last executing test programs: 4.291423988s ago: executing program 0 (id=1457): socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_io_uring_setup(0x1ed3, 0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x6, 0x0, @fd, 0x0, 0x0, 0x0, {0x9208}}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 4.291120491s ago: executing program 0 (id=1458): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x210040, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001c40)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x4}], @NL80211_ATTR_SSID={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) close(r0) syz_clone(0xd000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="06a89422d43041b75be3c990bd0957c19fa8f220bce9d697cc12676a3cb8ed436c4a4cfc1486ae31fa8366cd1020a9103c4c98b51d60a9ffc199511e317581e19ed48c09ac8e6508f83c560723e2dc6334666dfb5e16ce5a240d617b96f06225a7853055d3aef6df65a1a2a30bf43d61cc52f65f261c4cf2ab7d6126e7eb7db5fa7bf3274634cf714024ddcd2ef06fd2fbf053aa7406346307539dca6bc26919f5bb398c2ad88a2269661ea42ec74a6bd485266f6e9fd2a7cadaef35f17f280e5c5f0fd5836ccceda1c55b9534011b81", 0xd0}, {&(0x7f00000002c0)="84b9f6955f3164f7917c255c98a693d58ae53710b379c60bd334955d3962293f4a7c14fa3ae31b5c6e266786ba8989f4de292517d47a594a1f2f284627b13d4eb95e90b9354cb03759c0114d06344ed9c6d5b2bbb357e2ed6a27f00db769cf79c213da669bf8caf326ee9eb801c59c8e7870afa6bb1e7df7c7cdc10b2a55c68cfef454a53ede2e397f315f650e19e0dd6d2a48a020a3fbaaefb06d99fcf6a7486225b0973cb66700194a7645e4d13d5776569f58fc02722419dd55f0036690fbcccee92bc0dc55f1dbb0e94073d9b2d3a1bb", 0xd2}, {&(0x7f00000003c0)="ac75471d643915e51371faa1a234b0bc1e2b0c4c3df9ec0ee6ca7b1f0285049bed0e77d4309620e1185f6d03494f5bb0949312b8ae2fb80152915033fe7823b708d52020124dd15d45cdb2f602c8662e21b5536e613197eb4be2cc788e4498753431398dcd20a6287d49", 0x6a}, {&(0x7f0000000440)="ffaa460354288bb4f96275faf5698623d910b5ebd7e4a015e7bc5e8ea966c32a0e2db6307bf2f64acd3a1f127053005e7780e9a47c7dc6ca383c46ae7c52ab9d80033a6a80a3e187b89211d3eae8612e350b0022a7bff789892104b60c019a5700df6d320b65e7a89db1064643a45ce8d3e191c01d351139f4", 0x79}], 0x4, &(0x7f00000007c0)=[@ip_retopts={{0x98, 0x0, 0x7, {[@end, @timestamp_addr={0x44, 0x4, 0x2a, 0x1, 0x9}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x4c, 0x94, 0x3, 0x1, [{@rand_addr=0x64010101, 0x6749}, {@dev={0xac, 0x14, 0x14, 0x42}}, {@multicast2, 0xf0eb}, {@remote, 0x7e9}, {@dev={0xac, 0x14, 0x14, 0x19}, 0xf1}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x3}, {@multicast2, 0x8}, {@loopback, 0x8}, {@multicast2, 0x7}]}, @timestamp_addr={0x44, 0x1c, 0x87, 0x1, 0xa, [{@rand_addr=0x64010102, 0xfffffffd}, {@empty, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}, @end, @rr={0x7, 0xb, 0x23, [@remote, @multicast2]}, @timestamp={0x44, 0x8, 0x83, 0x0, 0x1, [0xc]}]}}}, @ip_ttl={{0x10, 0x0, 0x2, 0x4}}, @ip_retopts={{0x18, 0x0, 0x7, {[@end, @ssrr={0x89, 0x7, 0xcb, [@loopback]}, @end]}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x10, 0x0, 0x1, 0xffff}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x7f2}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0xc}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x2}}], 0x110}, 0x4000) ioctl$TUNSETNOCSUM(r0, 0xff02, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r2, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x2404c804}, 0x8081) 4.060589849s ago: executing program 0 (id=1460): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000500)='attr/current\x00') preadv(r3, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/113, 0x71}], 0x1, 0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000100), &(0x7f0000000140)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 2.921553725s ago: executing program 3 (id=1470): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x44880}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000300)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x4}}, 0xd) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c00029e140003002001000000000000000000000000000114000200fc0200"/68], 0x5c}}, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, r3, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x45}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x28}]}, 0x64}}, 0x4000004) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000000)) 2.920895568s ago: executing program 3 (id=1471): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000002c0)={0x0, 0x10000, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd]}) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=none') r0 = openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '\x00'}, {0x20, 'cifs\x00'}, {}], 0xa, "3380bd1e0754faaed6fdef8e69c25c5fd2591a95c4e0f861dbaaf77c3dc06c93679e08811ec3c73f8496611cb7241b472394a904e29750e0f403e24dfce4d3cf224b8477c1345a7aa51288af0aa0582b9a268dd5e94a"}, 0x6a) 2.861057918s ago: executing program 3 (id=1472): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002004000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x48, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'H.245\x00'}}]}, 0x48}}, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000000c0)={0x5, 0x4, 0x2, "b75c89e7a20c8eac82ad0416bb1844038d2cd97c945401001638b5394c00", 0x32314247}) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r3], 0xe4}}, 0x20004080) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(r6, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r7, 0x8, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xd}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x840) r8 = socket$nl_route(0x10, 0x3, 0x0) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x13) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYRESOCT=r5], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4004021) 2.151444591s ago: executing program 2 (id=1474): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='westwood\x00', 0x9) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000fbd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0xfffffffffffffee2, 0x407006}, 0x104) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x3, @remote, 0x5}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000001c0)={0x7, 0x8004, 0x9f09, 0x4, r5}, &(0x7f0000000200)=0x10) fcntl$notify(r3, 0x402, 0x8000003d) fcntl$setsig(r3, 0xa, 0x21) getsockname$tipc(r3, &(0x7f0000000040)=@id, &(0x7f0000000080)=0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$FIBMAP(r7, 0x1, &(0x7f0000000180)=0xa98) 1.951778822s ago: executing program 3 (id=1477): r0 = landlock_create_ruleset(&(0x7f0000000040)={0xd351}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = syz_clone(0xc285a00, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r1, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x9e212000) prlimit64(0x0, 0x6, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hfsplus\x00', 0x8002, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r5, 0x0, 0xfffffffffffffffe}, 0x38) r6 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f00000000c0)={"000600", 0x4, 0x6, 0x2, 0x0, 0x4, "0000000000f4ff00", '\x00\x00\a\x00', "0300", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) ioctl$CEC_TRANSMIT(r6, 0xc0386105, &(0x7f0000000040)={0x9, 0x8, 0x3, 0x81, 0xfffffffa, 0xd, "9899b4a4d5bfb2b8b5ec67a9883d45f4", 0x8, 0x9, 0x5, 0xfd, 0x1, 0x0, 0x1}) 1.481188302s ago: executing program 0 (id=1483): r0 = landlock_create_ruleset(&(0x7f0000000040)={0xd351}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = syz_clone(0xc285a00, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r1, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x9e212000) prlimit64(0x0, 0x6, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000060000000405000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000001d00000000000009000000ba0100"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hfsplus\x00', 0x8002, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r5}, 0x38) r6 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)={0x0, 0x0, 0x3}, 0x65) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f00000000c0)={"000600", 0x4, 0x6, 0x2, 0x0, 0x4, "0000000000f4ff00", '\x00\x00\a\x00', "0300", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) ioctl$CEC_TRANSMIT(r6, 0xc0386105, &(0x7f0000000040)={0x9, 0x8, 0x3, 0x81, 0xfffffffa, 0xd, "9899b4a4d5bfb2b8b5ec67a9883d45f4", 0x8, 0x9, 0x5, 0xfd, 0x1, 0x0, 0x1}) 1.411463704s ago: executing program 1 (id=1485): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) close(0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r2, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x0, 0x9}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000940)={0x0, 0x9}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0), 0x8) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="9ca7", 0x2}, {&(0x7f0000000440)='[', 0x1}], 0x2}}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r4}, 0x10) 1.411228235s ago: executing program 1 (id=1486): close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}], 0x0, 0x0, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$ttyprintk(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$FIONREAD(r0, 0x541b, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000a, 0x4ca31, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xd) r3 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x2902, 0x0) dup(r3) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x1, @vbi={0x0, 0x0, 0x0, 0x52424752, [0x0, 0x4bba]}}) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r4, 0x47f9, 0x0, 0x0, 0x0, 0x0) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r7, &(0x7f00000019c0)=""/4107, 0x100b) 987.714362ms ago: executing program 3 (id=1487): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x34}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x20}, 0x0) select(0x20000000, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x0, 0x8a, 0x1}, @NL80211_ATTR_MAC, @NL80211_ATTR_TDLS_OPERATION={0x0, 0x8a, 0x1}, @NL80211_ATTR_MAC={0x0, 0x6, @broadcast}, @NL80211_ATTR_MAC={0x0, 0x6, @broadcast}, @NL80211_ATTR_MAC, @NL80211_ATTR_TDLS_OPERATION={0x0, 0x8a, 0x4}]}, 0xffcd}, 0x1, 0x0, 0x0, 0x20010046}, 0x4000400) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r4) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x90, r5, 0x800, 0x70bd26, 0x25dfdbff, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x90}}, 0x4) r6 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x0, 0x80000) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40001}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x84, 0x0, 0x8, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x14000000}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x20008001}, 0xc000) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x34}}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x20}, 0x0) (async) select(0x20000000, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x0, 0x8a, 0x1}, @NL80211_ATTR_MAC, @NL80211_ATTR_TDLS_OPERATION={0x0, 0x8a, 0x1}, @NL80211_ATTR_MAC={0x0, 0x6, @broadcast}, @NL80211_ATTR_MAC={0x0, 0x6, @broadcast}, @NL80211_ATTR_MAC, @NL80211_ATTR_TDLS_OPERATION={0x0, 0x8a, 0x4}]}, 0xffcd}, 0x1, 0x0, 0x0, 0x20010046}, 0x4000400) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r4) (async) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x90, r5, 0x800, 0x70bd26, 0x25dfdbff, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x90}}, 0x4) (async) syz_open_dev$vcsa(&(0x7f00000002c0), 0x0, 0x80000) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40001}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x84, 0x0, 0x8, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x14000000}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x20008001}, 0xc000) (async) 982.525237ms ago: executing program 2 (id=1488): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.throttle.io_serviced\x00', 0x0, 0x0) sendto$packet(r1, &(0x7f0000000300)="8eb3e18bc512c3cc9b2062e0892f", 0xe, 0x0, &(0x7f0000000180), 0x14) getuid() (async) getuid() getpid() (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r7}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) (async) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) 982.032478ms ago: executing program 3 (id=1489): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$inet(0x10, 0x3, 0x0) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'virt_wifi0\x00', 0x0}) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180015b152a005000000000000000000000000000095000000de27a2b2"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) (async) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r5, 0x40046104, &(0x7f0000000240)) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, r6) (async) statx(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x800, 0x400, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r6, r7, 0xee00) (async) keyctl$describe(0x6, r6, &(0x7f0000000500)=""/198, 0xc6) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) (async, rerun: 32) r9 = openat$nci(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) (rerun: 32) read$nci(r9, &(0x7f0000000180)=""/28, 0x1c) 662.674004ms ago: executing program 2 (id=1490): socket$inet(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18050000000000000000000002000000b7480000000000007b8af8ff00200000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x37, @void, @value}, 0x94) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) (async) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) (async) getpid() (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') read$FUSE(r3, &(0x7f0000004c80)={0x2020}, 0x2020) (async, rerun: 32) socket$packet(0x11, 0x3, 0x300) (rerun: 32) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) (async) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)=""/31, 0x1f}, {&(0x7f0000000680)=""/155, 0x9b}, {&(0x7f0000000500)}, {&(0x7f0000000300)=""/131, 0x83}, {&(0x7f0000000880)=""/97, 0x61}, {&(0x7f0000000900)=""/169, 0xa9}], 0x6, &(0x7f0000000a00)=""/149, 0x95}}, {{&(0x7f0000000ac0)=@alg, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000b40)=""/14, 0xe}, {&(0x7f0000000b80)=""/108, 0x6c}], 0x2, &(0x7f0000001700)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000000c80)=@generic, 0x80, &(0x7f00000012c0), 0x0, &(0x7f0000001340)}, 0x6}], 0x3, 0x40002085, 0x0) (async, rerun: 32) write(r2, &(0x7f0000000000)="38000300010003", 0x7) (async, rerun: 32) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r5) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000440)=@chain) (async) r6 = syz_open_dev$I2C(&(0x7f00000002c0), 0x1, 0x0) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000002740)={&(0x7f0000000440)=[{0xb9, 0x1800, 0x0, 0x0}, {0x1, 0x1000, 0x0, &(0x7f0000000280)}], 0x2}) (async) prctl$PR_SET_IO_FLUSHER(0x39, 0xffffffffffffffff) 591.12653ms ago: executing program 0 (id=1491): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000002100), 0x40000, &(0x7f0000000380)=ANY=[]) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) (async) chdir(&(0x7f0000000100)='./file0\x00') (async) r0 = dup(0xffffffffffffffff) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) (async) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305828, 0x0) io_setup(0x82, &(0x7f0000000180)=0x0) (async) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='mm_page_alloc\x00', r5}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="554a00000000000000000000000000000000000048c41f8ee7a742ca03a3875057752ddff36c16704bbeb3441732ac7700e0253a397a0388723c48a8829101e5bcf4c1e78c425a6e249fad045eeb27c7b01de522f1dedd6eea99af85dbf4c00b1b168e08d22d0927a2a50adc47c49f7542f8957938e91391a464f32b1779058034357e850b7363dff5a6cfa413d781cbbcf9f7550a920f8845b318294433993c68f0b3487d1feb3d61dce870c1a55df53641e9627c404dbbaa2300add7afd5e4420767761e77f70598b2fd5e2f4134bd23", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r3, &(0x7f0000000340)='p', 0x300}]) 411.564904ms ago: executing program 0 (id=1492): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@dev={0xfe, 0x80, '\x00', 0x19}, 0x0, 0x0, 0x1, 0x4, 0xa}, {0xbd1}, {0x81, 0x2}, 0x2000000, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="0209000202"], 0x10}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f000001a240)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x1e, 0x800000000004, @thr={&(0x7f0000019140)="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", &(0x7f000001a140)="bf6352db1690269d4d2b8425053231d72164291b1888719d2989eb493e1cf8ff6076bc53506f5837483ee1a7fcc8c0eba1c9cf92226f0ea75e4f94627a3aef28e87aa5622a342128da8b6ec0e3f6d52befe409696c28488d2597eb89914e084a3bc36c860dc82ecec10fc66838bd80bd97b0c10548cb6eaf33ad23c47eeb1bd017a0b76c4dd42939665456e6163196777b14c2846f7ac6a43fbea31009f6372b82220eab3d31431ce7d26ff4358d5cc124c6ac56e6a8491cb03ecc96db508f6500ba8e3ddb35c32176d1e0bb045de5e4a3b809b2a8bd6ba52f6cc80bd3ae8d3aa55499c85441fcf96b1d8a4a883d7c"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$dri(&(0x7f00000001c0), 0x7, 0x103400) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f00000000c0)={0x4d, 0x1, 0x0, "6040a7190200002000000000000000ff1057e31e94000000000000000006ff00", 0x34325258}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x4, 0x0, &(0x7f0000000100)={r6, r7+60000000}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000019080), &(0x7f0000019100)=0x60) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) 410.834408ms ago: executing program 1 (id=1493): socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_io_uring_setup(0x1ed3, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x1, 0x279}, 0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x6, 0x0, @fd, 0x0, 0x0, 0x0, {0x9208}}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 361.599473ms ago: executing program 1 (id=1494): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000045c0), 0x400, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200004, 0x0, 0x0, 0x0, 0x40}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f00000008c0)) ioctl$SNDCTL_DSP_GETCAPS(r1, 0x8004500f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r0, 0x0) flock(r0, 0x9) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) 361.325347ms ago: executing program 2 (id=1495): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x5, 0x20000000000001ad, &(0x7f0000000440)=ANY=[@ANYRESHEX], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendmsg$alg(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$qrtr(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000001280)=""/187, 0xbb}], 0x1, 0x0, 0x0, 0x11043}, 0x38, 0x12021) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x3a) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d80)=ANY=[@ANYRES8=r5, @ANYRES64, @ANYBLOB="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", @ANYRES32=r6], 0x22c}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000200)='%ps \x00'}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r7, &(0x7f0000000280)="f7a1c4934d60ba2e43cd76dfa476a78bec07be70ced4c50fce4d32ccf6555b57dc9a34c63e44658e75338c95b5b546dea40f8b933a240f2c5c31605a2f0644e544fe4011707215f3a2881baa9f3929b4b12fc0554f581269fde19cf6f14565a0ae41049bd28e58c9bc6da978c91a1e490a0725e330466215f4ec60fd0fb3e4ec29733e3f1cbd44a621856f313af8839c468e1af49ee56fe4750a5323390a46c787", &(0x7f0000000340)=""/72}, 0x1c) creat(0x0, 0x103) socket$netlink(0x10, 0x3, 0x14) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f00000002c0)=[@mss={0x2, 0xfffffff3}, @mss, @mss={0x2, 0x8}, @window, @timestamp, @timestamp, @mss={0x2, 0x9}, @timestamp], 0x401) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000480)='westwood\x00', 0x16) write$binfmt_elf64(r8, &(0x7f0000000000)=ANY=[], 0x440) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) 307.105642ms ago: executing program 2 (id=1496): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=@newqdisc={0x1f8, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xfff2, 0xa}, {0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x1c8, 0x2, {{0x10, [0xd, 0x10, 0x2, 0x5, 0xd, 0xa, 0xd, 0xa, 0x3, 0x4, 0x6, 0xb, 0xb, 0x2, 0x6, 0x8], 0x0, [0x8, 0xfffb, 0xed5, 0x8, 0x0, 0x3, 0x5, 0x3, 0x8001, 0x6, 0x7, 0x0, 0x789, 0x8001, 0xc5, 0x200], [0x9, 0x0, 0x6, 0x8, 0x7, 0x4, 0x8, 0x400, 0x4db, 0xb6, 0x3, 0x8001, 0x6605, 0x5b7f, 0x101, 0x1]}, [@TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}, @TCA_MQPRIO_MIN_RATE64={0x34, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x3}, {0xc, 0x3, 0xc}, {0xc, 0x3, 0x4d89}, {0xc, 0x3, 0xffff}]}, @TCA_MQPRIO_MIN_RATE64={0x7c, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x8}, {0xc, 0x3, 0x9}, {0xc, 0x3, 0x3}, {0xc, 0x3, 0xac4}, {0xc, 0x3, 0x81}, {0xc, 0x3, 0xffffffffffffffff}, {0xc, 0x3, 0x6}, {0xc, 0x3, 0x2}, {0xc, 0x3, 0x4}, {0xc}]}, @TCA_MQPRIO_MAX_RATE64={0xb8, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x8}, {0xc, 0x4, 0x4}, {0xc, 0x4, 0x5}, {0xc, 0x4, 0xf02}, {0xc, 0x4, 0x18}, {0xc, 0x4, 0x8}, {0xc, 0x4, 0xc}, {0xc, 0x4, 0xe75}, {0xc, 0x4, 0x8}, {0xc, 0x4, 0x7}, {0xc, 0x4, 0x3}, {0xc, 0x4, 0x5}, {0xc, 0x4, 0x3}, {0xc, 0x4, 0x8}, {0xc, 0x4, 0x2}]}]}}}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x30, r6, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x80}}}}, [@NL80211_ATTR_VENDOR_ID={0x8}]}, 0x30}}, 0x0) io_setup(0x7, &(0x7f0000000100)=0x0) r9 = eventfd(0x909b) r10 = openat$null(0xffffff9c, &(0x7f0000000180), 0x412000, 0x0) io_submit(r8, 0x2, &(0x7f0000000200)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x4, r3, &(0x7f0000000f00)="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", 0x1000, 0x9, 0x0, 0x6, r9}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x2, r3, &(0x7f0000001f00)="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", 0x1000, 0x9, 0x0, 0x0, r10}]) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r5, 0x303, 0x0, 0xfffffffd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 306.909664ms ago: executing program 1 (id=1497): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0x9, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000200)=0xdc) socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r5, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r7, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r9, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) ioctl$EXT4_IOC_GROUP_EXTEND(r8, 0x40046607, &(0x7f0000000080)=0x4) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r9, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 201.501412ms ago: executing program 2 (id=1498): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000841}, 0x20000010) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0x10}, 0x20}, 0x0) mount$fuse(0x20000000, &(0x7f0000000400)='./file0\x00', 0x0, 0x223216, 0x0) chdir(&(0x7f0000000100)='./file0\x00') syz_usb_connect$hid(0xf63067478e218e8, 0x36, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r3) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x14, r4, 0x2, 0x8070bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x400c809}, 0x8010) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) close(r1) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x200040d0) mount$overlay(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x4, 0x0) 0s ago: executing program 1 (id=1499): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x100, @vifc_lcl_ifindex, @broadcast}, 0x10) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0x47, @vifc_lcl_ifindex, @remote}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r3) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r4, &(0x7f0000000000)={0x2, @short}, 0x8) r5 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r5) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r7, 0x66) r8 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, &(0x7f0000000180)={0x0, "de8d0d27ca969fa15f8b3b7bae39c1b3327d4332f8c149d2d65a347d67f6db7eb90dfdad3cdebaaf421412f812305c9da91699b5a02c1295596f0fd9ec78f2fd"}, 0x48, r5) keyctl$KEYCTL_MOVE(0x1e, r8, r5, r6, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r10 = syz_io_uring_setup(0x24fd, &(0x7f0000000080)={0x0, 0x4f6, 0x10100, 0x1}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r13, &(0x7f0000000200)=ANY=[@ANYBLOB='7'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r13, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r10, 0x2d3e, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d000000000001000000000000000141"], 0x38}}, 0x0) kernel console output (not intermixed with test programs): Š [ 134.981626][ T30] usbhid 8-1:1.0: can't add hid device: -71 [ 134.984139][ T30] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 134.987467][ T30] usb 8-1: USB disconnect, device number 13 [ 138.443252][ T8] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 138.459955][ T8] ath9k_htc: Failed to initialize the device [ 139.683575][ T8634] netlink: 84 bytes leftover after parsing attributes in process `syz.0.718'. [ 142.367185][ T8648] sg_write: data in/out 603979740/251 bytes for SCSI command 0x15-- guessing data in; [ 142.367185][ T8648] program syz.1.721 not setting count and/or reply_len properly [ 142.470839][ T834] usb 7-1: USB disconnect, device number 13 [ 142.474985][ T834] usb 7-1: ath9k_htc: USB layer deinitialized [ 142.792371][ T8668] netlink: 20 bytes leftover after parsing attributes in process `syz.1.726'. [ 142.974895][ T8671] lo speed is unknown, defaulting to 1000 [ 143.129104][ T8676] block nbd0: Device being setup by another task [ 143.132990][ T8679] block nbd0: shutting down sockets [ 143.728462][ T8698] bridge0: port 3(syz_tun) entered blocking state [ 143.730965][ T8698] bridge0: port 3(syz_tun) entered disabled state [ 143.733143][ T8698] syz_tun: entered allmulticast mode [ 143.735693][ T8698] syz_tun: entered promiscuous mode [ 143.739921][ T8698] bridge0: port 3(syz_tun) entered blocking state [ 143.742092][ T8698] bridge0: port 3(syz_tun) entered forwarding state [ 143.747069][ T8698] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 144.551870][ T8721] netlink: 'syz.1.742': attribute type 10 has an invalid length. [ 144.570368][ T8721] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.573492][ T8721] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.586404][ T8721] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.588409][ T8721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.591154][ T8721] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.593096][ T8721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.604836][ T8721] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 144.613800][ T8720] delete_channel: no stack [ 144.672855][ T8733] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-": -EINTR [ 144.723293][ T8740] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 144.727477][ T8740] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 144.730352][ T8740] vhci_hcd vhci_hcd.0: Device attached [ 145.099090][ T64] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 145.403427][ T8741] vhci_hcd: connection reset by peer [ 145.406837][ T8060] vhci_hcd: stop threads [ 145.408525][ T8060] vhci_hcd: release socket [ 145.411739][ T8060] vhci_hcd: disconnect device [ 145.749863][ T8778] xt_policy: output policy not valid in PREROUTING and INPUT [ 145.756722][ T8763] tipc: Started in network mode [ 145.758164][ T8763] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 145.760727][ T8763] tipc: Enabling of bearer rejected, failed to enable media [ 145.772285][ T8763] netlink: 24 bytes leftover after parsing attributes in process `syz.2.752'. [ 145.900534][ T8789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.757'. [ 146.431411][ T8812] autofs: Unknown parameter '·' [ 146.526365][ T8821] Cannot find set identified by id 0 to match [ 146.537595][ T8823] netlink: 'syz.3.769': attribute type 20 has an invalid length. [ 146.540252][ T8822] netlink: 'syz.3.769': attribute type 20 has an invalid length. [ 146.598711][ T8830] mmap: syz.3.771 (8830) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 146.638473][ T8830] binder: 8829:8830 ioctl 40046205 0 returned -22 [ 146.859788][ T8846] lo speed is unknown, defaulting to 1000 [ 147.299821][ T8855] netlink: 76 bytes leftover after parsing attributes in process `syz.2.778'. [ 147.787237][ T8870] netlink: 12 bytes leftover after parsing attributes in process `syz.0.783'. [ 148.126526][ T8893] netlink: 28 bytes leftover after parsing attributes in process `syz.1.788'. [ 148.214116][ T8895] syz.1.789: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 148.220574][ T8895] CPU: 0 UID: 0 PID: 8895 Comm: syz.1.789 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 148.224094][ T8895] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 148.227360][ T8895] Call Trace: [ 148.228526][ T8895] [ 148.229584][ T8895] dump_stack_lvl+0x16c/0x1f0 [ 148.231130][ T8895] warn_alloc+0x24d/0x3a0 [ 148.232469][ T8895] ? __pfx_warn_alloc+0x10/0x10 [ 148.234086][ T8895] ? __get_vm_area_node+0x1b0/0x2f0 [ 148.235985][ T8895] ? __get_vm_area_node+0x1dc/0x2f0 [ 148.237555][ T8895] __vmalloc_node_range_noprof+0x1105/0x1530 [ 148.239417][ T8895] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 148.241064][ T8895] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 148.242870][ T8895] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 148.244457][ T8895] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 148.246151][ T8895] vmalloc_user_noprof+0x6b/0x90 [ 148.247888][ T8895] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 148.249421][ T8895] vb2_vmalloc_alloc+0x11e/0x3d0 [ 148.250904][ T8895] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 148.252683][ T8895] __vb2_queue_alloc+0x896/0x1230 [ 148.254165][ T8895] vb2_core_reqbufs+0xa73/0xfb0 [ 148.255784][ T8895] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 148.257652][ T8895] ? __pfx___mutex_trylock_common+0x10/0x10 [ 148.259663][ T8895] ? __video_do_ioctl+0x4a2/0xf00 [ 148.261089][ T8895] ? trace_contention_end+0xee/0x140 [ 148.262901][ T8895] ? __mutex_lock+0x1cc/0xa60 [ 148.264266][ T8895] vb2_reqbufs+0x1a5/0x1f0 [ 148.265911][ T8895] ? __pfx_vb2_reqbufs+0x10/0x10 [ 148.267632][ T8895] ? find_held_lock+0x2d/0x110 [ 148.268996][ T8895] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 148.270714][ T8895] v4l2_m2m_ioctl_reqbufs+0xdc/0x1e0 [ 148.272270][ T8895] v4l_reqbufs+0x193/0x1d0 [ 148.273601][ T8895] __video_do_ioctl+0xaf0/0xf00 [ 148.275017][ T8895] ? __pfx___video_do_ioctl+0x10/0x10 [ 148.276568][ T8895] ? __might_fault+0xe3/0x190 [ 148.277931][ T8895] video_usercopy+0x427/0x1520 [ 148.279309][ T8895] ? __pfx___video_do_ioctl+0x10/0x10 [ 148.280813][ T8895] ? __pfx_video_usercopy+0x10/0x10 [ 148.282327][ T8895] v4l2_ioctl+0x1ba/0x250 [ 148.283599][ T8895] ? __fget_files+0x1c1/0x3a0 [ 148.284935][ T8895] v4l2_compat_ioctl32+0x214/0x2c0 [ 148.286392][ T8895] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 148.287973][ T8895] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 148.289458][ T8895] __do_fast_syscall_32+0x73/0x120 [ 148.290933][ T8895] do_fast_syscall_32+0x32/0x80 [ 148.292331][ T8895] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 148.294117][ T8895] RIP: 0023:0xf7ff7579 [ 148.295288][ T8895] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 148.300789][ T8895] RSP: 002b:00000000f514655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 148.303169][ T8895] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0145608 [ 148.305426][ T8895] RDX: 00000000200000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 148.307694][ T8895] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 148.309933][ T8895] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 148.312150][ T8895] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 148.314419][ T8895] [ 148.317252][ T8895] Mem-Info: [ 148.318310][ T8895] active_anon:13206 inactive_anon:148 isolated_anon:0 [ 148.318310][ T8895] active_file:18294 inactive_file:32263 isolated_file:0 [ 148.318310][ T8895] unevictable:1768 dirty:275 writeback:0 [ 148.318310][ T8895] slab_reclaimable:6954 slab_unreclaimable:57655 [ 148.318310][ T8895] mapped:29731 shmem:10259 pagetables:820 [ 148.318310][ T8895] sec_pagetables:304 bounce:0 [ 148.318310][ T8895] kernel_misc_reclaimable:0 [ 148.318310][ T8895] free:37203 free_pcp:5688 free_cma:0 [ 148.330978][ T8895] Node 0 active_anon:6700kB inactive_anon:552kB active_file:2984kB inactive_file:64kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:2092kB dirty:12kB writeback:0kB shmem:5020kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10056kB pagetables:1164kB sec_pagetables:1156kB all_unreclaimable? yes [ 148.339959][ T8895] Node 1 active_anon:46124kB inactive_anon:40kB active_file:70192kB inactive_file:128988kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:116832kB dirty:1088kB writeback:0kB shmem:36020kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:2492kB pagetables:2116kB sec_pagetables:60kB all_unreclaimable? no [ 148.349247][ T8895] Node 0 DMA free:2880kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:428kB inactive_anon:168kB active_file:104kB inactive_file:64kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:656kB local_pcp:236kB free_cma:0kB [ 148.357445][ T8895] lowmem_reserve[]: 0 273 0 0 0 [ 148.359106][ T8895] Node 0 DMA32 free:17920kB boost:0kB min:13904kB low:17380kB high:20856kB reserved_highatomic:4096KB active_anon:6272kB inactive_anon:384kB active_file:2880kB inactive_file:0kB unevictable:3536kB writepending:12kB present:1032196kB managed:306308kB mlocked:0kB bounce:0kB free_pcp:5328kB local_pcp:108kB free_cma:0kB [ 148.369080][ T8895] lowmem_reserve[]: 0 0 0 0 0 [ 148.370451][ T8895] Node 1 DMA32 free:127788kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB active_anon:46124kB inactive_anon:40kB active_file:70192kB inactive_file:128988kB unevictable:3536kB writepending:1088kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:16716kB local_pcp:2900kB free_cma:0kB [ 148.431099][ T8895] lowmem_reserve[]: 0 0 0 0 0 [ 148.432490][ T8895] Node 0 DMA: 110*4kB (UME) 41*8kB (UME) 11*16kB (UME) 34*32kB (UME) 15*64kB (UME) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2992kB [ 148.436858][ T8895] Node 0 DMA32: 198*4kB (UMEH) 93*8kB (UME) 50*16kB (UME) 163*32kB (UMEH) 66*64kB (UMEH) 14*128kB (UME) 7*256kB (UME) 1*512kB (H) 2*1024kB (M) 0*2048kB 0*4096kB = 17920kB [ 148.442393][ T8895] Node 1 DMA32: 281*4kB (UME) 641*8kB (UME) 455*16kB (UME) 411*32kB (UME) 123*64kB (UME) 85*128kB (UME) 106*256kB (UME) 50*512kB (UME) 22*1024kB (UM) 10*2048kB (UM) 3*4096kB (U) = 153468kB [ 148.447741][ T8895] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 148.451399][ T8895] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 148.454624][ T8895] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 148.457271][ T8895] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 148.461503][ T8895] 55093 total pagecache pages [ 148.463015][ T8895] 0 pages in swap cache [ 148.464256][ T8895] Free swap = 124692kB [ 148.465501][ T8895] Total swap = 124996kB [ 148.466775][ T8895] 524155 pages RAM [ 148.468132][ T8895] 0 pages HighMem/MovableOnly [ 148.470313][ T8895] 206675 pages reserved [ 148.471768][ T8895] 0 pages cma reserved [ 148.580525][ T8912] random: crng reseeded on system resumption [ 148.679710][ T8920] netlink: 20 bytes leftover after parsing attributes in process `syz.2.796'. [ 148.849306][ T834] usb 8-1: new low-speed USB device number 14 using dummy_hcd [ 148.999052][ T834] usb 8-1: device descriptor read/64, error -71 [ 149.259110][ T834] usb 8-1: new low-speed USB device number 15 using dummy_hcd [ 149.389088][ T834] usb 8-1: device descriptor read/64, error -71 [ 149.534828][ T834] usb usb8-port1: attempt power cycle [ 149.799232][ T35] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 149.889104][ T834] usb 8-1: new low-speed USB device number 16 using dummy_hcd [ 149.911494][ T834] usb 8-1: device descriptor read/8, error -71 [ 150.029086][ T35] usb 7-1: Using ep0 maxpacket: 8 [ 150.031840][ T35] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 150.034318][ T35] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 150.037180][ T35] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 150.040497][ T35] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 150.043969][ T35] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 150.047665][ T35] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 150.050404][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.149095][ T834] usb 8-1: new low-speed USB device number 17 using dummy_hcd [ 150.169747][ T834] usb 8-1: device descriptor read/8, error -71 [ 150.189612][ T64] vhci_hcd: vhci_device speed not set [ 150.256170][ T35] usb 7-1: usb_control_msg returned -32 [ 150.257883][ T35] usbtmc 7-1:16.0: can't read capabilities [ 150.281588][ T834] usb usb8-port1: unable to enumerate USB device [ 150.508506][ T8945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.803'. [ 150.590038][ T8949] sg_write: data in/out 2359260/251 bytes for SCSI command 0x15-- guessing data in; [ 150.590038][ T8949] program syz.0.805 not setting count and/or reply_len properly [ 150.732073][ T8956] usbtmc 7-1:16.0: control status returned 0 [ 150.739108][ T35] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 150.895084][ T35] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 150.898351][ T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.901155][ T35] usb 6-1: Product: syz [ 150.902410][ T35] usb 6-1: Manufacturer: syz [ 150.903741][ T35] usb 6-1: SerialNumber: syz [ 150.907601][ T35] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 150.921331][ T35] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 151.556568][ T8967] gretap1: entered allmulticast mode [ 151.559198][ T8967] bridge0: port 3(gretap1) entered blocking state [ 151.561184][ T8967] bridge0: port 3(gretap1) entered disabled state [ 151.563664][ T8967] gretap1: entered promiscuous mode [ 151.566529][ T8967] bridge0: port 3(gretap1) entered blocking state [ 151.568551][ T8967] bridge0: port 3(gretap1) entered forwarding state [ 151.581916][ T9] usb 6-1: USB disconnect, device number 14 [ 151.589922][ T8967] bridge_slave_0: left allmulticast mode [ 151.591671][ T8967] bridge_slave_0: left promiscuous mode [ 151.593526][ T8967] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.598111][ T8967] bridge_slave_1: left allmulticast mode [ 151.600941][ T8967] bridge_slave_1: left promiscuous mode [ 151.602709][ T8967] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.606509][ T8967] bond0: (slave bond_slave_0): Releasing backup interface [ 151.613842][ T8967] bond0: (slave bond_slave_1): Releasing backup interface [ 151.627495][ T8967] team0: Port device team_slave_0 removed [ 151.634386][ T8967] team0: Port device team_slave_1 removed [ 151.637034][ T8967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.640635][ T8967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.643926][ T8967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.646193][ T8967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.652180][ T8967] bond0: (slave wlan1): Releasing backup interface [ 151.655137][ T8967] gretap1: left promiscuous mode [ 151.656719][ T8967] bridge0: port 3(gretap1) entered disabled state [ 151.870491][ T8985] sg_write: data in/out 603979740/251 bytes for SCSI command 0x15-- guessing data in; [ 151.870491][ T8985] program syz.0.814 not setting count and/or reply_len properly [ 151.878591][ T8987] netlink: 'syz.3.815': attribute type 10 has an invalid length. [ 151.885732][ T8987] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 151.959024][ T35] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 151.961443][ T35] ath9k_htc: Failed to initialize the device [ 151.963564][ T9] usb 6-1: ath9k_htc: USB layer deinitialized [ 152.556877][ T9] usb 7-1: USB disconnect, device number 14 [ 152.588746][ T9007] fuse: Unknown parameter '00000000000000000003fd' [ 152.839479][ T9021] netlink: 88 bytes leftover after parsing attributes in process `syz.2.823'. [ 152.903128][ T9032] netlink: 'syz.2.827': attribute type 1 has an invalid length. [ 152.905422][ T9032] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.827'. [ 153.161960][ T9046] syz.2.827: attempt to access beyond end of device [ 153.161960][ T9046] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 153.165885][ T9046] syz.2.827: attempt to access beyond end of device [ 153.165885][ T9046] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 153.170248][ T6227] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 153.173442][ T9046] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 153.177245][ T9046] syz.2.827: attempt to access beyond end of device [ 153.177245][ T9046] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 153.181624][ T9046] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 153.185817][ T9046] syz.2.827: attempt to access beyond end of device [ 153.185817][ T9046] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 153.192336][ T9046] syz.2.827: attempt to access beyond end of device [ 153.192336][ T9046] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 153.197059][ T9046] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 153.201001][ T9046] syz.2.827: attempt to access beyond end of device [ 153.201001][ T9046] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 153.205667][ T9046] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 153.208544][ T9046] syz.2.827: attempt to access beyond end of device [ 153.208544][ T9046] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 153.214580][ T9046] syz.2.827: attempt to access beyond end of device [ 153.214580][ T9046] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 153.218276][ T9046] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 153.221078][ T9046] syz.2.827: attempt to access beyond end of device [ 153.221078][ T9046] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 153.224898][ T9046] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 153.227783][ T9046] syz.2.827: attempt to access beyond end of device [ 153.227783][ T9046] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 153.231692][ T9046] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 153.238694][ T9046] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 153.241712][ T9046] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 153.281445][ T9049] syzkaller0: entered promiscuous mode [ 153.283245][ T9049] syzkaller0: entered allmulticast mode [ 153.286267][ T8067] syzkaller0: tun_net_xmit 48 [ 153.421642][ T6227] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 153.424313][ T6227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.426688][ T6227] usb 5-1: Product: syz [ 153.427961][ T6227] usb 5-1: Manufacturer: syz [ 153.429457][ T6227] usb 5-1: SerialNumber: syz [ 153.433775][ T6227] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 153.448209][ T1016] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 153.730249][ T9042] nbd2: detected capacity change from 0 to 67108884 [ 153.736823][ T8643] block nbd2: Send control failed (result -89) [ 153.739680][ T8643] block nbd2: Request send failed, requeueing [ 153.743863][ T5294] block nbd2: Receive control failed (result -32) [ 153.745610][ T71] block nbd2: Dead connection, failed to find a fallback [ 153.748766][ T71] block nbd2: shutting down sockets [ 153.751283][ T71] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 153.754050][ T71] Buffer I/O error on dev nbd2, logical block 0, async page read [ 153.759023][ T8643] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 153.761747][ T8643] Buffer I/O error on dev nbd2, logical block 0, async page read [ 153.764185][ T8643] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 153.766772][ T8643] Buffer I/O error on dev nbd2, logical block 0, async page read [ 153.769142][ T8643] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 153.771715][ T8643] Buffer I/O error on dev nbd2, logical block 0, async page read [ 153.774009][ T8643] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 153.777296][ T8643] Buffer I/O error on dev nbd2, logical block 0, async page read [ 153.780297][ T8643] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 153.783654][ T8643] Buffer I/O error on dev nbd2, logical block 0, async page read [ 153.786552][ T8643] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 153.789896][ T8643] Buffer I/O error on dev nbd2, logical block 0, async page read [ 153.792782][ T8643] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 153.796068][ T8643] Buffer I/O error on dev nbd2, logical block 0, async page read [ 153.798694][ T8643] ldm_validate_partition_table(): Disk read failed. [ 153.800860][ T8643] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 153.803522][ T8643] Buffer I/O error on dev nbd2, logical block 0, async page read [ 153.805780][ T8643] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 153.808361][ T8643] Buffer I/O error on dev nbd2, logical block 0, async page read [ 153.810702][ T8643] Dev nbd2: unable to read RDB block 0 [ 153.812500][ T8643] nbd2: unable to read partition table [ 154.182573][ T8643] ldm_validate_partition_table(): Disk read failed. [ 154.185188][ T8643] Dev nbd2: unable to read RDB block 0 [ 154.188074][ T8643] nbd2: unable to read partition table [ 154.449071][ T9] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 154.519273][ T1016] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 154.521893][ T1016] ath9k_htc: Failed to initialize the device [ 154.542140][ T1016] usb 5-1: ath9k_htc: USB layer deinitialized [ 154.555817][ T30] usb 5-1: USB disconnect, device number 16 [ 154.610358][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 154.615077][ T9] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 154.618037][ T9] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 154.620464][ T9] usb 8-1: Product: syz [ 154.621685][ T9] usb 8-1: Manufacturer: syz [ 154.623041][ T9] usb 8-1: SerialNumber: syz [ 154.625415][ T9] usb 8-1: config 0 descriptor?? [ 155.172824][ T9062] ======================================================= [ 155.172824][ T9062] WARNING: The mand mount option has been deprecated and [ 155.172824][ T9062] and is ignored by this kernel. Remove the mand [ 155.172824][ T9062] option from the mount to silence this warning. [ 155.172824][ T9062] ======================================================= [ 155.386847][ T39] kauditd_printk_skb: 33 callbacks suppressed [ 155.386857][ T39] audit: type=1326 audit(1735048102.771:8991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9065 comm="syz.0.834" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 155.409192][ T39] audit: type=1326 audit(1735048102.771:8992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9065 comm="syz.0.834" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 155.416301][ T39] audit: type=1326 audit(1735048102.771:8993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9065 comm="syz.0.834" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 155.422822][ T39] audit: type=1326 audit(1735048102.771:8994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9065 comm="syz.0.834" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 155.429106][ T39] audit: type=1326 audit(1735048102.771:8995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9065 comm="syz.0.834" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 155.440103][ T39] audit: type=1326 audit(1735048102.771:8996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9065 comm="syz.0.834" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 155.446400][ T39] audit: type=1326 audit(1735048102.771:8997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9065 comm="syz.0.834" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 155.452735][ T39] audit: type=1326 audit(1735048102.771:8998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9065 comm="syz.0.834" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 155.459095][ T39] audit: type=1326 audit(1735048102.771:8999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9065 comm="syz.0.834" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 155.469313][ T39] audit: type=1326 audit(1735048102.771:9000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9065 comm="syz.0.834" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 155.926598][ T9093] netlink: 'syz.1.838': attribute type 4 has an invalid length. [ 155.932837][ T9] lo speed is unknown, defaulting to 1000 [ 155.936032][ T9093] netlink: 'syz.1.838': attribute type 4 has an invalid length. [ 155.942375][ T834] lo speed is unknown, defaulting to 1000 [ 156.149431][ T9096] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 156.979337][ T834] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 157.143431][ T834] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 157.146067][ T834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.148464][ T834] usb 6-1: Product: syz [ 157.150244][ T834] usb 6-1: Manufacturer: syz [ 157.151724][ T834] usb 6-1: SerialNumber: syz [ 157.155669][ T834] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 157.166078][ T834] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 157.334077][ T30] usb 8-1: USB disconnect, device number 18 [ 157.807231][ T9128] nbd: must specify at least one socket [ 157.952290][ T30] usb 6-1: USB disconnect, device number 15 [ 158.189082][ T834] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 158.193195][ T834] ath9k_htc: Failed to initialize the device [ 158.196852][ T30] usb 6-1: ath9k_htc: USB layer deinitialized [ 158.611054][ T9163] FAULT_INJECTION: forcing a failure. [ 158.611054][ T9163] name failslab, interval 1, probability 0, space 0, times 0 [ 158.616015][ T9163] CPU: 0 UID: 0 PID: 9163 Comm: syz.2.860 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 158.619135][ T9163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 158.622242][ T9163] Call Trace: [ 158.623214][ T9163] [ 158.624172][ T9163] dump_stack_lvl+0x16c/0x1f0 [ 158.625746][ T9163] should_fail_ex+0x497/0x5b0 [ 158.627107][ T9163] ? fs_reclaim_acquire+0xae/0x150 [ 158.628607][ T9163] should_failslab+0xc2/0x120 [ 158.629978][ T9163] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 158.631517][ T9163] ? getname_flags.part.0+0x4c/0x550 [ 158.633062][ T9163] getname_flags.part.0+0x4c/0x550 [ 158.634552][ T9163] getname_flags+0x93/0xf0 [ 158.635837][ T9163] __ia32_sys_rename+0x64/0xa0 [ 158.637219][ T9163] __do_fast_syscall_32+0x73/0x120 [ 158.638708][ T9163] do_fast_syscall_32+0x32/0x80 [ 158.640550][ T9163] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 158.642375][ T9163] RIP: 0023:0xf709e579 [ 158.643569][ T9163] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 158.648990][ T9163] RSP: 002b:00000000f506f55c EFLAGS: 00000296 ORIG_RAX: 0000000000000026 [ 158.651374][ T9163] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 0000000020000800 [ 158.653646][ T9163] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 158.655931][ T9163] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 158.658216][ T9163] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 158.660476][ T9163] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 158.662745][ T9163] [ 159.692090][ T9200] FAULT_INJECTION: forcing a failure. [ 159.692090][ T9200] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.695956][ T9200] CPU: 3 UID: 0 PID: 9200 Comm: syz.2.870 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 159.698985][ T9200] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 159.702009][ T9200] Call Trace: [ 159.702998][ T9200] [ 159.703853][ T9200] dump_stack_lvl+0x16c/0x1f0 [ 159.705212][ T9200] should_fail_ex+0x497/0x5b0 [ 159.706570][ T9200] strncpy_from_user+0x3b/0x2d0 [ 159.708435][ T9200] getname_flags.part.0+0x8f/0x550 [ 159.710499][ T9200] getname_flags+0x93/0xf0 [ 159.712319][ T9200] __ia32_sys_rename+0x64/0xa0 [ 159.714024][ T9200] __do_fast_syscall_32+0x73/0x120 [ 159.715495][ T9200] do_fast_syscall_32+0x32/0x80 [ 159.716935][ T9200] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 159.718737][ T9200] RIP: 0023:0xf709e579 [ 159.719900][ T9200] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 159.725344][ T9200] RSP: 002b:00000000f506f55c EFLAGS: 00000296 ORIG_RAX: 0000000000000026 [ 159.728066][ T9200] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 0000000020000800 [ 159.731220][ T9200] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 159.734289][ T9200] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 159.736684][ T9200] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 159.738984][ T9200] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 159.741265][ T9200] [ 159.803742][ T9198] rdma_rxe: rxe_newlink: failed to add lo [ 160.358897][ T9221] netlink: 16 bytes leftover after parsing attributes in process `syz.3.876'. [ 160.362012][ T9221] openvswitch: netlink: Message has 1275 unknown bytes. [ 160.364058][ T9221] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.078169][ T9257] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 162.081351][ T9257] IPv6: NLM_F_CREATE should be set when creating new route [ 162.083593][ T9257] IPv6: NLM_F_CREATE should be set when creating new route [ 162.086135][ T9257] IPv6: NLM_F_CREATE should be set when creating new route [ 162.559585][ T9272] vivid-007: disconnect [ 162.563987][ T9271] vivid-007: reconnect [ 163.011015][ T9292] FAULT_INJECTION: forcing a failure. [ 163.011015][ T9292] name failslab, interval 1, probability 0, space 0, times 0 [ 163.015712][ T9292] CPU: 0 UID: 0 PID: 9292 Comm: syz.2.896 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 163.019744][ T9292] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 163.023683][ T9292] Call Trace: [ 163.024945][ T9292] [ 163.026095][ T9292] dump_stack_lvl+0x16c/0x1f0 [ 163.027745][ T9292] should_fail_ex+0x497/0x5b0 [ 163.029597][ T9292] ? fs_reclaim_acquire+0xae/0x150 [ 163.031669][ T9292] should_failslab+0xc2/0x120 [ 163.033563][ T9292] __kmalloc_noprof+0xce/0x4f0 [ 163.035484][ T9292] ? tomoyo_realpath_from_path+0x1b7/0x710 [ 163.037807][ T9292] ? tomoyo_realpath_from_path+0xbf/0x710 [ 163.039960][ T9292] tomoyo_realpath_from_path+0xbf/0x710 [ 163.042072][ T9292] ? tomoyo_fill_path_info+0x233/0x420 [ 163.044218][ T9292] tomoyo_path2_perm+0x36f/0x760 [ 163.046206][ T9292] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 163.048423][ T9292] ? hlock_class+0x4e/0x130 [ 163.050289][ T9292] ? current_check_refer_path+0x2be/0x710 [ 163.052636][ T9292] ? __pfx_current_check_refer_path+0x10/0x10 [ 163.054994][ T9292] tomoyo_path_rename+0x102/0x1b0 [ 163.056497][ T9292] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 163.058093][ T9292] ? __d_lookup+0x266/0x4a0 [ 163.059502][ T9292] ? d_lookup+0xe9/0x180 [ 163.060726][ T9292] security_path_rename+0x18e/0x3c0 [ 163.062249][ T9292] do_renameat2+0x7a0/0xdd0 [ 163.063576][ T9292] ? __pfx_do_renameat2+0x10/0x10 [ 163.065120][ T9292] ? lock_acquire+0x2f/0xb0 [ 163.066861][ T9292] ? __virt_addr_valid+0x5e/0x590 [ 163.068903][ T9292] ? __phys_addr_symbol+0x30/0x80 [ 163.070962][ T9292] ? getname_flags.part.0+0x1c5/0x550 [ 163.073151][ T9292] __ia32_sys_rename+0x7c/0xa0 [ 163.074919][ T9292] __do_fast_syscall_32+0x73/0x120 [ 163.076465][ T9292] do_fast_syscall_32+0x32/0x80 [ 163.078029][ T9292] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 163.080179][ T9292] RIP: 0023:0xf709e579 [ 163.081822][ T9292] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 163.089245][ T9292] RSP: 002b:00000000f509055c EFLAGS: 00000296 ORIG_RAX: 0000000000000026 [ 163.092576][ T9292] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 0000000020000800 [ 163.095537][ T9292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 163.098278][ T9292] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 163.101379][ T9292] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 163.104504][ T9292] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 163.106980][ T9292] [ 163.108340][ T9292] ERROR: Out of memory at tomoyo_realpath_from_path. [ 163.369065][ T35] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 163.539003][ T35] usb 7-1: Using ep0 maxpacket: 8 [ 163.540114][ T9326] tipc: Failed to remove unknown binding: 66,1,1/4294967295:1517998332/1517998334 [ 163.545142][ T35] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 163.548263][ T35] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 163.551259][ T35] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 163.554554][ T35] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 163.561266][ T35] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 163.563975][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.579063][ T9327] FAULT_INJECTION: forcing a failure. [ 163.579063][ T9327] name failslab, interval 1, probability 0, space 0, times 0 [ 163.582637][ T9327] CPU: 1 UID: 0 PID: 9327 Comm: syz.0.908 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 163.585618][ T9327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 163.588675][ T9327] Call Trace: [ 163.589668][ T9327] [ 163.590527][ T9327] dump_stack_lvl+0x16c/0x1f0 [ 163.591906][ T9327] should_fail_ex+0x497/0x5b0 [ 163.593289][ T9327] ? fs_reclaim_acquire+0xae/0x150 [ 163.594774][ T9327] should_failslab+0xc2/0x120 [ 163.596137][ T9327] __kmalloc_noprof+0xce/0x4f0 [ 163.597530][ T9327] ? __pfx_d_absolute_path+0x10/0x10 [ 163.599055][ T9327] ? tomoyo_encode2+0x100/0x3e0 [ 163.600482][ T9327] tomoyo_encode2+0x100/0x3e0 [ 163.601836][ T9327] tomoyo_realpath_from_path+0x1a7/0x710 [ 163.603454][ T9327] tomoyo_path2_perm+0x36f/0x760 [ 163.604871][ T9327] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 163.606448][ T9327] ? hlock_class+0x4e/0x130 [ 163.607762][ T9327] ? current_check_refer_path+0x2be/0x710 [ 163.609424][ T9327] ? __pfx_current_check_refer_path+0x10/0x10 [ 163.611187][ T9327] tomoyo_path_rename+0x102/0x1b0 [ 163.612650][ T9327] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 163.614242][ T9327] ? __d_lookup+0x266/0x4a0 [ 163.615548][ T9327] ? d_lookup+0xe9/0x180 [ 163.616768][ T9327] security_path_rename+0x18e/0x3c0 [ 163.618262][ T9327] do_renameat2+0x7a0/0xdd0 [ 163.619651][ T9327] ? __pfx_do_renameat2+0x10/0x10 [ 163.621091][ T9327] ? lock_acquire+0x2f/0xb0 [ 163.622430][ T9327] ? __virt_addr_valid+0x5e/0x590 [ 163.623886][ T9327] ? __phys_addr_symbol+0x30/0x80 [ 163.625337][ T9327] ? getname_flags.part.0+0x1c5/0x550 [ 163.626895][ T9327] __ia32_sys_rename+0x7c/0xa0 [ 163.628279][ T9327] __do_fast_syscall_32+0x73/0x120 [ 163.629888][ T9327] do_fast_syscall_32+0x32/0x80 [ 163.631719][ T9327] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 163.633585][ T9327] RIP: 0023:0xf70ce579 [ 163.634759][ T9327] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 163.640212][ T9327] RSP: 002b:00000000f509f55c EFLAGS: 00000296 ORIG_RAX: 0000000000000026 [ 163.642579][ T9327] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 0000000020000800 [ 163.644822][ T9327] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 163.647079][ T9327] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 163.649312][ T9327] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 163.651551][ T9327] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 163.653817][ T9327] [ 163.654880][ T9327] ERROR: Out of memory at tomoyo_realpath_from_path. [ 163.701330][ T9329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.909'. [ 163.775174][ T35] usb 7-1: GET_CAPABILITIES returned 0 [ 163.776855][ T35] usbtmc 7-1:16.0: can't read capabilities [ 163.949132][ T834] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 163.985698][ T9] usb 7-1: USB disconnect, device number 15 [ 164.120559][ T834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 164.124103][ T834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 164.127414][ T834] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 164.131222][ T834] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 164.133890][ T834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.139027][ T834] usb 5-1: config 0 descriptor?? [ 164.141017][ T9329] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 164.723364][ T834] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 164.726531][ T834] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 164.735996][ T834] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 164.811568][ T9329] netlink: 24 bytes leftover after parsing attributes in process `syz.0.909'. [ 164.823555][ T6227] usb 5-1: USB disconnect, device number 17 [ 165.098070][ T9337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.913'. [ 165.439296][ T9354] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 165.680903][ T9342] random: crng reseeded on system resumption [ 166.114975][ T9366] tmpfs: Bad value for 'mpol' [ 166.327273][ T9370] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 166.391949][ T9372] FAULT_INJECTION: forcing a failure. [ 166.391949][ T9372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.395717][ T9372] CPU: 3 UID: 0 PID: 9372 Comm: syz.3.918 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 166.398867][ T9372] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 166.401944][ T9372] Call Trace: [ 166.402949][ T9372] [ 166.403815][ T9372] dump_stack_lvl+0x16c/0x1f0 [ 166.405187][ T9372] should_fail_ex+0x497/0x5b0 [ 166.406573][ T9372] _copy_to_user+0x32/0xd0 [ 166.408360][ T9372] simple_read_from_buffer+0xd0/0x160 [ 166.410318][ T9372] proc_fail_nth_read+0x198/0x270 [ 166.411796][ T9372] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 166.413414][ T9372] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 166.415031][ T9372] vfs_read+0x1df/0xbe0 [ 166.416280][ T9372] ? __fget_files+0x1fc/0x3a0 [ 166.417654][ T9372] ? __pfx___mutex_lock+0x10/0x10 [ 166.419109][ T9372] ? __pfx_vfs_read+0x10/0x10 [ 166.420543][ T9372] ? __fget_files+0x206/0x3a0 [ 166.421924][ T9372] ksys_read+0x12b/0x250 [ 166.423166][ T9372] ? __pfx_ksys_read+0x10/0x10 [ 166.424559][ T9372] __do_fast_syscall_32+0x73/0x120 [ 166.426207][ T9372] do_fast_syscall_32+0x32/0x80 [ 166.428188][ T9372] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 166.430145][ T9372] RIP: 0023:0xf7f46579 [ 166.431317][ T9372] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 166.437243][ T9372] RSP: 002b:00000000f5096590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 166.439676][ T9372] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f5096620 [ 166.441967][ T9372] RDX: 000000000000000f RSI: 00000000f73d3ff4 RDI: 0000000000000000 [ 166.444273][ T9372] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 166.447173][ T9372] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 166.449477][ T9372] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 166.451627][ T9372] [ 167.796139][ T9404] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 168.383365][ T9418] syz.2.933[9418] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 168.383414][ T9418] syz.2.933[9418] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 168.386678][ T9418] syz.2.933[9418] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 168.446673][ T9428] netlink: 'syz.2.936': attribute type 10 has an invalid length. [ 168.454264][ T9428] bond0: (slave bridge0): Enslaving as an active interface with a down link [ 168.461854][ T9427] delete_channel: no stack [ 168.484869][ T39] kauditd_printk_skb: 211 callbacks suppressed [ 168.484880][ T39] audit: type=1326 audit(1735048115.861:9212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9429 comm="syz.2.937" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x0 [ 170.310361][ T9485] netlink: 4 bytes leftover after parsing attributes in process `syz.3.951'. [ 170.969748][ T9488] random: crng reseeded on system resumption [ 171.334966][ T9507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.953'. [ 171.349281][ T9507] tmpfs: Unknown parameter 'obj_type' [ 171.362543][ T9507] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 173.710028][ T9568] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 173.712215][ T9568] IPv6: NLM_F_CREATE should be set when creating new route [ 173.714294][ T9568] IPv6: NLM_F_CREATE should be set when creating new route [ 173.716460][ T9568] IPv6: NLM_F_CREATE should be set when creating new route [ 174.925071][ T1330] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 175.130843][ T9606] netlink: 'syz.1.980': attribute type 10 has an invalid length. [ 175.134221][ T9606] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.138524][ T9606] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.166375][ T9604] delete_channel: no stack [ 175.267496][ T9613] random: crng reseeded on system resumption [ 175.289102][ T1330] usb 7-1: Using ep0 maxpacket: 32 [ 175.294333][ T1330] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 175.296957][ T1330] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 175.301277][ T1330] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 175.304562][ T1330] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.306779][ T1330] usb 7-1: Product: syz [ 175.307955][ T1330] usb 7-1: Manufacturer: syz [ 175.309523][ T1330] usb 7-1: SerialNumber: syz [ 175.518672][ T1330] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 175.549315][ T1016] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 175.709361][ T1016] usb 6-1: device descriptor read/64, error -71 [ 175.950156][ T1016] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 176.079228][ T1016] usb 6-1: device descriptor read/64, error -71 [ 176.204068][ T1016] usb usb6-port1: attempt power cycle [ 176.273710][ T9618] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 176.276339][ T9618] IPv6: NLM_F_CREATE should be set when creating new route [ 176.279022][ T9618] IPv6: NLM_F_CREATE should be set when creating new route [ 176.281591][ T9618] IPv6: NLM_F_CREATE should be set when creating new route [ 176.450322][ T30] usb 7-1: USB disconnect, device number 16 [ 176.453511][ T30] usblp0: removed [ 176.479785][ T9621] netlink: 44 bytes leftover after parsing attributes in process `syz.2.983'. [ 176.573013][ T1016] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 176.589525][ T1016] usb 6-1: device descriptor read/8, error -71 [ 176.959315][ T1016] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 176.979859][ T1016] usb 6-1: device descriptor read/8, error -71 [ 176.995010][ T9629] cgroup: fork rejected by pids controller in /syz0 [ 177.123690][ T1016] usb usb6-port1: unable to enumerate USB device [ 177.320845][ T9621] Set syz1 is full, maxelem 65536 reached [ 177.458753][T10100] netlink: 'syz.2.999': attribute type 10 has an invalid length. [ 177.467322][T10099] delete_channel: no stack [ 177.749160][ T1016] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 177.900600][ T1016] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 177.903586][ T1016] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 177.906851][ T1016] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.912496][T10105] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 177.918434][ T1016] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 178.226097][ T1016] usb 7-1: USB disconnect, device number 17 [ 178.272391][ T1330] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 178.431884][ T1330] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 178.434489][ T1330] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.436720][ T1330] usb 8-1: Product: syz [ 178.437942][ T1330] usb 8-1: Manufacturer: syz [ 178.439295][ T1330] usb 8-1: SerialNumber: syz [ 178.448023][ T1330] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 178.460997][ T1330] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 178.745792][ T834] usb 8-1: USB disconnect, device number 19 [ 179.397823][T10155] netlink: 'syz.1.1001': attribute type 10 has an invalid length. [ 179.405979][T10154] delete_channel: no stack [ 179.469092][ T1330] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 179.471139][ T1330] ath9k_htc: Failed to initialize the device [ 179.473797][ T834] usb 8-1: ath9k_htc: USB layer deinitialized [ 180.502415][T10177] syzkaller0: entered allmulticast mode [ 180.533805][T10177] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 180.780094][T10176] syzkaller0: left allmulticast mode [ 180.979080][ T1330] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 181.139015][ T1330] usb 6-1: Using ep0 maxpacket: 16 [ 181.141826][ T1330] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 181.144510][ T1330] usb 6-1: config 0 has no interface number 0 [ 181.146332][ T1330] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 181.150350][ T1330] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 181.154638][ T1330] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 181.157206][ T1330] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 181.159589][ T1330] usb 6-1: Product: syz [ 181.160792][ T1330] usb 6-1: SerialNumber: syz [ 181.163374][ T1330] usb 6-1: config 0 descriptor?? [ 181.166524][ T1330] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 181.168882][ T1330] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input19 [ 181.390016][T10182] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1009'. [ 181.391647][ C3] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 181.609819][ C3] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 181.612642][ C3] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 181.614715][ C3] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 181.616711][ T1330] usb 6-1: USB disconnect, device number 20 [ 181.618388][ C3] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 181.618399][ C3] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 181.628698][ T1330] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 182.183477][T10199] netlink: 'syz.0.1013': attribute type 10 has an invalid length. [ 182.186350][T10199] bridge0: port 3(syz_tun) entered disabled state [ 182.188594][T10199] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.191473][T10199] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.200431][T10199] bridge0: port 3(syz_tun) entered blocking state [ 182.202552][T10199] bridge0: port 3(syz_tun) entered forwarding state [ 182.205112][T10199] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.207377][T10199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.210072][T10199] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.212707][T10199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.216294][T10199] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 182.229903][T10198] delete_channel: no stack [ 182.290052][ T1330] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 182.339131][ T1330] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 183.489048][ T30] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 183.671781][ T30] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 183.674513][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.676897][ T30] usb 6-1: Product: syz [ 183.678150][ T30] usb 6-1: Manufacturer: syz [ 183.680373][ T30] usb 6-1: SerialNumber: syz [ 183.684569][ T30] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 183.687855][T10247] lo speed is unknown, defaulting to 1000 [ 183.702038][ T30] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 184.013585][T10223] Process accounting resumed [ 184.051364][ T1330] usb 6-1: USB disconnect, device number 21 [ 184.555923][ T39] audit: type=1326 audit(1735048131.931:9213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10269 comm="syz.2.1030" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 184.573042][ T39] audit: type=1326 audit(1735048131.941:9214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10269 comm="syz.2.1030" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 184.585053][ T39] audit: type=1326 audit(1735048131.951:9215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10269 comm="syz.2.1030" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 184.591551][ T39] audit: type=1326 audit(1735048131.961:9216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10269 comm="syz.2.1030" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 184.598062][ T39] audit: type=1326 audit(1735048131.961:9217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10269 comm="syz.2.1030" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 184.606200][ T39] audit: type=1326 audit(1735048131.961:9218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10269 comm="syz.2.1030" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 184.612502][ T39] audit: type=1326 audit(1735048131.961:9219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10269 comm="syz.2.1030" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x0 [ 184.749259][ T30] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 184.751379][ T30] ath9k_htc: Failed to initialize the device [ 184.754412][ T1330] usb 6-1: ath9k_htc: USB layer deinitialized [ 185.090995][T10285] tipc: Can't bind to reserved service type 1 [ 185.141666][T10286] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1032'. [ 185.145989][T10286] netlink: 'syz.0.1032': attribute type 1 has an invalid length. [ 185.281451][T10293] 9pnet_fd: Insufficient options for proto=fd [ 185.615233][T10308] lo speed is unknown, defaulting to 1000 [ 186.354360][T10303] Process accounting resumed [ 186.442018][T10318] syzkaller1: entered promiscuous mode [ 186.444120][T10318] syzkaller1: entered allmulticast mode [ 187.313371][T10350] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.316143][T10350] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.318652][T10350] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.322681][T10350] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.325288][T10350] geneve2: entered promiscuous mode [ 187.326804][T10350] geneve2: entered allmulticast mode [ 187.333164][T10350] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.335725][T10350] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.338355][T10350] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.344550][T10350] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.952349][ T39] audit: type=1326 audit(1735048135.331:9220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10359 comm="syz.2.1054" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 187.960400][ T39] audit: type=1326 audit(1735048135.331:9221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10359 comm="syz.2.1054" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 187.968226][ T39] audit: type=1326 audit(1735048135.331:9222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10359 comm="syz.2.1054" exe="/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 188.019017][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 188.176303][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 188.180550][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.181277][ T6227] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 188.184978][ T9] usb 5-1: Product: syz [ 188.187198][ T9] usb 5-1: Manufacturer: syz [ 188.189341][ T9] usb 5-1: SerialNumber: syz [ 188.226045][ T9] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 188.339006][ T6227] usb 8-1: Using ep0 maxpacket: 8 [ 188.341792][ T6227] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 188.346258][ T6227] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 188.348894][ T6227] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 188.351333][ T6227] usb 8-1: SerialNumber: syz [ 188.356085][ T6227] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -22 [ 188.582068][ T6227] usb 8-1: USB disconnect, device number 20 [ 189.160738][ T834] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 189.228161][T10393] binder: 10391:10393 ioctl ab00 3 returned -22 [ 189.260746][T10396] sit0: entered promiscuous mode [ 189.264806][T10396] netlink: 'syz.3.1065': attribute type 1 has an invalid length. [ 189.267149][T10396] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1065'. [ 189.276002][T10399] pim6reg: entered allmulticast mode [ 190.199179][ T834] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 190.201308][ T834] ath9k_htc: Failed to initialize the device [ 190.226121][ T834] usb 5-1: ath9k_htc: USB layer deinitialized [ 190.392613][T10455] netlink: 'syz.1.1079': attribute type 3 has an invalid length. [ 190.429612][T10457] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 190.447337][T10458] 9pnet_fd: Insufficient options for proto=fd [ 190.772720][ T5997] usb 5-1: USB disconnect, device number 18 [ 191.052571][T10459] orangefs_mount: mount request failed with -4 [ 191.217251][ T39] kauditd_printk_skb: 33 callbacks suppressed [ 191.217268][ T39] audit: type=1326 audit(1735048138.581:9256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10477 comm="syz.3.1086" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 191.229083][ T39] audit: type=1326 audit(1735048138.581:9257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10477 comm="syz.3.1086" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 191.237610][ T39] audit: type=1326 audit(1735048138.581:9258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10477 comm="syz.3.1086" exe="/syz-executor" sig=0 arch=40000003 syscall=241 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 191.246886][ T39] audit: type=1326 audit(1735048138.581:9259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10477 comm="syz.3.1086" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 191.255971][ T39] audit: type=1326 audit(1735048138.581:9260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10477 comm="syz.3.1086" exe="/syz-executor" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 191.260781][T10485] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 191.265205][ T39] audit: type=1326 audit(1735048138.581:9261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10477 comm="syz.3.1086" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 191.276943][ T39] audit: type=1326 audit(1735048138.581:9262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10477 comm="syz.3.1086" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 191.285851][ T39] audit: type=1326 audit(1735048138.591:9263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10477 comm="syz.3.1086" exe="/syz-executor" sig=0 arch=40000003 syscall=181 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 191.294321][ T39] audit: type=1326 audit(1735048138.591:9264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10477 comm="syz.3.1086" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 191.305989][ T39] audit: type=1326 audit(1735048138.591:9265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10477 comm="syz.3.1086" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 191.702710][T10490] program syz.1.1089 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 191.741028][T10490] ubi0: attaching mtd0 [ 191.753185][T10490] ubi0: scanning is finished [ 191.755262][T10490] ubi0: empty MTD device detected [ 191.784281][T10501] random: crng reseeded on system resumption [ 191.798056][T10501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1091'. [ 191.801177][T10501] openvswitch: netlink: Flow actions attr not present in new flow. [ 191.885664][T10503] netlink: 'syz.0.1091': attribute type 10 has an invalid length. [ 191.893882][T10490] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 191.894062][T10503] bond0: (slave wlan1): Opening slave failed [ 191.896136][T10490] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 191.900571][T10490] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 191.902752][T10490] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 191.904933][T10490] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 191.906949][T10490] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 191.909608][T10490] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3270030244 [ 191.913574][T10490] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 191.917518][T10504] ubi0: background thread "ubi_bgt0d" started, PID 10504 [ 192.137915][T10508] netlink: 'syz.2.1093': attribute type 8 has an invalid length. [ 192.147007][T10508] rdma_rxe: rxe_newlink: failed to add lo [ 192.192603][T10513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.199326][T10513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.568439][T10551] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1105'. [ 193.571150][T10551] netlink: zone id is out of range [ 193.574167][T10551] netlink: zone id is out of range [ 193.576999][T10551] netlink: get zone limit has 8 unknown bytes [ 193.633602][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.807050][T10563] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1108'. [ 194.811211][T10565] dummy0: entered promiscuous mode [ 194.814066][T10565] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 195.149141][ T1019] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 195.301730][ T1019] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 195.304503][ T1019] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.306920][ T1019] usb 7-1: Product: syz [ 195.308181][ T1019] usb 7-1: Manufacturer: syz [ 195.309802][ T1019] usb 7-1: SerialNumber: syz [ 195.313872][ T1019] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 195.324625][ T6227] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 196.262535][T10606] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 196.266690][T10606] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 196.271149][ T834] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 196.342477][ T30] usb 7-1: USB disconnect, device number 18 [ 196.361570][ T6227] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 196.363899][ T6227] ath9k_htc: Failed to initialize the device [ 196.365947][ T30] usb 7-1: ath9k_htc: USB layer deinitialized [ 196.400506][T10618] syzkaller0: entered promiscuous mode [ 196.402166][T10618] syzkaller0: entered allmulticast mode [ 196.405512][ T8059] syzkaller0: tun_net_xmit 48 [ 196.627570][T10618] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 196.630115][T10618] syzkaller0: Linktype set failed because interface is up [ 196.900743][ T834] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 197.128294][ T39] kauditd_printk_skb: 60 callbacks suppressed [ 197.128305][ T39] audit: type=1326 audit(1735048144.501:9326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10628 comm="syz.2.1126" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x50000 [ 197.136373][ T39] audit: type=1326 audit(1735048144.501:9327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10628 comm="syz.2.1126" exe="/syz-executor" sig=0 arch=40000003 syscall=435 compat=1 ip=0xf7234bb0 code=0x50000 [ 197.144111][ T39] audit: type=1326 audit(1735048144.501:9328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10628 comm="syz.2.1126" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x50000 [ 197.150141][ T39] audit: type=1326 audit(1735048144.501:9329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10628 comm="syz.2.1126" exe="/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf709e579 code=0x50000 [ 197.156296][ T39] audit: type=1326 audit(1735048144.501:9330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10628 comm="syz.2.1126" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x50000 [ 197.162539][ T39] audit: type=1326 audit(1735048144.501:9331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10628 comm="syz.2.1126" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x50000 [ 197.168803][ T39] audit: type=1326 audit(1735048144.501:9332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10628 comm="syz.2.1126" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x50000 [ 197.174899][ T39] audit: type=1326 audit(1735048144.501:9334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10628 comm="syz.2.1126" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x50000 [ 197.180835][ T39] audit: type=1326 audit(1735048144.501:9333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10628 comm="syz.2.1126" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf709e579 code=0x50000 [ 197.186774][ T39] audit: type=1326 audit(1735048144.501:9335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10628 comm="syz.2.1126" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x50000 [ 197.834853][T10651] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 199.517828][ T45] bond0: (slave bridge0): link status definitely down, disabling slave [ 199.525513][T10672] netlink: 'syz.3.1135': attribute type 10 has an invalid length. [ 199.541183][ T45] bond0: now running without any active interface! [ 199.576762][T10675] kAFS: unable to lookup cell ' /dev/ttyHS 506 0-255 serial [ 199.576762][T10675] ttyprintk /dev/ttyprintk 5 3 console [ 199.576762][T10675] ttynull /dev/ttynull 235 0 console [ 199.576762][T10675] nozomi_tty /dev/noz 236 0-255 serial [ 199.576762][T10675] serial /dev/ttyS 4 64-95 serial [ 199.576762][T10675] gsmtty /dev/gsmtty 237 0-255 serial [ 199.576762][T10675] pty_slave /dev/pts 136 0-1048575 pty' [ 199.578048][T10671] delete_channel: no stack [ 199.649075][ T1330] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 199.802042][ T1330] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 199.805736][ T1330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.808817][ T1330] usb 5-1: Product: syz [ 199.810597][ T1330] usb 5-1: Manufacturer: syz [ 199.811975][ T1330] usb 5-1: SerialNumber: syz [ 199.819425][ T1330] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 199.831233][ T35] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 199.990290][T10689] syz.3.1140 (10689) used greatest stack depth: 19712 bytes left [ 200.022695][T10693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.025387][T10693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.033155][T10693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.036764][T10694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.044785][T10693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.047315][T10694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.273167][ T1016] usb 8-1: new full-speed USB device number 21 using dummy_hcd [ 200.442155][ T1016] usb 8-1: not running at top speed; connect to a high speed hub [ 200.446483][ T1016] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 200.450154][ T1016] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1040, setting to 64 [ 200.457474][ T1016] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 200.460823][ T1016] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.463891][ T1016] usb 8-1: Product: á © [ 200.465248][ T1016] usb 8-1: Manufacturer: ﻾鷓ᖈ꿶纕꒑ꪺ෮橢ꪓ⋰æ›äœ°ê²ªå‰‘濂䉦彼ꅔ榩쌧郴溫â†à»¬ã²’뀡刊⑋ì„뚶î´ä„“Ū朇㟗í»îŸ³å»šî²šêµ‚â–‹ë–왊냢迆淾쉺䊛㾵洞엩Ɤ䘉æ°â¯¦æ²“ë‡í‰í–žç¿ î¬»è¿–ë´íœá¦± [ 200.472165][ T1016] usb 8-1: SerialNumber: 〆 [ 200.681486][ T1016] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found [ 200.684860][ T1016] cdc_ncm 8-1:1.0: bind() failure [ 200.690617][ T1016] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 200.693396][ T1016] cdc_ncm 8-1:1.1: bind() failure [ 200.697588][ T1016] usb 8-1: USB disconnect, device number 21 [ 200.896731][T10704] fuse: Bad value for 'group_id' [ 200.898257][T10704] fuse: Bad value for 'group_id' [ 200.919085][ T35] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 200.921142][ T35] ath9k_htc: Failed to initialize the device [ 200.937658][ T35] usb 5-1: ath9k_htc: USB layer deinitialized [ 201.462012][T10713] rdma_rxe: rxe_newlink: failed to add lo [ 201.585499][T10717] netlink: 'syz.3.1146': attribute type 10 has an invalid length. [ 201.592620][T10716] delete_channel: no stack [ 202.148370][ T35] usb 5-1: USB disconnect, device number 19 [ 202.617883][ T39] kauditd_printk_skb: 63949 callbacks suppressed [ 202.617893][ T39] audit: type=1326 audit(1735048149.991:73285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10721 comm="syz.3.1148" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7fc00000 [ 203.627044][T10762] netlink: 'syz.3.1157': attribute type 10 has an invalid length. [ 203.633588][T10761] delete_channel: no stack [ 203.831964][T10780] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1162'. [ 203.834716][T10780] openvswitch: netlink: Flow key attr not present in new flow. [ 203.902056][T10785] trusted_key: encrypted_key: insufficient parameters specified [ 204.059192][ T30] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 204.206752][T10793] netlink: 964 bytes leftover after parsing attributes in process `syz.1.1165'. [ 204.236710][ T30] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 204.239521][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.242117][ T30] usb 5-1: Product: syz [ 204.243408][ T30] usb 5-1: Manufacturer: syz [ 204.245377][ T30] usb 5-1: SerialNumber: syz [ 204.257526][ T30] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 204.278350][ T5998] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 204.573543][T10806] FAULT_INJECTION: forcing a failure. [ 204.573543][T10806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.577393][T10806] CPU: 1 UID: 0 PID: 10806 Comm: syz.1.1167 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 204.580305][T10806] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 204.583291][T10806] Call Trace: [ 204.584217][T10806] [ 204.585061][T10806] dump_stack_lvl+0x16c/0x1f0 [ 204.586393][T10806] should_fail_ex+0x497/0x5b0 [ 204.587751][T10806] _copy_from_user+0x2e/0xd0 [ 204.589059][T10806] __sys_bpf+0x215/0x57a0 [ 204.590245][T10806] ? finish_task_switch.isra.0+0x217/0xcc0 [ 204.591890][T10806] ? __pfx___sys_bpf+0x10/0x10 [ 204.593227][T10806] ? __schedule+0xe60/0x5ad0 [ 204.594516][T10806] ? fput+0x67/0x440 [ 204.595620][T10806] ? ksys_write+0x1ba/0x250 [ 204.596898][T10806] __ia32_sys_bpf+0x76/0xe0 [ 204.598175][T10806] __do_fast_syscall_32+0x73/0x120 [ 204.599613][T10806] do_fast_syscall_32+0x32/0x80 [ 204.600979][T10806] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 204.602757][T10806] RIP: 0023:0xf7ff7579 [ 204.603874][T10806] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 204.609155][T10806] RSP: 002b:00000000f510455c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 204.611446][T10806] RAX: ffffffffffffffda RBX: 0000000000000018 RCX: 00000000200003c0 [ 204.613654][T10806] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 204.615828][T10806] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 204.618006][T10806] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 204.620156][T10806] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 204.622392][T10806] [ 205.402013][T10820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1171'. [ 205.428376][T10820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1171'. [ 205.469020][ T5998] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 205.471590][ T5998] ath9k_htc: Failed to initialize the device [ 205.509496][ T30] usb 5-1: USB disconnect, device number 20 [ 205.515374][ T30] usb 5-1: ath9k_htc: USB layer deinitialized [ 205.621462][T10842] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.958856][T10856] overlay: ./file0 is not a directory [ 205.973784][T10832] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 206.339061][T10864] nbd2: detected capacity change from 0 to 22 [ 206.342986][T10861] block nbd2: shutting down sockets [ 206.345735][T10861] blk_print_req_error: 24 callbacks suppressed [ 206.345743][T10861] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 206.350093][T10861] buffer_io_error: 23 callbacks suppressed [ 206.350100][T10861] Buffer I/O error on dev nbd2, logical block 0, async page read [ 206.354771][T10861] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 206.357288][T10861] Buffer I/O error on dev nbd2, logical block 0, async page read [ 206.359883][T10861] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 206.362511][T10861] Buffer I/O error on dev nbd2, logical block 0, async page read [ 206.365971][T10861] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 206.368600][T10861] Buffer I/O error on dev nbd2, logical block 0, async page read [ 206.371016][T10861] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 206.373566][T10861] Buffer I/O error on dev nbd2, logical block 0, async page read [ 206.375846][T10861] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 206.378416][T10861] Buffer I/O error on dev nbd2, logical block 0, async page read [ 206.381023][T10861] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 206.383739][T10861] Buffer I/O error on dev nbd2, logical block 0, async page read [ 206.386092][T10861] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 206.394436][T10861] Buffer I/O error on dev nbd2, logical block 0, async page read [ 206.396752][T10861] ldm_validate_partition_table(): Disk read failed. [ 206.398643][T10861] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 206.401569][T10861] Buffer I/O error on dev nbd2, logical block 0, async page read [ 206.463066][T10861] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 206.465663][T10861] Buffer I/O error on dev nbd2, logical block 0, async page read [ 206.467904][T10861] Dev nbd2: unable to read RDB block 0 [ 206.470273][T10861] nbd2: unable to read partition table [ 206.471960][T10861] nbd2: partition table beyond EOD, truncated [ 206.576563][T10870] syz.0.1182 (10870): /proc/10868/oom_adj is deprecated, please use /proc/10868/oom_score_adj instead. [ 206.586744][T10875] [U] : [ 206.587740][T10875] [U] [ 206.588530][T10875] [U] [ 206.589344][T10875] [U] [ 206.590130][T10875] [U] [ 206.590936][T10875] [U] [ 206.591732][T10875] [U] [ 206.592510][T10875] [U] [ 206.593418][T10875] [U] [ 206.594228][T10875] [U] [ 206.595024][T10875] [U] [ 206.595804][T10875] [U] [ 206.596584][T10875] [U] [ 206.597374][T10875] [U] [ 206.598162][T10875] [U] [ 206.598960][T10875] [U] [ 206.600048][T10875] [U] [ 206.600962][T10875] [U] [ 206.601768][T10875] [U] [ 206.602597][T10875] [U] [ 206.603407][T10875] [U] [ 206.604204][T10875] [U] [ 206.604691][T10877] syzkaller0: entered allmulticast mode [ 206.604966][T10875] [U] [ 206.607528][T10875] [U] [ 206.608548][T10875] [U] [ 206.609405][T10875] [U] [ 206.610196][T10875] [U] [ 206.610987][T10875] [U] [ 206.611795][T10875] [U] [ 206.612592][T10875] [U] [ 206.613392][T10875] [U] [ 206.614189][T10875] [U] [ 206.616224][T10875] [U] [ 206.617031][T10875] [U] [ 206.617831][T10875] [U] [ 206.618613][T10875] [U] [ 206.619417][T10875] [U] [ 206.620209][T10875] [U] [ 206.621001][T10875] [U] [ 206.621799][T10875] [U] [ 206.624335][T10875] [U] [ 206.625161][T10875] [U] [ 206.625964][T10875] [U] [ 206.626761][T10875] [U] [ 206.627543][T10875] [U] [ 206.628348][T10875] [U] [ 206.629187][T10875] [U] [ 206.629971][T10875] [U] [ 206.631010][T10875] [U] [ 206.631803][T10875] [U] [ 206.632576][T10875] [U] [ 206.633375][T10875] [U] [ 206.634157][T10875] [U] [ 206.634932][T10875] [U] [ 206.635724][T10875] [U] [ 206.636485][T10875] [U] [ 206.637300][T10875] [U] [ 206.638084][T10875] [U] [ 206.638888][T10875] [U] [ 206.639699][T10875] [U] [ 206.640501][T10875] [U] [ 206.641322][T10875] [U] [ 206.642121][T10875] [U] [ 206.642922][T10875] [U] [ 206.645254][T10875] [U] [ 206.646097][T10875] [U] [ 206.646902][T10875] [U] [ 206.647705][T10875] [U] [ 206.648503][T10875] [U] [ 206.649377][T10875] [U] [ 206.650182][T10875] [U] [ 206.650978][T10875] [U] [ 206.652193][T10875] [U] [ 206.653026][T10875] [U] [ 206.653842][T10875] [U] [ 206.654643][T10875] [U] [ 206.655482][T10875] [U] [ 206.656274][T10875] [U] [ 206.657069][T10875] [U] [ 206.657868][T10875] [U] [ 206.658825][T10875] [U] [ 206.659655][T10875] [U] [ 206.660439][T10875] [U] [ 206.661241][T10875] [U] [ 206.662046][T10875] [U] [ 206.662847][T10875] [U] [ 206.663655][T10875] [U] [ 206.664444][T10875] [U] [ 206.665346][T10875] [U] [ 206.666140][T10875] [U] [ 206.666942][T10875] [U] [ 206.667729][T10875] [U] [ 206.668493][T10875] [U] [ 206.669305][T10875] [U] [ 206.670090][T10875] [U] [ 206.670891][T10875] [U] [ 206.671845][T10875] [U] [ 206.672654][T10875] [U] [ 206.673464][T10875] [U] [ 206.674259][T10875] [U] [ 206.675054][T10875] [U] [ 206.675849][T10875] [U] [ 206.676643][T10875] [U] [ 206.677427][T10875] [U] [ 206.678228][T10875] [U] [ 206.679032][T10875] [U] [ 206.679817][T10875] [U] [ 206.680569][T10875] [U] [ 206.681331][T10875] [U] [ 206.682110][T10875] [U] [ 206.682898][T10875] [U] [ 206.683659][T10875] [U] [ 206.684619][T10875] [U] [ 206.685402][T10875] [U] [ 206.686178][T10875] [U] [ 206.686945][T10875] [U] [ 206.687734][T10875] [U] [ 206.688510][T10875] [U] [ 206.689299][T10875] [U] [ 206.690057][T10875] [U] [ 206.690895][T10875] [U] [ 206.691716][T10875] [U] [ 206.692489][T10875] [U] [ 206.693282][T10875] [U] [ 206.694060][T10875] [U] [ 206.694859][T10875] [U] [ 206.695638][T10875] [U] [ 206.829036][ T35] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 206.861957][T10889] netlink: 'syz.1.1188': attribute type 10 has an invalid length. [ 206.869661][T10888] delete_channel: no stack [ 206.950568][T10892] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 206.950581][T10892] CIFS mount error: No usable UNC path provided in device string! [ 206.950581][T10892] [ 206.950748][T10892] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 207.009236][ T35] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 207.009252][ T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.009261][ T35] usb 7-1: Product: syz [ 207.009269][ T35] usb 7-1: Manufacturer: syz [ 207.009276][ T35] usb 7-1: SerialNumber: syz [ 207.029705][ T35] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 207.071963][ T1330] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 207.408570][T10874] [U] [ 207.451037][ T1019] usb 7-1: USB disconnect, device number 19 [ 207.629189][ T35] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 207.779012][ T35] usb 5-1: Using ep0 maxpacket: 8 [ 207.781641][ T35] usb 5-1: config 0 has no interfaces? [ 207.783238][ T35] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 207.785784][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.790111][ T35] usb 5-1: config 0 descriptor?? [ 208.109038][ T1330] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 208.111099][ T1330] ath9k_htc: Failed to initialize the device [ 208.113170][ T1019] usb 7-1: ath9k_htc: USB layer deinitialized [ 208.135909][ T35] usb 5-1: USB disconnect, device number 21 [ 208.211100][T10932] netlink: 'syz.2.1200': attribute type 33 has an invalid length. [ 208.213746][T10932] netlink: 'syz.2.1200': attribute type 13 has an invalid length. [ 208.216292][T10932] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1200'. [ 208.271016][T10937] netlink: 'syz.2.1200': attribute type 33 has an invalid length. [ 208.410108][T10928] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 208.412621][T10928] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 208.416576][T10928] vhci_hcd vhci_hcd.0: Device attached [ 208.447039][T10942] input: syz0 as /devices/virtual/input/input23 [ 208.463237][T10942] netlink: 'syz.3.1202': attribute type 27 has an invalid length. [ 208.487746][T10942] sit0: left promiscuous mode [ 208.589699][ T35] vhci_hcd: vhci_device speed not set [ 208.659267][ T35] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 208.976563][T10942] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.979356][T10942] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.982029][T10942] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.984705][T10942] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.997116][T10942] gretap1: left allmulticast mode [ 209.555431][T10945] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 209.711658][T10945] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 209.714349][T10945] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.716667][T10945] usb 8-1: Product: syz [ 209.717904][T10945] usb 8-1: Manufacturer: syz [ 209.719362][T10945] usb 8-1: SerialNumber: syz [ 209.722699][T10945] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 209.732430][T10945] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 209.751997][T10939] vhci_hcd: connection reset by peer [ 209.754195][ T8060] vhci_hcd: stop threads [ 209.755626][ T8060] vhci_hcd: release socket [ 209.757092][ T8060] vhci_hcd: disconnect device [ 209.981630][ T30] usb 8-1: USB disconnect, device number 22 [ 210.749018][T10945] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 210.751152][T10945] ath9k_htc: Failed to initialize the device [ 210.753228][ T30] usb 8-1: ath9k_htc: USB layer deinitialized [ 210.867021][T11006] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 210.869997][T11006] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 210.872607][T11006] overlayfs: missing 'lowerdir' [ 210.929712][T11013] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 211.138321][T11026] random: crng reseeded on system resumption [ 211.171658][T11026] Restarting kernel threads ... done. [ 211.498714][T11038] overlayfs: failed to resolve './file0': -2 [ 211.510738][T11035] hsr0: entered promiscuous mode [ 211.512690][T11036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1224'. [ 211.515290][T11035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1224'. [ 211.518409][T11036] hsr_slave_0: left promiscuous mode [ 211.520962][T11036] hsr_slave_1: left promiscuous mode [ 211.532617][T11036] hsr0 (unregistering): left promiscuous mode [ 211.552568][ T39] audit: type=1800 audit(1735048158.931:73286): pid=11038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.1223" name="/newroot/301/bus/file0" dev="tmpfs" ino=1738 res=0 errno=0 [ 211.846918][T11045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1226'. [ 211.849065][T10945] usb 8-1: new full-speed USB device number 23 using dummy_hcd [ 211.849989][T11045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1226'. [ 211.875984][ T5997] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 211.958817][T11052] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 212.000865][T10945] usb 8-1: not running at top speed; connect to a high speed hub [ 212.003972][T10945] usb 8-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 212.008057][T10945] usb 8-1: config 1 interface 0 has no altsetting 0 [ 212.011759][T10945] usb 8-1: New USB device found, idVendor=05ac, idProduct=8240, bcdDevice= 0.40 [ 212.014346][T10945] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.016775][T10945] usb 8-1: Product: syz [ 212.018198][T10945] usb 8-1: Manufacturer: syz [ 212.024526][T10945] usb 8-1: SerialNumber: syz [ 212.029210][T11043] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 212.265531][T11065] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1232'. [ 212.266555][T11068] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1232'. [ 212.281000][ T5997] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 212.373589][T11071] netlink: 'syz.0.1235': attribute type 10 has an invalid length. [ 212.376367][T11071] bridge0: port 3(syz_tun) entered disabled state [ 212.378332][T11071] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.380498][T11071] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.390283][T11070] delete_channel: no stack [ 212.669349][T10945] usbhid 8-1:1.0: can't add hid device: -71 [ 212.671114][T10945] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 212.679613][T10945] usb 8-1: USB disconnect, device number 23 [ 213.779102][ T35] vhci_hcd: vhci_device speed not set [ 214.353395][T11104] program syz.0.1242 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 214.361599][T11104] ubi: mtd0 is already attached to ubi0 [ 214.632242][T11118] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 214.634189][T11118] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 214.642383][T11118] vhci_hcd vhci_hcd.0: Device attached [ 214.649724][T11119] vhci_hcd: connection closed [ 214.651281][ T74] vhci_hcd: stop threads [ 214.654032][ T74] vhci_hcd: release socket [ 214.655309][ T74] vhci_hcd: disconnect device [ 214.801422][T11138] FAULT_INJECTION: forcing a failure. [ 214.801422][T11138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.805258][T11138] CPU: 1 UID: 0 PID: 11138 Comm: syz.2.1246 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 214.808283][T11138] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 214.811315][T11138] Call Trace: [ 214.812315][T11138] [ 214.813194][T11138] dump_stack_lvl+0x16c/0x1f0 [ 214.814633][T11138] should_fail_ex+0x497/0x5b0 [ 214.816002][T11138] _copy_from_user+0x2e/0xd0 [ 214.817339][T11138] memdup_user+0x71/0xd0 [ 214.818619][T11138] strndup_user+0x78/0xe0 [ 214.819858][T11138] __ia32_sys_mount+0x138/0x310 [ 214.821264][T11138] ? __pfx___ia32_sys_mount+0x10/0x10 [ 214.822831][T11138] __do_fast_syscall_32+0x73/0x120 [ 214.824360][T11138] do_fast_syscall_32+0x32/0x80 [ 214.825773][T11138] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 214.827583][T11138] RIP: 0023:0xf709e579 [ 214.828757][T11138] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 214.834318][T11138] RSP: 002b:00000000f504e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 214.836713][T11138] RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 00000000200000c0 [ 214.838952][T11138] RDX: 0000000020000040 RSI: 0000000000008002 RDI: 0000000000000000 [ 214.841289][T11138] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 214.843583][T11138] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 214.845875][T11138] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 214.848139][T11138] [ 216.419186][ T30] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 216.591043][ T30] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 216.595433][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.597795][ T30] usb 8-1: Product: syz [ 216.599217][ T30] usb 8-1: Manufacturer: syz [ 216.602412][ T30] usb 8-1: SerialNumber: syz [ 216.641386][ T30] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 216.736616][ T30] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 217.130806][T11197] netlink: 'syz.2.1268': attribute type 10 has an invalid length. [ 217.136097][T11197] team0: Port device netdevsim0 added [ 217.230919][T10945] usb 8-1: USB disconnect, device number 24 [ 217.493670][T11211] bio_check_eod: 2 callbacks suppressed [ 217.493680][T11211] syz.1.1269: attempt to access beyond end of device [ 217.493680][T11211] loop1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 217.498873][T11211] EXT4-fs (loop1): unable to read superblock [ 217.869023][ T30] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 217.871131][ T30] ath9k_htc: Failed to initialize the device [ 217.900704][T10945] usb 8-1: ath9k_htc: USB layer deinitialized [ 218.264036][T11227] 9pnet_fd: Insufficient options for proto=fd [ 218.269945][T11227] mkiss: ax0: crc mode is auto. [ 218.407917][T11235] FAULT_INJECTION: forcing a failure. [ 218.407917][T11235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.411768][T11235] CPU: 1 UID: 0 PID: 11235 Comm: syz.1.1277 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 218.414780][T11235] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 218.417814][T11235] Call Trace: [ 218.418793][T11235] [ 218.419659][T11235] dump_stack_lvl+0x16c/0x1f0 [ 218.421027][T11235] should_fail_ex+0x497/0x5b0 [ 218.422401][T11235] _copy_from_user+0x2e/0xd0 [ 218.423730][T11235] memdup_user+0x71/0xd0 [ 218.424951][T11235] strndup_user+0x78/0xe0 [ 218.426180][T11235] __ia32_sys_mount+0x181/0x310 [ 218.427558][T11235] ? __pfx___ia32_sys_mount+0x10/0x10 [ 218.429099][T11235] __do_fast_syscall_32+0x73/0x120 [ 218.430578][T11235] do_fast_syscall_32+0x32/0x80 [ 218.432016][T11235] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 218.433839][T11235] RIP: 0023:0xf7ff7579 [ 218.435019][T11235] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 218.440496][T11235] RSP: 002b:00000000f510455c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 218.442909][T11235] RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 00000000200000c0 [ 218.445161][T11235] RDX: 0000000020000040 RSI: 0000000000008002 RDI: 0000000000000000 [ 218.447424][T11235] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 218.449824][T11235] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 218.452226][T11235] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 218.454514][T11235] [ 218.540035][T11238] netlink: 352 bytes leftover after parsing attributes in process `syz.1.1278'. [ 218.989128][ T35] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 219.166232][ T35] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 219.170899][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.174134][ T35] usb 8-1: Product: syz [ 219.175815][ T35] usb 8-1: Manufacturer: syz [ 219.177697][ T35] usb 8-1: SerialNumber: syz [ 219.188751][ T35] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 219.200312][T10953] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 219.333780][T11259] lo speed is unknown, defaulting to 1000 [ 219.339156][ T30] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 219.495376][ T30] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 219.498457][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.500883][ T30] usb 5-1: Product: syz [ 219.502250][ T30] usb 5-1: Manufacturer: syz [ 219.503700][ T30] usb 5-1: SerialNumber: syz [ 219.513661][ T30] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 219.524967][ T30] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 219.533553][ T5997] usb 8-1: USB disconnect, device number 25 [ 219.859075][ T5998] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 219.999601][ T5998] usb 6-1: device descriptor read/64, error -71 [ 220.107809][T11280] netlink: 'syz.3.1291': attribute type 10 has an invalid length. [ 220.110634][T11280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1291'. [ 220.123752][T11280] bond0: (slave bridge0): Releasing backup interface [ 220.169722][T11286] tmpfs: Bad value for 'mpol' [ 220.239104][ T5998] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 220.269099][T10953] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 220.271179][T10953] ath9k_htc: Failed to initialize the device [ 220.273248][ T5997] usb 8-1: ath9k_htc: USB layer deinitialized [ 220.369058][ T5998] usb 6-1: device descriptor read/64, error -71 [ 220.479204][ T5998] usb usb6-port1: attempt power cycle [ 220.536193][T10945] usb 5-1: USB disconnect, device number 22 [ 220.584577][T11296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1294'. [ 220.599076][ T30] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 220.601387][ T30] ath9k_htc: Failed to initialize the device [ 220.604603][T11296] netlink: 'syz.2.1294': attribute type 12 has an invalid length. [ 220.609500][T10945] usb 5-1: ath9k_htc: USB layer deinitialized [ 220.829134][ T5998] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 220.849537][ T5998] usb 6-1: device descriptor read/8, error -71 [ 221.087010][T11311] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 221.109550][ T5998] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 221.139496][ T5998] usb 6-1: device descriptor read/8, error -71 [ 221.259247][ T5998] usb usb6-port1: unable to enumerate USB device [ 221.276705][T11320] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 221.314661][T11320] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1300'. [ 221.976904][T11329] overlay: Unknown parameter 'smackfsfloor' [ 222.102254][ T30] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 222.229293][ T30] usb 6-1: device descriptor read/64, error -71 [ 222.449897][ T1106] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 222.451906][ T1106] ata1: failed to read log page 10h (errno=-5) [ 222.453933][ T1106] ata1.00: exception Emask 0x1 SAct 0x2000 SErr 0x0 action 0x0 [ 222.456073][ T1106] ata1.00: irq_stat 0x40000000 [ 222.457498][ T1106] ata1.00: failed command: WRITE FPDMA QUEUED [ 222.459335][ T1106] ata1.00: cmd 61/18:68:42:0a:10/00:00:00:00:00/40 tag 13 ncq dma 12288 out [ 222.459335][ T1106] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 222.464230][ T1106] ata1.00: status: { DRDY } [ 222.465569][ T1106] ata1.00: error: { ABRT } [ 222.469084][ T30] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 222.469901][ T1106] ata1.00: configured for UDMA/100 [ 222.473113][ T1106] ata1: EH complete [ 222.599107][ T30] usb 6-1: device descriptor read/64, error -71 [ 222.709484][ T30] usb usb6-port1: attempt power cycle [ 223.049079][ T30] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 223.070558][ T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.073749][ T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.076422][ T30] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 223.080163][ T30] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 223.082713][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.086030][ T30] usb 6-1: config 0 descriptor?? [ 223.267656][T11342] netlink: 'syz.0.1306': attribute type 10 has an invalid length. [ 223.270584][T11342] bond0: (slave wlan1): Opening slave failed [ 223.276514][T11342] ptrace attach of "/syz-executor exec"[5946] was attempted by "/syz-executor exec"[11342] [ 223.492252][ T30] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 223.494306][ T30] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 223.496920][ T30] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 223.499041][ T30] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 223.501148][ T30] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 223.503223][ T30] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 223.505469][ T30] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 223.513402][ T30] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 223.751261][T11338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.754000][T11338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.757581][T11338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1304'. [ 223.762261][T11338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1304'. [ 223.764909][T11338] netlink: 'syz.1.1304': attribute type 12 has an invalid length. [ 223.795326][T10945] usb 6-1: USB disconnect, device number 28 [ 223.985186][T11371] kAFS: Can only specify source 'none' with -o dyn [ 224.521012][T11401] lo speed is unknown, defaulting to 1000 [ 224.606285][T11404] ip6gre1: entered allmulticast mode [ 225.022391][T11427] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 225.025452][T11427] overlayfs: maximum fs stacking depth exceeded [ 225.037620][T11427] xt_limit: Overflow, try lower: 0/0 [ 225.219044][ T5997] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 225.381745][ T5997] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 225.384295][ T5997] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.386478][ T5997] usb 6-1: Product: syz [ 225.387630][ T5997] usb 6-1: Manufacturer: syz [ 225.402527][ T5997] usb 6-1: SerialNumber: syz [ 225.410985][ T5997] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 225.427936][ T5997] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 225.711836][ T30] usb 6-1: USB disconnect, device number 29 [ 226.156577][T11450] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1333'. [ 226.243068][T11455] 9pnet: p9_errstr2errno: server reported unknown error [ 226.266670][T11170] syz_tun (unregistering): left allmulticast mode [ 226.268507][T11170] syz_tun (unregistering): left promiscuous mode [ 226.271156][T11170] bridge0: port 3(syz_tun) entered disabled state [ 226.485424][ T8060] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.509146][ T5997] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 226.511933][ T5997] ath9k_htc: Failed to initialize the device [ 226.514683][ T30] usb 6-1: ath9k_htc: USB layer deinitialized [ 226.572932][ T8060] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.645179][ T8060] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.660523][ T5950] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 226.666412][ T5950] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 226.670820][ T5950] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 226.673287][ T5950] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 226.677323][ T5950] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 226.679898][ T5950] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 226.690932][ T5294] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 226.696886][ T5294] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 226.701939][ T5294] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 226.706424][ T5294] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 226.708647][ T5294] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 226.710946][ T5294] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 226.738674][ T8060] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.744636][T11472] lo speed is unknown, defaulting to 1000 [ 226.806692][T11472] chnl_net:caif_netlink_parms(): no params data found [ 226.829045][ T30] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 226.872891][T11472] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.875347][T11472] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.877413][T11472] bridge_slave_0: entered allmulticast mode [ 226.879850][T11472] bridge_slave_0: entered promiscuous mode [ 226.882168][ T8060] bridge_slave_1: left allmulticast mode [ 226.884065][ T8060] bridge_slave_1: left promiscuous mode [ 226.886236][ T8060] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.892798][ T8060] bridge_slave_0: left allmulticast mode [ 226.894429][ T8060] bridge_slave_0: left promiscuous mode [ 226.896140][ T8060] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.991832][ T30] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 226.994618][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.996924][ T30] usb 6-1: Product: syz [ 226.998136][ T30] usb 6-1: Manufacturer: syz [ 227.000417][ T30] usb 6-1: SerialNumber: syz [ 227.005265][ T30] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 227.016676][ T30] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 227.051931][ T8060] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 227.349832][T10945] usb 6-1: USB disconnect, device number 30 [ 227.372373][ T8060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.382166][ T8060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.387202][ T8060] bond0 (unregistering): Released all slaves [ 227.392138][ T8060] bond1 (unregistering): Released all slaves [ 227.396023][T11472] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.397989][T11472] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.400189][T11472] bridge_slave_1: entered allmulticast mode [ 227.402326][T11472] bridge_slave_1: entered promiscuous mode [ 227.433597][T11472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.437296][T11472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.458887][T11472] team0: Port device team_slave_0 added [ 227.462817][T11472] team0: Port device team_slave_1 added [ 227.513983][T11472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.516037][T11472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.525191][T11472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.529424][T11472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.531725][T11472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.540995][T11472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.627321][T11472] hsr_slave_0: entered promiscuous mode [ 227.648687][T11472] hsr_slave_1: entered promiscuous mode [ 227.652241][T11472] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.655511][T11472] Cannot create hsr debugfs directory [ 227.777052][ T8060] hsr_slave_0: left promiscuous mode [ 227.779179][ T8060] hsr_slave_1: left promiscuous mode [ 227.781332][ T8060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.783418][ T8060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.785935][ T8060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.788041][ T8060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.788823][T11510] input: syz0 as /devices/virtual/input/input24 [ 227.826538][ T8060] veth1_macvtap: left promiscuous mode [ 227.830084][ T8060] veth0_macvtap: left promiscuous mode [ 227.831741][ T8060] veth1_vlan: left promiscuous mode [ 227.834150][ T8060] veth0_vlan: left promiscuous mode [ 228.039025][ T30] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 228.041046][ T30] ath9k_htc: Failed to initialize the device [ 228.043340][T10945] usb 6-1: ath9k_htc: USB layer deinitialized [ 228.173243][T11522] dlm: no local IP address has been set [ 228.179929][T11522] dlm: cannot start dlm midcomms -107 [ 228.753320][ T5294] Bluetooth: hci2: command tx timeout [ 229.211431][T11522] ip6tnl1: entered promiscuous mode [ 229.262227][T11529] netlink: 'syz.3.1350': attribute type 10 has an invalid length. [ 229.265446][T11529] bond0: (slave netdevsim0): no link monitoring support [ 229.271727][T11529] bond0: (slave netdevsim0): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 229.282977][T11529] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 229.443578][T11539] ip6tnl1: left promiscuous mode [ 229.484042][T11545] IPv6: addrconf: prefix option has invalid lifetime [ 229.645038][T11472] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 229.649392][T11472] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 229.652729][T11472] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 229.656023][T11472] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 229.716997][T11472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.724827][T11472] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.733261][ T8059] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.735923][ T8059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.742126][ T8065] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.744447][ T8065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.764147][T11567] netlink: 'syz.1.1356': attribute type 1 has an invalid length. [ 229.778116][T11567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1356'. [ 229.842940][T11472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.864456][T11472] veth0_vlan: entered promiscuous mode [ 229.903313][T11472] veth1_vlan: entered promiscuous mode [ 229.913601][T11472] veth0_macvtap: entered promiscuous mode [ 229.916647][T11472] veth1_macvtap: entered promiscuous mode [ 229.924743][T11472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.928717][T11472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.932637][T11472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.938535][T11472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.942351][T11472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.945683][T11472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.949977][T11472] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.952660][T11472] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.955157][T11472] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.957623][T11472] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.989705][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.992829][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.004116][T11586] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1358'. [ 230.005175][ T8065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.007244][T11587] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1358'. [ 230.009422][ T8065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.077586][T11598] netlink: 'syz.1.1360': attribute type 1 has an invalid length. [ 230.080849][T11598] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 230.258892][ T9] hid-generic 0005:7FFF:0008.0005: hidraw1: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 230.292933][T11607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1362'. [ 230.295504][T11607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1362'. [ 230.484395][ T5998] kernel write not supported for file /snd/seq (pid: 5998 comm: kworker/1:4) [ 230.829130][ T5294] Bluetooth: hci2: command tx timeout [ 231.023617][T11625] netlink: 'syz.2.1366': attribute type 2 has an invalid length. [ 231.030262][T11625] netlink: 'syz.2.1366': attribute type 10 has an invalid length. [ 231.036935][T11625] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 231.459200][ T1019] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 231.609190][ T1019] usb 6-1: Using ep0 maxpacket: 32 [ 231.611909][ T1019] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 231.614327][ T1019] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 231.616879][ T1019] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 231.620022][ T1019] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 231.623066][ T1019] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 231.625793][ T1019] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 231.630037][ T1019] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 231.632660][ T1019] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.635833][ T1019] usb 6-1: config 0 descriptor?? [ 231.650950][T11645] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1373'. [ 231.812286][T11652] 9pnet_fd: Insufficient options for proto=fd [ 231.843735][ T1019] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 31 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 231.850321][ T1019] usb 6-1: USB disconnect, device number 31 [ 231.855646][ T1019] usblp0: removed [ 232.097196][T11662] sock: sock_timestamping_bind_phc: sock not bind to device [ 232.279255][ T1019] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 232.289084][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 232.429265][ T1019] usb 6-1: Using ep0 maxpacket: 32 [ 232.440891][ T1019] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 232.449849][ T1019] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 232.451836][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 232.454262][ T1019] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 232.455066][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.460333][ T1019] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 232.461404][ T9] usb 5-1: Product: syz [ 232.464278][ T9] usb 5-1: Manufacturer: syz [ 232.465621][ T9] usb 5-1: SerialNumber: syz [ 232.465627][ T1019] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 232.469981][ T9] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 232.474590][ T1019] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 232.482822][ T9] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 232.487189][ T1019] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 232.494107][ T1019] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.507427][ T1019] usb 6-1: config 0 descriptor?? [ 232.720003][ T1019] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 32 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 232.773150][T11689] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1386'. [ 232.909167][ T5294] Bluetooth: hci2: command tx timeout [ 232.990279][ C0] usblp0: nonzero read bulk status received: -71 [ 232.990598][T10953] usb 6-1: USB disconnect, device number 32 [ 232.993769][T11634] usblp0: error -71 reading from printer [ 233.199948][T11633] usblp0: removed [ 233.320996][ T25] usb 5-1: USB disconnect, device number 23 [ 233.573505][ T9] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 233.575536][ T9] ath9k_htc: Failed to initialize the device [ 233.582859][ T25] usb 5-1: ath9k_htc: USB layer deinitialized [ 233.599531][ T39] audit: type=1326 audit(1735048180.981:73287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11722 comm="syz.2.1395" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 233.607603][ T39] audit: type=1326 audit(1735048180.981:73288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11722 comm="syz.2.1395" exe="/syz-executor" sig=0 arch=40000003 syscall=132 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 233.613824][ T39] audit: type=1326 audit(1735048180.981:73289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11722 comm="syz.2.1395" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 233.619976][ T39] audit: type=1326 audit(1735048180.981:73290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11722 comm="syz.2.1395" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 233.625867][ T39] audit: type=1326 audit(1735048180.981:73291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11722 comm="syz.2.1395" exe="/syz-executor" sig=0 arch=40000003 syscall=434 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 233.634177][ T39] audit: type=1326 audit(1735048180.981:73292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11722 comm="syz.2.1395" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 233.641510][ T39] audit: type=1326 audit(1735048180.981:73293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11722 comm="syz.2.1395" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 233.648075][ T39] audit: type=1326 audit(1735048180.981:73294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11722 comm="syz.2.1395" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 233.654199][ T39] audit: type=1326 audit(1735048180.981:73295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11722 comm="syz.2.1395" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 233.660271][ T39] audit: type=1326 audit(1735048181.031:73296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11722 comm="syz.2.1395" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 233.861357][T11731] netlink: 'syz.1.1398': attribute type 1 has an invalid length. [ 234.466625][T11744] 9pnet: Unknown protocol version 9p2000. [ 234.589146][T11746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1401'. [ 234.958759][T11751] netlink: 'syz.3.1403': attribute type 10 has an invalid length. [ 234.969126][T11751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1403'. [ 234.972007][T11751] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1403'. [ 234.989106][ T5294] Bluetooth: hci2: command tx timeout [ 235.023152][T11754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1404'. [ 235.114354][T11763] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 235.279360][T11768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1409'. [ 235.377984][T11769] lo speed is unknown, defaulting to 1000 [ 235.452564][ T30] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 235.936579][ T30] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 235.939772][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.943026][ T30] usb 5-1: Product: syz [ 235.944861][ T30] usb 5-1: Manufacturer: syz [ 235.946859][ T30] usb 5-1: SerialNumber: syz [ 235.965354][ T30] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 236.047747][ T833] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 236.424654][T10953] usb 5-1: USB disconnect, device number 24 [ 236.801663][T11790] syz.2.1414[11790] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 236.802802][T11790] syz.2.1414[11790] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 236.807064][T11790] syz.2.1414[11790] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 237.079276][ T833] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 237.101319][ T833] ath9k_htc: Failed to initialize the device [ 237.105869][T10953] usb 5-1: ath9k_htc: USB layer deinitialized [ 237.869491][T11834] netlink: 'syz.2.1425': attribute type 10 has an invalid length. [ 237.876322][T11834] batman_adv: batadv0: Adding interface: team0 [ 237.882375][T11834] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.900933][T11834] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 237.905303][T11834] netlink: 'syz.2.1425': attribute type 10 has an invalid length. [ 237.908187][T11834] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1425'. [ 237.910952][T11834] team0: entered promiscuous mode [ 237.912437][T11834] team_slave_0: entered promiscuous mode [ 237.914215][T11834] team_slave_1: entered promiscuous mode [ 237.915925][T11834] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 237.918521][T11834] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.923627][T11834] batman_adv: batadv0: Interface activated: team0 [ 237.925914][T11834] batman_adv: batadv0: Interface deactivated: team0 [ 237.928197][T11834] batman_adv: batadv0: Removing interface: team0 [ 237.931875][T11834] bridge0: port 3(team0) entered blocking state [ 237.933845][T11834] bridge0: port 3(team0) entered disabled state [ 237.935678][T11834] team0: entered allmulticast mode [ 237.937151][T11834] team_slave_0: entered allmulticast mode [ 237.938765][T11834] team_slave_1: entered allmulticast mode [ 237.942241][T11834] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 238.661112][T11864] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1432'. [ 239.890184][T11915] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1442'. [ 240.623921][T11932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1448'. [ 240.644082][T11932] netlink: 'syz.2.1448': attribute type 3 has an invalid length. [ 240.792968][T11937] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 240.795633][T11937] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 240.800314][T11937] vhci_hcd vhci_hcd.0: Device attached [ 240.979065][ T35] vhci_hcd: vhci_device speed not set [ 241.049060][ T35] usb 41-1: new full-speed USB device number 3 using vhci_hcd [ 242.439000][T11938] vhci_hcd: connection reset by peer [ 242.441463][ T8065] vhci_hcd: stop threads [ 242.442729][ T8065] vhci_hcd: release socket [ 242.444021][ T8065] vhci_hcd: disconnect device [ 242.535018][T11959] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1452'. [ 243.024167][T12002] netlink: 696 bytes leftover after parsing attributes in process `syz.1.1461'. [ 243.109042][ T833] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 243.291884][ T833] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 243.294719][ T833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.296998][ T833] usb 5-1: Product: syz [ 243.298192][ T833] usb 5-1: Manufacturer: syz [ 243.299613][ T833] usb 5-1: SerialNumber: syz [ 243.305847][ T833] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 243.321651][ T5998] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 243.445835][T12010] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 243.889188][T12023] netlink: 'syz.3.1468': attribute type 10 has an invalid length. [ 243.908171][T12023] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 243.982312][T12029] bad cache= option: none [ 243.982312][T12029] [ 243.984879][T12029] CIFS: VFS: bad cache= option: none [ 244.349060][ T5998] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 244.351755][ T5998] ath9k_htc: Failed to initialize the device [ 244.382327][ T5998] usb 5-1: ath9k_htc: USB layer deinitialized [ 244.883621][T10952] usb 5-1: USB disconnect, device number 25 [ 244.886228][T12052] program syz.2.1474 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 244.922743][T12056] xt_TPROXY: Can be used only with -p tcp or -p udp [ 244.935080][T12056] netlink: 'syz.1.1478': attribute type 2 has an invalid length. [ 245.213984][T12067] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 245.246108][T12067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1481'. [ 245.249630][T12067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1481'. [ 245.252267][T12067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1481'. [ 245.852628][T12090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1487'. [ 245.857298][T12092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1487'. [ 246.179022][ T35] vhci_hcd: vhci_device speed not set [ 246.692497][T12130] syzkaller0: entered promiscuous mode [ 246.694142][T12130] syzkaller0: entered allmulticast mode [ 246.711576][T12128] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1497'. [ 246.714114][T12128] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1497'. [ 246.716741][T12128] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1497'. [ 246.719390][T12128] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1497'. [ 246.761026][T12132] overlayfs: missing 'lowerdir' [ 246.839079][ T5998] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 246.966477][ C1] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 246.970186][ C1] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 246.973688][ C1] CPU: 1 UID: 0 PID: 29 Comm: ksoftirqd/1 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 246.976913][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 246.979962][ C1] RIP: 0010:put_page+0x21/0x280 [ 246.981409][ C1] Code: 90 90 90 90 90 90 90 90 90 41 54 55 53 48 89 fb e8 24 df a2 f8 48 8d 7b 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 20 02 00 00 4c 8b 63 08 31 ff 4c 89 e5 83 e5 01 [ 246.987074][ C1] RSP: 0018:ffffc900005772d8 EFLAGS: 00010202 [ 246.988819][ C1] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff88f7f7d8 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 246.991072][ C1] RDX: 0000000000000001 RSI: ffffffff88f6702c RDI: 0000000000000008 [ 246.993672][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 246.995926][ C1] R10: 0000000000000000 R11: 0000000000000003 R12: ffff88806ea9ea80 [ 246.998209][ C1] R13: ffff88804a8a2240 R14: ffff88804a8a2270 R15: 0000000000000007 [ 247.000512][ C1] FS: 0000000000000000(0000) GS:ffff88802b500000(0000) knlGS:0000000000000000 [ 247.003096][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 247.005003][ C1] CR2: 000000002f01fffc CR3: 0000000061e7c000 CR4: 0000000000352ef0 [ 247.007297][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 247.009572][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 247.011867][ C1] Call Trace: [ 247.012846][ C1] [ 247.013700][ C1] ? die_addr+0x3b/0xa0 [ 247.014920][ C1] ? exc_general_protection+0x155/0x230 [ 247.016540][ C1] ? asm_exc_general_protection+0x26/0x30 [ 247.018305][ C1] ? skb_release_data+0x4b8/0x730 [ 247.020196][ C1] ? put_page+0xc/0x280 [ 247.021787][ C1] ? put_page+0x21/0x280 [ 247.023409][ C1] ? put_page+0xc/0x280 [ 247.024989][ C1] skb_release_data+0x4d7/0x730 [ 247.026837][ C1] __kfree_skb+0x4f/0x70 [ 247.028452][ C1] tcp_ack+0x1eb7/0x5ba0 [ 247.030101][ C1] ? __pfx_tcp_ack+0x10/0x10 [ 247.032010][ C1] ? tcp_validate_incoming+0x662/0x1d00 [ 247.034121][ C1] ? read_tsc+0x9/0x20 [ 247.035685][ C1] tcp_rcv_state_process+0xdd4/0x4c40 [ 247.037688][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 247.039615][ C1] ? sk_filter_trim_cap+0x50b/0xb90 [ 247.041620][ C1] ? __pfx_lock_release+0x10/0x10 [ 247.043540][ C1] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 247.045755][ C1] ? lock_acquire.part.0+0x11b/0x380 [ 247.047750][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 247.049878][ C1] ? rcu_is_watching+0x12/0xc0 [ 247.051730][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 247.053649][ C1] ? tcp_v4_do_rcv+0x1ad/0xa90 [ 247.055465][ C1] tcp_v4_do_rcv+0x1ad/0xa90 [ 247.057230][ C1] tcp_v4_rcv+0x33b4/0x43a0 [ 247.058967][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 247.060824][ C1] ? __pfx_raw_local_deliver+0x10/0x10 [ 247.062882][ C1] ? rcu_is_watching+0x12/0xc0 [ 247.064711][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 247.066570][ C1] ip_protocol_deliver_rcu+0xba/0x4c0 [ 247.068612][ C1] ip_local_deliver_finish+0x316/0x570 [ 247.070787][ C1] ip_local_deliver+0x18e/0x1f0 [ 247.072742][ C1] ? __pfx_ip_local_deliver+0x10/0x10 [ 247.074782][ C1] ip_rcv+0x2c3/0x5d0 [ 247.076450][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 247.078193][ C1] __netif_receive_skb_one_core+0x199/0x1e0 [ 247.080401][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 247.082844][ C1] ? rcu_is_watching+0x12/0xc0 [ 247.084476][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 247.086528][ C1] ? process_backlog+0x3f1/0x15f0 [ 247.088448][ C1] ? process_backlog+0x3f1/0x15f0 [ 247.090383][ C1] __netif_receive_skb+0x1d/0x160 [ 247.092327][ C1] process_backlog+0x443/0x15f0 [ 247.094248][ C1] __napi_poll.constprop.0+0xb7/0x550 [ 247.096297][ C1] net_rx_action+0xa94/0x1010 [ 247.098110][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 247.100064][ C1] ? __switch_to+0x749/0x1190 [ 247.101923][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 247.103949][ C1] ? sched_clock+0x38/0x60 [ 247.105729][ C1] ? sched_clock_cpu+0x6d/0x4d0 [ 247.107636][ C1] handle_softirqs+0x213/0x8f0 [ 247.109479][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 247.111504][ C1] ? rcu_is_watching+0x12/0xc0 [ 247.113347][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 247.115208][ C1] ? smpboot_thread_fn+0x59d/0xa30 [ 247.116705][ C1] run_ksoftirqd+0x3a/0x60 [ 247.117989][ C1] smpboot_thread_fn+0x661/0xa30 [ 247.119412][ C1] ? __kthread_parkme+0x148/0x220 [ 247.120873][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 247.122446][ C1] kthread+0x2c1/0x3a0 [ 247.123968][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 247.125743][ C1] ? __pfx_kthread+0x10/0x10 [ 247.127319][ C1] ret_from_fork+0x45/0x80 [ 247.129024][ C1] ? __pfx_kthread+0x10/0x10 [ 247.130793][ C1] ret_from_fork_asm+0x1a/0x30 [ 247.132710][ C1] [ 247.133924][ C1] Modules linked in: [ 247.135562][ C1] ---[ end trace 0000000000000000 ]--- [ 247.137583][ C1] RIP: 0010:put_page+0x21/0x280 [ 247.139056][ C1] Code: 90 90 90 90 90 90 90 90 90 41 54 55 53 48 89 fb e8 24 df a2 f8 48 8d 7b 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 20 02 00 00 4c 8b 63 08 31 ff 4c 89 e5 83 e5 01 [ 247.144622][ C1] RSP: 0018:ffffc900005772d8 EFLAGS: 00010202 [ 247.146375][ C1] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff88f7f7d8 [ 247.148649][ C1] RDX: 0000000000000001 RSI: ffffffff88f6702c RDI: 0000000000000008 [ 247.150946][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 247.153247][ C1] R10: 0000000000000000 R11: 0000000000000003 R12: ffff88806ea9ea80 [ 247.155524][ C1] R13: ffff88804a8a2240 R14: ffff88804a8a2270 R15: 0000000000000007 [ 247.157791][ C1] FS: 0000000000000000(0000) GS:ffff88802b500000(0000) knlGS:0000000000000000 [ 247.160373][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 247.162340][ C1] CR2: 000000002f01fffc CR3: 000000000db7e000 CR4: 0000000000352ef0 [ 247.164626][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 247.167488][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 247.170587][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 247.173862][ C1] Kernel Offset: disabled [ 247.175520][ C1] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:49:54 Registers: info registers vcpu 0 CPU#0 RAX=000000000065872c RBX=0000000000000000 RCX=ffffffff8b1a3819 RDX=ffffed1005686fee RSI=ffffffff8bb16f80 RDI=ffffffff81702e79 RBP=fffffbfff1b52ef8 RSP=ffffffff8da07e20 R8 =0000000000000000 R9 =ffffed1005686fed R10=ffff88802b437f6b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8da977c0 R14=ffffffff901ce3d0 R15=0000000000000000 RIP=ffffffff8b1a4bff RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000200002c0 CR3=0000000022766000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85142d25 RDI=ffffffff9a667240 RBP=ffffffff9a667200 RSP=ffffc90000576cb0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=0000000000000030 R14=ffffffff85142cc0 R15=0000000000000000 RIP=ffffffff85142d4f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002f01fffc CR3=0000000061e7c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=1ffff920006f3eff RCX=ffffffff814a8474 RDX=ffff888022ffc880 RSI=ffffffff814a84b2 RDI=0000000000000007 RBP=0000000000000000 RSP=ffffc9000379f7f0 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffff8880216d97c0 R13=ffffc9000379f9a8 R14=0000000000000000 R15=ffffc9000379fcb8 RIP=ffffffff81994f50 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f36e40 CR3=000000000db7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f73d3ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000002ede2c RBX=0000000000000003 RCX=ffffffff8b1a3819 RDX=ffffed10056e6fee RSI=ffffffff8bb16f80 RDI=ffffffff81702e79 RBP=ffffed10039df488 RSP=ffffc9000049fe08 R8 =0000000000000000 R9 =ffffed10056e6fed R10=ffff88802b737f6b R11=0000000000000001 R12=0000000000000003 R13=ffff88801cefa440 R14=ffffffff901ce3d0 R15=0000000000000000 RIP=ffffffff8b1a4bff RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5125da4 CR3=00000000664ac000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000