last executing test programs: 13.541964155s ago: executing program 3 (id=152): unshare(0x46060480) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x80) r1 = socket$key(0xf, 0x3, 0x2) sendfile(r1, r0, 0x0, 0x1000) 13.432272353s ago: executing program 3 (id=154): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r5, &(0x7f000000b040)=[{{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f00000011c0)="5f8a4626af6a7046650b045f1471213dc5cdf4827b976940bc1ae610992f394238b14d90d72496b352792b20936925793e080550ce5889a747c0c0e54523404eec6b33f0ce259848b635aede572ebbeb00e6a644a8e0f8f2f36f3198832e75503300624cbff963e8e711e9f9e5c940f5359e2557d0ee0e1bd636e78781663bc227f71ed0573fa2779f25b5d84818a5ff2829", 0x92}], 0x1, &(0x7f0000002540)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x1}}}], 0x18}}], 0x1, 0x4001c00) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000000)=""/176) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13.15083032s ago: executing program 3 (id=156): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x567, 0xeffdffff, 0x0, 0x0, 0x59) 13.137705297s ago: executing program 3 (id=157): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) (async) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$read(0x2, 0x0, &(0x7f0000001640)=""/4096, 0xfffffffffffffe67) socket$qrtr(0x2a, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESDEC, @ANYRES32, @ANYBLOB="000000000000000000000000000000efff1b00"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeb3, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeb3, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xa02a, 0x8, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) r4 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x5a9c0) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x1000001000104) ioctl$NBD_SET_SOCK(r4, 0xab00, r3) (async) ioctl$NBD_SET_SOCK(r4, 0xab00, r3) ioctl$NBD_DO_IT(r2, 0xab03) (async) ioctl$NBD_DO_IT(r2, 0xab03) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0602, 0x0) (async) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0602, 0x0) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0x1f, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x2000000, 0x0, 0xb3550aa4ba878396, 0x80}, 0x98) ioctl$SNDCTL_DSP_GETODELAY(r5, 0x80045017, 0x0) 11.540954033s ago: executing program 3 (id=161): add_key$keyring(0x0, &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}, 0x500d}], 0x400000000000181, 0x9200000000000000) 10.670678665s ago: executing program 3 (id=162): unshare(0x22020600) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f0000000440)=""/154, 0x9a) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r1, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r2, 0x10c, 0x8, &(0x7f0000000140), 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40305829, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0x198, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2c8, 0x20a, 0x278, 0x2c8, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x198, 0x0, {}, [@common=@srh1={{0x8c}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @local, @remote, [], [], [], 0x889f70bcd8e2d90b}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@eui64={{0x24}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3ec) r3 = memfd_secret(0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0xd, 0x0, 0x0, 0x0, 0x231ede8b, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x1b, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$bt_hci(r5, 0x0, 0x8) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000001c0)) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0), 0x2009021, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xe, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x20044004) syz_clone(0x81080, 0x0, 0x0, 0x0, 0x0, 0x0) 10.540748832s ago: executing program 0 (id=163): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r5, &(0x7f000000b040)=[{{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f00000011c0)="5f8a4626af6a7046650b045f1471213dc5cdf4827b976940bc1ae610992f394238b14d90d72496b352792b20936925793e080550ce5889a747c0c0e54523404eec6b33f0ce259848b635aede572ebbeb00e6a644a8e0f8f2f36f3198832e75503300624cbff963e8e711e9f9e5c940f5359e2557d0ee0e1bd636e78781663bc227f71ed0573fa2779f25b5d84818a5ff2829", 0x92}], 0x1, &(0x7f0000002540)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x1}}}], 0x18}}], 0x1, 0x4001c00) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000000)=""/176) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10.420454014s ago: executing program 0 (id=164): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f00000000c0)={0xc, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r3 = syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x3}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r2, 0x3b87, &(0x7f0000000140)={0x18, 0x1, 0x0, 0x0, r7, 0x1}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000140)={0x28, 0x5, r1, r7, 0xf7, 0x3, 0xfffffffeffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r8, &(0x7f0000006740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="2c000000840000000100000000000000030000000000000000000000000000be7d06f07092bffc00", @ANYRES32=0x0], 0x2c}], 0x1, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) lsetxattr$security_ima(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000000), &(0x7f0000000000)=ANY=[], 0x45, 0x0) capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340)) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$ttyprintk(0xffffff9c, &(0x7f0000000080), 0x10100, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r9], 0x20}}, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) bind$unix(r10, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 10.420067726s ago: executing program 0 (id=165): pipe2$9p(&(0x7f00000001c0), 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x2000, &(0x7f0000000040)=ANY=[]) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f00000001c0)={0x1a, 0x30a, 0x0, 0x20, 0x0, 0x81, @dev}, 0x10) gettid() capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000002140)={0x2, 0x0, 0xd3, 0x80dfe, 0x0, 0xfff}) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000100)={0x2, 0x0, 0x0, 0xdf3, 0x0, "64f30ea84907e175d5966472c23d26ce8d6f3c"}) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) r4 = syz_open_dev$ptys(0xc, 0x3, 0x1) readv(r3, &(0x7f0000000180)=[{&(0x7f0000000280)=""/177, 0xb1}], 0x1) ioctl$TIOCPKT(r3, 0x5420, &(0x7f00000000c0)=0x8000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002580000000e0a01020000000000000000010400000900020073797a32000000001800038014000080100001800400028006000180000000000900010073797a3000000800140000001000010000000000000000000000000a"], 0xc8}}, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x13) r6 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCXONC(r6, 0x540a, 0x3) sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@canfd={{}, 0x2f, 0x0, 0x0, 0x0, "0a1c481ef875f63a33610708eb844846979e3e552e4f425455252a03b32ffda67252619ce63a402541ff0f00000000000056d200"}, 0x48}, 0x2, 0x0, 0x0, 0x24002001}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f00000000c0)={r7, r8/1000+60000}, 0x8) 9.789995687s ago: executing program 0 (id=166): r0 = socket$netlink(0x10, 0x3, 0x0) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x159080, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') chdir(&(0x7f0000000100)='./file0\x00') prctl$PR_SET_PTRACER(0x59616d61, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0xf0f046}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl(r2, 0xfffff000, &(0x7f0000000000)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) getdents(r1, &(0x7f0000000080)=""/43, 0x2b) iopl(0x3) mount_setattr(0xffffffffffffffff, 0x0, 0x1800, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x3, r8}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000200), &(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000240), 0x0, 0xfffffffffffff810}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010001ff700"/20, @ANYRES32=r5, @ANYBLOB="ff00000000000000140012800b000100626174616476"], 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 9.710837182s ago: executing program 0 (id=167): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYRESHEX=0x0, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001"], 0x48}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002000000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085001400a50000009500000000800000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0xc, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x10000000000003af, &(0x7f0000000280)=[0x1], &(0x7f0000000340)=[{0x4, 0x2, 0x6, 0x8}, {0x0, 0x1, 0xb, 0x8}, {0x0, 0x2, 0x9, 0x5}, {0x1, 0x2, 0xf, 0x7}, {0x3, 0x5, 0xe, 0xa}, {0x5, 0x2, 0xf, 0x2}, {0x5, 0x5, 0x3, 0x9}], 0x10, 0xfffffffb, @void, @value}, 0x94) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000006900000000000001000000940fa7c7326ae0367600000007070000b28a4533503319"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setstatus(r7, 0x4, 0x2400) write$UHID_INPUT(r6, &(0x7f0000001040)={0x7, {"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", 0x1000}}, 0x1006) 8.631246516s ago: executing program 0 (id=170): unshare(0x22020600) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f0000000440)=""/154, 0x9a) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r1, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r2, 0x10c, 0x8, &(0x7f0000000140), 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40305829, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0x198, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2c8, 0x20a, 0x278, 0x2c8, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x198, 0x0, {}, [@common=@srh1={{0x8c}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @local, @remote, [], [], [], 0x889f70bcd8e2d90b}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@eui64={{0x24}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3ec) r3 = memfd_secret(0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0xd, 0x0, 0x0, 0x0, 0x231ede8b, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x1b, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r5, 0x0, 0x8) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_TIOCOUTQ(r6, 0x5411, &(0x7f00000001c0)) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0), 0x2009021, 0x0) bind$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xe, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x20044004) syz_clone(0x81080, 0x0, 0x0, 0x0, 0x0, 0x0) 1.624899594s ago: executing program 2 (id=190): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab4402850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='9p_protocol_dump\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff0100008500000008000000250000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r4 = dup(r3) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 1.42013836s ago: executing program 2 (id=191): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x4}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x80082102, 0x0) 560.818878ms ago: executing program 2 (id=197): r0 = syz_io_uring_setup(0x9a7, &(0x7f0000007640), &(0x7f00000076c0), &(0x7f0000007700)) setresuid(0x0, 0xee00, 0xee01) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) 560.602459ms ago: executing program 2 (id=198): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}}]}, 0x4c}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)='y', 0x1}], 0x1}}], 0x1, 0x0) 500.694625ms ago: executing program 2 (id=199): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0x1}, 0x18) r2 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000000)=ANY=[]) 500.49187ms ago: executing program 2 (id=200): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000440)={0x2, 0x0, 0x0, 0xfffe, 0x16a1142f, 0x0, 0x80, 0x9, 0x0, 0x0, 0xffffdffc, 0x1}) 299.97543ms ago: executing program 1 (id=202): r0 = socket(0x10, 0x2, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}, 0x10) socket(0x10, 0x803, 0x0) openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x20, r3, 0x1, 0x0, 0x1, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x8}, @ETHTOOL_A_RINGS_HEADER={0x4}]}, 0x20}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 180.574905ms ago: executing program 1 (id=203): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}]}}}]}, 0x40}}, 0x0) 179.980699ms ago: executing program 1 (id=204): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) close(r0) 74.359125ms ago: executing program 1 (id=205): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000800)=""/227, 0x26, 0xe3, 0x8, 0x0, 0x0, @void, @value}, 0x28) 446.561µs ago: executing program 1 (id=206): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b40)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="350b00000000000000000d000f000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0) 0s ago: executing program 1 (id=207): futex_waitv(&(0x7f0000000a00)=[{0xd, &(0x7f0000000000)=0xb, 0x82}, {0xffffffffffff90e9, &(0x7f0000000040)=0x8432, 0x2}, {0x8, &(0x7f0000000080)=0x4, 0x82}, {0x8, &(0x7f00000000c0)=0x6c, 0x82}, {0x2, &(0x7f0000000100)=0x7, 0x2}, {0x6, &(0x7f0000000180)=0x6, 0x82}, {0x2000000000000, &(0x7f00000001c0)=0x34ee11e2, 0x2}, {0xffffffffffffffff, &(0x7f0000000200)=0x9, 0x82}, {0x8, &(0x7f0000000240)=0x8000, 0x886822a14facd68b}, {0x4, &(0x7f0000000280)=0x433, 0x82}, {0xffff, &(0x7f00000002c0)=0x1, 0x2}, {0x7, 0x0, 0x82}, {0x5, 0x0, 0x2}, {0x4, &(0x7f00000003c0)=0xe, 0x2}, {0x10001, &(0x7f0000000400)=0x3ff, 0x2}, {0x7fffffffffffffff, &(0x7f0000000440)=0x100, 0x82}, {0x6, &(0x7f0000000480)=0x4, 0x82}, {0xffffffffffffffff, &(0x7f00000004c0)=0x80, 0x2}, {0x0, &(0x7f0000000500)=0x2, 0x82}, {0x2, &(0x7f0000000540)=0x3, 0x82}, {0x80000001, &(0x7f0000000580)=0xe, 0x82}, {0x9757, &(0x7f00000005c0)=0x9, 0x2}, {0x951a, &(0x7f0000000600)=0x2, 0x2}, {0xc9, &(0x7f0000000640)=0x10, 0x2}, {0x1, &(0x7f0000000680)=0x3, 0x2}, {0xa56, &(0x7f00000006c0)=0x6, 0x82}, {0x5, &(0x7f0000000700)=0xaa84, 0x82}, {0x6, &(0x7f0000000740)=0x3, 0x82}, {0xdf1, &(0x7f00000007c0)=0x7fffffffffffffff, 0x2}, {0xfffffffffffffffd, &(0x7f0000000800)=0x5, 0x82}, {0x309f, &(0x7f0000000840)=0x6, 0x82}, {0x0, &(0x7f0000000880)=0x3ad3, 0x2}, {0x9, 0x0, 0x82}, {0xffff, &(0x7f0000000900)=0x3, 0x2}, {0x8, &(0x7f0000000940)=0x5, 0x2}, {0x5, &(0x7f0000000980)=0x5, 0x2}, {0x4, &(0x7f00000009c0)=0x9, 0x82}], 0x25, 0x0, &(0x7f0000000dc0)={0x77359400}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r3, 0x58}, 0x98) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x8000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x8, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {{0x6, 0x0, 0xb}, {0x65, 0x0, 0xc}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0xa, 0x9}, {0x7, 0x0, 0x3, 0x9}, {}, {}, {0x15}}], {{0x5, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000013c0)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001580)={r7, 0x20, &(0x7f0000001540)={&(0x7f0000001400)=""/11, 0xb, 0x0, &(0x7f0000001440)=""/211, 0xd3}}, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)=0xffff7b6e, 0x4) getsockopt$bt_hci(r6, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) sendmmsg$inet6(r5, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f00000002c0)=[{0x0}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="240000000000000029000000320000000000000000000000000000000001"], 0x28}}], 0x1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r8], 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x0) syz_emit_ethernet(0x44e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000186dd60d5b33204180000fc000000000000000000000000000000000000000000000000000000000000006253000000000000050200030502000706cc09bf801dc6719ffdcfff23c1667314a2b063736265ab4a7e2e609e98c51c93acdbf11f789062e208bdc6dff340b3fc4ee58d1d9c4af654730b716e3747319eb5f4aa7d6c213136807fe816423f3f3f33016c80d4b9d0c39f6b8ab438bb2dacb429ca0845a308882e5fcff98082a47aac1e7a268ff2603a5edce7f3f812a0db70c2e3696c96c8f0c7ba5b5924fe1359e053551c3eb861c28f7e9de69498dae86bd83be96841421707ec3eea00b8f41b0e85eeff0b8ddb04b6363a9eb587af6e22371e894a1bf4f694bdcc2f98c204"], 0x0) 0s ago: executing program 1 (id=208): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000001200)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r2}, 0x18) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000700)=[{}], 0x20) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:27159' (ED25519) to the list of known hosts. [ 35.551798][ T5328] cgroup: Unknown subsys name 'net' [ 35.878279][ T5328] cgroup: Unknown subsys name 'cpuset' [ 35.894242][ T5328] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 37.232881][ T5328] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 40.305063][ T5345] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 40.332315][ T5351] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 40.335833][ T5351] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 40.339775][ T5351] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 40.343634][ T5354] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 40.345633][ T5354] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 40.347861][ T5354] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 40.350620][ T5354] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 40.353923][ T5354] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 40.358039][ T5354] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 40.361265][ T5354] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 40.364398][ T5354] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 40.367084][ T5354] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 40.371021][ T5354] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 40.373885][ T5354] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 40.376983][ T5354] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 40.378053][ T5355] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 40.379293][ T5354] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 40.382329][ T5355] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 40.384409][ T5354] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 40.389035][ T5358] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 40.391725][ T66] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 40.399703][ T5358] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 40.406595][ T5358] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 40.652729][ T5350] chnl_net:caif_netlink_parms(): no params data found [ 40.666138][ T5343] chnl_net:caif_netlink_parms(): no params data found [ 40.670594][ T5356] chnl_net:caif_netlink_parms(): no params data found [ 40.700624][ T5347] chnl_net:caif_netlink_parms(): no params data found [ 40.952770][ T5343] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.955716][ T5343] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.958795][ T5343] bridge_slave_0: entered allmulticast mode [ 40.961893][ T5343] bridge_slave_0: entered promiscuous mode [ 41.006047][ T5347] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.007788][ T5347] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.009492][ T5347] bridge_slave_0: entered allmulticast mode [ 41.011332][ T5347] bridge_slave_0: entered promiscuous mode [ 41.013893][ T5347] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.015668][ T5347] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.017715][ T5347] bridge_slave_1: entered allmulticast mode [ 41.019519][ T5347] bridge_slave_1: entered promiscuous mode [ 41.021714][ T5343] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.023604][ T5343] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.025474][ T5343] bridge_slave_1: entered allmulticast mode [ 41.027642][ T5343] bridge_slave_1: entered promiscuous mode [ 41.029617][ T5350] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.031627][ T5350] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.034109][ T5350] bridge_slave_0: entered allmulticast mode [ 41.037073][ T5350] bridge_slave_0: entered promiscuous mode [ 41.040791][ T5350] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.043337][ T5350] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.046196][ T5350] bridge_slave_1: entered allmulticast mode [ 41.048045][ T5350] bridge_slave_1: entered promiscuous mode [ 41.049774][ T5356] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.051408][ T5356] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.053070][ T5356] bridge_slave_0: entered allmulticast mode [ 41.054854][ T5356] bridge_slave_0: entered promiscuous mode [ 41.117622][ T5356] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.119339][ T5356] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.121080][ T5356] bridge_slave_1: entered allmulticast mode [ 41.123499][ T5356] bridge_slave_1: entered promiscuous mode [ 41.127075][ T5347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.130379][ T5343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.133678][ T5350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.137644][ T5350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.149445][ T5347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.152741][ T5343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.215205][ T5356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.218612][ T5356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.222305][ T5347] team0: Port device team_slave_0 added [ 41.235038][ T5350] team0: Port device team_slave_0 added [ 41.238187][ T5350] team0: Port device team_slave_1 added [ 41.256844][ T5347] team0: Port device team_slave_1 added [ 41.259827][ T5343] team0: Port device team_slave_0 added [ 41.270275][ T5356] team0: Port device team_slave_0 added [ 41.280303][ T5343] team0: Port device team_slave_1 added [ 41.290645][ T5356] team0: Port device team_slave_1 added [ 41.308477][ T5350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.310313][ T5350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.317994][ T5350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.328748][ T5347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.330560][ T5347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.338175][ T5347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.350911][ T5350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.352769][ T5350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.359398][ T5350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.371860][ T5347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.373680][ T5347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.380421][ T5347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.383782][ T5343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.385634][ T5343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.393280][ T5343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.398524][ T5343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.400324][ T5343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.406909][ T5343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.410141][ T5356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.412021][ T5356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.419290][ T5356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.424421][ T5356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.426333][ T5356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.432927][ T5356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.456997][ T5350] hsr_slave_0: entered promiscuous mode [ 41.458998][ T5350] hsr_slave_1: entered promiscuous mode [ 41.516227][ T5356] hsr_slave_0: entered promiscuous mode [ 41.518069][ T5356] hsr_slave_1: entered promiscuous mode [ 41.519805][ T5356] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.521907][ T5356] Cannot create hsr debugfs directory [ 41.553239][ T5347] hsr_slave_0: entered promiscuous mode [ 41.556484][ T5347] hsr_slave_1: entered promiscuous mode [ 41.558310][ T5347] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.560311][ T5347] Cannot create hsr debugfs directory [ 41.566801][ T5343] hsr_slave_0: entered promiscuous mode [ 41.568768][ T5343] hsr_slave_1: entered promiscuous mode [ 41.570543][ T5343] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.572664][ T5343] Cannot create hsr debugfs directory [ 41.791759][ T5350] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 41.796337][ T5350] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 41.799593][ T5350] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 41.802551][ T5350] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 41.831898][ T5356] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 41.835067][ T5356] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 41.838457][ T5356] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 41.841574][ T5356] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 41.864097][ T5347] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 41.868329][ T5347] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 41.872788][ T5347] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 41.876127][ T5347] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 41.917640][ T5343] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 41.922350][ T5343] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 41.927662][ T5343] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 41.932224][ T5343] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 41.954427][ T5350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.981123][ T5350] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.986890][ T5356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.999933][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.001958][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.018969][ T5356] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.024364][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.027044][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.041873][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.044344][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.048396][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.050875][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.059339][ T5347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.093158][ T5343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.109074][ T5347] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.128558][ T100] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.131060][ T100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.149996][ T100] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.152449][ T100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.159904][ T5343] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.172478][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.174519][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.178336][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.180307][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.224784][ T5350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.254777][ T5350] veth0_vlan: entered promiscuous mode [ 42.261546][ T5350] veth1_vlan: entered promiscuous mode [ 42.275525][ T5347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.286086][ T5350] veth0_macvtap: entered promiscuous mode [ 42.289532][ T5350] veth1_macvtap: entered promiscuous mode [ 42.302126][ T5343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.307143][ T5350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.310838][ T5356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.317783][ T5350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.325709][ T5350] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.328851][ T5350] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.331138][ T5350] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.333442][ T5350] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.363120][ T5347] veth0_vlan: entered promiscuous mode [ 42.381890][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.384435][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.402348][ T5356] veth0_vlan: entered promiscuous mode [ 42.405246][ T5347] veth1_vlan: entered promiscuous mode [ 42.407297][ T5358] Bluetooth: hci2: command tx timeout [ 42.407301][ T5345] Bluetooth: hci3: command tx timeout [ 42.413359][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.416576][ T5345] Bluetooth: hci0: command tx timeout [ 42.419060][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.419661][ T5356] veth1_vlan: entered promiscuous mode [ 42.430457][ T5343] veth0_vlan: entered promiscuous mode [ 42.433620][ T5347] veth0_macvtap: entered promiscuous mode [ 42.440136][ T5343] veth1_vlan: entered promiscuous mode [ 42.442905][ T5347] veth1_macvtap: entered promiscuous mode [ 42.460351][ T5350] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 42.464122][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.473158][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.478947][ T5347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.492667][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.495397][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.498214][ T5345] Bluetooth: hci1: command tx timeout [ 42.501063][ T5347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.503635][ T5356] veth0_macvtap: entered promiscuous mode [ 42.518062][ T5347] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.522289][ T5347] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.526491][ T5347] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.530303][ T5347] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.538967][ T5356] veth1_macvtap: entered promiscuous mode [ 42.548180][ T5410] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.551721][ T5410] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.554522][ T5410] bridge0: entered allmulticast mode [ 42.563442][ T5343] veth0_macvtap: entered promiscuous mode [ 42.563726][ T5410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 42.571094][ T5343] veth1_macvtap: entered promiscuous mode [ 42.573255][ T5410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 42.577630][ T5410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 42.579070][ T5356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.583259][ T5356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.586734][ T5356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.590588][ T5356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.596117][ T5356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.601592][ T5356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.605294][ T5356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.609190][ T5356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.612928][ T5356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.616210][ T5356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.622907][ T5343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.627513][ T5410] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 42.627942][ T5343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.634599][ T5343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.639689][ T5343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.642968][ T5343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.646922][ T5343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.650872][ T5343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.663347][ T5343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.666260][ T5343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.668787][ T5343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.671857][ T5343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.674376][ T5343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.677965][ T5343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.681171][ T5343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.684208][ T5356] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.686920][ T5356] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.689252][ T5356] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.691622][ T5356] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.698343][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.698800][ T5343] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.701156][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.704380][ T5343] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.710178][ T5343] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.713130][ T5343] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.736344][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.738892][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.784773][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.797464][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.830099][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.832215][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.836234][ T100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.838280][ T100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.860373][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.862809][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.418984][ T5428] vivid-003: ================= START STATUS ================= [ 43.422582][ T5428] vivid-003: Radio HW Seek Mode: Bounded [ 43.424954][ T5428] vivid-003: Radio Programmable HW Seek: false [ 43.427905][ T5428] vivid-003: RDS Rx I/O Mode: Block I/O [ 43.430166][ T5428] vivid-003: Generate RBDS Instead of RDS: false [ 43.432698][ T5428] vivid-003: RDS Reception: true [ 43.434679][ T5428] vivid-003: RDS Program Type: 0 inactive [ 43.437063][ T5428] vivid-003: RDS PS Name: inactive [ 43.439012][ T5428] vivid-003: RDS Radio Text: inactive [ 43.441181][ T5428] vivid-003: RDS Traffic Announcement: false inactive [ 43.443798][ T5428] vivid-003: RDS Traffic Program: false inactive [ 43.446478][ T5428] vivid-003: RDS Music: false inactive [ 43.448633][ T5428] vivid-003: ================== END STATUS ================== [ 43.635987][ T5412] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 43.815960][ T5412] usb 8-1: Using ep0 maxpacket: 32 [ 43.820085][ T5412] usb 8-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 1024 [ 43.823061][ T5412] usb 8-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 43.825826][ T5412] usb 8-1: config 1 interface 0 has no altsetting 0 [ 43.829727][ T5412] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 43.832189][ T5412] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.834298][ T5412] usb 8-1: Product: ఇ [ 43.835393][ T5412] usb 8-1: Manufacturer: ⠊ [ 43.836946][ T5412] usb 8-1: SerialNumber: 램괳䔠쭦䨒铉䷧廧⟙됢͂ﶱह滨橃ᗹ鮂ⶾﵼ帊掅圇ꫵ暶ꎀ㍹努䨯⿽윰쇍䀳⨏靈牧ޚꇬ䆚ﱋ筪콓痢ӧ淧眬뎗둜쫢郴밆邘῾ꚳ漛ौ큳 [ 43.845212][ T5414] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 43.848129][ T5414] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 44.011828][ T5432] overlayfs: missing 'lowerdir' [ 44.014746][ T5434] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.077614][ T5412] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 1 proto 1 vid 0x0525 pid 0xA4A8 [ 44.096287][ T5412] usb 8-1: USB disconnect, device number 2 [ 44.101885][ T5412] usblp0: removed [ 44.487589][ T5345] Bluetooth: hci3: command tx timeout [ 44.489067][ T5345] Bluetooth: hci0: command tx timeout [ 44.490567][ T5345] Bluetooth: hci2: command tx timeout [ 44.565960][ T5358] Bluetooth: hci1: command tx timeout [ 46.557179][ T5482] vivid-000: ================= START STATUS ================= [ 46.559037][ T5482] vivid-000: Radio HW Seek Mode: Bounded [ 46.560389][ T5482] vivid-000: Radio Programmable HW Seek: false [ 46.561862][ T5482] vivid-000: RDS Rx I/O Mode: Block I/O [ 46.563188][ T5482] vivid-000: Generate RBDS Instead of RDS: false [ 46.564709][ T5482] vivid-000: RDS Reception: true [ 46.576572][ T5358] Bluetooth: hci0: command tx timeout [ 46.578420][ T5358] Bluetooth: hci3: command tx timeout [ 46.580356][ T5482] vivid-000: RDS Program Type: 0 inactive [ 46.582284][ T5482] vivid-000: RDS PS Name: inactive [ 46.584053][ T5482] vivid-000: RDS Radio Text: inactive [ 46.606033][ T5482] vivid-000: RDS Traffic Announcement: false inactive [ 46.607751][ T5482] vivid-000: RDS Traffic Program: false inactive [ 46.610221][ T5482] vivid-000: RDS Music: false inactive [ 46.612689][ T5482] vivid-000: ================== END STATUS ================== [ 46.646500][ T5345] Bluetooth: hci1: command tx timeout [ 46.858880][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 47.192528][ T5491] overlayfs: missing 'lowerdir' [ 47.213694][ T5491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20'. [ 47.363452][ T5497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22'. [ 47.926248][ T5407] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 48.079109][ T5407] usb 5-1: device descriptor read/64, error -71 [ 48.327108][ T5345] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 48.330424][ T5345] CPU: 3 UID: 0 PID: 5345 Comm: kworker/u33:2 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 48.334055][ T5345] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 48.337676][ T5345] Workqueue: hci3 hci_rx_work [ 48.339303][ T5345] Call Trace: [ 48.340486][ T5345] [ 48.341489][ T5345] dump_stack_lvl+0x16c/0x1f0 [ 48.343097][ T5345] sysfs_warn_dup+0x7f/0xa0 [ 48.344649][ T5345] sysfs_create_dir_ns+0x24d/0x2b0 [ 48.346430][ T5345] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 48.348335][ T5345] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 48.350021][ T5345] ? kobject_add_internal+0x12d/0x990 [ 48.351440][ T5345] ? do_raw_spin_unlock+0x172/0x230 [ 48.352819][ T5345] kobject_add_internal+0x2c8/0x990 [ 48.354189][ T5345] kobject_add+0x16f/0x240 [ 48.355359][ T5345] ? __pfx_kobject_add+0x10/0x10 [ 48.356692][ T5345] ? class_to_subsys+0x3e/0x160 [ 48.357956][ T5345] ? do_raw_spin_unlock+0x172/0x230 [ 48.359311][ T5345] ? kobject_put+0xab/0x5a0 [ 48.360519][ T5345] device_add+0x289/0x1a70 [ 48.361690][ T5345] ? __pfx_dev_set_name+0x10/0x10 [ 48.363016][ T5345] ? __pfx_device_add+0x10/0x10 [ 48.364317][ T5345] ? mgmt_send_event_skb+0x2f2/0x460 [ 48.366039][ T5345] hci_conn_add_sysfs+0x17e/0x230 [ 48.367573][ T5345] le_conn_complete_evt+0xfc7/0x1cf0 [ 48.369025][ T5345] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 48.370544][ T5345] ? trace_contention_end+0xea/0x140 [ 48.371962][ T5345] ? __mutex_lock+0x1a6/0x9c0 [ 48.373209][ T5345] hci_le_conn_complete_evt+0x23c/0x370 [ 48.374774][ T5345] hci_le_meta_evt+0x2e2/0x5d0 [ 48.376052][ T5345] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 48.377684][ T5345] hci_event_packet+0x666/0x1190 [ 48.378984][ T5345] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 48.380375][ T5345] ? __pfx_hci_event_packet+0x10/0x10 [ 48.381803][ T5345] ? mark_held_locks+0x9f/0xe0 [ 48.383082][ T5345] ? kcov_remote_start+0x3cf/0x6e0 [ 48.384462][ T5345] ? lockdep_hardirqs_on+0x7c/0x110 [ 48.385850][ T5345] hci_rx_work+0x2c6/0x16c0 [ 48.386730][ T5407] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 48.387061][ T5345] ? lock_acquire+0x2f/0xb0 [ 48.390398][ T5345] ? process_one_work+0x8bb/0x1b30 [ 48.391782][ T5345] process_one_work+0x958/0x1b30 [ 48.393094][ T5345] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 48.394573][ T5345] ? __pfx_process_one_work+0x10/0x10 [ 48.395993][ T5345] ? assign_work+0x1a0/0x250 [ 48.397217][ T5345] worker_thread+0x6c8/0xf00 [ 48.398444][ T5345] ? __kthread_parkme+0x148/0x220 [ 48.399784][ T5345] ? __pfx_worker_thread+0x10/0x10 [ 48.401130][ T5345] kthread+0x2c1/0x3a0 [ 48.402204][ T5345] ? _raw_spin_unlock_irq+0x23/0x50 [ 48.403588][ T5345] ? __pfx_kthread+0x10/0x10 [ 48.404808][ T5345] ret_from_fork+0x45/0x80 [ 48.405984][ T5345] ? __pfx_kthread+0x10/0x10 [ 48.407206][ T5345] ret_from_fork_asm+0x1a/0x30 [ 48.408483][ T5345] [ 48.413252][ T5345] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 48.416935][ T5345] Bluetooth: hci3: failed to register connection device [ 48.515955][ T5407] usb 5-1: device descriptor read/64, error -71 [ 48.626188][ T5407] usb usb5-port1: attempt power cycle [ 48.646490][ T5358] Bluetooth: hci0: command tx timeout [ 48.648043][ T5345] Bluetooth: hci3: command tx timeout [ 48.727488][ T5345] Bluetooth: hci1: command tx timeout [ 49.175952][ T5407] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 49.200583][ T5407] usb 5-1: device descriptor read/8, error -71 [ 49.286992][ T5345] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 49.289427][ T5345] Bluetooth: hci2: Injecting HCI hardware error event [ 49.293743][ T5358] Bluetooth: hci2: hardware error 0x00 [ 49.476031][ T5407] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 49.506264][ T5407] usb 5-1: device descriptor read/8, error -71 [ 49.616096][ T5407] usb usb5-port1: unable to enumerate USB device [ 50.626532][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.963958][ T5562] input: syz1 as /devices/virtual/input/input5 [ 51.081777][ T5562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.40'. [ 51.210000][ T5574] overlayfs: missing 'lowerdir' [ 51.365993][ T5358] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 52.183873][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 52.201413][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 52.255942][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 52.386050][ T9] usb 7-1: device descriptor read/64, error -71 [ 52.598370][ T30] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 52.636057][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 52.646004][ T5358] Bluetooth: hci3: command 0x0405 tx timeout [ 52.747097][ T30] usb 6-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice=dc.8d [ 52.749550][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.757812][ T30] usb 6-1: config 0 descriptor?? [ 52.766076][ T30] usb 6-1: NDI device with a latency value of 1 [ 52.776381][ T9] usb 7-1: device descriptor read/64, error -71 [ 52.811721][ T5605] input: syz1 as /devices/virtual/input/input6 [ 52.854404][ T5604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.51'. [ 52.896109][ T9] usb usb7-port1: attempt power cycle [ 52.923488][ T5608] overlayfs: missing 'lowerdir' [ 53.012847][ T30] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 53.051006][ T30] ftdi_sio ttyUSB0: unknown device type: 0xdc8d [ 53.065099][ T30] usb 6-1: USB disconnect, device number 2 [ 53.067649][ T30] ftdi_sio 6-1:0.0: device disconnected [ 53.126847][ T5358] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 53.129231][ T5358] Bluetooth: hci1: Injecting HCI hardware error event [ 53.132425][ T66] Bluetooth: hci1: hardware error 0x00 [ 53.238980][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 53.259164][ T9] usb 7-1: device descriptor read/8, error -71 [ 53.607500][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 53.626923][ T9] usb 7-1: device descriptor read/8, error -71 [ 53.736500][ T9] usb usb7-port1: unable to enumerate USB device [ 53.921126][ T5616] overlayfs: missing 'lowerdir' [ 54.076815][ T5625] process 'syz.3.55' launched './file2' with NULL argv: empty string added [ 54.269900][ T5630] vivid-002: ================= START STATUS ================= [ 54.276114][ T5630] vivid-002: Radio HW Seek Mode: Bounded [ 54.277996][ T5630] vivid-002: Radio Programmable HW Seek: false [ 54.280331][ T5630] vivid-002: RDS Rx I/O Mode: Block I/O [ 54.284163][ T5630] vivid-002: Generate RBDS Instead of RDS: false [ 54.294309][ T5630] vivid-002: RDS Reception: true [ 54.296639][ T5630] vivid-002: RDS Program Type: 0 inactive [ 54.298640][ T5630] vivid-002: RDS PS Name: inactive [ 54.300223][ T5630] vivid-002: RDS Radio Text: inactive [ 54.301873][ T5630] vivid-002: RDS Traffic Announcement: false inactive [ 54.303992][ T5630] vivid-002: RDS Traffic Program: false inactive [ 54.305706][ T5630] vivid-002: RDS Music: false inactive [ 54.315101][ T5630] vivid-002: ================== END STATUS ================== [ 54.736705][ T5358] Bluetooth: hci3: command 0x0405 tx timeout [ 55.051035][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 55.052419][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 55.241528][ T66] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 55.255807][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 55.256242][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 55.256275][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 55.256320][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 56.835933][ T5408] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 57.015951][ T5408] usb 8-1: Using ep0 maxpacket: 32 [ 57.269141][ T5408] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 57.274020][ T5408] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 57.277191][ T5408] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 57.279459][ T5408] usb 8-1: Product: syz [ 57.280955][ T5408] usb 8-1: Manufacturer: syz [ 57.282283][ T5408] usb 8-1: SerialNumber: syz [ 57.284847][ T5408] usb 8-1: config 0 descriptor?? [ 57.289008][ T5677] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 58.086620][ T66] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 58.089861][ T66] Bluetooth: hci0: Injecting HCI hardware error event [ 58.093833][ T66] Bluetooth: hci0: hardware error 0x00 [ 59.476474][ T5408] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 59.521075][ T5730] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 59.626008][ T5408] usb 6-1: Using ep0 maxpacket: 32 [ 59.629286][ T5408] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 59.635282][ T5408] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 59.637956][ T5408] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 59.640095][ T5408] usb 6-1: Product: syz [ 59.641229][ T5408] usb 6-1: Manufacturer: syz [ 59.642460][ T5408] usb 6-1: SerialNumber: syz [ 59.645427][ T5408] usb 6-1: config 0 descriptor?? [ 59.647435][ T5722] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 59.651742][ T5408] chaoskey 6-1:0.0: Unable to register with hwrng [ 60.141883][ T5740] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 60.165992][ T66] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 60.957722][ T5747] overlayfs: missing 'lowerdir' [ 61.541770][ T5765] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 66.683309][ T5345] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 66.687541][ T5345] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 66.691208][ T5345] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 66.695258][ T5345] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 66.699058][ T5345] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 66.704451][ T5345] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 66.821889][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 66.882885][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.884594][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.886327][ T5768] bridge_slave_0: entered allmulticast mode [ 66.888193][ T5768] bridge_slave_0: entered promiscuous mode [ 66.890928][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.892820][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.894638][ T5768] bridge_slave_1: entered allmulticast mode [ 66.898363][ T5768] bridge_slave_1: entered promiscuous mode [ 66.917156][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.920971][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.944037][ T5768] team0: Port device team_slave_0 added [ 66.946745][ T5768] team0: Port device team_slave_1 added [ 66.964699][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.967975][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.974575][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.979826][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.981655][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.988520][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.013083][ T5768] hsr_slave_0: entered promiscuous mode [ 67.014942][ T5768] hsr_slave_1: entered promiscuous mode [ 67.017623][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.019855][ T5768] Cannot create hsr debugfs directory [ 67.093831][ T5768] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.226862][ T5768] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.309033][ T5768] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.425152][ T5768] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.505596][ T5768] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.508720][ T5768] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.511739][ T5768] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.514781][ T5768] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.528893][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.530764][ T5768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.532933][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.534810][ T5768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.557577][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.564552][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.573739][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.593070][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.595189][ T5780] FAULT_INJECTION: forcing a failure. [ 67.595189][ T5780] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 67.601254][ T5780] CPU: 2 UID: 0 PID: 5780 Comm: syz.2.94 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 67.603787][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.605075][ T5780] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 67.606962][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.610751][ T5780] Call Trace: [ 67.613947][ T5780] [ 67.615061][ T5780] dump_stack_lvl+0x16c/0x1f0 [ 67.615998][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.616839][ T5780] should_fail_ex+0x497/0x5b0 [ 67.618691][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.620364][ T5780] _copy_to_user+0x30/0xc0 [ 67.623937][ T5780] simple_read_from_buffer+0xd0/0x160 [ 67.625923][ T5780] proc_fail_nth_read+0x198/0x270 [ 67.627799][ T5780] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 67.629833][ T5780] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 67.631853][ T5780] vfs_read+0x1ce/0xbd0 [ 67.632973][ T5780] ? __fget_files+0x23a/0x3f0 [ 67.634222][ T5780] ? fdget_pos+0x24c/0x360 [ 67.635411][ T5780] ? __pfx_lock_release+0x10/0x10 [ 67.636743][ T5780] ? trace_lock_acquire+0x14a/0x1d0 [ 67.638115][ T5780] ? __pfx_vfs_read+0x10/0x10 [ 67.639397][ T5780] ? __pfx___mutex_lock+0x10/0x10 [ 67.640734][ T5780] ? __fget_files+0x244/0x3f0 [ 67.642007][ T5780] ksys_read+0x12f/0x260 [ 67.643132][ T5780] ? __pfx_ksys_read+0x10/0x10 [ 67.644439][ T5780] __do_fast_syscall_32+0x73/0x120 [ 67.645958][ T5780] do_fast_syscall_32+0x32/0x80 [ 67.647258][ T5780] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 67.648938][ T5780] RIP: 0023:0xf7fdf579 [ 67.650016][ T5780] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 67.655048][ T5780] RSP: 002b:00000000f57665a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 67.657267][ T5780] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5766620 [ 67.659355][ T5780] RDX: 000000000000000f RSI: 00000000f746bff4 RDI: 0000000000000000 [ 67.661438][ T5780] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 67.663521][ T5780] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 67.665587][ T5780] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 67.667666][ T5780] [ 67.801901][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.837387][ T5768] veth0_vlan: entered promiscuous mode [ 67.858161][ T5768] veth1_vlan: entered promiscuous mode [ 67.969719][ T5768] veth0_macvtap: entered promiscuous mode [ 67.983779][ T5768] veth1_macvtap: entered promiscuous mode [ 67.993691][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.996721][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.999239][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.001967][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.004482][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.007849][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.010564][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.013340][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.016902][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.022354][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.025082][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.027721][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.030415][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.032980][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.035679][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.038595][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.041832][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.046198][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.058900][ T5768] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.061613][ T5768] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.064168][ T5768] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.066603][ T5768] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.095146][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.100121][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.109505][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.111681][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.870135][ T5813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.872805][ T5813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.532980][ T66] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 69.535782][ T66] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 69.538791][ T66] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 69.541323][ T66] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 69.544271][ T66] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 69.547033][ T66] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 69.679460][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 69.749049][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.751088][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.753066][ T5826] bridge_slave_0: entered allmulticast mode [ 69.755204][ T5826] bridge_slave_0: entered promiscuous mode [ 69.760108][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.761980][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.763883][ T5826] bridge_slave_1: entered allmulticast mode [ 69.765951][ T5826] bridge_slave_1: entered promiscuous mode [ 69.786313][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.790065][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.812191][ T5826] team0: Port device team_slave_0 added [ 69.815247][ T5826] team0: Port device team_slave_1 added [ 69.839215][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.841139][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.847952][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.852107][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.853893][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.860838][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.884788][ T5826] hsr_slave_0: entered promiscuous mode [ 69.887038][ T5826] hsr_slave_1: entered promiscuous mode [ 69.888867][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.890880][ T5826] Cannot create hsr debugfs directory [ 69.968821][ T5826] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.035695][ T5839] FAULT_INJECTION: forcing a failure. [ 70.035695][ T5839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.040486][ T5839] CPU: 3 UID: 0 PID: 5839 Comm: syz.2.106 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 70.043335][ T5839] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.046122][ T5839] Call Trace: [ 70.047000][ T5839] [ 70.047784][ T5839] dump_stack_lvl+0x16c/0x1f0 [ 70.049033][ T5839] should_fail_ex+0x497/0x5b0 [ 70.050339][ T5839] _copy_from_user+0x30/0xf0 [ 70.051586][ T5839] get_compat_msghdr+0xa8/0x170 [ 70.052854][ T5839] ? __pfx_get_compat_msghdr+0x10/0x10 [ 70.054265][ T5839] ? __pfx___lock_acquire+0x10/0x10 [ 70.055622][ T5839] ___sys_sendmsg+0x1b0/0x1e0 [ 70.056854][ T5839] ? __pfx____sys_sendmsg+0x10/0x10 [ 70.058207][ T5839] ? lock_acquire+0x2f/0xb0 [ 70.059392][ T5839] ? __fget_files+0x40/0x3f0 [ 70.060767][ T5839] ? __pfx___might_resched+0x10/0x10 [ 70.062706][ T5839] ? fdget+0x176/0x210 [ 70.064155][ T5839] __sys_sendmmsg+0x2a5/0x450 [ 70.065849][ T5839] ? __pfx___sys_sendmmsg+0x10/0x10 [ 70.067777][ T5839] ? vfs_write+0x14d/0x1140 [ 70.069468][ T5839] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 70.071694][ T5839] ? fput+0x30/0x390 [ 70.073164][ T5839] ? ksys_write+0x1ad/0x260 [ 70.074859][ T5839] ? __pfx_ksys_write+0x10/0x10 [ 70.076671][ T5839] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 70.078732][ T5839] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 70.081138][ T5839] __do_fast_syscall_32+0x73/0x120 [ 70.083031][ T5839] do_fast_syscall_32+0x32/0x80 [ 70.084841][ T5839] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 70.087171][ T5839] RIP: 0023:0xf7fdf579 [ 70.088692][ T5839] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 70.095690][ T5839] RSP: 002b:00000000f574556c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 70.098888][ T5839] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020003b80 [ 70.101780][ T5839] RDX: 0000000004000070 RSI: 0000000000008000 RDI: 0000000000000000 [ 70.104686][ T5839] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 70.107574][ T5839] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 70.110400][ T5839] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 70.112478][ T5839] [ 70.121522][ T5826] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.222840][ T5826] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.331935][ T5826] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.431053][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.435075][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.443179][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.447008][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.490407][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.521305][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.539616][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.542154][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.562862][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.566202][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.732072][ T1374] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.735053][ T1374] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.784853][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.805732][ T5826] veth0_vlan: entered promiscuous mode [ 70.813793][ T5826] veth1_vlan: entered promiscuous mode [ 70.830608][ T5826] veth0_macvtap: entered promiscuous mode [ 70.834015][ T5826] veth1_macvtap: entered promiscuous mode [ 70.841151][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.843853][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.846810][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.849514][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.852213][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.854791][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.858561][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.861286][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.863725][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.866720][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.870153][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.874533][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.880446][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.883311][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.886224][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.888654][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.891627][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.894307][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.898094][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.900614][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.903253][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.907380][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.912068][ T5826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.914836][ T5826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.917788][ T5826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.920028][ T5826] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.966677][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.968892][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.985815][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.988094][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.054807][ T5851] netlink: 56 bytes leftover after parsing attributes in process `syz.1.104'. [ 71.059355][ T5851] netlink: 'syz.1.104': attribute type 5 has an invalid length. [ 71.062564][ T5851] netlink: 44 bytes leftover after parsing attributes in process `syz.1.104'. [ 71.352873][ T5861] netlink: 76 bytes leftover after parsing attributes in process `syz.1.111'. [ 71.412013][ T5861] netlink: 24 bytes leftover after parsing attributes in process `syz.1.111'. [ 71.446000][ T5864] overlayfs: failed to resolve './file1': -2 [ 71.476466][ T1446] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 71.507342][ T5866] overlayfs: failed to resolve './file0': -2 [ 71.616027][ T66] Bluetooth: hci5: command tx timeout [ 71.675967][ T1446] usb 5-1: Using ep0 maxpacket: 32 [ 71.679106][ T1446] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 71.683613][ T1446] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 71.690566][ T1446] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 71.692706][ T1446] usb 5-1: Product: syz [ 71.693787][ T1446] usb 5-1: Manufacturer: syz [ 71.694983][ T1446] usb 5-1: SerialNumber: syz [ 71.698214][ T1446] usb 5-1: config 0 descriptor?? [ 71.699987][ T5857] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 72.246091][ T66] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 72.250506][ T66] Bluetooth: hci4: Injecting HCI hardware error event [ 72.255698][ T5345] Bluetooth: hci4: hardware error 0x00 [ 72.701388][ T5884] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 73.695932][ T66] Bluetooth: hci5: command tx timeout [ 74.079822][ T5902] vivid-003: disconnect [ 74.081814][ T5901] vivid-003: reconnect [ 74.309293][ T5904] overlayfs: failed to resolve './file0': -2 [ 74.325946][ T5345] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 75.354366][ T5920] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 75.766657][ T5345] Bluetooth: hci5: command tx timeout [ 75.848426][ T63] cfg80211: failed to load regulatory.db [ 76.413359][ T5938] overlayfs: missing 'lowerdir' [ 77.846013][ T66] Bluetooth: hci5: command tx timeout [ 78.257224][ T5959] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 78.795620][ T5967] Zero length message leads to an empty skb [ 78.818547][ T5972] overlayfs: missing 'lowerdir' [ 78.943369][ T5358] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 78.946178][ T5358] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 78.948519][ T5358] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 78.951824][ T5358] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 78.954363][ T5358] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 78.957222][ T5358] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 79.044969][ T5976] chnl_net:caif_netlink_parms(): no params data found [ 79.116187][ T5976] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.118243][ T5976] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.120432][ T5976] bridge_slave_0: entered allmulticast mode [ 79.126948][ T5976] bridge_slave_0: entered promiscuous mode [ 79.129806][ T5976] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.131737][ T5976] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.133657][ T5976] bridge_slave_1: entered allmulticast mode [ 79.135663][ T5976] bridge_slave_1: entered promiscuous mode [ 79.156125][ T5976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.160334][ T5976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.197631][ T5976] team0: Port device team_slave_0 added [ 79.200604][ T5976] team0: Port device team_slave_1 added [ 79.232868][ T5976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.234798][ T5976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.234822][ T5976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.235547][ T5976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.249301][ T5976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.256821][ T5976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.258040][ T5996] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 79.299130][ T5976] hsr_slave_0: entered promiscuous mode [ 79.301926][ T5976] hsr_slave_1: entered promiscuous mode [ 79.304215][ T5976] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.306984][ T5976] Cannot create hsr debugfs directory [ 79.433857][ T5976] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.509725][ T5976] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.585903][ T5976] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.702995][ T5976] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.800437][ T5976] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.805155][ T5976] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.808821][ T5976] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.813097][ T5976] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.825005][ T5976] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.827044][ T5976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.829469][ T5976] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.831627][ T5976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.867846][ T5976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.886778][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.890356][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.909894][ T5976] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.920574][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.923297][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.926083][ T5358] Bluetooth: hci5: command 0x0405 tx timeout [ 79.926753][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.931311][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.045810][ T5976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.069947][ T5976] veth0_vlan: entered promiscuous mode [ 80.074014][ T5976] veth1_vlan: entered promiscuous mode [ 80.090377][ T5976] veth0_macvtap: entered promiscuous mode [ 80.094060][ T5976] veth1_macvtap: entered promiscuous mode [ 80.100334][ T5976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.103072][ T5976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.105589][ T5976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.109201][ T5976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.111741][ T5976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.114408][ T5976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.117378][ T5976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.120101][ T5976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.122611][ T5976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.125305][ T5976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.128239][ T5976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.130866][ T5976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.134217][ T5976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.138478][ T5976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.142132][ T5976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.145618][ T5976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.149316][ T5976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.151951][ T5976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.154688][ T5976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.157774][ T5976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.160485][ T5976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.163291][ T5976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.175946][ T5976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.178573][ T5976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.181237][ T5976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.184705][ T5976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.189163][ T5976] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.191484][ T5976] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.193719][ T5976] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.196402][ T5976] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.223160][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.228259][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.243760][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.247427][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.275092][ T6012] overlayfs: missing 'lowerdir' [ 80.326822][ T6016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.337076][ T6016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.493585][ T6023] input: syz0 as /devices/virtual/input/input7 [ 80.967356][ T5345] Bluetooth: hci6: command tx timeout [ 81.310285][ T6033] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 81.371233][ T5358] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 81.374713][ T5358] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 81.380188][ T5358] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 81.384227][ T5358] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 81.389624][ T5358] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 81.393184][ T5358] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 81.566281][ T6038] chnl_net:caif_netlink_parms(): no params data found [ 81.853563][ T6038] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.855673][ T6038] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.858575][ T6038] bridge_slave_0: entered allmulticast mode [ 81.862014][ T6038] bridge_slave_0: entered promiscuous mode [ 81.871536][ T6038] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.873480][ T6038] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.875669][ T6038] bridge_slave_1: entered allmulticast mode [ 81.882533][ T6038] bridge_slave_1: entered promiscuous mode [ 81.913041][ T6038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.922979][ T6038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.952901][ T6038] team0: Port device team_slave_0 added [ 81.955587][ T6038] team0: Port device team_slave_1 added [ 81.978894][ T6038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.980768][ T6038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.991342][ T6038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.994943][ T6038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.998562][ T6038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.005324][ T6038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.035335][ T6038] hsr_slave_0: entered promiscuous mode [ 82.040815][ T6038] hsr_slave_1: entered promiscuous mode [ 82.042705][ T6038] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.044683][ T6038] Cannot create hsr debugfs directory [ 82.155530][ T6038] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.301241][ T6057] overlayfs: failed to resolve './file0': -2 [ 82.321576][ T6038] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.438461][ T6038] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.541600][ T6038] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.658495][ T6038] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.662082][ T6038] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.666531][ T6038] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.672028][ T6038] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.740674][ T6038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.749343][ T6038] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.757258][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.759377][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.773864][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.775764][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.817522][ T8] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 82.917595][ T6038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.945195][ T6038] veth0_vlan: entered promiscuous mode [ 82.950686][ T6038] veth1_vlan: entered promiscuous mode [ 82.964732][ T6038] veth0_macvtap: entered promiscuous mode [ 82.969022][ T6038] veth1_macvtap: entered promiscuous mode [ 82.975171][ T6038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.979086][ T6038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.981887][ T6038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.984520][ T6038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.989608][ T8] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 82.989696][ T6038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.992618][ T8] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 82.995775][ T6038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.995786][ T6038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.995798][ T6038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.995819][ T6038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.998554][ T8] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 83.002523][ T6038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.004388][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.009060][ T6038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.022757][ T6038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.025370][ T6038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.026619][ T8] usb 7-1: rejected 1 configuration due to insufficient available bus power [ 83.028205][ T6038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.033589][ T8] usb 7-1: no configuration chosen from 1 choice [ 83.034093][ T6038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.042529][ T6038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.045246][ T6038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.047867][ T5358] Bluetooth: hci6: command tx timeout [ 83.049369][ T6038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.052082][ T6038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.054586][ T6038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.057346][ T6038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.059841][ T6038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.062517][ T6038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.065033][ T6038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.067787][ T6038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.070246][ T6038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.072976][ T6038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.075484][ T6038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.078218][ T6038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.081551][ T6038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.090236][ T6038] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.092559][ T6038] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.094815][ T6038] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.097401][ T6038] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.136742][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.138848][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.160776][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.162894][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.446167][ T5358] Bluetooth: hci7: command tx timeout [ 83.998045][ T6077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.001510][ T6077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.148628][ T6080] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 84.328338][ T6088] capability: warning: `syz.0.165' uses deprecated v2 capabilities in a way that may be insecure [ 84.868897][ T6092] overlayfs: failed to resolve './file0': -2 [ 85.136253][ T5358] Bluetooth: hci6: command tx timeout [ 85.526032][ T5358] Bluetooth: hci7: command tx timeout [ 85.564143][ T63] usb 7-1: USB disconnect, device number 6 [ 86.064093][ T6106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.073504][ T6106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.206021][ T5358] Bluetooth: hci6: command tx timeout [ 87.396594][ T6114] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 87.505312][ T6117] netlink: 'syz.2.173': attribute type 1 has an invalid length. [ 87.508361][ T6117] netlink: 9344 bytes leftover after parsing attributes in process `syz.2.173'. [ 87.512888][ T6117] netlink: 'syz.2.173': attribute type 1 has an invalid length. [ 87.615960][ T5358] Bluetooth: hci7: command tx timeout [ 88.273553][ T6124] overlayfs: failed to resolve './file0': -2 [ 88.441346][ T39] audit: type=1804 audit(1728135743.175:2): pid=6127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.176" name="/newroot/59/file0/bus" dev="9p" ino=35922791 res=1 errno=0 [ 89.686039][ T5358] Bluetooth: hci7: command tx timeout [ 89.715978][ T5412] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 89.869045][ T5412] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 89.872304][ T5412] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 89.876587][ T5412] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 89.879471][ T5412] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.884543][ T5412] usb 7-1: config 0 descriptor?? [ 89.888245][ T5412] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 91.154912][ T5345] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 91.158340][ T5345] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 91.160905][ T5345] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 91.163515][ T5345] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 91.174655][ T5345] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 91.176916][ T5345] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 91.270423][ T6133] chnl_net:caif_netlink_parms(): no params data found [ 91.349013][ T6133] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.351331][ T6133] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.353213][ T6133] bridge_slave_0: entered allmulticast mode [ 91.355255][ T6133] bridge_slave_0: entered promiscuous mode [ 91.359091][ T6133] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.360978][ T6133] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.362721][ T6133] bridge_slave_1: entered allmulticast mode [ 91.364659][ T6133] bridge_slave_1: entered promiscuous mode [ 91.383461][ T6133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.387784][ T6133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.416699][ T6133] team0: Port device team_slave_0 added [ 91.419595][ T6133] team0: Port device team_slave_1 added [ 91.439303][ T6133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.441171][ T6133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.447805][ T6133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.451429][ T6133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.453161][ T6133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.460111][ T6133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.490909][ T6133] hsr_slave_0: entered promiscuous mode [ 91.492925][ T6133] hsr_slave_1: entered promiscuous mode [ 91.494792][ T6133] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.498125][ T6133] Cannot create hsr debugfs directory [ 91.567439][ T6133] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.651111][ T6133] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.722340][ T6133] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.867060][ T6133] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.931901][ T6133] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.935076][ T6133] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.938455][ T6133] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.941566][ T6133] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.950937][ T6133] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.952831][ T6133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.954817][ T6133] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.956775][ T6133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.984296][ T6133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.991901][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.994847][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.011486][ T6133] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.018663][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.021286][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.027357][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.030008][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.127301][ T6133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.147847][ T6133] veth0_vlan: entered promiscuous mode [ 92.153153][ T6133] veth1_vlan: entered promiscuous mode [ 92.168016][ T6133] veth0_macvtap: entered promiscuous mode [ 92.171203][ T6133] veth1_macvtap: entered promiscuous mode [ 92.179085][ T6133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.182027][ T6133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.184609][ T6133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.188210][ T6133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.190917][ T6133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.193908][ T6133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.197013][ T6133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.199955][ T6133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.202449][ T6133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.205413][ T6133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.208097][ T6133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.210788][ T6133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.213335][ T6133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.216157][ T6133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.218691][ T6133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.221381][ T6133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.225594][ T6133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.232179][ T6133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.234956][ T6133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.237718][ T6133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.240597][ T6133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.243266][ T6133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.246404][ T6133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.248895][ T6133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.251620][ T6133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.254348][ T6133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.259354][ T6133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.262688][ T6133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.266289][ T6133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.269574][ T6133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.273090][ T6133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.276503][ T6133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.279974][ T6133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.284393][ T6133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.288980][ T6133] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.291484][ T6133] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.294267][ T6133] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.296790][ T6133] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.320986][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.323715][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.337706][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.340562][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.483822][ T5387] usb 7-1: USB disconnect, device number 7 [ 92.514890][ T6149] FAULT_INJECTION: forcing a failure. [ 92.514890][ T6149] name failslab, interval 1, probability 0, space 0, times 1 [ 92.520974][ T6149] CPU: 0 UID: 0 PID: 6149 Comm: syz.1.179 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 92.524291][ T6149] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 92.527880][ T6149] Call Trace: [ 92.528786][ T6149] [ 92.529797][ T6149] dump_stack_lvl+0x16c/0x1f0 [ 92.531437][ T6149] should_fail_ex+0x497/0x5b0 [ 92.533047][ T6149] ? fs_reclaim_acquire+0xae/0x160 [ 92.534792][ T6149] should_failslab+0xc2/0x120 [ 92.536415][ T6149] __kmalloc_noprof+0xcb/0x410 [ 92.537991][ T6149] ? __pfx_perf_event_init_task+0x10/0x10 [ 92.539897][ T6149] ? audit_alloc+0xa3/0x7b0 [ 92.541450][ T6149] ? __pfx_audit_alloc+0x10/0x10 [ 92.543150][ T6149] lsm_blob_alloc+0x68/0x90 [ 92.544648][ T6149] security_task_alloc+0x2d/0x260 [ 92.546094][ T6149] copy_process+0x2120/0x6ee0 [ 92.547356][ T6149] ? kasan_save_stack+0x42/0x60 [ 92.548645][ T6149] ? kasan_save_stack+0x33/0x60 [ 92.549930][ T6149] ? kasan_save_track+0x14/0x30 [ 92.551244][ T6149] ? __kasan_kmalloc+0xaa/0xb0 [ 92.552789][ T6149] ? __pfx_copy_process+0x10/0x10 [ 92.554437][ T6149] ? __pfx_io_wq_worker+0x10/0x10 [ 92.556160][ T6149] ? create_io_worker+0x49/0x5f0 [ 92.558040][ T6149] create_io_thread+0xaa/0xf0 [ 92.559615][ T6149] ? __pfx_create_io_thread+0x10/0x10 [ 92.561080][ T6149] ? __pfx_io_wq_worker+0x10/0x10 [ 92.562371][ T6149] ? __init_swait_queue_head+0xca/0x150 [ 92.563801][ T6149] create_io_worker+0x1c2/0x5f0 [ 92.565075][ T6149] io_wq_enqueue+0x664/0xb30 [ 92.566447][ T6149] ? __pfx_io_wq_enqueue+0x10/0x10 [ 92.567825][ T6149] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 92.569363][ T6149] ? io_prep_async_work+0x3c3/0x770 [ 92.570736][ T6149] io_queue_iowq+0x259/0x4e0 [ 92.571985][ T6149] io_queue_async+0x251/0x4b0 [ 92.573244][ T6149] io_submit_sqes+0x16b2/0x2530 [ 92.574547][ T6149] __do_sys_io_uring_enter+0xc0f/0x1170 [ 92.576016][ T6149] ? __fget_files+0x244/0x3f0 [ 92.577259][ T6149] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 92.578834][ T6149] ? fput+0x30/0x390 [ 92.579886][ T6149] ? ksys_write+0x1ad/0x260 [ 92.581080][ T6149] ? __pfx_ksys_write+0x10/0x10 [ 92.582360][ T6149] __do_fast_syscall_32+0x73/0x120 [ 92.583705][ T6149] do_fast_syscall_32+0x32/0x80 [ 92.584984][ T6149] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 92.586634][ T6149] RIP: 0023:0xf7ff6579 [ 92.587714][ T6149] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 92.592692][ T6149] RSP: 002b:00000000f575556c EFLAGS: 00000296 ORIG_RAX: 00000000000001aa [ 92.594854][ T6149] RAX: ffffffffffffffda RBX: 000000000000000e RCX: 0000000000003516 [ 92.596950][ T6149] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 92.599015][ T6149] RBP: 00000000fffffdcf R08: 0000000000000000 R09: 0000000000000000 [ 92.601067][ T6149] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 92.603722][ T6149] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 92.606404][ T6149] [ 92.801657][ T6166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.216517][ T5345] Bluetooth: hci8: command tx timeout [ 93.237249][ T39] audit: type=1326 audit(1728135747.975:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6180 comm="syz.2.191" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fdf579 code=0x0 [ 94.154529][ T5358] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 94.159476][ T5358] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 94.162843][ T6198] program syz.2.199 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.163209][ T5358] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 94.177265][ T5358] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 94.180068][ T5358] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 94.182121][ T5358] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 94.245079][ T6199] chnl_net:caif_netlink_parms(): no params data found [ 94.305652][ T6199] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.308345][ T6199] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.310160][ T6199] bridge_slave_0: entered allmulticast mode [ 94.312166][ T6199] bridge_slave_0: entered promiscuous mode [ 94.315940][ T6199] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.317717][ T6199] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.319548][ T6199] bridge_slave_1: entered allmulticast mode [ 94.321507][ T6199] bridge_slave_1: entered promiscuous mode [ 94.346258][ T6199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.351172][ T6199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.391128][ T6199] team0: Port device team_slave_0 added [ 94.393685][ T6199] team0: Port device team_slave_1 added [ 94.416036][ T6199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.418595][ T6199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.428529][ T6199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.433759][ T6199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.436648][ T6199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.445597][ T6199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.482434][ T6199] hsr_slave_0: entered promiscuous mode [ 94.484493][ T6199] hsr_slave_1: entered promiscuous mode [ 94.487286][ T6199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.489933][ T6199] Cannot create hsr debugfs directory [ 94.614123][ T6199] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.702634][ T6224] netlink: 20 bytes leftover after parsing attributes in process `syz.1.207'. [ 94.783565][ T6199] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.847518][ T6233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.208'. [ 94.854212][ T6233] ------------[ cut here ]------------ [ 94.855784][ T6233] refcount_t: underflow; use-after-free. [ 94.858220][ T6233] WARNING: CPU: 3 PID: 6233 at lib/refcount.c:28 refcount_warn_saturate+0x14a/0x210 [ 94.861368][ T6233] Modules linked in: [ 94.862881][ T6233] CPU: 3 UID: 0 PID: 6233 Comm: syz.1.208 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 94.867221][ T6233] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 94.870253][ T6233] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 94.871947][ T6233] Code: ff 89 de e8 a8 2e 04 fd 84 db 0f 85 66 ff ff ff e8 bb 2c 04 fd c6 05 0a 14 7d 0b 01 90 48 c7 c7 60 d6 b0 8b e8 07 ac c5 fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 98 2c 04 fd 0f b6 1d e5 13 7d 0b 31 [ 94.877378][ T6233] RSP: 0018:ffffc9000324ee50 EFLAGS: 00010286 [ 94.879097][ T6233] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90034861000 [ 94.881263][ T6233] RDX: 0000000000040000 RSI: ffffffff814e28c6 RDI: 0000000000000001 [ 94.883219][ T6233] RBP: ffff88800041bee4 R08: 0000000000000001 R09: 0000000000000000 [ 94.885183][ T6233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000002 [ 94.887252][ T6233] R13: 0000000000000000 R14: ffff88800041bee4 R15: 0000000000000001 [ 94.889188][ T6233] FS: 0000000000000000(0000) GS:ffff88802b700000(0063) knlGS:00000000f5776b40 [ 94.891567][ T6233] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 94.893301][ T6233] CR2: 00007f0084dc049f CR3: 00000000776de000 CR4: 0000000000352ef0 [ 94.895354][ T6233] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 94.897488][ T6233] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 94.899544][ T6233] Call Trace: [ 94.900435][ T6233] [ 94.901223][ T6233] ? __warn+0xea/0x3d0 [ 94.902318][ T6233] ? refcount_warn_saturate+0x14a/0x210 [ 94.903789][ T6233] ? report_bug+0x3c0/0x580 [ 94.905119][ T6233] ? handle_bug+0x54/0xa0 [ 94.906340][ T6233] ? exc_invalid_op+0x17/0x50 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 94.907677][ T6233] ? asm_exc_invalid_op+0x1a/0x20 [ 94.909066][ T6233] ? __warn_printk+0x1a6/0x350 [ 94.910345][ T6233] ? refcount_warn_saturate+0x14a/0x210 [ 94.911825][ T6233] sk_skb_reason_drop+0x183/0x1a0 [ 94.913150][ T6233] j1939_session_destroy+0x163/0x460 [ 94.914494][ T6233] j1939_session_deactivate_locked+0x275/0x320 [ 94.916078][ T6233] j1939_cancel_active_session+0x183/0x350 [ 94.917563][ T6233] j1939_netdev_notify+0x19e/0x1e0 [ 94.918928][ T6233] notifier_call_chain+0xb9/0x410 [ 94.920294][ T6233] ? __pfx_j1939_netdev_notify+0x10/0x10 [ 94.921777][ T6233] call_netdevice_notifiers_info+0xbe/0x140 [ 94.923345][ T6233] dev_close_many+0x333/0x6a0 [ 94.924595][ T6233] ? vprintk+0x86/0xa0 [ 94.925693][ T6233] ? _printk+0xc8/0x100 [ 94.927344][ T6233] ? __pfx_dev_close_many+0x10/0x10 [ 94.928780][ T6233] ? ___ratelimit+0x24c/0x570 [ 94.930356][ T6233] ? __pfx_lock_release+0x10/0x10 [ 94.931774][ T6233] unregister_netdevice_many_notify+0x489/0x1e50 [ 94.933489][ T6233] ? do_trace_netlink_extack+0x16d/0x1e0 [ 94.935232][ T6233] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 94.937122][ T6233] ? __kernel_text_address+0xd/0x40 [ 94.938495][ T6233] ? unregister_netdevice_queue+0x22f/0x3f0 [ 94.940275][ T6233] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 94.942193][ T6233] ? mark_lock+0xb5/0xc60 [ 94.943461][ T6233] ? __pfx_vxcan_dellink+0x10/0x10 [ 94.945079][ T6233] rtnl_dellink+0x3c9/0xae0 [ 94.946632][ T6233] ? kasan_save_stack+0x42/0x60 [ 94.948297][ T6233] ? kasan_save_stack+0x33/0x60 [ 94.949960][ T6233] ? __pfx_rtnl_dellink+0x10/0x10 [ 94.951685][ T6233] ? kmem_cache_free+0x152/0x4b0 [ 94.953399][ T6233] ? trace_contention_end+0xea/0x140 [ 94.955175][ T6233] ? __mutex_lock+0x1a6/0x9c0 [ 94.956587][ T6233] ? rtnetlink_rcv_msg+0x372/0xea0 [ 94.957911][ T6233] ? __pfx___mutex_lock+0x10/0x10 [ 94.959631][ T6233] ? rtnetlink_rcv_msg+0x35a/0xea0 [ 94.961368][ T6233] ? __pfx_rtnl_dellink+0x10/0x10 [ 94.963103][ T6233] rtnetlink_rcv_msg+0x3c7/0xea0 [ 94.964789][ T6233] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 94.966692][ T6233] ? __pfx___dev_queue_xmit+0x10/0x10 [ 94.968290][ T6233] netlink_rcv_skb+0x165/0x410 [ 94.969555][ T6233] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 94.971007][ T6233] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 94.972433][ T6233] ? netlink_deliver_tap+0x1ae/0xcf0 [ 94.974203][ T6233] netlink_unicast+0x53c/0x7f0 [ 94.975925][ T6233] ? __pfx_netlink_unicast+0x10/0x10 [ 94.977760][ T6233] ? __phys_addr_symbol+0x30/0x80 [ 94.979480][ T6233] ? __check_object_size+0x488/0x710 [ 94.981282][ T6233] netlink_sendmsg+0x8b8/0xd70 [ 94.982906][ T6233] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.984703][ T6233] ? lock_acquire+0x2f/0xb0 [ 94.986327][ T6233] ____sys_sendmsg+0x9ae/0xb40 [ 94.987957][ T6233] ? __pfx_____sys_sendmsg+0x10/0x10 [ 94.989746][ T6233] ? get_compat_msghdr+0x11b/0x170 [ 94.991502][ T6233] ? __pfx___lock_acquire+0x10/0x10 [ 94.993287][ T6233] ___sys_sendmsg+0x135/0x1e0 [ 94.994901][ T6233] ? __pfx____sys_sendmsg+0x10/0x10 [ 94.996753][ T6233] ? lock_acquire+0x2f/0xb0 [ 94.998292][ T6233] ? __fget_files+0x40/0x3f0 [ 94.999873][ T6233] ? fdget+0x176/0x210 [ 95.001244][ T6233] __sys_sendmsg+0x117/0x1f0 [ 95.002825][ T6233] ? __pfx___sys_sendmsg+0x10/0x10 [ 95.004564][ T6233] ? __ia32_sys_futex_time32+0x1da/0x460 [ 95.006530][ T6233] __do_fast_syscall_32+0x73/0x120 [ 95.008236][ T6233] do_fast_syscall_32+0x32/0x80 [ 95.009915][ T6233] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 95.012061][ T6233] RIP: 0023:0xf7ff6579 [ 95.013433][ T6233] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 95.019864][ T6233] RSP: 002b:00000000f577656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 95.022659][ T6233] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000200 [ 95.025334][ T6233] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 95.028056][ T6233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 95.030674][ T6233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.033359][ T6233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 95.036097][ T6233] [ 95.037140][ T6233] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 95.039624][ T6233] CPU: 3 UID: 0 PID: 6233 Comm: syz.1.208 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 95.043152][ T6233] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 95.046771][ T6233] Call Trace: [ 95.047918][ T6233] [ 95.048923][ T6233] dump_stack_lvl+0x3d/0x1f0 [ 95.050072][ T6233] panic+0x71d/0x800 [ 95.051419][ T6233] ? __pfx_panic+0x10/0x10 [ 95.052963][ T6233] ? show_trace_log_lvl+0x29d/0x3d0 [ 95.054704][ T6233] ? refcount_warn_saturate+0x14a/0x210 [ 95.056597][ T6233] check_panic_on_warn+0xab/0xb0 [ 95.058286][ T6233] __warn+0xf6/0x3d0 [ 95.059606][ T6233] ? refcount_warn_saturate+0x14a/0x210 [ 95.061486][ T6233] report_bug+0x3c0/0x580 [ 95.062950][ T6233] handle_bug+0x54/0xa0 [ 95.064361][ T6233] exc_invalid_op+0x17/0x50 [ 95.065902][ T6233] asm_exc_invalid_op+0x1a/0x20 [ 95.067551][ T6233] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 95.069554][ T6233] Code: ff 89 de e8 a8 2e 04 fd 84 db 0f 85 66 ff ff ff e8 bb 2c 04 fd c6 05 0a 14 7d 0b 01 90 48 c7 c7 60 d6 b0 8b e8 07 ac c5 fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 98 2c 04 fd 0f b6 1d e5 13 7d 0b 31 [ 95.076005][ T6233] RSP: 0018:ffffc9000324ee50 EFLAGS: 00010286 [ 95.077989][ T6233] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90034861000 [ 95.080676][ T6233] RDX: 0000000000040000 RSI: ffffffff814e28c6 RDI: 0000000000000001 [ 95.083330][ T6233] RBP: ffff88800041bee4 R08: 0000000000000001 R09: 0000000000000000 [ 95.086004][ T6233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000002 [ 95.088665][ T6233] R13: 0000000000000000 R14: ffff88800041bee4 R15: 0000000000000001 [ 95.091439][ T6233] ? __warn_printk+0x1a6/0x350 [ 95.093089][ T6233] sk_skb_reason_drop+0x183/0x1a0 [ 95.094833][ T6233] j1939_session_destroy+0x163/0x460 [ 95.096658][ T6233] j1939_session_deactivate_locked+0x275/0x320 [ 95.098739][ T6233] j1939_cancel_active_session+0x183/0x350 [ 95.100735][ T6233] j1939_netdev_notify+0x19e/0x1e0 [ 95.102476][ T6233] notifier_call_chain+0xb9/0x410 [ 95.104198][ T6233] ? __pfx_j1939_netdev_notify+0x10/0x10 [ 95.106095][ T6233] call_netdevice_notifiers_info+0xbe/0x140 [ 95.108092][ T6233] dev_close_many+0x333/0x6a0 [ 95.109690][ T6233] ? vprintk+0x86/0xa0 [ 95.111110][ T6233] ? _printk+0xc8/0x100 [ 95.112506][ T6233] ? __pfx_dev_close_many+0x10/0x10 [ 95.114255][ T6233] ? ___ratelimit+0x24c/0x570 [ 95.115852][ T6233] ? __pfx_lock_release+0x10/0x10 [ 95.117554][ T6233] unregister_netdevice_many_notify+0x489/0x1e50 [ 95.119692][ T6233] ? do_trace_netlink_extack+0x16d/0x1e0 [ 95.121692][ T6233] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 95.124008][ T6233] ? __kernel_text_address+0xd/0x40 [ 95.125767][ T6233] ? unregister_netdevice_queue+0x22f/0x3f0 [ 95.127786][ T6233] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 95.129866][ T6233] ? mark_lock+0xb5/0xc60 [ 95.131386][ T6233] ? __pfx_vxcan_dellink+0x10/0x10 [ 95.133116][ T6233] rtnl_dellink+0x3c9/0xae0 [ 95.134676][ T6233] ? kasan_save_stack+0x42/0x60 [ 95.136334][ T6233] ? kasan_save_stack+0x33/0x60 [ 95.137987][ T6233] ? __pfx_rtnl_dellink+0x10/0x10 [ 95.139688][ T6233] ? kmem_cache_free+0x152/0x4b0 [ 95.141414][ T6233] ? trace_contention_end+0xea/0x140 [ 95.143202][ T6233] ? __mutex_lock+0x1a6/0x9c0 [ 95.144808][ T6233] ? rtnetlink_rcv_msg+0x372/0xea0 [ 95.146535][ T6233] ? __pfx___mutex_lock+0x10/0x10 [ 95.148261][ T6233] ? rtnetlink_rcv_msg+0x35a/0xea0 [ 95.150019][ T6233] ? __pfx_rtnl_dellink+0x10/0x10 [ 95.151752][ T6233] rtnetlink_rcv_msg+0x3c7/0xea0 [ 95.153442][ T6233] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 95.155292][ T6233] ? __pfx___dev_queue_xmit+0x10/0x10 [ 95.157151][ T6233] netlink_rcv_skb+0x165/0x410 [ 95.158791][ T6233] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 95.160556][ T6233] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 95.162332][ T6233] ? netlink_deliver_tap+0x1ae/0xcf0 [ 95.164114][ T6233] netlink_unicast+0x53c/0x7f0 [ 95.165713][ T6233] ? __pfx_netlink_unicast+0x10/0x10 [ 95.167472][ T6233] ? __phys_addr_symbol+0x30/0x80 [ 95.169172][ T6233] ? __check_object_size+0x488/0x710 [ 95.170963][ T6233] netlink_sendmsg+0x8b8/0xd70 [ 95.172553][ T6233] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.174231][ T6233] ? lock_acquire+0x2f/0xb0 [ 95.175706][ T6233] ____sys_sendmsg+0x9ae/0xb40 [ 95.177252][ T6233] ? __pfx_____sys_sendmsg+0x10/0x10 [ 95.178945][ T6233] ? get_compat_msghdr+0x11b/0x170 [ 95.180679][ T6233] ? __pfx___lock_acquire+0x10/0x10 [ 95.182451][ T6233] ___sys_sendmsg+0x135/0x1e0 [ 95.184153][ T6233] ? __pfx____sys_sendmsg+0x10/0x10 [ 95.185930][ T6233] ? lock_acquire+0x2f/0xb0 [ 95.187498][ T6233] ? __fget_files+0x40/0x3f0 [ 95.189088][ T6233] ? fdget+0x176/0x210 [ 95.190470][ T6233] __sys_sendmsg+0x117/0x1f0 [ 95.192059][ T6233] ? __pfx___sys_sendmsg+0x10/0x10 [ 95.193779][ T6233] ? __ia32_sys_futex_time32+0x1da/0x460 [ 95.195695][ T6233] __do_fast_syscall_32+0x73/0x120 [ 95.197434][ T6233] do_fast_syscall_32+0x32/0x80 [ 95.199111][ T6233] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 95.201081][ T6233] RIP: 0023:0xf7ff6579 [ 95.202437][ T6233] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 95.208797][ T6233] RSP: 002b:00000000f577656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 95.211598][ T6233] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000200 [ 95.214233][ T6233] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 95.216990][ T6233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 95.219623][ T6233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.222258][ T6233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 95.224906][ T6233] [ 95.226509][ T6233] Kernel Offset: disabled [ 95.227994][ T6233] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:42:29 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000003 RCX=1ffffffff2d462b6 RDX=ffff88801b760000 RSI=ffffffff813c4884 RDI=ffffffff8bb12120 RBP=ffff88806e611070 RSP=ffffc900004276c8 R8 =0000000000000001 R9 =fffffbfff2d315bd R10=ffffffff9698adef R11=0000000000000000 R12=0000000000000003 R13=0000000000000003 R14=ffff88802b43fdc0 R15=ffffed100dcc220e RIP=ffffffff813c4886 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f74b5008 CR3=00000000002fc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080000000 RBX=0000000000000001 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8b4ccba0 RDI=ffffffff8bb12120 RBP=ffffffff8ddb7800 RSP=ffffc90001f9f538 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffff88802047c880 R13=00000000ffffffff R14=00000000ffffffff R15=0000000000000000 RIP=ffffffff8b12febd RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fff118d4ff8 CR3=0000000049f4c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000006000800 Opmask01=0000000001100000 Opmask02=000000000fffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff118f57c0 0000003000000010 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff118d57a0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e2e2e2e2e2e2e2e 2e2e2e2e2e2e2e2e ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ff00000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ff00000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7564203a73250074 656b636f53207465 6b63615000676e69 64726177726f662f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5041051f56000051 404e464a53055140 4e46445000424b4c 41574452574a430a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 772f74656e2f316d 697377682f6d6973 77685f3131323038 63616d2f6c617574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055d59489a780 000055d59489a888 0000000000000041 00000000316e616c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 504f007a6b45041e 4100185711054316 0f010d19050d0025 1b164a040e155c69 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 577f5f7f7f773f5f 755f595f7f577f7f 5f573f5f575f4f3f 5f7f5f565e7f5f7f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64252e6425207325 203a73250073255f 732500642573255f 7325006425207325 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 645f6464615f5f6d 6163646165702020 7373622039322065 6900666564007165 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 635f645f5f5f5f6d 2063642062202020 203133203932200a 65000a6564006c65 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbf2b313423342c ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=ffff88807ffd6c80 RCX=000000000007ff01 RDX=1ffffffff347668d RSI=0000000000000000 RDI=ffffffff9a3b3468 RBP=04fff00000000000 RSP=ffffc9000346f2d0 R8 =0000000000040001 R9 =000000000003ffdc R10=ffffffff9698acef R11=dffffc0000000000 R12=0000000000000001 R13=ffff88807ffd6d50 R14=ffffed100fffada9 R15=0000000000000003 RIP=ffffffff81e04e9d RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f8336397d00 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000559afa577000 CR3=000000004a4f4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=772945c2772945c2 772945c2772945c2 772945c2772945c2 772945c2772945c2 772945c2772945c2 772945c2772945c2 772945c2772945c2 772945c2772945c2 ZMM22=0e44c7f60e44c7f6 0e44c7f60e44c7f6 0e44c7f60e44c7f6 0e44c7f60e44c7f6 0e44c7f60e44c7f6 0e44c7f60e44c7f6 0e44c7f60e44c7f6 0e44c7f60e44c7f6 ZMM23=5babc8905babc890 5babc8905babc890 5babc8905babc890 5babc8905babc890 5babc8905babc890 5babc8905babc890 5babc8905babc890 5babc8905babc890 ZMM24=0bdd4be10bdd4be1 0bdd4be10bdd4be1 0bdd4be10bdd4be1 0bdd4be10bdd4be1 0bdd4be10bdd4be1 0bdd4be10bdd4be1 0bdd4be10bdd4be1 0bdd4be10bdd4be1 ZMM25=1985361819853618 1985361819853618 1985361819853618 1985361819853618 1985361819853618 1985361819853618 1985361819853618 1985361819853618 ZMM26=8cc85a048cc85a04 8cc85a048cc85a04 8cc85a048cc85a04 8cc85a048cc85a04 8cc85a048cc85a04 8cc85a048cc85a04 8cc85a048cc85a04 8cc85a048cc85a04 ZMM27=551d390a551d390a 551d390a551d390a 551d390a551d390a 551d390a551d390a 551d390a551d390a 551d390a551d390a 551d390a551d390a 551d390a551d390a ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=4505000045050000 4505000045050000 4505000045050000 4505000045050000 4505000045050000 4505000045050000 4505000045050000 4505000045050000 info registers vcpu 3 CPU#3 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85034e45 RDI=ffffffff9a63a220 RBP=ffffffff9a63a1e0 RSP=ffffc9000324e7b8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000020 R14=ffffffff85034de0 R15=0000000000000000 RIP=ffffffff85034e6f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0084dc049f CR3=00000000776de000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000