388618][T28945] RDS 128KB 128KB [ 467.390697][T28945] rds_connection 23KB 23KB [ 467.392935][T28945] SCTPv6 120KB 120KB [ 467.425797][T28945] SCTP 122KB 122KB [ 467.428376][T28945] sctp_chunk 117KB 156KB [ 467.431038][T28945] sctp_bind_bucket 16KB 16KB [ 467.434020][T28945] PNPIPE 123KB 123KB [ 467.448836][T28945] PHONET 31KB 31KB [ 467.451457][T28945] L2TP/IPv6 127KB 127KB [ 467.453988][T28945] L2TP/IP 94KB 94KB [ 467.480681][T28945] KCM 124KB 124KB [ 467.485129][T28945] kcm_mux 63KB 63KB [ 467.487715][T28945] RXRPC 128KB 128KB [ 467.490352][T28945] rxrpc_call_jar 255KB 255KB [ 467.493060][T28945] can_gw 4KB 4KB [ 467.539564][T28945] can_receiver 11KB 11KB [ 467.542173][T28945] net_bridge_fdb_entry 98KB 118KB [ 467.581866][T28945] nf-frags 55KB 55KB [ 467.592934][T28945] MPTCPv6 125KB 125KB [ 467.602250][T28945] fib6_node 51KB 80KB [ 467.612639][T28945] ip6_dst_cache 112KB 250KB [ 467.623713][T28945] PINGv6 93KB 93KB [ 467.635585][T28945] RAWv6 186KB 186KB [ 467.638156][T28945] UDPLITEv6 127KB 127KB [ 467.640660][T28945] UDPv6 429KB 605KB [ 467.643193][T28945] tw_sock_TCPv6 7KB 7KB [ 467.662918][T28945] request_sock_TCPv6 7KB 7KB [ 467.691712][T28945] TCPv6 583KB 607KB [ 467.693988][T28945] ip_vs_conn 23KB 23KB [ 467.706062][T28945] nf_conntrack 96KB 173KB [ 467.708750][T28945] wg_peer 118KB 118KB [ 467.711310][T28945] allowedips_node 15KB 15KB [ 467.713801][T28945] t10_alua_lu_gp_cache 7KB 7KB [ 467.721661][T28945] scsi_sense_cache 48KB 48KB [ 467.755417][T28945] virtio_scsi_cmd 16KB 16KB [ 467.757830][T28945] bio-136 92KB 92KB [ 467.760207][T28945] io_kiocb 5425KB 5437KB [ 467.762635][T28945] bio-264 7KB 7KB [ 467.786325][T28945] mqueue_inode_cache 121KB 121KB [ 467.789143][T28945] f2fs_bio_post_read_ctx 23KB 23KB [ 467.791360][T28945] jfs_mp 7KB 7KB [ 467.793816][T28945] orangefs_op_cache 17KB 17KB [ 467.795969][T28945] fuse_request 111KB 190KB [ 467.797932][T28945] cifs_small_rq 16KB 16KB [ 467.799844][T28945] cifs_request 67KB 67KB [ 467.801818][T28945] cifs_mpx_ids 7KB 7KB [ 467.803773][T28945] cifs_io_subrequest 39KB 39KB [ 467.809906][T28945] cifs_io_request 95KB 95KB [ 467.812582][T28945] nfs_commit_data 15KB 15KB [ 467.815854][T28945] nfs_write_data 63KB 63KB [ 467.817829][T28945] jbd2_inode 11KB 11KB [ 467.819896][T28945] ext4_system_zone 3KB 3KB [ 467.822465][T28945] ext4_io_end_vec 15KB 15KB [ 467.831927][T28945] kioctx 127KB 127KB [ 467.834688][T28945] aio_kiocb 31KB 31KB [ 467.837203][T28945] userfaultfd_ctx_cache 63KB 63KB [ 467.839821][T28945] fanotify_fid_event 27KB 27KB [ 467.842359][T28945] fanotify_mark 11KB 11KB [ 467.844875][T28945] dnotify_mark 11KB 11KB [ 467.847400][T28945] dnotify_struct 11KB 11KB [ 467.849877][T28945] fasync_cache 15KB 15KB [ 467.852395][T28945] pid_namespace 30KB 30KB [ 467.855042][T28945] kvm_vcpu 123KB 123KB [ 467.857589][T28945] kvm_mmu_page_header 96KB 96KB [ 467.860166][T28945] pte_list_desc 63KB 63KB [ 467.862695][T28945] x86_emulator 120KB 120KB [ 467.865414][T28945] rpc_buffers 31KB 31KB [ 467.867914][T28945] rpc_tasks 7KB 7KB [ 467.870515][T28945] UNIX-STREAM 303KB 414KB [ 467.873270][T28945] UNIX 514KB 637KB [ 467.875938][T28945] ip4-frags 23KB 23KB [ 467.878531][T28945] mfc_cache 16KB 16KB [ 467.881052][T28945] UDP-Lite 124KB 124KB [ 467.883588][T28945] MPTCP 120KB 120KB [ 467.886201][T28945] request_sock_subflow_v6 7KB 7KB [ 467.888901][T28945] tcp_bind2_bucket 16KB 16KB [ 467.891360][T28945] tcp_bind_bucket 16KB 16KB [ 467.894011][T28945] inet_peer 12KB 12KB [ 467.896785][T28945] xfrm_dst 102KB 181KB [ 467.899171][T28945] xfrm_state 1527KB 1657KB [ 467.901612][T28945] ip_fib_trie 40KB 40KB [ 467.904065][T28945] ip_fib_alias 76KB 86KB [ 467.907503][T28945] rtable 272KB 284KB [ 467.910139][T28945] PING 121KB 121KB [ 467.912880][T28945] RAW 157KB 157KB [ 467.927216][T28945] UDP 124KB 124KB [ 467.929737][T28945] tw_sock_TCP 15KB 15KB [ 467.932176][T28945] request_sock_TCP 15KB 15KB [ 467.934780][T28945] TCP 494KB 637KB [ 467.937261][T28945] hugetlbfs_inode_cache 126KB 126KB [ 467.939835][T28945] fscache_cookie_jar 7KB 7KB [ 467.942037][T28945] netfs_subrequest 101KB 140KB [ 467.947521][T28945] netfs_request 285KB 350KB [ 467.949985][T28945] bio-280 15KB 15KB [ 467.952332][T28945] backing_aio 4KB 4KB [ 467.954926][T28945] ep_head 16KB 16KB [ 467.957460][T28945] eventpoll_pwq 23KB 23KB [ 467.960032][T28945] eventpoll_epi 74KB 74KB [ 467.962578][T28945] inotify_inode_mark 31KB 31KB [ 467.965260][T28945] sgpool-128 29KB 29KB [ 467.967760][T28945] sgpool-64 31KB 31KB [ 467.970261][T28945] sgpool-32 252KB 283KB [ 467.972833][T28945] sgpool-16 62KB 62KB [ 467.975531][T28945] sgpool-8 78KB 78KB [ 467.978127][T28945] bio_crypt_ctx 7KB 7KB [ 467.980484][T28945] bio_integrity_data 4KB 4KB [ 467.982980][T28945] request_queue 242KB 255KB [ 467.985448][T28945] blkdev_ioc 23KB 23KB [ 467.987907][T28945] bio-200 117KB 156KB [ 467.990446][T28945] biovec-max 607KB 782KB [ 467.993124][T28945] biovec-64 189KB 189KB [ 467.995745][T28945] biovec-16 39KB 39KB [ 467.998398][T28945] khugepaged_mm_slot 15KB 15KB [ 468.000915][T28945] ksm_mm_slot 12KB 12KB [ 468.003317][T28945] user_namespace 31KB 31KB [ 468.005783][T28945] uid_cache 31KB 31KB [ 468.008166][T28945] iommu_iova_magazine 1062KB 1071KB [ 468.010628][T28945] iommu_iova 264KB 264KB [ 468.013145][T28945] dmaengine-unmap-256 30KB 30KB [ 468.016412][T28945] dmaengine-unmap-128 30KB 30KB [ 468.019400][T28945] dmaengine-unmap-16 4KB 4KB [ 468.022222][T28945] dmaengine-unmap-2 4KB 4KB [ 468.033095][T28945] QIPCRTR 126KB 126KB [ 468.044598][T28945] audit_buffer 43KB 43KB [ 468.047047][T28945] skbuff_ext_cache 20KB 20KB [ 468.049524][T28945] skbuff_small_head 2840KB 3041KB [ 468.052188][T28945] skbuff_fclone_cache 393KB 484KB [ 468.064527][T28945] skbuff_head_cache 1804KB 1976KB [ 468.067091][T28945] configfs_dir_cache 16KB 16KB [ 468.069641][T28945] file_lease_cache 79KB 142KB [ 468.072175][T28945] file_lock_cache 110KB 158KB [ 468.075372][T28945] file_lock_ctx 19KB 19KB [ 468.077958][T28945] fsnotify_mark_connector 15KB 15KB [ 468.080391][T28945] posix_timers_cache 32KB 32KB [ 468.082598][T28945] taskstats 61KB 61KB [ 468.084802][T28945] mem_cgroup_per_node 109KB 123KB [ 468.086696][T28945] mem_cgroup 87KB 87KB [ 468.088555][T28945] proc_dir_entry 660KB 757KB [ 468.090365][T28945] pde_opener 15KB 15KB [ 468.092357][T28945] seq_file 78KB 117KB [ 468.094940][T28945] sigqueue 67KB 106KB [ 468.096887][T28945] shmem_inode_cache 7896KB 8097KB [ 468.099371][T28945] kernfs_iattrs_cache 15KB 15KB [ 468.102173][T28945] kernfs_node_cache 32335KB 32341KB [ 468.105780][T28945] mnt_cache 106KB 141KB [ 468.108094][T28945] bfilp 15KB 15KB [ 468.110544][T28945] filp 471KB 559KB [ 468.112946][T28945] names_cache 2405KB 3034KB [ 468.116174][T28945] net_namespace 135KB 135KB [ 468.118651][T28945] ima_iint_cache 55KB 55KB [ 468.121177][T28945] lsm_inode_cache 1459KB 1866KB [ 468.123679][T28945] lsm_file_cache 153KB 216KB [ 468.126143][T28945] key_jar 31KB 31KB [ 468.128524][T28945] uts_namespace 31KB 31KB [ 468.131173][T28945] nsproxy 15KB 15KB [ 468.133980][T28945] vm_area_struct 1095KB 1289KB [ 468.137236][T28945] fs_cache 52KB 96KB [ 468.139754][T28945] files_cache 211KB 430KB [ 468.142291][T28945] signal_cache 1100KB 1883KB [ 468.144385][T28945] sighand_cache 1410KB 2194KB [ 468.147683][T28945] task_struct 5528KB 5655KB [ 468.150087][T28945] cred 205KB 392KB [ 468.153135][T28945] anon_vma_chain 344KB 405KB [ 468.156590][T28945] anon_vma 379KB 486KB [ 468.158973][T28945] pid 235KB 409KB [ 468.161614][T28945] Acpi-Operand 279KB 396KB [ 468.164177][T28945] Acpi-ParseExt 63KB 90KB [ 468.166810][T28945] Acpi-Parse 67KB 106KB [ 468.168540][T28945] Acpi-State 86KB 122KB [ 468.170528][T28945] Acpi-Namespace 56KB 56KB [ 468.172940][T28945] shared_policy_node 16KB 16KB [ 468.178538][T28945] numa_policy 15KB 15KB [ 468.181187][T28945] perf_event 93KB 93KB [ 468.183142][T28945] trace_event_file 540KB 540KB [ 468.185593][T28945] ftrace_event_field 1008KB 1008KB [ 468.187394][T28945] pool_workqueue 1936KB 1936KB [ 468.189186][T28945] task_group 46KB 46KB [ 468.191596][T28945] maple_node 902KB 1496KB [ 468.193792][T28945] mm_struct 516KB 768KB [ 468.196708][T28945] vmap_area 411KB 530KB [ 468.199290][T28945] debug_objects_cache 2589KB 3145KB [ 468.201755][T28945] page->ptl 167KB 189KB [ 468.204054][T28945] kmalloc-cg-8k 2816KB 2912KB [ 468.206335][T28945] kmalloc-cg-4k 14640KB 14752KB [ 468.208786][T28945] kmalloc-cg-2k 10312KB 11328KB [ 468.211053][T28945] kmalloc-cg-1k 2100KB 2592KB [ 468.213044][T28945] kmalloc-cg-512 825KB 1424KB [ 468.216508][T28945] kmalloc-cg-256 492KB 624KB [ 468.218494][T28945] kmalloc-cg-128 222KB 308KB [ 468.221074][T28945] kmalloc-cg-64 173KB 368KB [ 468.223599][T28945] kmalloc-cg-32 82KB 220KB [ 468.226014][T28945] kmalloc-cg-16 36KB 48KB [ 468.228050][T28945] kmalloc-cg-8 30KB 32KB [ 468.230407][T28945] kmalloc-cg-192 92KB 112KB [ 468.232332][T28945] kmalloc-cg-96 80KB 88KB [ 468.235107][T28945] kmalloc-8k 5024KB 5440KB [ 468.237058][T28945] kmalloc-4k 20920KB 21184KB [ 468.239158][T28945] kmalloc-2k 12600KB 13920KB [ 468.241834][T28945] kmalloc-1k 8998KB 12480KB [ 468.243794][T28945] kmalloc-512 8275KB 10032KB [ 468.246097][T28945] kmalloc-256 6815KB 6816KB [ 468.248484][T28945] kmalloc-128 852KB 1104KB [ 468.250867][T28945] kmalloc-64 3020KB 3376KB [ 468.252910][T28945] kmalloc-32 2098KB 2680KB [ 468.258036][T28945] kmalloc-16 540KB 596KB [ 468.260308][T28945] kmalloc-8 947KB 1036KB [ 468.262250][T28945] kmalloc-192 1721KB 1788KB [ 468.264159][T28945] kmalloc-96 1409KB 1552KB [ 468.269776][T28945] kmem_cache_node 220KB 224KB [ 468.271625][T28945] kmem_cache 187KB 187KB [ 468.273554][T28945] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz4,task=syz.4.2477,pid=28945,uid=0 [ 468.296445][T28945] Out of memory (oom_kill_allocating_task): Killed process 28945 (syz.4.2477) total-vm:112624kB, anon-rss:0kB, file-rss:28664kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 468.683628][ T40] audit: type=1800 audit(1758685044.894:1710): pid=28978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2485" name="/" dev="9p" ino=1708457985 res=0 errno=0 [ 469.331133][ T9037] usb 9-1: USB disconnect, device number 14 [ 469.908207][ T40] audit: type=1804 audit(1758685046.124:1711): pid=29000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2490" name="/newroot/469/bus" dev="tmpfs" ino=2502 res=1 errno=0 [ 470.026682][T28998] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 471.797432][T29031] input: syz1 as /devices/virtual/input/input11 [ 472.466953][T29037] netlink: 'syz.4.2501': attribute type 5 has an invalid length. [ 473.582052][ T40] audit: type=1804 audit(1758685049.594:1712): pid=29057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2506" name="bus" dev="tmpfs" ino=3845 res=1 errno=0 [ 476.104551][ T5990] Bluetooth: hci1: command 0x0406 tx timeout [ 476.760174][T29086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2513'. [ 476.802795][T29088] netlink: 'syz.0.2519': attribute type 10 has an invalid length. [ 476.806465][T29088] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2519'. [ 476.811168][T29088] team0: Port device geneve0 added [ 476.813304][ T1141] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.816763][ T1141] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.820285][ T1141] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.823396][ T1141] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.168797][T29116] syz_tun: left promiscuous mode [ 478.178357][T29116] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.191212][T29116] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 478.197304][T29117] overlayfs: failed to clone lowerpath [ 478.203111][T29114] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 480.506829][T29156] overlayfs: missing 'lowerdir' [ 481.042771][T29162] netlink: 'syz.1.2539': attribute type 4 has an invalid length. [ 482.872560][T29204] veth5: left promiscuous mode [ 482.890624][T29204] bond10: left promiscuous mode [ 482.892862][T29204] ip6gre2: left promiscuous mode [ 483.489490][T29213] tipc: Enabled bearer , priority 0 [ 483.724659][T29223] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2545'. [ 484.657830][ T40] audit: type=1804 audit(1758685060.874:1713): pid=29241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2551" name="bus" dev="tmpfs" ino=3708 res=1 errno=0 [ 485.793228][T29257] input: syz1 as /devices/virtual/input/input12 [ 485.916971][T29259] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 485.927115][T29259] block device autoloading is deprecated and will be removed. [ 487.041654][T29278] openvswitch: netlink: Missing valid actions attribute. [ 487.044640][T29278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 487.454210][T29295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2563'. [ 488.027391][T29308] lo speed is unknown, defaulting to 1000 [ 488.163485][T29308] lo speed is unknown, defaulting to 1000 [ 489.028240][T29332] overlayfs: missing 'lowerdir' [ 490.144531][ T8294] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 490.424484][ T8294] usb 10-1: Using ep0 maxpacket: 8 [ 490.440240][ T8294] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 490.445628][ T8294] usb 10-1: config 0 has no interface number 0 [ 490.447791][ T8294] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 490.451381][ T8294] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 490.455718][ T8294] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 490.459389][ T8294] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 490.463687][ T8294] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 490.467007][ T8294] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.471240][ T8294] usb 10-1: config 0 descriptor?? [ 490.511991][ T8294] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 490.762605][T29359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2580'. [ 490.850977][T29361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2580'. [ 490.952243][ T9711] usb 10-1: USB disconnect, device number 7 [ 490.959640][ T9711] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 491.086193][T29376] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2584'. [ 493.772760][ T40] audit: type=1800 audit(1758685069.984:1714): pid=29404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2592" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 494.270830][T29413] overlayfs: missing 'lowerdir' [ 495.173958][ T40] audit: type=1800 audit(1758685071.317:1715): pid=29423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2596" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 496.397739][T29436] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2599'. [ 496.860072][ T40] audit: type=1804 audit(1758685072.898:1716): pid=29444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2603" name="/newroot/525/bus" dev="tmpfs" ino=2848 res=1 errno=0 [ 497.997067][ T40] audit: type=1800 audit(1758685073.974:1717): pid=29459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2606" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 498.025152][T29458] tipc: Enabled bearer , priority 10 [ 498.677759][T29465] xfrm0: left promiscuous mode [ 498.679844][T29465] xfrm0: left allmulticast mode [ 498.685371][T29465] wireguard0: left promiscuous mode [ 498.687524][T29465] wireguard0: left allmulticast mode [ 498.690559][T29465] gretap1: left promiscuous mode [ 498.692992][T29465] veth15: left promiscuous mode [ 498.696899][T29465] gtp0: left promiscuous mode [ 499.087110][ T8294] tipc: Node number set to 2886997007 [ 500.048219][ T1176] ------------[ cut here ]------------ [ 500.050447][ T1176] WARNING: CPU: 3 PID: 1176 at io_uring/io_uring.c:2980 io_ring_exit_work+0x3fc/0x10f0 [ 500.053470][ T1176] Modules linked in: [ 500.055112][ T1176] CPU: 3 UID: 0 PID: 1176 Comm: kworker/u32:9 Not tainted syzkaller #0 PREEMPT(full) [ 500.059697][ T1176] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 500.064109][ T1176] Workqueue: iou_exit io_ring_exit_work [ 500.066311][ T1176] RIP: 0010:io_ring_exit_work+0x3fc/0x10f0 [ 500.068622][ T1176] Code: 0f 85 0a 0b 00 00 48 8b 05 e1 67 4b 09 4c 8b 74 24 68 31 ff 49 29 c6 4c 89 f6 e8 5f 5b e5 fc 4d 85 f6 79 12 e8 e5 5f e5 fc 90 <0f> 0b 90 48 c7 44 24 60 70 17 00 00 e8 d3 5f e5 fc 48 8b 74 24 60 [ 500.076098][ T1176] RSP: 0018:ffffc90006b87a90 EFLAGS: 00010293 [ 500.078067][ T1176] RAX: 0000000000000000 RBX: ffff88806a6cc6c8 RCX: ffffffff84d5aa31 [ 500.081954][ T1176] RDX: ffff888027412440 RSI: ffffffff84d5aa3b RDI: 0000000000000007 [ 500.084748][ T1176] RBP: ffffc90006b87c50 R08: 0000000000000007 R09: 0000000000000000 [ 500.087853][ T1176] R10: fffffffffffffffa R11: 0000000000000000 R12: ffff88806a6cc000 [ 500.091548][ T1176] R13: dffffc0000000000 R14: fffffffffffffffa R15: ffff88806a6cc040 [ 500.094669][ T1176] FS: 0000000000000000(0000) GS:ffff8880977ba000(0000) knlGS:0000000000000000 [ 500.098215][ T1176] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 500.100988][ T1176] CR2: 0000000080082018 CR3: 0000000078cba000 CR4: 0000000000352ef0 [ 500.104218][ T1176] Call Trace: [ 500.105555][ T1176] [ 500.106714][ T1176] ? do_raw_spin_lock+0x12c/0x2b0 [ 500.108719][ T1176] ? __pfx_io_ring_exit_work+0x10/0x10 [ 500.110932][ T1176] ? perf_event_wakeup+0x399/0x450 [ 500.113246][ T1176] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 500.115592][ T1176] ? debug_object_deactivate+0x1ec/0x3a0 [ 500.117831][ T1176] ? rcu_is_watching+0x12/0xc0 [ 500.119726][ T1176] process_one_work+0x9cf/0x1b70 [ 500.121714][ T1176] ? __pfx_process_one_work+0x10/0x10 [ 500.123912][ T1176] ? assign_work+0x1a0/0x250 [ 500.125672][ T1176] worker_thread+0x6c8/0xf10 [ 500.127268][ T1176] ? __pfx_worker_thread+0x10/0x10 [ 500.129291][ T1176] kthread+0x3c5/0x780 [ 500.129366][ T40] audit: type=1804 audit(1758685075.938:1718): pid=29483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2616" name="/newroot/498/bus" dev="tmpfs" ino=2658 res=1 errno=0 [ 500.130900][ T1176] ? __pfx_kthread+0x10/0x10 [ 500.139873][ T1176] ? rcu_is_watching+0x12/0xc0 [ 500.141736][ T1176] ? __pfx_kthread+0x10/0x10 [ 500.143514][ T1176] ret_from_fork+0x56d/0x730 [ 500.145073][ T1176] ? __pfx_kthread+0x10/0x10 [ 500.146899][ T1176] ret_from_fork_asm+0x1a/0x30 [ 500.148791][ T1176] [ 500.150050][ T1176] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 500.152880][ T1176] CPU: 3 UID: 0 PID: 1176 Comm: kworker/u32:9 Not tainted syzkaller #0 PREEMPT(full) [ 500.156589][ T1176] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 500.160752][ T1176] Workqueue: iou_exit io_ring_exit_work [ 500.162885][ T1176] Call Trace: [ 500.164171][ T1176] [ 500.165360][ T1176] dump_stack_lvl+0x3d/0x1f0 [ 500.167196][ T1176] vpanic+0x6e8/0x7a0 [ 500.168775][ T1176] ? __pfx_vpanic+0x10/0x10 [ 500.170586][ T1176] ? io_ring_exit_work+0x3fc/0x10f0 [ 500.172631][ T1176] panic+0xca/0xd0 [ 500.174096][ T1176] ? __pfx_panic+0x10/0x10 [ 500.175848][ T1176] ? check_panic_on_warn+0x1f/0xb0 [ 500.177833][ T1176] check_panic_on_warn+0xab/0xb0 [ 500.179336][ T1176] __warn+0xf6/0x3c0 [ 500.180815][ T1176] ? io_ring_exit_work+0x3fc/0x10f0 [ 500.182861][ T1176] report_bug+0x3c3/0x580 [ 500.184574][ T1176] ? io_ring_exit_work+0x3fc/0x10f0 [ 500.186614][ T1176] handle_bug+0x184/0x210 [ 500.188167][ T1176] exc_invalid_op+0x17/0x50 [ 500.189704][ T1176] asm_exc_invalid_op+0x1a/0x20 [ 500.191557][ T1176] RIP: 0010:io_ring_exit_work+0x3fc/0x10f0 [ 500.193469][ T1176] Code: 0f 85 0a 0b 00 00 48 8b 05 e1 67 4b 09 4c 8b 74 24 68 31 ff 49 29 c6 4c 89 f6 e8 5f 5b e5 fc 4d 85 f6 79 12 e8 e5 5f e5 fc 90 <0f> 0b 90 48 c7 44 24 60 70 17 00 00 e8 d3 5f e5 fc 48 8b 74 24 60 [ 500.199839][ T1176] RSP: 0018:ffffc90006b87a90 EFLAGS: 00010293 [ 500.202234][ T1176] RAX: 0000000000000000 RBX: ffff88806a6cc6c8 RCX: ffffffff84d5aa31 [ 500.204883][ T1176] RDX: ffff888027412440 RSI: ffffffff84d5aa3b RDI: 0000000000000007 [ 500.207755][ T1176] RBP: ffffc90006b87c50 R08: 0000000000000007 R09: 0000000000000000 [ 500.210349][ T1176] R10: fffffffffffffffa R11: 0000000000000000 R12: ffff88806a6cc000 [ 500.213214][ T1176] R13: dffffc0000000000 R14: fffffffffffffffa R15: ffff88806a6cc040 [ 500.215701][ T1176] ? io_ring_exit_work+0x3f1/0x10f0 [ 500.217727][ T1176] ? io_ring_exit_work+0x3fb/0x10f0 [ 500.219754][ T1176] ? do_raw_spin_lock+0x12c/0x2b0 [ 500.221589][ T1176] ? __pfx_io_ring_exit_work+0x10/0x10 [ 500.223425][ T1176] ? perf_event_wakeup+0x399/0x450 [ 500.225456][ T1176] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 500.227700][ T1176] ? debug_object_deactivate+0x1ec/0x3a0 [ 500.229592][ T1176] ? rcu_is_watching+0x12/0xc0 [ 500.231146][ T1176] process_one_work+0x9cf/0x1b70 [ 500.233153][ T1176] ? __pfx_process_one_work+0x10/0x10 [ 500.235285][ T1176] ? assign_work+0x1a0/0x250 [ 500.237170][ T1176] worker_thread+0x6c8/0xf10 [ 500.239001][ T1176] ? __pfx_worker_thread+0x10/0x10 [ 500.240562][ T1176] kthread+0x3c5/0x780 [ 500.241942][ T1176] ? __pfx_kthread+0x10/0x10 [ 500.243723][ T1176] ? rcu_is_watching+0x12/0xc0 [ 500.245589][ T1176] ? __pfx_kthread+0x10/0x10 [ 500.247476][ T1176] ret_from_fork+0x56d/0x730 [ 500.249349][ T1176] ? __pfx_kthread+0x10/0x10 [ 500.251193][ T1176] ret_from_fork_asm+0x1a/0x30 [ 500.252981][ T1176] [ 500.254538][ T1176] Kernel Offset: disabled [ 500.256227][ T1176] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:22:40 Registers: info registers vcpu 0 CPU#0 RAX=000000000085dbad RBX=0000000000000000 RCX=ffffffff8b91bb29 RDX=0000000000000000 RSI=ffffffff8de4f612 RDI=ffffffff8c163800 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed1005646655 R10=ffff88802b2332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90abac90 R15=0000000000000000 RIP=ffffffff8b91a66f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880974ba000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f547cda4 CR3=00000000786b7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000e08e000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=ffffea00004b4e08 RCX=0000000000000030 RDX=1ffffd400013b119 RSI=0000000000012d38 RDI=ffffea00004b4e10 RBP=ffffea00009d88c8 RSP=ffffc90004096b48 R8 =0000000000000000 R9 =fffffbfff2157592 R10=ffffffff90abac97 R11=dffffc0000000000 R12=ffff88802b340220 R13=000000000000016a R14=ffff88802b3401c0 R15=dffffc0000000000 RIP=ffffffff84e86e09 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880975ba000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080b8b000 CR3=00000000786b7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000005 RBX=ffff888021530b18 RCX=ffffc90004297594 RDX=0000000000000002 RSI=ffff88802b43a458 RDI=ffff888021530000 RBP=0000000000000001 RSP=ffffc90004297558 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000001 R11=0000000000000001 R12=ffff88802b43a458 R13=ffffc90004297594 R14=0000000000000002 R15=0000000000000002 RIP=ffffffff8196e9d3 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880976ba000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080038018 CR3=00000000786d0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8561e695 RDI=ffffffff9b102780 RBP=ffffffff9b102740 RSP=ffffc90006b87400 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000030 R14=ffffffff9b102740 R15=ffffffff8561e630 RIP=ffffffff8561e6bf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977ba000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080082018 CR3=0000000078cba000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000