last executing test programs: 8.540968552s ago: executing program 3 (id=50): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x400, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x9102}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40480, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f00000005c0)=@xdp={0x2c, 0x300, r6, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000680)="27030200590214000600006fb96dbc", 0xf}], 0x1}, 0x44089) 7.942777291s ago: executing program 3 (id=53): r0 = syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x2) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000140)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000200)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000240)={&(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000380), 0x3, r3}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f00000003c0)={0x600, 0x1, &(0x7f0000000400)=[r3], &(0x7f00000004c0)=[0x3], &(0x7f0000000500)=[r4, r4, r5], &(0x7f0000000540), 0x0, 0x2}) ioctl$BLKPG(r0, 0x40084d02, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0}) syz_open_procfs(0x0, &(0x7f00000006c0)='net/ip6_tables_matches\x00') r6 = syz_io_uring_setup(0x34b9, &(0x7f00000000c0)={0x0, 0x69ee, 0xc00, 0x200005, 0x50}, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000440)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0, 0x1}}) io_uring_enter(r6, 0x521c, 0x1, 0x61, 0x0, 0x18) 7.83024111s ago: executing program 1 (id=54): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x4, @multicast, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x40084) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x100000a) connect$pppoe(r1, &(0x7f00000004c0)={0x18, 0x0, {0x412, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, 'netdevsim0\x00'}}, 0x1e) 7.516765658s ago: executing program 3 (id=55): openat$dir(0xffffffffffffff9c, &(0x7f0000001840)='./file0\x00', 0x1c3040, 0x0) r0 = open$dir(&(0x7f0000001880)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000018c0)='./file0\x00', 0x104) r2 = open$dir(&(0x7f0000001900)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x2, 0x4, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000001a40)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) timer_create(0x0, &(0x7f0000001a80)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000001ac0)) timer_settime(0x0, 0x0, &(0x7f0000001b00)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$P9_RVERSION(r1, &(0x7f0000001b40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001b80)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000001bc0)='./file0\x00', &(0x7f0000001c00)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x0) 7.1025927s ago: executing program 2 (id=58): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000180080003000100000008000a"], 0x5c}}, 0x0) connect$inet(r2, 0x0, 0x0) sendto$inet(r2, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.284815987s ago: executing program 2 (id=60): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05032200d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x12, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 6.101003197s ago: executing program 1 (id=61): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x80, 0x4, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x8}, {0x6, 0xff}]}) r0 = msgget$private(0x0, 0x201) msgrcv(r0, 0x0, 0x0, 0xffffffffffffffff, 0x2000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x10) msgsnd(r0, &(0x7f0000000340)={0x2}, 0x8, 0x0) msgsnd(r0, &(0x7f0000000040)={0x1}, 0x4, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x1, 0x40, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x2]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x6004821) times(&(0x7f0000000040)) 5.379515916s ago: executing program 0 (id=62): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) exit(0xffff) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c40)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000d40)=0xfffff001, 0x4) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) 4.965647022s ago: executing program 2 (id=63): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r3 = openat(r1, &(0x7f0000000080)='./bus\x00', 0x0, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1c1002, 0x50) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x7fffffff) ftruncate(r2, 0x2007ffb) sendfile(r2, r4, 0x0, 0x1000000201005) 4.726883052s ago: executing program 1 (id=64): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mkdir(&(0x7f0000000140)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0x2) linkat(r0, &(0x7f0000000340)='./file1\x00', r0, &(0x7f0000000380)='./file0\x00', 0x0) unlink(&(0x7f00000003c0)='./file0\x00') 3.968410819s ago: executing program 2 (id=65): r0 = syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x2) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000140)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000200)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000240)={&(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000380), 0x3, r3}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f00000003c0)={0x600, 0x1, &(0x7f0000000400)=[r3], &(0x7f00000004c0)=[0x3], &(0x7f0000000500)=[r4, r4, r5], &(0x7f0000000540), 0x0, 0x2}) ioctl$BLKPG(r0, 0x40084d02, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0}) syz_open_procfs(0x0, &(0x7f00000006c0)='net/ip6_tables_matches\x00') r6 = syz_io_uring_setup(0x34b9, &(0x7f00000000c0)={0x0, 0x69ee, 0xc00, 0x200005, 0x50}, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000440)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0, 0x1}}) io_uring_enter(r6, 0x521c, 0x1, 0x61, 0x0, 0x18) 3.968187349s ago: executing program 3 (id=66): ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0xfff3}, {}, {0xf, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @rand_addr=0x64010102}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000380)={@private0, 0xe}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2262c341259e88d1}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x200400c0}, 0x20040004) syz_open_dev$dri(&(0x7f0000000000), 0xb, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 3.927105644s ago: executing program 0 (id=73): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x8}, 0x28) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 3.087103505s ago: executing program 1 (id=67): socket$inet(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8) socket$alg(0x26, 0x5, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0xe4, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x80000250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 2.837784848s ago: executing program 2 (id=68): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket(0x2, 0xa, 0x300) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socket$netlink(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x64) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000480), 0x801, 0x0) write$rfkill(r0, &(0x7f00000004c0)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) socket$inet6_sctp(0xa, 0x1, 0x84) pselect6(0x40, &(0x7f0000000540)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x3377}, 0x0, &(0x7f0000000580)={0x3ff, 0x0, 0x4, 0x9, 0x0, 0x0, 0x7fffffff, 0x6}, 0x0, 0x0) write$rfkill(r0, &(0x7f00000005c0)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) 2.56928852s ago: executing program 0 (id=69): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000300)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/28, 0x0, 0x41000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/79, &(0x7f0000000880)=""/91}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) 2.200708348s ago: executing program 0 (id=70): r0 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0xfffffff8, 0x3800, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) migrate_pages(0x0, 0x4, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000240)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0) pwrite64(r1, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) lseek(r1, 0x0, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d080)={0x14, 0x41, 0x1, 0x70bd29, 0x4, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044014}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x7fa) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) 1.462209988s ago: executing program 3 (id=71): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4c09, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0x1c, &(0x7f0000000340)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x10000000}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r3, &(0x7f0000000100)={0x1f, 0x0, @none}, 0xe) listen(r3, 0x1) shutdown(r3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x0, @none}, 0xe) 1.379133935s ago: executing program 1 (id=72): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000e43000000018000180140002006e657464657673696d30000000000000080004000600000008000500000000000800030006"], 0x44}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x30) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r2, &(0x7f000000a380)="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", 0x2000, &(0x7f0000000500)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0x508818, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x100, 0xff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a060}, [@IFLA_IFNAME={0x14, 0x3, 'batadv_slave_0\x00'}, @IFLA_MASTER={0x8}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xe}]}]}, 0x48}}, 0x8000) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') umount2(&(0x7f0000000400)='./file0\x00', 0x2) syz_fuse_handle_req(r2, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f0000000000)={0x50, 0x0, 0x8000000000000000, {0x7, 0x2b, 0x0, 0x2c000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.249623404s ago: executing program 2 (id=74): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_procfs(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, 0x0, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000001180)=""/4107, 0x100b}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeec, 0x8031, 0xffffffffffffffff, 0x0) 727.118177ms ago: executing program 1 (id=75): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r3 = openat(r1, &(0x7f0000000080)='./bus\x00', 0x0, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1c1002, 0x50) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x7fffffff) ftruncate(r2, 0x2007ffb) sendfile(r2, r4, 0x0, 0x1000000201005) 672.798697ms ago: executing program 0 (id=76): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000480)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000004c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f0000000500)='.\x00', 0x0, 0x244) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x10000000, 0xfffffffc, 0x10081, 0xfffffffb, 0x4}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x80049367, 0x0) 239.103203ms ago: executing program 3 (id=77): mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./lower1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./lower2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./lower1/dir1\x00', 0x1ff) mount(0x0, &(0x7f0000000a80)='./mnt\x00', &(0x7f0000000ac0)='overlay\x00', 0x0, &(0x7f0000000b00)='lowerdir=lower1:lower2,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./mnt/dir1\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./mnt/dir2\x00', 0x0) umount2(&(0x7f0000000c00)='./mnt\x00', 0x0) mount(0x0, &(0x7f0000000c40)='./mnt\x00', &(0x7f0000000c80)='overlay\x00', 0x0, &(0x7f0000000cc0)='lowerdir=lower1:lower2,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') creat(&(0x7f0000000d40)='./mnt/dir2\x00', 0x202) 0s ago: executing program 0 (id=78): r0 = syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x2) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000140)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000200)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000240)={&(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000380), 0x3, r3}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f00000003c0)={0x600, 0x1, &(0x7f0000000400)=[r3], &(0x7f00000004c0)=[0x3], &(0x7f0000000500)=[r4, r4, r5], &(0x7f0000000540), 0x0, 0x2}) ioctl$BLKPG(r0, 0x40084d02, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0}) syz_open_procfs(0x0, &(0x7f00000006c0)='net/ip6_tables_matches\x00') r6 = syz_io_uring_setup(0x34b9, &(0x7f00000000c0)={0x0, 0x69ee, 0xc00, 0x200005, 0x50}, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000440)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0, 0x1}}) io_uring_enter(r6, 0x521c, 0x1, 0x61, 0x0, 0x18) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:40326' (ED25519) to the list of known hosts. syzkaller login: [ 70.947935][ T5788] cgroup: Unknown subsys name 'net' [ 71.188876][ T5788] cgroup: Unknown subsys name 'cpuset' [ 71.207882][ T5788] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.281340][ T5788] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.136889][ T41] cfg80211: failed to load regulatory.db [ 84.985171][ T5820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.000960][ T5819] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.002921][ T5819] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.012175][ T5820] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.012591][ T5820] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.012970][ T5820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.015865][ T5824] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.035339][ T5819] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.036365][ T5819] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.038437][ T5819] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.038996][ T5819] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.053402][ T5819] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.053529][ T5820] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.053585][ T5819] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.087877][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.088396][ T5824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.090595][ T67] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.103780][ T5824] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.104300][ T67] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.105640][ T5811] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.825575][ T5814] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.826619][ T5814] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.833066][ T5814] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.849413][ T5813] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 85.866899][ T5821] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 85.997729][ T5810] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 86.102832][ T5814] infiniband rxe0: set active [ 86.106019][ T5814] infiniband rxe0: added rxe_eth0 [ 86.161643][ T41] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.179517][ T5814] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 86.179552][ T5814] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 86.179583][ T5814] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 86.199345][ T5810] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.333103][ T5814] RDS/IB: rxe0: added [ 86.333412][ T5814] smc: adding ib device rxe0 with port count 1 [ 86.359997][ T5814] smc: ib device rxe0 port 1 has no pnetid [ 86.480609][ T859] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.505609][ T34] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.569308][ T41] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.650080][ T5814] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.047069][ T5814] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.131046][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.131133][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.131240][ T5821] bridge_slave_0: entered allmulticast mode [ 87.132523][ T5821] bridge_slave_0: entered promiscuous mode [ 87.139462][ T5149] Bluetooth: hci0: command tx timeout [ 87.146968][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.147047][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.147176][ T5821] bridge_slave_1: entered allmulticast mode [ 87.147936][ T5149] Bluetooth: hci2: command tx timeout [ 87.148553][ T5811] Bluetooth: hci3: command tx timeout [ 87.149546][ T5821] bridge_slave_1: entered promiscuous mode [ 87.223679][ T5811] Bluetooth: hci1: command tx timeout [ 87.229621][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.232426][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.283287][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.283400][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.292203][ T5813] bridge_slave_0: entered allmulticast mode [ 87.297261][ T5813] bridge_slave_0: entered promiscuous mode [ 87.321484][ T5821] team0: Port device team_slave_0 added [ 87.325022][ T5821] team0: Port device team_slave_1 added [ 87.362256][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.362334][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.362663][ T5813] bridge_slave_1: entered allmulticast mode [ 87.364194][ T5813] bridge_slave_1: entered promiscuous mode [ 87.365132][ T5814] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.428938][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.428954][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.428975][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.477765][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.482848][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.528783][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.528800][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.528839][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.591853][ T5813] team0: Port device team_slave_0 added [ 87.613928][ T5821] hsr_slave_0: entered promiscuous mode [ 87.615051][ T5821] hsr_slave_1: entered promiscuous mode [ 87.630938][ T5813] team0: Port device team_slave_1 added [ 87.753086][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.753102][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.753121][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.781600][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.781616][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.781635][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.952080][ T5813] hsr_slave_0: entered promiscuous mode [ 87.953122][ T5813] hsr_slave_1: entered promiscuous mode [ 87.954434][ T5813] debugfs: 'hsr0' already exists in 'hsr' [ 87.954452][ T5813] Cannot create hsr debugfs directory [ 88.146493][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.146574][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.146940][ T5810] bridge_slave_0: entered allmulticast mode [ 88.151571][ T5810] bridge_slave_0: entered promiscuous mode [ 88.162029][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.162178][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.162331][ T5810] bridge_slave_1: entered allmulticast mode [ 88.163970][ T5810] bridge_slave_1: entered promiscuous mode [ 88.508640][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.632028][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.792299][ T5810] team0: Port device team_slave_0 added [ 88.797061][ T5810] team0: Port device team_slave_1 added [ 88.943625][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.943641][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.943659][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.946170][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.946185][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.946203][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.051705][ T5821] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.059488][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.060332][ T5821] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.077912][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.081213][ T5821] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.097137][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.142239][ T5821] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.153846][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.214362][ T5811] Bluetooth: hci2: command tx timeout [ 89.214395][ T5811] Bluetooth: hci0: command tx timeout [ 89.215529][ T5149] Bluetooth: hci3: command tx timeout [ 89.254785][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.254863][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.254991][ T5814] bridge_slave_0: entered allmulticast mode [ 89.256361][ T5814] bridge_slave_0: entered promiscuous mode [ 89.271278][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.271397][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.271724][ T5814] bridge_slave_1: entered allmulticast mode [ 89.272971][ T5814] bridge_slave_1: entered promiscuous mode [ 89.297075][ T5149] Bluetooth: hci1: command tx timeout [ 89.298248][ T5810] hsr_slave_0: entered promiscuous mode [ 89.299253][ T5810] hsr_slave_1: entered promiscuous mode [ 89.300017][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 89.300031][ T5810] Cannot create hsr debugfs directory [ 89.408593][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.411498][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.490228][ T5814] team0: Port device team_slave_0 added [ 89.492749][ T5814] team0: Port device team_slave_1 added [ 89.514944][ T5813] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.520470][ T5813] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.565056][ T5813] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.568369][ T5813] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.569176][ T5813] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.574489][ T5813] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.611920][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.611936][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.611955][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.613245][ T5813] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.617482][ T5813] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.718443][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.718460][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.718479][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.823911][ T5814] hsr_slave_0: entered promiscuous mode [ 89.824842][ T5814] hsr_slave_1: entered promiscuous mode [ 89.825321][ T5814] debugfs: 'hsr0' already exists in 'hsr' [ 89.825333][ T5814] Cannot create hsr debugfs directory [ 90.073393][ T5810] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.089909][ T5810] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.116845][ T5810] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.142261][ T5810] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.150433][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.161271][ T5810] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.167461][ T5810] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.168707][ T5810] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.188059][ T5810] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.320146][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.424280][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.424501][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.428916][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.429000][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.468107][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.665582][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.701646][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.701762][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.713000][ T5814] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.728345][ T5814] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.729352][ T5814] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.745294][ T5814] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.758536][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.758622][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.781561][ T5814] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.837132][ T5814] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.838007][ T5814] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.911822][ T5814] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.279732][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.305635][ T5811] Bluetooth: hci0: command tx timeout [ 91.305670][ T5811] Bluetooth: hci2: command tx timeout [ 91.305767][ T5149] Bluetooth: hci3: command tx timeout [ 91.384900][ T5149] Bluetooth: hci1: command tx timeout [ 91.394358][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.474107][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.474195][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.476160][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.476250][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.611189][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.662483][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.753647][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.753732][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.755829][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.755910][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.802023][ T5814] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 91.802045][ T5814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.103369][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.409666][ T5821] veth0_vlan: entered promiscuous mode [ 92.479886][ T5821] veth1_vlan: entered promiscuous mode [ 92.537827][ T5821] veth0_macvtap: entered promiscuous mode [ 92.541779][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.563576][ T5821] veth1_macvtap: entered promiscuous mode [ 92.582330][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.605331][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.668691][ T5813] veth0_vlan: entered promiscuous mode [ 92.724731][ T5813] veth1_vlan: entered promiscuous mode [ 92.833932][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.833965][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.833983][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.834001][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.925457][ T5813] veth0_macvtap: entered promiscuous mode [ 92.930873][ T5813] veth1_macvtap: entered promiscuous mode [ 92.994461][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.039604][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.106512][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.106532][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.122747][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.180748][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.228350][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.228373][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.293648][ T5650] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.294013][ T5650] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.294049][ T5650] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.294078][ T5650] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.347227][ T5810] veth0_vlan: entered promiscuous mode [ 93.377261][ T5810] veth1_vlan: entered promiscuous mode [ 93.399080][ T67] Bluetooth: hci2: command tx timeout [ 93.399109][ T67] Bluetooth: hci0: command tx timeout [ 93.401821][ T5149] Bluetooth: hci3: command tx timeout [ 93.434214][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.434232][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.462827][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.462846][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.465005][ T5149] Bluetooth: hci1: command tx timeout [ 93.537865][ T5814] veth0_vlan: entered promiscuous mode [ 93.634295][ T5814] veth1_vlan: entered promiscuous mode [ 93.680126][ T5810] veth0_macvtap: entered promiscuous mode [ 93.696899][ T5814] veth0_macvtap: entered promiscuous mode [ 93.701419][ T5814] veth1_macvtap: entered promiscuous mode [ 93.730269][ T5810] veth1_macvtap: entered promiscuous mode [ 93.737275][ T5821] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.783724][ T5821] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 93.816571][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.862868][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.879464][ T5821] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 93.880855][ T5821] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 93.883632][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.987440][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.987510][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.990979][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.009542][ T5821] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 94.292284][ T5650] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.411348][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.411370][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.422216][ T5973] ======================================================= [ 94.422216][ T5973] WARNING: The mand mount option has been deprecated and [ 94.422216][ T5973] and is ignored by this kernel. Remove the mand [ 94.422216][ T5973] option from the mount to silence this warning. [ 94.422216][ T5973] ======================================================= [ 94.458986][ T5650] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.459022][ T5650] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.459043][ T5650] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.459063][ T5650] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.459084][ T5650] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.619983][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.620006][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.745077][ T5973] smpboot: CPU 1 is now offline [ 94.764733][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.764754][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.923663][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.923684][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.059687][ T5973] smpboot: CPU 3 is now offline [ 96.123271][ T43] audit: type=1804 audit(1793623988.741:2): pid=5990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.6" name="/newroot/1/file0" dev="fuse" ino=1 res=1 errno=0 [ 96.904623][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 97.016011][ T6009] syzkaller0: entered promiscuous mode [ 97.016032][ T6009] syzkaller0: entered allmulticast mode [ 97.823921][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 97.994105][ T10] usb 8-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 97.994139][ T10] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 98.059619][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 98.059661][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 98.059681][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 98.063601][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 98.063643][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 98.063663][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 98.074966][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 98.075007][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 98.075026][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 98.086137][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 98.086202][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 98.086220][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 98.087665][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 98.087701][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 98.087719][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 98.089036][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 98.089072][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 98.089090][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 98.089953][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 98.089986][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 98.090004][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 98.090906][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 98.090937][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 98.090954][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 98.093123][ T10] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 98.093141][ T10] usb 8-1: Product: syz [ 98.093151][ T10] usb 8-1: Manufacturer: syz [ 98.093161][ T10] usb 8-1: SerialNumber: syz [ 98.127511][ T10] usb 8-1: config 0 descriptor?? [ 98.213243][ T10] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 98.545510][ C0] usb 8-1: yurex_control_callback - control failed: -2 [ 98.576735][ T41] usb 8-1: USB disconnect, device number 2 [ 98.617045][ T41] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 98.642261][ T6031] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1500) ! [ 98.677698][ T6031] syzkaller0: entered promiscuous mode [ 98.677718][ T6031] syzkaller0: entered allmulticast mode [ 99.860735][ T6046] evm: overlay not supported [ 101.977468][ T6061] syzkaller0: entered promiscuous mode [ 101.977493][ T6061] syzkaller0: entered allmulticast mode [ 102.189365][ T6065] i801_smbus 0000:00:1f.3: SMBus using PCI interrupt [ 102.234303][ T6065] FAULT_INJECTION: forcing a failure. [ 102.234303][ T6065] name failslab, interval 1, probability 0, space 0, times 1 [ 102.234336][ T6065] CPU: 0 UID: 0 PID: 6065 Comm: syz.0.27 Not tainted syzkaller #0 PREEMPT(full) [ 102.234356][ T6065] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.234366][ T6065] Call Trace: [ 102.234373][ T6065] [ 102.234381][ T6065] dump_stack_lvl+0x100/0x190 [ 102.234415][ T6065] should_fail_ex.cold+0x5/0xa [ 102.234443][ T6065] should_failslab+0xc2/0x120 [ 102.234467][ T6065] kmem_cache_alloc_noprof+0x92/0x6a0 [ 102.234494][ T6065] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 102.234514][ T6065] ? acpi_ut_create_generic_state+0x61/0xc0 [ 102.234545][ T6065] acpi_ut_create_generic_state+0x61/0xc0 [ 102.234572][ T6065] acpi_ps_init_scope+0x3a/0x240 [ 102.234598][ T6065] acpi_ds_init_aml_walk+0x1f6/0x680 [ 102.234657][ T6065] acpi_ps_execute_method+0x39d/0xe90 [ 102.234685][ T6065] acpi_ns_evaluate+0x640/0x1670 [ 102.234720][ T6065] acpi_evaluate_object+0x420/0xe00 [ 102.234749][ T6065] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 102.234777][ T6065] ? kernel_text_address+0x8d/0x100 [ 102.234806][ T6065] ? __kernel_text_address+0xd/0x30 [ 102.234838][ T6065] acpi_evaluate_integer+0xdf/0x220 [ 102.234859][ T6065] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 102.234893][ T6065] acpi_bus_get_status+0x19c/0x420 [ 102.234916][ T6065] ? __pfx_acpi_bus_get_status+0x10/0x10 [ 102.234940][ T6065] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 102.234962][ T6065] ? lockdep_hardirqs_on+0x7d/0x110 [ 102.234985][ T6065] i2c_acpi_do_lookup+0x9b/0x280 [ 102.235012][ T6065] ? __pfx_up+0x10/0x10 [ 102.235034][ T6065] ? __pfx_i2c_acpi_do_lookup+0x10/0x10 [ 102.235062][ T6065] ? acpi_ut_track_stack_ptr+0x114/0x180 [ 102.235085][ T6065] i2c_acpi_get_info+0x115/0x360 [ 102.235110][ T6065] ? __pfx_i2c_acpi_get_info+0x10/0x10 [ 102.235159][ T6065] ? acpi_fetch_acpi_dev+0x99/0xe0 [ 102.235185][ T6065] ? __pfx_acpi_fetch_acpi_dev+0x10/0x10 [ 102.235213][ T6065] i2c_acpi_add_device+0xb5/0x200 [ 102.235238][ T6065] ? __pfx_i2c_acpi_add_device+0x10/0x10 [ 102.235264][ T6065] ? __pfx_up+0x10/0x10 [ 102.235284][ T6065] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 102.235313][ T6065] ? acpi_os_signal_semaphore+0x11e/0x1a0 [ 102.235344][ T6065] acpi_ns_walk_namespace+0x4cc/0x760 [ 102.235370][ T6065] ? __pfx_i2c_acpi_add_device+0x10/0x10 [ 102.235399][ T6065] ? __pfx_i2c_acpi_add_device+0x10/0x10 [ 102.235426][ T6065] acpi_walk_namespace+0xff/0x1d0 [ 102.235451][ T6065] i2c_acpi_register_devices+0x82/0x160 [ 102.235480][ T6065] i2c_register_adapter+0x8c0/0x13f0 [ 102.235501][ T6065] ? of_alias_get_id+0xb1/0x110 [ 102.235532][ T6065] i801_probe.cold+0x30c/0x8bf [ 102.235558][ T6065] ? __pfx_i801_probe+0x10/0x10 [ 102.235585][ T6065] ? mark_held_locks+0x40/0x70 [ 102.235606][ T6065] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 102.235627][ T6065] ? lockdep_hardirqs_on+0x7d/0x110 [ 102.235650][ T6065] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 102.235672][ T6065] ? __pfx_i801_probe+0x10/0x10 [ 102.235691][ T6065] local_pci_probe+0xdd/0x1b0 [ 102.235727][ T6065] pci_call_probe+0x176/0x800 [ 102.235744][ T6065] ? pci_match_device+0x147/0x7d0 [ 102.235770][ T6065] ? __pfx_pci_call_probe+0x10/0x10 [ 102.235791][ T6065] ? __pfx_pci_match_device+0x10/0x10 [ 102.235817][ T6065] ? pci_find_host_bridge+0x3c/0x80 [ 102.235854][ T6065] pci_device_probe+0x25b/0x400 [ 102.235868][ T6065] ? __pfx_pci_device_probe+0x10/0x10 [ 102.235888][ T6065] ? sysfs_create_link+0x68/0xc0 [ 102.235914][ T6065] ? __pfx_pci_device_probe+0x10/0x10 [ 102.235933][ T6065] really_probe+0x241/0xa60 [ 102.235966][ T6065] __driver_probe_device+0x210/0x460 [ 102.235992][ T6065] device_driver_attach+0xaa/0x230 [ 102.236019][ T6065] bind_store+0xf4/0x190 [ 102.236037][ T6065] ? __pfx_bind_store+0x10/0x10 [ 102.236057][ T6065] drv_attr_store+0x74/0xb0 [ 102.236074][ T6065] ? __pfx_drv_attr_store+0x10/0x10 [ 102.236091][ T6065] sysfs_kf_write+0xf2/0x150 [ 102.236115][ T6065] kernfs_fop_write_iter+0x3e0/0x5f0 [ 102.236133][ T6065] ? __pfx_sysfs_kf_write+0x10/0x10 [ 102.236157][ T6065] vfs_write+0x6af/0x1050 [ 102.236175][ T6065] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 102.236198][ T6065] ? __pfx_vfs_write+0x10/0x10 [ 102.236213][ T6065] ? find_held_lock+0x2b/0x80 [ 102.236256][ T6065] ksys_write+0x12a/0x250 [ 102.236276][ T6065] ? __pfx_ksys_write+0x10/0x10 [ 102.236304][ T6065] __do_fast_syscall_32+0x14b/0x8c0 [ 102.236332][ T6065] do_fast_syscall_32+0x32/0x70 [ 102.236356][ T6065] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 102.236377][ T6065] RIP: 0023:0xf73aefbc [ 102.236392][ T6065] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 102.236408][ T6065] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 102.236427][ T6065] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800005c0 [ 102.236439][ T6065] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 102.236450][ T6065] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 102.236461][ T6065] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 102.236473][ T6065] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 102.236498][ T6065] [ 102.399080][ T6065] i2c i2c-0: Memory type 0x07 not supported yet, not instantiating SPD [ 102.965696][ T6004] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 103.142546][ T6004] usb 7-1: not running at top speed; connect to a high speed hub [ 103.142576][ T6004] usb 7-1: New USB device found: idVendor=0ea0, idProduct=6858, bcdDevice=0.40 [ 103.149524][ T6004] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 103.203620][ T6004] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.203644][ T6004] usb 7-1: Product: syz [ 103.203657][ T6004] usb 7-1: Manufacturer: syz [ 103.203668][ T6004] usb 7-1: SerialNumber: syz [ 103.210190][ T6004] oti6858 7-1:1.0: oti6858 converter detected [ 103.250759][ T6004] usb 7-1: oti6858 converter now attached to ttyUSB0 [ 103.300760][ T6086] Need at least one configuration in g1. [ 103.363363][ T6086] udc usbip-vudc.0: failed to start g1: -22 [ 103.363393][ T6086] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 103.409895][ T6086] UDC core: g1: couldn't find an available UDC or it's busy [ 103.795025][ T41] usb 7-1: USB disconnect, device number 2 [ 103.842512][ T41] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 103.843273][ T41] oti6858 7-1:1.0: device disconnected [ 103.938262][ T43] audit: type=1804 audit(1793623996.541:3): pid=6099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.39" name="/newroot/14/file0" dev="tmpfs" ino=117 res=1 errno=0 [ 104.679737][ T6099] event trace: Could not enable event p1 [ 104.987163][ T5953] asus 0005:0B05:8502.0002: hidraw1: BLUETOOTH HID v0.00 Mouse [syz0] on syz0 [ 105.449586][ T6115] syz.1.42 uses obsolete (PF_INET,SOCK_PACKET) [ 105.844501][ T6113] fido_id[6113]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 106.616659][ T6122] rxe_eth0 speed is unknown, defaulting to 1000 [ 107.006374][ T43] audit: type=1804 audit(1793623999.631:4): pid=6101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.38" name="/newroot/7/file0" dev="tmpfs" ino=59 res=1 errno=0 [ 107.735548][ T43] audit: type=1804 audit(1793624000.351:5): pid=6137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.46" name="bus" dev="ramfs" ino=11212 res=1 errno=0 [ 107.736676][ T43] audit: type=1804 audit(1793624000.351:6): pid=6137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.46" name="bus" dev="ramfs" ino=11212 res=1 errno=0 [ 108.463960][ T6151] syzkaller0: entered promiscuous mode [ 108.463981][ T6151] syzkaller0: entered allmulticast mode [ 108.519394][ T43] audit: type=1804 audit(1793624001.141:7): pid=6147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.49" name="/newroot/17/file0" dev="fuse" ino=1 res=1 errno=0 [ 111.129736][ T6194] syzkaller0: entered promiscuous mode [ 111.129756][ T6194] syzkaller0: entered allmulticast mode [ 111.214578][ T43] audit: type=1326 audit(1793624003.831:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6196 comm="syz.1.61" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f72fbc code=0x0 [ 112.067252][ T43] audit: type=1804 audit(1793624004.691:9): pid=6208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.63" name="bus" dev="ramfs" ino=10070 res=1 errno=0 [ 112.217925][ T43] audit: type=1804 audit(1793624004.841:10): pid=6208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.63" name="bus" dev="ramfs" ino=10070 res=1 errno=0 [ 113.685598][ T6218] bridge_slave_0: left allmulticast mode [ 113.685625][ T6218] bridge_slave_0: left promiscuous mode [ 113.687190][ T6218] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.958489][ T6218] bridge_slave_1: left allmulticast mode [ 113.958516][ T6218] bridge_slave_1: left promiscuous mode [ 113.958836][ T6218] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.210797][ T6218] bond0: (slave bond_slave_0): Releasing backup interface [ 114.346421][ T6218] bond0: (slave bond_slave_1): Releasing backup interface [ 114.668639][ T6218] team0: Port device team_slave_0 removed [ 114.708674][ T6218] team0: Port device team_slave_1 removed [ 114.720162][ T6218] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.720186][ T6218] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.747014][ T6218] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.747037][ T6218] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.805921][ T6218] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 115.668686][ T6252] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.689818][ T6252] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.707314][ T6252] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 116.456733][ T43] audit: type=1804 audit(1793624009.071:11): pid=6261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.75" name="bus" dev="ramfs" ino=11386 res=1 errno=0 [ 116.484456][ T43] audit: type=1804 audit(1793624009.091:12): pid=6261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.75" name="bus" dev="ramfs" ino=11386 res=1 errno=0 [ 116.754397][ T6263] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 116.802303][ T6257] misc userio: Invalid payload size [ 117.384206][ T1167] ================================================================== [ 117.384223][ T1167] BUG: KASAN: slab-use-after-free in drm_atomic_helper_wait_for_vblanks.part.0+0x7d0/0x890 [ 117.384259][ T1167] Read of size 1 at addr ffff888014784409 by task kworker/u33:10/1167 [ 117.384274][ T1167] [ 117.384283][ T1167] CPU: 2 UID: 0 PID: 1167 Comm: kworker/u33:10 Not tainted syzkaller #0 PREEMPT(full) [ 117.384302][ T1167] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 117.384313][ T1167] Workqueue: events_unbound commit_work [ 117.384340][ T1167] Call Trace: [ 117.384346][ T1167] [ 117.384354][ T1167] dump_stack_lvl+0x100/0x190 [ 117.384380][ T1167] print_report+0x13d/0x4b0 [ 117.384404][ T1167] ? __virt_addr_valid+0x239/0x430 [ 117.384424][ T1167] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d0/0x890 [ 117.384448][ T1167] kasan_report+0xdf/0x1c0 [ 117.384468][ T1167] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d0/0x890 [ 117.384497][ T1167] drm_atomic_helper_wait_for_vblanks.part.0+0x7d0/0x890 [ 117.384525][ T1167] ? preempt_schedule+0x57/0xd0 [ 117.384545][ T1167] ? preempt_schedule_thunk+0x16/0x40 [ 117.384567][ T1167] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 117.384616][ T1167] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 117.384637][ T1167] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 117.384666][ T1167] drm_atomic_helper_commit_tail+0xff/0x130 [ 117.384692][ T1167] commit_tail.isra.0+0x33e/0x420 [ 117.384718][ T1167] process_one_work+0xac7/0x1b10 [ 117.384753][ T1167] ? __pfx_process_one_work+0x10/0x10 [ 117.384777][ T1167] ? lock_acquire+0x1d1/0x380 [ 117.384797][ T1167] ? __pfx_commit_work+0x10/0x10 [ 117.384823][ T1167] worker_thread+0x5ef/0xe50 [ 117.384852][ T1167] ? kthread+0x13a/0x450 [ 117.384875][ T1167] ? __pfx_worker_thread+0x10/0x10 [ 117.384898][ T1167] kthread+0x373/0x450 [ 117.384920][ T1167] ? __pfx_kthread+0x10/0x10 [ 117.384941][ T1167] ret_from_fork+0x730/0xd60 [ 117.384962][ T1167] ? __pfx_ret_from_fork+0x10/0x10 [ 117.384981][ T1167] ? __switch_to+0x800/0x10e0 [ 117.385005][ T1167] ? __pfx_kthread+0x10/0x10 [ 117.385027][ T1167] ret_from_fork_asm+0x1a/0x30 [ 117.385052][ T1167] [ 117.385058][ T1167] [ 117.385062][ T1167] Allocated by task 6270: [ 117.385071][ T1167] kasan_save_stack+0x30/0x50 [ 117.385088][ T1167] kasan_save_track+0x14/0x30 [ 117.385103][ T1167] __kasan_kmalloc+0xaa/0xb0 [ 117.385117][ T1167] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 117.385138][ T1167] drm_atomic_helper_crtc_duplicate_state+0x72/0xd0 [ 117.385157][ T1167] drm_atomic_get_crtc_state+0x1de/0x690 [ 117.385176][ T1167] drm_atomic_set_property+0x165/0x4030 [ 117.385198][ T1167] drm_mode_atomic_ioctl+0x6ed/0x2940 [ 117.385220][ T1167] drm_ioctl_kernel+0x1f3/0x3e0 [ 117.385240][ T1167] drm_ioctl+0x5e6/0xc60 [ 117.385281][ T1167] drm_compat_ioctl+0x386/0x4c0 [ 117.385295][ T1167] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 117.385318][ T1167] __do_fast_syscall_32+0x14b/0x8c0 [ 117.385337][ T1167] do_fast_syscall_32+0x32/0x70 [ 117.385357][ T1167] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 117.385376][ T1167] [ 117.385380][ T1167] Freed by task 5524: [ 117.385388][ T1167] kasan_save_stack+0x30/0x50 [ 117.385402][ T1167] kasan_save_track+0x14/0x30 [ 117.385417][ T1167] kasan_save_free_info+0x3b/0x70 [ 117.385437][ T1167] __kasan_slab_free+0x5f/0x80 [ 117.385453][ T1167] kfree+0x22b/0x6d0 [ 117.385471][ T1167] drm_atomic_commit_default_clear+0x4aa/0x1140 [ 117.385492][ T1167] __drm_atomic_commit_free+0x185/0x2f0 [ 117.385513][ T1167] drm_atomic_helper_dirtyfb+0x578/0x790 [ 117.385532][ T1167] drm_fbdev_shmem_helper_fb_dirty+0x1cc/0x350 [ 117.385551][ T1167] drm_fb_helper_damage_work+0x4c8/0xab0 [ 117.385571][ T1167] process_one_work+0xac7/0x1b10 [ 117.385593][ T1167] worker_thread+0x5ef/0xe50 [ 117.385614][ T1167] kthread+0x373/0x450 [ 117.385633][ T1167] ret_from_fork+0x730/0xd60 [ 117.385650][ T1167] ret_from_fork_asm+0x1a/0x30 [ 117.385667][ T1167] [ 117.385671][ T1167] The buggy address belongs to the object at ffff888014784400 [ 117.385671][ T1167] which belongs to the cache kmalloc-512 of size 512 [ 117.385685][ T1167] The buggy address is located 9 bytes inside of [ 117.385685][ T1167] freed 512-byte region [ffff888014784400, ffff888014784600) [ 117.385700][ T1167] [ 117.385704][ T1167] The buggy address belongs to the physical page: [ 117.385711][ T1167] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x14784 [ 117.385727][ T1167] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 117.385746][ T1167] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 117.385761][ T1167] page_type: f5(slab) [ 117.385776][ T1167] raw: 00fff00000000040 ffff88801d442c80 dead000000000100 dead000000000122 [ 117.385791][ T1167] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 117.385806][ T1167] head: 00fff00000000040 ffff88801d442c80 dead000000000100 dead000000000122 [ 117.385820][ T1167] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 117.385834][ T1167] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 117.385848][ T1167] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 117.385855][ T1167] page dumped because: kasan: bad access detected [ 117.385863][ T1167] page_owner tracks the page as allocated [ 117.385868][ T1167] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 13, tgid 13 (kworker/u32:1), ts 93050168560 [ 117.385894][ T1167] post_alloc_hook+0xfd/0x120 [ 117.385914][ T1167] get_page_from_freelist+0x1113/0x35e0 [ 117.385936][ T1167] __alloc_frozen_pages_noprof+0x2bd/0x3280 [ 117.385957][ T1167] new_slab+0xb1/0x6d0 [ 117.385975][ T1167] refill_objects+0xe3/0x410 [ 117.385994][ T1167] __pcs_replace_empty_main+0x35e/0x650 [ 117.386014][ T1167] __kmalloc_cache_noprof+0x4ef/0x6d0 [ 117.386033][ T1167] __ipv6_dev_mc_inc+0x2f1/0xc80 [ 117.386056][ T1167] addrconf_dad_work+0x276/0x1360 [ 117.386075][ T1167] process_one_work+0xac7/0x1b10 [ 117.386123][ T1167] worker_thread+0x5ef/0xe50 [ 117.386145][ T1167] kthread+0x373/0x450 [ 117.386164][ T1167] ret_from_fork+0x730/0xd60 [ 117.386180][ T1167] ret_from_fork_asm+0x1a/0x30 [ 117.386197][ T1167] page last free pid 5641 tgid 5641 ts 47182851980 stack trace: [ 117.386207][ T1167] free_unref_folios+0xa6a/0x17e0 [ 117.386227][ T1167] folios_put_refs+0x585/0xaa0 [ 117.386258][ T1167] free_pages_and_swap_cache+0x30b/0x3b0 [ 117.386280][ T1167] __tlb_batch_free_encoded_pages+0xe9/0x270 [ 117.386298][ T1167] tlb_finish_mmu+0x1b0/0x810 [ 117.386314][ T1167] exit_mmap+0x454/0xa40 [ 117.386328][ T1167] __mmput+0x12a/0x410 [ 117.386341][ T1167] mmput+0x62/0x70 [ 117.386354][ T1167] do_exit+0x80c/0x2a00 [ 117.386371][ T1167] do_group_exit+0xd5/0x2a0 [ 117.386388][ T1167] __x64_sys_exit_group+0x3e/0x50 [ 117.386405][ T1167] x64_sys_call+0x1567/0x1570 [ 117.386422][ T1167] do_syscall_64+0x121/0x770 [ 117.386440][ T1167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.386456][ T1167] [ 117.386460][ T1167] Memory state around the buggy address: [ 117.386468][ T1167] ffff888014784300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 117.386479][ T1167] ffff888014784380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 117.386491][ T1167] >ffff888014784400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 117.386499][ T1167] ^ [ 117.386507][ T1167] ffff888014784480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 117.386518][ T1167] ffff888014784500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 117.386526][ T1167] ================================================================== [ 117.392535][ T1167] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 118.026730][ T1167] CPU: 2 UID: 0 PID: 1167 Comm: kworker/u33:10 Not tainted syzkaller #0 PREEMPT(full) [ 118.030332][ T1167] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 118.051238][ T1167] Workqueue: events_unbound commit_work [ 118.053700][ T1167] Call Trace: [ 118.056175][ T1167] [ 118.057585][ T1167] dump_stack_lvl+0x100/0x190 [ 118.075107][ T1167] vpanic+0x2dc/0x6f8 [ 118.076871][ T1167] panic+0xd1/0xe0 [ 118.078504][ T1167] ? __pfx_panic+0x10/0x10 [ 118.080664][ T1167] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d0/0x890 [ 118.084215][ T1167] ? preempt_schedule+0x57/0xd0 [ 118.086509][ T1167] check_panic_on_warn.cold+0x19/0x34 [ 118.090102][ T1167] end_report.part.0+0x3a/0x90 [ 118.093233][ T1167] kasan_report.cold+0xe/0x18 [ 118.108803][ T1167] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d0/0x890 [ 118.112123][ T1167] drm_atomic_helper_wait_for_vblanks.part.0+0x7d0/0x890 [ 118.116630][ T1167] ? preempt_schedule+0x57/0xd0 [ 118.119640][ T1167] ? preempt_schedule_thunk+0x16/0x40 [ 118.136433][ T1167] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 118.141249][ T1167] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 118.143485][ T1167] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 118.146011][ T1167] drm_atomic_helper_commit_tail+0xff/0x130 [ 118.148524][ T1167] commit_tail.isra.0+0x33e/0x420 [ 118.150540][ T1167] process_one_work+0xac7/0x1b10 [ 118.167464][ T1167] ? __pfx_process_one_work+0x10/0x10 [ 118.169721][ T1167] ? lock_acquire+0x1d1/0x380 [ 118.172835][ T1167] ? __pfx_commit_work+0x10/0x10 [ 118.178049][ T1167] worker_thread+0x5ef/0xe50 [ 118.182442][ T1167] ? kthread+0x13a/0x450 [ 118.185762][ T1167] ? __pfx_worker_thread+0x10/0x10 [ 118.187734][ T1167] kthread+0x373/0x450 [ 118.190198][ T1167] ? __pfx_kthread+0x10/0x10 [ 118.192883][ T1167] ret_from_fork+0x730/0xd60 [ 118.195046][ T1167] ? __pfx_ret_from_fork+0x10/0x10 [ 118.197626][ T1167] ? __switch_to+0x800/0x10e0 [ 118.200270][ T1167] ? __pfx_kthread+0x10/0x10 [ 118.202753][ T1167] ret_from_fork_asm+0x1a/0x30 [ 118.204835][ T1167] [ 118.207407][ T1167] Kernel Offset: disabled [ 118.209382][ T1167] Rebooting in 86400 seconds.. VM DIAGNOSIS: 12:53:30 Registers: info registers vcpu 0 CPU#0 RAX=000000485bd51727 RBX=ffff88802ae24040 RCX=00000000000006e0 RDX=0000000000000048 RSI=ffffffff81fd2945 RDI=0000000000000001 RBP=0000001b4f9a5f8c RSP=ffffc9000041faf8 R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000001 R12=1ffff92000083f69 R13=0000000000000001 R14=0000000000000001 R15=ffff88802ae24080 RIP=ffffffff81fd2958 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888095281000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f743e2f0 CR3=0000000044362000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=0000000000000001 RDX=ffff88801e35a580 RSI=ffffffff81b7fe9e RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc9000046fdf8 R8 =0000000000000003 R9 =0000000000000006 R10=ffff88802af243fb R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=0000000000000000 RIP=ffffffff81b7fe9f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00000000 DS =0000 0000000000000000 ffffffff 00000000 FS =0000 0000000000000000 ffffffff 00000000 GS =0000 ffff888095381000 ffffffff 00000000 LDT=0000 0000000000000000 ffffffff 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005650e76fb3f8 CR3=000000000fd96000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fc000000 Opmask01=0000000000c01000 Opmask02=00000000ffff7fdf Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb1b9f2240 00007feb1b9f2240 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005650e769b5e0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005650e76bb510 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb1b952c80 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 737365636f727020 756c6c2520716573 006e6f6974697472 6170006b636f6c62 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00376d697377682f 6d697377685f3131 32303863616d2f6c 6175747269762f73 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 697377685f313132 303863616d2f6c61 75747269762f7365 63697665642f7379 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 514553003078303d 4e4f534145525f4b 434f4c425f57485f 4c4c494b46520031 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 141606000d2b777c 1a4f6e120e1c1607 150a0842621a0d0b 1f151a091301000c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 773f5f7b2f7f7f7f 7f6f7f7f7f7e7777 7d3f3b7f7f7b6d5f 7f7d7f7f737d0a5f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30322f31302f3430 64623a322d332e36 312e312d6e616962 65642d332e36312e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3636303d45444f4c 4c45440030373139 3d4d002f3632393d 4d554e5145530036 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3130300030313030 2c413100302c3131 3030002f31300000 363134383d4d0031 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000002f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85c08375 RDI=ffffffff9cf3a5e0 RBP=ffffffff9cf3a5a0 RSP=ffffc9000632f288 R8 =000000000000001f R9 =0000000000000000 R10=0000000000000003 R11=3837343130386552 R12=0000000000000000 R13=000000000000002f R14=0000000000000005 R15=ffffc9000632f5a0 RIP=ffffffff85c0839f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888095481000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000003000eff8 CR3=000000004c812000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000006 RCX=0000000000000001 RDX=ffff88801e3fa580 RSI=ffffffff81b7fe9e RDI=0000000000000001 RBP=0000000000000003 RSP=ffffc9000048fdf8 R8 =0000000000000003 R9 =0000000000000006 R10=ffff88802b1243fb R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000091fc4 R15=0000000000000000 RIP=ffffffff81b7fe9f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888095581000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f5424da4 CR3=000000000fd96000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000000000 Opmask02=00000000ffff7fdf Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005650e76a5670 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005650e76b6660 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb1b9f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb1b952c80 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c696b66722f3031 7968702f31313230 38656565692f396d 697377682f6d6973 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 36316c6c696b6672 2f30317968702f31 3132303865656569 2f396d697377682f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d697377685f3131 32303863616d2f6c 6175747269762f73 6563697665642f73 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343530313d4d554e 514553003078303d 4e4f534145525f4b 434f4c425f57485f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 79607e60781e553b 3d2976000d356573 1f0a0041011e1014 0b1b0d1209120c5f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7f6d7f6f7f7f7d7f 7d3f7f757f7f7d7f 1f7f6d7f7f7f7d3d 7f7f7f7f7f767e7f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302c433032302c42 3032302c41303230 2c393032302c3830 32302c363032302c ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4c4c494b46520030 314554413d454d41 4c494b4649004652 006c3d455059543d ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3230302c3d310030 2c423100302c3031 30302c393100302c 003130302c370038 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000