last executing test programs: 4.145853527s ago: executing program 0 (id=241): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x800a}}) io_uring_enter(r2, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {r1, 0x7fffffff, 0x12, 0x0, 0x0, @in={0x2, 0x4e20, @rand_addr=0x64010100}, @in6={0xa, 0x4e1f, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x80000001}}}, 0x118) 4.054850905s ago: executing program 0 (id=252): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x4) pwritev(r0, &(0x7f0000000680)=[{&(0x7f0000000040)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003f60000000001010101", 0x2e}], 0x1, 0x6, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500001400000000400600000a0000010a000002005000500001ffff00000002601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) 3.953060255s ago: executing program 0 (id=255): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(0x3) socket$alg(0x26, 0x5, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094b24610b11342003d9d010203010902"], 0x0) 2.115797038s ago: executing program 2 (id=251): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.020058764s ago: executing program 3 (id=254): mkdirat(0xffffffffffffff9c, 0x0, 0x777) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='0', 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) unshare(0x42000000) 1.900753599s ago: executing program 3 (id=256): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f0000009b80)={&(0x7f00000099c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000084c0)=@freeinode={{0x4f32494e, 0x8, 0x10, 0xc0000001}, [{0x8, 0x6}, {0x40, 0x4}, {0xffffffffffffff81, 0x7}, {0x3, 0x9}, {0x9, 0x9}, {0x1000, 0x8}, {0x4, 0x2}, {0xd, 0x70d}, {0x1, 0x7}, {0x7ff, 0xfffffffffffffffb}, {0x5, 0x1}, {0x9, 0x8}, {0x8000000000000000, 0x6}, {0xc, 0x2}, {0x0, 0xd}, {0x200, 0x1ff}, {0xdea, 0x401}, {0x0, 0x5}, {0x1, 0x7}, {0x4, 0x4}, {0xacf, 0xfffffffffffffffe}, {0x744e, 0x3}, {0x5, 0x4}, {0x4}, {0x9, 0x1}, {0x800, 0x8}, {0x5, 0x7}, {0xd4c, 0x100000001}, {0x1}, {0x4, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x9, 0x9}, {0xcf64, 0xffffffffffffff87}, {0xffffffffffffff02, 0x2}, {0x44e6a0d0, 0x7}, {0xb, 0x100000000000000}, {0x1, 0x2}, {0x4, 0x7fff}, {0x78e, 0xdd}, {0xfffffffffffffff1, 0x7fffffffffffffff}, {0x0, 0xe2}, {0xfffffffffffffff9, 0x640000000000}, {0xd01, 0x8}, {0x3, 0x7}, {0x1a, 0xdf5e}, {0x7, 0x7}, {0x8, 0x401}, {0x9, 0x329e}, {0x3, 0x8}, {0x3, 0x1}, {0x592, 0x45}, {0x240000000000000, 0x4}, {0x7, 0x7}, {0x40, 0x6}, {0x146d, 0xed}, {0x2, 0x3}, {0xfffffffffffffff3, 0x6}, {0x6, 0x26e}, {0x1, 0x1}, {0x100000000}, {0x4, 0x5}, {0xe22, 0x5}, {0x6, 0x879}, {0x8000000000000000, 0x7fffffffffffffff}, {0x0, 0x4}, {0xfffffffffffffff7, 0x10}, {0xfffffffffffffff7, 0x66}, {0x80000000, 0x6}, {0x2}, {0x6, 0x9}, {0x0, 0x5}, {0x4, 0xc6}, {0x3, 0xfffffffffffff001}, {0x0, 0x6}, {0x6, 0x2}, {0x0, 0x5}, {0x5, 0x6}, {0x1, 0x9}, {0x687, 0x8000000000000001}, {0x4, 0x8}, {0x8000000000000001, 0x7}, {0x800, 0xc}, {0x5, 0x2}, {0x0, 0x8e}, {0x0, 0x7}, {0x10001, 0x9}, {0xf0d, 0x3}, {0xd, 0x4}, {0x9, 0xb5}, {0x10001, 0x2}, {0x2, 0xb3a}, {0x10001, 0x8000000000000000}, {0xf800000000000000, 0x4}, {0x8, 0x27d}, {0x7, 0x2}, {0x1ff, 0xa}, {0x5, 0x7ebc}, {0x7ff, 0xc46}, {0x1000, 0x1a4f}, {0x3, 0x9}, {0x5, 0x81}, {0x80, 0x8}, {0x9, 0xa4f0}, {0x7, 0x401}, {0x7, 0x40}, {0x0, 0xb}, {0x1, 0x8000000000000001}, {0x9, 0x9}, {0x1, 0x45}, {0x6, 0x7}, {0x9, 0x84e}, {0x1, 0x4e}, {0x3082a37c, 0x1}, {0x85, 0x4}, {0x800, 0x3}, {0x7fffffff, 0x3}, {0x96, 0x800000000000}, {0x95a8, 0xfff}, {0x1000, 0x2}, {0x8000, 0x8}, {0x7, 0x8000}, {0xa5f, 0x15c}, {0x0, 0x5}, {0x401, 0x3}, {0x4, 0x48000000000000}, {0x4, 0x7}, {0x6, 0x3}, {0x3, 0xb}, {0x3, 0x5}, {0xd617, 0x8}, {0x16c0000}, {0x2, 0x3e}, {0x2094000000000000, 0x4}, {0x0, 0x4}, {0x5, 0x7fffffffffffffff}, {0x9, 0x717}, {0x0, 0x7fffffff}, {0x8, 0x7}, {0x3, 0x3ff}, {0x0, 0x4}, {0x2, 0x8000000000000001}, {0xccc, 0x1}, {0x8000000000000000, 0xff}, {0x1, 0x3}, {0x1, 0x8}, {0x100000000}, {0x1, 0x8001}, {0x3, 0x100}, {0x8000000000000000, 0x80000001}, {0x7, 0x9}, {0x9, 0xf8}, {0x9, 0x9}, {0x6, 0x2}, {0xffffffffffff948d, 0x5}, {0x33, 0x5}, {0x97, 0x3}, {0xffff, 0x8}, {0xad, 0x2}, {0x7fff, 0x4}, {0xe20f, 0xc1c}, {0x8000000000, 0x10}, {0x2, 0xe}, {0xc8, 0x8132}, {0x5, 0x4}, {0x5, 0x9}, {0x2, 0x9}, {0x8000000000000000}, {0x3, 0x9}, {0x1, 0x3}, {0x2, 0x3}, {0xfffffffffffffa23, 0x25d5814e}, {0x1, 0x8000000000000001}, {0x0, 0x6}, {0x5, 0x3}, {0xcfa, 0x5}, {0x1}, {0x400, 0x1}, {0x3, 0x8a4f}, {0x42f7, 0xffc}, {0x4, 0x9}, {0x5b7, 0x6}, {0x9, 0xa}, {0x8, 0x6}, {0x3, 0x81}, {0xb, 0x18}, {0x6, 0xbd}, {0x7}, {0x0, 0x9}, {0x200, 0xffffffffffff2069}, {0x9, 0xede0}, {0x7, 0x400}, {0x5, 0x2}, {0x3}, {0xffffffffffff2a94, 0x400}, {0x4, 0x9}, {0x80000001, 0x4}, {0x800, 0x2}, {0x7}, {0x0, 0x7}, {0x80000001, 0x8}, {0x6, 0x800}, {0x72a8, 0x3e}, {0xfffffc0000000000}, {0x99f, 0x4}, {0x3, 0x80000001}, {0xa9, 0xc}, {0xfff, 0xfff}, {0x80}, {0x3, 0xa7}, {0x6000000, 0x6}, {0x1, 0xd5}, {0x40, 0x100000000}, {0x100000000, 0x3}, {0x4, 0x1}, {0x4, 0x5}, {0xd32, 0xa33f}, {0x7ff, 0x3}, {0x7, 0x6}, {0x0, 0x4}, {0xfff, 0x6}, {0x46340d4b, 0x6}, {0x9}, {0x6e, 0x10}, {0x40, 0x8}, {0x9e, 0x7}, {0x2, 0x9}, {0xb, 0x10}, {0x38b, 0x3b67}, {0x7}, {0x3, 0x400}, {0x2c6c, 0x3}, {0x5, 0x5}, {0x0, 0x2}, {0x830, 0x6}, {0xfffffffffffffffd, 0x777}, {0xffffffffffffffff, 0x7}, {0x6, 0x9}, {0x2, 0x5b9d}, {0x100000000, 0x6}, {0x100000000, 0x200}, {0xed, 0x8c}, {0x0, 0x40800}, {0x23, 0x3491}, {0x101, 0x9}, {0x4, 0x7}, {0x0, 0x3}, {0x40, 0x231}, {0x100000001, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x9}, {0x14, 0x2}, {0x1, 0x6}, {0x0, 0x7fffffffffffffff}, {0x1, 0x101}, {0x8, 0x800}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 1.860230433s ago: executing program 3 (id=257): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000300)={0x2, 0x12c, @ioapic={0xffff1000, 0x8000, 0xfffff5ab, 0x7fffffff, 0x0, [{0x1, 0x81, 0xfd, '\x00', 0x4}, {0x7, 0x1, 0x1, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4a, 0xe, 0xd6, '\x00', 0x86}, {0xd, 0x2, 0x10, '\x00', 0x2}, {0xd, 0x1, 0xf9, '\x00', 0x3}, {0x2, 0xa, 0x27, '\x00', 0x6}, {0x8, 0xd, 0x2a, '\x00', 0x8}, {0x1, 0x0, 0xa, '\x00', 0x2}, {0x8, 0xd6, 0x3, '\x00', 0x8}, {0x9e, 0x6, 0x3}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x45, 0x51, 0x6}, {0xe, 0xfc, 0x0, '\x00', 0x1}, {0x8, 0x2, 0x6, '\x00', 0x4}, {0xd, 0x1b, 0x1, '\x00', 0x3}, {0x2, 0xa, 0xd2, '\x00', 0x8}, {0xa, 0x0, 0xcb, '\x00', 0x6}, {0x0, 0x7, 0x4, '\x00', 0x1a}, {0xb, 0x8, 0x81, '\x00', 0xda}, {0x3, 0x87, 0x6, '\x00', 0x7}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x21, 0x1, '\x00', 0x7}, {0x8, 0x9, 0x2, '\x00', 0x6}]}}) 1.736418745s ago: executing program 3 (id=259): r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1, 0x15a, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x68ba, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88db, 0x80, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x4, 0x102, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) 1.733197049s ago: executing program 0 (id=269): setresuid(0xee00, 0xee00, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) unshare(0x2a020480) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.259118818s ago: executing program 2 (id=260): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000002080)='./mnt\x00', &(0x7f00000020c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000003180)='./mnt/events/cdns3/cdns3_ep0_queue/inject\x00', 0x1, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000003200)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r1, &(0x7f0000003240)=""/8192, 0x2000) 1.258983758s ago: executing program 3 (id=262): socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1092, 0x210}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000010000f80700000018000180140002006970766c616e31"], 0x2c}, 0x1, 0x0, 0x0, 0x20000054}, 0x40) 1.200507268s ago: executing program 1 (id=264): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) 1.140853491s ago: executing program 2 (id=265): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ef) lsetxattr$security_capability(&(0x7f0000000340)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000740)=@v3={0x3000000, [{0x101, 0x3}, {0x5, 0x1ff}]}, 0x18, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) truncate(&(0x7f0000000140)='./file0/file1\x00', 0xe2) 1.132964962s ago: executing program 1 (id=274): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) mlockall(0x7) madvise(&(0x7f000000a000/0x2000)=nil, 0x2000, 0x9) 830.483727ms ago: executing program 0 (id=266): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x4a000000) syz_usb_disconnect(0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0x48, 0x8, 0xffff, 0xf, 0x1, 0xffffffffffffffbd], 0x1, 0x0, 0x0, [{}]}, 0x88) 830.313076ms ago: executing program 2 (id=267): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x64) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x13, 0x9, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 826.287299ms ago: executing program 3 (id=276): syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0xd1, 0xa0, 0x5e, 0x20, 0xccd, 0x102, 0x890e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x54, 0x40, 0x1, "", [{{0x9, 0x4, 0xbc, 0x80, 0x0, 0xc, 0xf1, 0xc7, 0x7f}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='tahvo 2', 0x7) 790.336697ms ago: executing program 1 (id=268): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)={[{@quota}, {@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x31]}}]}) chdir(&(0x7f0000000100)='./file0\x00') open(&(0x7f00000001c0)='./file0\x00', 0x108843, 0x55) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='devices.list\x00', 0x275a, 0x0) 741.963639ms ago: executing program 2 (id=270): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000300)={0x2, 0x12c, @ioapic={0xffff1000, 0x8000, 0xfffff5ab, 0x7fffffff, 0x0, [{0x1, 0x81, 0xfd, '\x00', 0x4}, {0x7, 0x1, 0x1, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4a, 0xe, 0xd6, '\x00', 0x86}, {0xd, 0x2, 0x10, '\x00', 0x2}, {0xd, 0x1, 0xf9, '\x00', 0x3}, {0x2, 0xa, 0x27, '\x00', 0x6}, {0x8, 0xd, 0x2a, '\x00', 0x8}, {0x1, 0x0, 0xa, '\x00', 0x2}, {0x8, 0xd6, 0x3, '\x00', 0x8}, {0x9e, 0x6, 0x3}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x45, 0x51, 0x6}, {0xe, 0xfc, 0x0, '\x00', 0x1}, {0x8, 0x2, 0x6, '\x00', 0x4}, {0xd, 0x1b, 0x1, '\x00', 0x3}, {0x2, 0xa, 0xd2, '\x00', 0x8}, {0xa, 0x0, 0xcb, '\x00', 0x6}, {0x0, 0x7, 0x4, '\x00', 0x1a}, {0xb, 0x8, 0x81, '\x00', 0xda}, {0x3, 0x87, 0x6, '\x00', 0x7}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x21, 0x1, '\x00', 0x7}, {0x8, 0x9, 0x2, '\x00', 0x6}]}}) 731.244291ms ago: executing program 1 (id=271): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r0, 0x0) 608.776605ms ago: executing program 2 (id=272): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) 606.992096ms ago: executing program 1 (id=273): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a580000000c0a3d0100000000000000150a0000060900020073797a31000000000900010073797a31000000002c0003801c0000840c00018006000100d10300000c000440000000002df31ab30c000080080003400000000214000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000018000380140000800800034000000002"], 0x44}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 569.660275ms ago: executing program 1 (id=275): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/bluetooth/rfcomm\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/100, 0x64) 0s ago: executing program 0 (id=277): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0', 0x1) write(r0, &(0x7f00000001a0)='1', 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:40370' (ED25519) to the list of known hosts. [ 33.012959][ T5649] cgroup: Unknown subsys name 'net' [ 33.172558][ T5649] cgroup: Unknown subsys name 'cpuset' [ 33.176495][ T5649] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 34.092531][ T5649] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.946850][ T5747] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.947435][ T5745] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.948308][ T5748] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.951438][ T5747] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.951980][ T5749] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 37.952333][ T5745] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.952386][ T5747] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.955191][ T5748] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.955770][ T5745] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.956499][ T5749] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.956867][ T5749] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.958729][ T5749] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.959311][ T5749] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.959597][ T5745] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.959639][ T5748] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.961313][ T5745] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.961745][ T5749] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.962918][ T5749] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.965519][ T5739] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.967013][ T5095] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 38.486867][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.487310][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.491462][ T5735] bridge_slave_0: entered allmulticast mode [ 38.492457][ T5735] bridge_slave_0: entered promiscuous mode [ 38.508581][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.511990][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.514088][ T5735] bridge_slave_1: entered allmulticast mode [ 38.515439][ T5735] bridge_slave_1: entered promiscuous mode [ 38.559916][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.561722][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.610652][ T5735] team0: Port device team_slave_0 added [ 38.626772][ T5735] team0: Port device team_slave_1 added [ 38.686850][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.686953][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.687090][ T5744] bridge_slave_0: entered allmulticast mode [ 38.688324][ T5744] bridge_slave_0: entered promiscuous mode [ 38.691431][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.691505][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.691606][ T5744] bridge_slave_1: entered allmulticast mode [ 38.693393][ T5744] bridge_slave_1: entered promiscuous mode [ 38.708240][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.708255][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.708275][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.755405][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.755592][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.755717][ T5734] bridge_slave_0: entered allmulticast mode [ 38.756951][ T5734] bridge_slave_0: entered promiscuous mode [ 38.772559][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.772611][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.772668][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.795488][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.796321][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.796388][ T5734] bridge_slave_1: entered allmulticast mode [ 38.797565][ T5734] bridge_slave_1: entered promiscuous mode [ 38.814971][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.817982][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.831343][ T5736] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.831920][ T5736] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.831981][ T5736] bridge_slave_0: entered allmulticast mode [ 38.832659][ T5736] bridge_slave_0: entered promiscuous mode [ 38.834181][ T5736] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.834219][ T5736] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.834272][ T5736] bridge_slave_1: entered allmulticast mode [ 38.835039][ T5736] bridge_slave_1: entered promiscuous mode [ 38.911309][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.916345][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.920783][ T5735] hsr_slave_0: entered promiscuous mode [ 38.921586][ T5735] hsr_slave_1: entered promiscuous mode [ 38.933471][ T5736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.934975][ T5744] team0: Port device team_slave_0 added [ 38.953124][ T5736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.963185][ T5744] team0: Port device team_slave_1 added [ 38.964734][ T5734] team0: Port device team_slave_0 added [ 38.966098][ T5734] team0: Port device team_slave_1 added [ 39.002675][ T5736] team0: Port device team_slave_0 added [ 39.016834][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.016886][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.016926][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.027398][ T5736] team0: Port device team_slave_1 added [ 39.033915][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.033931][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.033951][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.039680][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.039694][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.039714][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.049021][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.049036][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.049052][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.087066][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.087081][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.087101][ T5736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.117411][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.117460][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.117500][ T5736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.132638][ T5744] hsr_slave_0: entered promiscuous mode [ 39.133086][ T5744] hsr_slave_1: entered promiscuous mode [ 39.133415][ T5744] debugfs: 'hsr0' already exists in 'hsr' [ 39.133464][ T5744] Cannot create hsr debugfs directory [ 39.138230][ T5734] hsr_slave_0: entered promiscuous mode [ 39.139008][ T5734] hsr_slave_1: entered promiscuous mode [ 39.139539][ T5734] debugfs: 'hsr0' already exists in 'hsr' [ 39.139556][ T5734] Cannot create hsr debugfs directory [ 39.217304][ T5736] hsr_slave_0: entered promiscuous mode [ 39.217780][ T5736] hsr_slave_1: entered promiscuous mode [ 39.218070][ T5736] debugfs: 'hsr0' already exists in 'hsr' [ 39.218080][ T5736] Cannot create hsr debugfs directory [ 39.424100][ T5735] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.429726][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.437975][ T5735] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.442257][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.463489][ T5735] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.470187][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.478192][ T5735] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.483718][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.533953][ T5744] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.538375][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.539234][ T5744] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.544512][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.550525][ T5744] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.554162][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.557454][ T5744] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.562504][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.612363][ T5734] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.618730][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.628796][ T5734] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.635653][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.637816][ T5734] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.643424][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.658444][ T5734] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.663222][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.708002][ T5736] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.713762][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.721326][ T5736] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.725589][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.732553][ T5736] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.737032][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.737980][ T5736] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.741117][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.767624][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.793939][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.799588][ T221] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.800069][ T221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.803311][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.819100][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.819311][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.835405][ T5744] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.846689][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.846756][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.851824][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.866876][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.866955][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.911727][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.922316][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.922804][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.948454][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.948590][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.952038][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.977023][ T5736] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.985943][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.986068][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.995844][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.995954][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.021883][ T5741] Bluetooth: hci2: command tx timeout [ 40.022019][ T5741] Bluetooth: hci0: command tx timeout [ 40.022080][ T5741] Bluetooth: hci3: command tx timeout [ 40.022133][ T5741] Bluetooth: hci1: command tx timeout [ 40.219591][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.244698][ T5735] veth0_vlan: entered promiscuous mode [ 40.248700][ T5735] veth1_vlan: entered promiscuous mode [ 40.259251][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.274074][ T5735] veth0_macvtap: entered promiscuous mode [ 40.286151][ T5735] veth1_macvtap: entered promiscuous mode [ 40.295260][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.301723][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.313486][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.314811][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.318592][ T5744] veth0_vlan: entered promiscuous mode [ 40.335831][ T5744] veth1_vlan: entered promiscuous mode [ 40.367130][ T5736] veth0_vlan: entered promiscuous mode [ 40.389242][ T5734] veth0_vlan: entered promiscuous mode [ 40.392669][ T5834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.399034][ T5736] veth1_vlan: entered promiscuous mode [ 40.410544][ T5744] veth0_macvtap: entered promiscuous mode [ 40.412849][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.412862][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.421214][ T5734] veth1_vlan: entered promiscuous mode [ 40.423349][ T5744] veth1_macvtap: entered promiscuous mode [ 40.441268][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.441310][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.444746][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.452085][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.455076][ T5736] veth0_macvtap: entered promiscuous mode [ 40.464674][ T5736] veth1_macvtap: entered promiscuous mode [ 40.472952][ T5734] veth0_macvtap: entered promiscuous mode [ 40.481091][ T5734] veth1_macvtap: entered promiscuous mode [ 40.492388][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.499499][ T5735] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.511678][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.513971][ T5735] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.520966][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.523695][ T5735] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.525900][ T5735] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.537747][ T5735] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.565060][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.565145][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.571129][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.587733][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.625973][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.626024][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.661272][ T5785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.661523][ T5785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.661730][ T5785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.661996][ T5785] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.662186][ T5785] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.662340][ T5785] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.662493][ T5785] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.674301][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.674313][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.694703][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.694720][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.725181][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.725246][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.739957][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.740006][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.760334][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.780162][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.780339][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.780503][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.780527][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.780550][ T5834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.780567][ T5834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.854877][ C1] Unknown status report in ack skb [ 40.899644][ T5897] syz.1.7 uses obsolete (PF_INET,SOCK_PACKET) [ 41.269924][ T5827] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 41.431997][ T5827] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 41.433426][ T5827] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 41.433467][ T5827] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.433487][ T5827] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.433504][ T5827] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 41.433544][ T5827] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.438892][ T5827] usb 6-1: config 0 descriptor?? [ 41.665513][ T5938] Illegal XDP return value 2901065463 on prog (id 4) dev syz_tun, expect packet loss! [ 41.733682][ T5941] Zero length message leads to an empty skb [ 41.785843][ T5819] input: syz0 as /devices/virtual/misc/uhid/0005:0572:0306.0002/input/input5 [ 41.805709][ T5819] hid-generic 0005:0572:0306.0002: input,hidraw1: BLUETOOTH HID v0.08 Gamepad [syz0] on syz0 [ 41.867453][ T5950] Bluetooth: MGMT ver 1.23 [ 41.885401][ T5827] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd [ 41.895048][ T5827] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 41.909725][ T5948] fido_id[5948]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 42.090440][ T5749] Bluetooth: hci1: command tx timeout [ 42.090517][ T5095] Bluetooth: hci2: command tx timeout [ 42.090575][ T5739] Bluetooth: hci0: command tx timeout [ 42.090608][ T5741] Bluetooth: hci3: command tx timeout [ 42.147657][ T5826] usb 6-1: USB disconnect, device number 2 [ 42.320668][ T5827] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 42.433874][ T5983] ======================================================= [ 42.433874][ T5983] WARNING: The mand mount option has been deprecated and [ 42.433874][ T5983] and is ignored by this kernel. Remove the mand [ 42.433874][ T5983] option from the mount to silence this warning. [ 42.433874][ T5983] ======================================================= [ 42.477912][ T5985] aoe: unknown AoE command type 0x30 [ 42.500400][ T5827] usb 7-1: Using ep0 maxpacket: 8 [ 42.505540][ T5827] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 42.510925][ T5827] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 42.516072][ T5827] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.523011][ T5827] usb 7-1: config 0 descriptor?? [ 42.744570][ T5827] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 42.809862][ T35] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 42.947377][ T5561] usb 7-1: USB disconnect, device number 2 [ 42.947451][ C2] iowarrior 7-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 42.960482][ T35] usb 8-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 42.961316][ T35] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 42.961338][ T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.062830][ T43] audit: type=1400 audit(1787692390.592:2): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="test" pid=6005 comm="syz.1.52" name="test" offset=36 [ 43.179028][ T35] qmi_wwan 8-1:1.0: cdc-wdm0: USB WDM device [ 43.187362][ T35] wwan wwan0: port wwan0qmi0 attached [ 43.391984][ T35] qmi_wwan 8-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.3-1, WWAN/QMI device, 8e:f9:90:b9:9f:b4 [ 43.393571][ T35] usb 8-1: USB disconnect, device number 2 [ 43.396139][ T35] qmi_wwan 8-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.3-1, WWAN/QMI device [ 43.443253][ T35] wwan wwan0: port wwan0qmi0 disconnected [ 44.103773][ T1524] libceph: connect (1)[c::]:6789 error -101 [ 44.104133][ T1524] libceph: mon0 (1)[c::]:6789 connect error [ 44.112303][ T1524] libceph: connect (1)[c::]:6789 error -101 [ 44.116828][ T1524] libceph: mon0 (1)[c::]:6789 connect error [ 44.170003][ T5095] Bluetooth: hci0: command tx timeout [ 44.170069][ T5095] Bluetooth: hci2: command tx timeout [ 44.170815][ T5739] Bluetooth: hci3: command tx timeout [ 44.171260][ T5741] Bluetooth: hci1: command tx timeout [ 44.197990][ T6039] ceph: No mds server is up or the cluster is laggy [ 44.339150][ T1524] logitech-hidpp-device 0005:046D:B012.0004: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 44.387830][ T6060] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.394961][ T6061] fido_id[6061]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 44.465743][ T6060] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.524574][ T6060] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.597195][ T6060] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.688508][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.719919][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.720006][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.720085][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.817120][ T6075] dummy0: entered promiscuous mode [ 44.820939][ T6075] gretap0: entered promiscuous mode [ 44.822719][ T6075] hsr1: entered allmulticast mode [ 44.822735][ T6075] dummy0: entered allmulticast mode [ 44.822790][ T6075] gretap0: entered allmulticast mode [ 45.040614][ T6091] 9pnet: p9_errstr2errno: server reported unknown error ÿÿ [ 45.246456][ T6112] 9pnet: p9_errstr2errno: server reported unknown error tun [ 45.278847][ T6125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.103'. [ 45.377243][ T6138] netlink: 'syz.0.108': attribute type 7 has an invalid length. [ 45.412097][ T5834] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.412186][ T5834] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.412229][ T5834] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.412247][ T5834] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.467823][ T6150] vmxnet3 0000:00:00.0: Failed to map bar0 [ 45.470926][ T6150] vmxnet3 0000:00:00.0: probe with driver vmxnet3 failed with error -5 [ 45.633697][ T43] audit: type=1326 audit(1787692393.162:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6167 comm="syz.2.120" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb2fec code=0x0 [ 45.817272][ T6173] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.818491][ T6173] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.838187][ T6174] netlink: 'syz.3.121': attribute type 10 has an invalid length. [ 45.881393][ T6173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.886794][ T6173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.958305][ T6174] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 45.961752][ T5785] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.963819][ T5785] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.963852][ T5785] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.963881][ T5785] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.967329][ T6175] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 45.967351][ T6175] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 45.967373][ T6175] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 45.969011][ T6175] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 45.973013][ T6175] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 46.250435][ T5739] Bluetooth: hci1: command tx timeout [ 46.250546][ T5739] Bluetooth: hci0: command tx timeout [ 46.250568][ T5739] Bluetooth: hci3: command tx timeout [ 46.250675][ T5741] Bluetooth: hci2: command tx timeout [ 46.300254][ T42] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 46.451457][ T42] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 46.452499][ T42] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 46.452539][ T42] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.452560][ T42] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.452577][ T42] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 46.452609][ T42] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.455762][ T42] usb 8-1: config 0 descriptor?? [ 46.511900][ T6180] Process accounting resumed [ 46.525870][ T6185] device-mapper: ioctl: name not supplied when creating device [ 46.627582][ T6190] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 46.631415][ T6190] bond1: (slave lo): Enslaving as an active interface with an up link [ 46.633667][ T6190] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 46.880634][ T42] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 46.880734][ T42] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 46.880749][ T42] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 46.880761][ T42] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 46.880773][ T42] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 46.880785][ T42] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 46.880797][ T42] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 46.880809][ T42] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 46.880821][ T42] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 46.880833][ T42] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 46.885713][ T42] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 46.940684][ T6200] jffs2: notice: (6200) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 46.958368][ T6200] overlayfs: failed to resolve './bus': -2 [ 47.146174][ T949] usb 8-1: USB disconnect, device number 3 [ 47.291608][ T43] audit: type=1400 audit(1787692394.822:4): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=6219 comm="syz.2.136" name="unknown" offset=28 [ 47.402663][ T6229] bridge1: entered promiscuous mode [ 47.402740][ T6229] bridge1: entered allmulticast mode [ 47.461816][ T6234] faux_driver vgem: [drm] Unknown color mode 6; guessing buffer size. [ 47.599965][ T5843] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 47.772176][ T5843] usb 6-1: Using ep0 maxpacket: 8 [ 47.772700][ T5843] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 47.773507][ T5843] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 47.773530][ T5843] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 47.773541][ T5843] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 47.773553][ T5843] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 47.773564][ T5843] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 47.773582][ T5843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.980930][ T5843] usb 6-1: usb_control_msg returned -32 [ 47.981403][ T5843] usbtmc 6-1:16.0: can't read capabilities [ 48.383936][ T6259] syz.2.153 (6259): drop_caches: 2 [ 48.476782][ T6265] input: syz0 as /devices/virtual/input/input7 [ 48.615032][ T6276] netlink: 'syz.2.160': attribute type 12 has an invalid length. [ 48.701771][ T6283] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 48.796443][ T6290] smpboot: CPU 1 is now offline [ 48.852824][ T6291] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 48.906309][ T57] usb 6-1: USB disconnect, device number 3 [ 48.937448][ T6296] netlink: 24 bytes leftover after parsing attributes in process `syz.2.166'. [ 49.159100][ T6308] jffs2: notice: (6308) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 49.510891][ T6318] jffs2: notice: (6318) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 49.639882][ T57] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 49.790555][ T57] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 49.791455][ T57] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.791470][ T57] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.791481][ T57] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 49.791499][ T57] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.792717][ T57] usb 8-1: config 0 descriptor?? [ 50.220211][ T57] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 51.225178][ T6382] 8021q: adding VLAN 0 to HW filter on device eth0 [ 51.229422][ T6382] 8021q: adding VLAN 0 to HW filter on device eth1 [ 51.230582][ T6382] 8021q: adding VLAN 0 to HW filter on device eth2 [ 51.232740][ T6382] 8021q: adding VLAN 0 to HW filter on device eth3 [ 51.233799][ T6382] 8021q: adding VLAN 0 to HW filter on device bond1 [ 51.265053][ T6382] tap0: tun_chr_ioctl cmd 1074025677 [ 51.265118][ T6382] tap0: Linktype set failed because interface is up [ 51.378589][ T6392] netlink: 20 bytes leftover after parsing attributes in process `syz.1.195'. [ 51.538247][ T5756] udevd[5756]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 51.546055][ C1] plantronics 0003:047F:FFFF.0006: usb_submit_urb(ctrl) failed: -1 [ 51.780789][ T1524] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 51.930292][ T1524] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 51.934762][ T1524] usb 6-1: config index 0 descriptor too short (expected 28277, got 36) [ 51.937548][ T1524] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.940776][ T1524] usb 6-1: config 0 has no interfaces? [ 51.942597][ T1524] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.947588][ T1524] usb 6-1: config 0 descriptor?? [ 52.156576][ T9] usb 6-1: USB disconnect, device number 4 [ 52.359651][ T5843] usb 8-1: USB disconnect, device number 4 [ 52.611851][ T6431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.617370][ T6431] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.621262][ T6431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.636017][ T6431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.639310][ T6431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.648681][ T6431] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 52.652350][ T6431] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.659349][ T6431] veth1_vlan: left promiscuous mode [ 52.662064][ T6431] veth0_vlan: left promiscuous mode [ 52.664510][ T6431] veth0_vlan: entered promiscuous mode [ 52.667460][ T6431] veth1_vlan: entered promiscuous mode [ 52.671828][ T6431] veth1_macvtap: left promiscuous mode [ 52.674162][ T6431] veth0_macvtap: left promiscuous mode [ 52.676655][ T6431] veth0_macvtap: entered promiscuous mode [ 52.680997][ T6431] veth1_macvtap: entered promiscuous mode [ 52.682590][ T6439] netlink: 'syz.0.208': attribute type 10 has an invalid length. [ 52.689134][ T6431] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 52.692402][ T6431] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 52.695316][ T6431] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 52.699486][ T6431] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 52.708753][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.708842][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.714661][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.714731][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.741101][ T6436] tap0: tun_chr_ioctl cmd 1074025677 [ 52.742328][ T6436] tap0: Linktype set failed because interface is up [ 52.746254][ T6439] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.747659][ T6439] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.750531][ T6439] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.750578][ T6439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.751139][ T6439] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.751206][ T6439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.752851][ T6439] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 52.832613][ T6449] netlink: 20 bytes leftover after parsing attributes in process `syz.0.209'. [ 52.861987][ T5834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.862105][ T5834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.862125][ T5834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.862142][ T5834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.939084][ T5756] udevd[5756]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 54.190861][ T73] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 54.340918][ T73] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 54.341843][ T73] usb 7-1: config index 0 descriptor too short (expected 28277, got 36) [ 54.341862][ T73] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 54.341876][ T73] usb 7-1: config 0 has no interfaces? [ 54.341896][ T73] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.345221][ T73] usb 7-1: config 0 descriptor?? [ 54.551900][ T5561] usb 7-1: USB disconnect, device number 3 [ 55.182143][ T6510] tap0: tun_chr_ioctl cmd 1074025677 [ 55.182186][ T6510] tap0: Linktype set failed because interface is up [ 55.956323][ T6517] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 57.475602][ T6612] netlink: 36 bytes leftover after parsing attributes in process `syz.1.248'. [ 57.559845][ T5636] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 57.561077][ T5561] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 57.709934][ T5561] usb 7-1: Using ep0 maxpacket: 32 [ 57.710671][ T5636] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 57.711560][ T5636] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 57.711580][ T5636] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 57.711598][ T5636] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 57.713482][ T5636] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.713500][ T5636] usb 5-1: Product: syz [ 57.713511][ T5636] usb 5-1: Manufacturer: syz [ 57.713523][ T5636] usb 5-1: SerialNumber: syz [ 57.716692][ T5741] Bluetooth: hci0: Malformed LE Event: 0x02 [ 57.718636][ T5561] usb 7-1: unable to get BOS descriptor or descriptor too short [ 57.718659][ T5561] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 57.719369][ T5561] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 57.719385][ T5561] usb 7-1: can't read configurations, error -71 [ 57.723824][ T5636] hub 5-1:1.0: bad descriptor, ignoring hub [ 57.723845][ T5636] hub 5-1:1.0: probe with driver hub failed with error -5 [ 57.926890][ T5636] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 58.341838][ T6595] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 58.345020][ T6595] usb 5-1: device reset changed ep0 maxpacket size! [ 58.348667][ T1524] usb 5-1: USB disconnect, device number 2 [ 58.351364][ T1524] usblp0: removed [ 58.489961][ T1524] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 58.649884][ T1524] usb 5-1: Using ep0 maxpacket: 16 [ 58.651019][ T1524] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 58.651459][ T1524] usb 5-1: config 0 has no interfaces? [ 58.652969][ T1524] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.652981][ T1524] usb 5-1: Product: syz [ 58.652988][ T1524] usb 5-1: Manufacturer: syz [ 58.652995][ T1524] usb 5-1: SerialNumber: syz [ 58.658397][ T1524] usb 5-1: config 0 descriptor?? [ 58.869124][ T1524] usb 5-1: USB disconnect, device number 3 [ 60.099593][ T6673] evm: overlay not supported [ 60.364820][ T6675] capability: warning: `syz.1.274' uses deprecated v2 capabilities in a way that may be insecure [ 60.513968][ T6691] jffs2: notice: (6691) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 60.630241][ T6696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.273'. [ 60.630298][ T6696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.273'. [ 60.689144][ T6621] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 60.869901][ T6621] usb 8-1: Using ep0 maxpacket: 32 [ 60.872201][ T6621] usb 8-1: unable to get BOS descriptor or descriptor too short [ 60.876621][ T6621] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 60.878588][ T6621] usb 8-1: config 8 has an invalid interface number: 188 but max is 0 [ 60.878606][ T6621] usb 8-1: config 8 has no interface number 0 [ 60.878628][ T6621] usb 8-1: config 8 interface 188 has no altsetting 0 [ 60.881849][ T6621] usb 8-1: string descriptor 0 read error: -22 [ 60.881939][ T6621] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.890396][ T6621] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 60.890432][ T6621] dw2102: su3000_power_ctrl: 1, initialized 0 [ 60.890743][ T6621] dvb-usb: bulk message failed: -22 (2/0) [ 60.897354][ T6621] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 60.898211][ T6621] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 60.898248][ T6621] usb 8-1: media controller created [ 60.898645][ T6621] dvb-usb: bulk message failed: -22 (6/0) [ 60.898659][ T6621] dw2102: i2c transfer failed. [ 60.898685][ T6621] dvb-usb: bulk message failed: -22 (6/0) [ 60.898695][ T6621] dw2102: i2c transfer failed. [ 60.898704][ T6621] dvb-usb: bulk message failed: -22 (6/0) [ 60.898714][ T6621] dw2102: i2c transfer failed. [ 60.898723][ T6621] dvb-usb: bulk message failed: -22 (6/0) [ 60.898733][ T6621] dw2102: i2c transfer failed. [ 60.898742][ T6621] dvb-usb: bulk message failed: -22 (6/0) [ 60.898750][ T6621] dw2102: i2c transfer failed. [ 60.898758][ T6621] dvb-usb: bulk message failed: -22 (6/0) [ 60.898766][ T6621] dw2102: i2c transfer failed. [ 60.898772][ T6621] dvb-usb: MAC address: 02:02:02:02:02:02 [ 60.916168][ T6621] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 60.930650][ T6621] dvb-usb: bulk message failed: -22 (3/0) [ 60.930667][ T6621] dw2102: command 0x0e transfer failed. [ 60.930674][ T6621] dvb-usb: bulk message failed: -22 (3/0) [ 60.930683][ T6621] dw2102: command 0x0e transfer failed. [ 61.233255][ T6621] dvb-usb: bulk message failed: -22 (3/0) [ 61.233317][ T6621] dw2102: command 0x0e transfer failed. [ 61.233358][ T6621] dvb-usb: bulk message failed: -22 (3/0) [ 61.233366][ T6621] dw2102: command 0x0e transfer failed. [ 61.233370][ T6621] dvb-usb: bulk message failed: -22 (1/0) [ 61.233376][ T6621] dw2102: command 0x51 transfer failed. [ 61.234803][ T6682] dvb-usb: bulk message failed: -22 (5/0) [ 61.234815][ T6682] dw2102: i2c transfer failed. [ 61.234840][ T6682] retu-mfd 2-0002: Tahvo v0.1 found [ 61.234859][ T6682] dvb-usb: bulk message failed: -22 (6/0) [ 61.234866][ T6682] dw2102: i2c transfer failed. [ 61.243094][ T6682] dvb-usb: bulk message failed: -22 (5/0) [ 61.243106][ T6682] dw2102: i2c transfer failed. [ 61.251808][ T6682] genirq: Flags mismatch irq 0. 00002000 (TAHVO) vs. 00215a00 (timer) [ 61.253721][ T6682] retu-mfd 2-0002: Failed to request IRQ 0 for TAHVO: -16 [ 61.258693][ T6682] retu-mfd 2-0002: probe with driver retu-mfd failed with error -16 [ 61.265628][ T6682] i2c i2c-2: new_device: Instantiated device tahvo at 0x02 [ 61.266451][ T6621] DVB: Unable to find symbol ds3000_attach() [ 61.266458][ T6621] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 61.292899][ T28] numa_remove_cpu cpu 1 node 0: mask now 0,2-3 [ 61.292935][ T28] numa_remove_cpu cpu 1 node 1: mask now 0,2-3 [ 61.293089][ T28] ================================================================== [ 61.293096][ T28] BUG: KASAN: slab-use-after-free in irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 61.293117][ T28] Read of size 8 at addr ffff88804eaa39a8 by task migration/1/28 [ 61.293129][ T28] [ 61.293137][ T28] CPU: 1 UID: 0 PID: 28 Comm: migration/1 Not tainted syzkaller #0 PREEMPT(full) [ 61.293156][ T28] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.293165][ T28] Stopper: multi_cpu_stop+0x0/0x4b0 <- __stop_cpus.constprop.0+0xb1/0x140 [ 61.293198][ T28] Call Trace: [ 61.293204][ T28] [ 61.293210][ T28] dump_stack_lvl+0x100/0x190 [ 61.293231][ T28] print_report+0x13d/0x4b0 [ 61.293254][ T28] ? __virt_addr_valid+0x239/0x430 [ 61.293278][ T28] ? irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 61.293293][ T28] kasan_report+0xdf/0x1c0 [ 61.293314][ T28] ? irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 61.293332][ T28] irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 61.293349][ T28] ? native_cpu_disable+0x54/0x80 [ 61.293372][ T28] ? __pfx_take_cpu_down+0x10/0x10 [ 61.293394][ T28] fixup_irqs+0x2b/0x280 [ 61.293418][ T28] ? __pfx_take_cpu_down+0x10/0x10 [ 61.293439][ T28] native_cpu_disable+0x59/0x80 [ 61.293461][ T28] take_cpu_down+0xb6/0x190 [ 61.293484][ T28] multi_cpu_stop+0x16a/0x4b0 [ 61.293500][ T28] ? __stop_cpus.constprop.0+0xb1/0x140 [ 61.293522][ T28] ? __pfx_multi_cpu_stop+0x10/0x10 [ 61.293536][ T28] cpu_stopper_thread+0x21e/0x450 [ 61.293561][ T28] ? __pfx_cpu_stopper_thread+0x10/0x10 [ 61.293585][ T28] smpboot_thread_fn+0x3d3/0xab0 [ 61.293602][ T28] ? kthread+0x13a/0x450 [ 61.293618][ T28] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 61.293631][ T28] kthread+0x373/0x450 [ 61.293647][ T28] ? __pfx_kthread+0x10/0x10 [ 61.293664][ T28] ret_from_fork+0x730/0xd60 [ 61.293687][ T28] ? __pfx_ret_from_fork+0x10/0x10 [ 61.293711][ T28] ? __switch_to+0x800/0x10f0 [ 61.293729][ T28] ? __pfx_kthread+0x10/0x10 [ 61.293746][ T28] ret_from_fork_asm+0x1a/0x30 [ 61.293765][ T28] [ 61.293770][ T28] [ 61.293774][ T28] Allocated by task 6682: [ 61.293781][ T28] kasan_save_stack+0x30/0x50 [ 61.293796][ T28] kasan_save_track+0x14/0x30 [ 61.293810][ T28] __kasan_kmalloc+0xaa/0xb0 [ 61.293824][ T28] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 61.293846][ T28] regmap_add_irq_chip_fwnode+0x42f/0x38f0 [ 61.293869][ T28] regmap_add_irq_chip+0x66/0x80 [ 61.293890][ T28] retu_probe.cold+0x1a6/0x41e [ 61.293904][ T28] i2c_device_probe+0x658/0xd10 [ 61.293922][ T28] really_probe+0x241/0xa60 [ 61.293942][ T28] __driver_probe_device+0x210/0x460 [ 61.293963][ T28] driver_probe_device+0x4a/0x140 [ 61.293983][ T28] __device_attach_driver+0x1df/0x320 [ 61.294010][ T28] bus_for_each_drv+0x159/0x1e0 [ 61.294028][ T28] __device_attach+0x1e4/0x4d0 [ 61.294048][ T28] device_initial_probe+0xaf/0xd0 [ 61.294069][ T28] bus_probe_device+0x64/0x160 [ 61.294087][ T28] device_add+0x121d/0x1970 [ 61.294100][ T28] i2c_new_client_device+0x660/0xd30 [ 61.294119][ T28] new_device_store+0x20f/0x420 [ 61.294136][ T28] dev_attr_store+0x58/0x80 [ 61.294149][ T28] sysfs_kf_write+0xf2/0x150 [ 61.294171][ T28] kernfs_fop_write_iter+0x3e0/0x5f0 [ 61.294190][ T28] vfs_write+0x6af/0x1050 [ 61.294210][ T28] ksys_write+0x12a/0x250 [ 61.294230][ T28] __do_fast_syscall_32+0x13a/0x8b0 [ 61.294246][ T28] do_fast_syscall_32+0x32/0x70 [ 61.294259][ T28] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 61.294277][ T28] [ 61.294280][ T28] Freed by task 6682: [ 61.294287][ T28] kasan_save_stack+0x30/0x50 [ 61.294301][ T28] kasan_save_track+0x14/0x30 [ 61.294315][ T28] kasan_save_free_info+0x3b/0x70 [ 61.294358][ T28] __kasan_slab_free+0x5f/0x80 [ 61.294373][ T28] kfree+0x22b/0x6d0 [ 61.294392][ T28] regmap_add_irq_chip_fwnode+0x233e/0x38f0 [ 61.294412][ T28] regmap_add_irq_chip+0x66/0x80 [ 61.294431][ T28] retu_probe.cold+0x1a6/0x41e [ 61.294443][ T28] i2c_device_probe+0x658/0xd10 [ 61.294456][ T28] really_probe+0x241/0xa60 [ 61.294474][ T28] __driver_probe_device+0x210/0x460 [ 61.294492][ T28] driver_probe_device+0x4a/0x140 [ 61.294510][ T28] __device_attach_driver+0x1df/0x320 [ 61.294530][ T28] bus_for_each_drv+0x159/0x1e0 [ 61.294546][ T28] __device_attach+0x1e4/0x4d0 [ 61.294566][ T28] device_initial_probe+0xaf/0xd0 [ 61.294587][ T28] bus_probe_device+0x64/0x160 [ 61.294604][ T28] device_add+0x121d/0x1970 [ 61.294618][ T28] i2c_new_client_device+0x660/0xd30 [ 61.294637][ T28] new_device_store+0x20f/0x420 [ 61.294654][ T28] dev_attr_store+0x58/0x80 [ 61.294667][ T28] sysfs_kf_write+0xf2/0x150 [ 61.294686][ T28] kernfs_fop_write_iter+0x3e0/0x5f0 [ 61.294703][ T28] vfs_write+0x6af/0x1050 [ 61.294724][ T28] ksys_write+0x12a/0x250 [ 61.294745][ T28] __do_fast_syscall_32+0x13a/0x8b0 [ 61.294759][ T28] do_fast_syscall_32+0x32/0x70 [ 61.294772][ T28] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 61.294789][ T28] [ 61.294792][ T28] The buggy address belongs to the object at ffff88804eaa3800 [ 61.294792][ T28] which belongs to the cache kmalloc-1k of size 1024 [ 61.294805][ T28] The buggy address is located 424 bytes inside of [ 61.294805][ T28] freed 1024-byte region [ffff88804eaa3800, ffff88804eaa3c00) [ 61.294819][ T28] [ 61.294823][ T28] The buggy address belongs to the physical page: [ 61.294830][ T28] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4eaa0 [ 61.294843][ T28] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 61.294855][ T28] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 61.294869][ T28] page_type: f5(slab) [ 61.294883][ T28] raw: 04fff00000000040 ffff88801c042dc0 dead000000000100 dead000000000122 [ 61.294897][ T28] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 61.294911][ T28] head: 04fff00000000040 ffff88801c042dc0 dead000000000100 dead000000000122 [ 61.294924][ T28] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 61.294937][ T28] head: 04fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 61.294950][ T28] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 61.294958][ T28] page dumped because: kasan: bad access detected [ 61.294966][ T28] page_owner tracks the page as allocated [ 61.294971][ T28] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1160, tgid 1160 (kworker/u33:8), ts 39922934892 [ 61.294996][ T28] post_alloc_hook+0xfd/0x120 [ 61.295022][ T28] get_page_from_freelist+0x110d/0x35b0 [ 61.295043][ T28] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 61.295066][ T28] new_slab+0xa9/0x6e0 [ 61.295086][ T28] refill_objects+0xe3/0x410 [ 61.295106][ T28] __pcs_replace_empty_main+0x35e/0x650 [ 61.295126][ T28] __kmalloc_node_track_caller_noprof+0x6a8/0x870 [ 61.295142][ T28] kmalloc_reserve+0xe8/0x350 [ 61.295159][ T28] __alloc_skb+0x185/0x710 [ 61.295178][ T28] br_info_notify+0x10f/0x2e0 [ 61.295197][ T28] br_port_carrier_check+0x26f/0x4d0 [ 61.295218][ T28] br_device_event+0x821/0xa00 [ 61.295233][ T28] notifier_call_chain+0x99/0x3f0 [ 61.295248][ T28] call_netdevice_notifiers_info+0xbe/0x110 [ 61.295264][ T28] netif_state_change+0x165/0x380 [ 61.295278][ T28] linkwatch_do_dev+0xe0/0x120 [ 61.295294][ T28] page last free pid 5734 tgid 5734 ts 39663375517 stack trace: [ 61.295304][ T28] __free_frozen_pages+0x79f/0x10f0 [ 61.295324][ T28] qlist_free_all+0x47/0xf0 [ 61.295337][ T28] kasan_quarantine_reduce+0x1a0/0x1f0 [ 61.295351][ T28] __kasan_slab_alloc+0x69/0x90 [ 61.295367][ T28] __kmalloc_cache_noprof+0x278/0x6d0 [ 61.295387][ T28] vlan_vid_add+0x514/0x730 [ 61.295402][ T28] vlan_device_event.cold+0x2b/0x149 [ 61.295417][ T28] notifier_call_chain+0x99/0x3f0 [ 61.295430][ T28] call_netdevice_notifiers_info+0xbe/0x110 [ 61.295445][ T28] __dev_notify_flags+0x22c/0x4b0 [ 61.295464][ T28] netif_change_flags+0x108/0x160 [ 61.295484][ T28] do_setlink.isra.0+0x1ac4/0x3e60 [ 61.295507][ T28] rtnl_newlink+0x13c1/0x2620 [ 61.295520][ T28] rtnetlink_rcv_msg+0x95e/0xe90 [ 61.295532][ T28] netlink_rcv_skb+0x159/0x420 [ 61.295550][ T28] netlink_unicast+0x585/0x850 [ 61.295568][ T28] [ 61.295571][ T28] Memory state around the buggy address: [ 61.295579][ T28] ffff88804eaa3880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 61.295589][ T28] ffff88804eaa3900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 61.295599][ T28] >ffff88804eaa3980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 61.295607][ T28] ^ [ 61.295614][ T28] ffff88804eaa3a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 61.295623][ T28] ffff88804eaa3a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 61.295631][ T28] ================================================================== [ 61.295640][ T28] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 61.601912][ T28] CPU: 1 UID: 0 PID: 28 Comm: migration/1 Not tainted syzkaller #0 PREEMPT(full) [ 61.604774][ T28] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.607928][ T28] Stopper: multi_cpu_stop+0x0/0x4b0 <- __stop_cpus.constprop.0+0xb1/0x140 [ 61.610550][ T28] Call Trace: [ 61.611607][ T28] [ 61.612545][ T28] dump_stack_lvl+0x100/0x190 [ 61.614046][ T28] vpanic+0x553/0x970 [ 61.615319][ T28] ? __pfx_vpanic+0x10/0x10 [ 61.616749][ T28] ? __pfx_vprintk_emit+0x10/0x10 [ 61.618335][ T28] ? irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 61.620237][ T28] panic+0xd1/0xe0 [ 61.621425][ T28] ? __pfx_panic+0x10/0x10 [ 61.622834][ T28] check_panic_on_warn.cold+0x19/0x34 [ 61.624528][ T28] end_report.part.0+0x3a/0x90 [ 61.626046][ T28] kasan_report.cold+0xe/0x18 [ 61.627536][ T28] ? irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 61.629430][ T28] irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 61.631295][ T28] ? native_cpu_disable+0x54/0x80 [ 61.632882][ T28] ? __pfx_take_cpu_down+0x10/0x10 [ 61.634486][ T28] fixup_irqs+0x2b/0x280 [ 61.635821][ T28] ? __pfx_take_cpu_down+0x10/0x10 [ 61.637420][ T28] native_cpu_disable+0x59/0x80 [ 61.638963][ T28] take_cpu_down+0xb6/0x190 [ 61.640391][ T28] multi_cpu_stop+0x16a/0x4b0 [ 61.641862][ T28] ? __stop_cpus.constprop.0+0xb1/0x140 [ 61.643607][ T28] ? __pfx_multi_cpu_stop+0x10/0x10 [ 61.645230][ T28] cpu_stopper_thread+0x21e/0x450 [ 61.646815][ T28] ? __pfx_cpu_stopper_thread+0x10/0x10 [ 61.648542][ T28] smpboot_thread_fn+0x3d3/0xab0 [ 61.650095][ T28] ? kthread+0x13a/0x450 [ 61.651440][ T28] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 61.653474][ T28] kthread+0x373/0x450 [ 61.655096][ T28] ? __pfx_kthread+0x10/0x10 [ 61.656906][ T28] ret_from_fork+0x730/0xd60 [ 61.658534][ T28] ? __pfx_ret_from_fork+0x10/0x10 [ 61.660134][ T28] ? __switch_to+0x800/0x10f0 [ 61.661603][ T28] ? __pfx_kthread+0x10/0x10 [ 61.663061][ T28] ret_from_fork_asm+0x1a/0x30 [ 61.664582][ T28] [ 62.733314][ T28] Shutting down cpus with NMI [ 62.735425][ T28] Kernel Offset: disabled [ 62.736774][ T28] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:13:29 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000003 RCX=0000000000000001 RDX=ffff88801cb5a580 RSI=ffffffff82076579 RDI=ffffffff8bed7970 RBP=ffffc90007927894 RSP=ffffc9000046fd28 R8 =0000000000000005 R9 =0000000000000004 R10=0000000000000003 R11=0000000000000000 R12=ffffc90007927870 R13=fffff52000f24f12 R14=0000000000000003 R15=0000000000000003 RIP=ffffffff8207657b RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096976000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f50cf2fb000 CR3=0000000044df0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000559b69a9d4c0 0000559b69a9d4c0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000559b69a79820 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000559b69a7c630 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff1ee7f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff1ee752c80 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85ac18c5 RDI=ffffffff9bc411c0 RBP=ffffffff9bc41180 RSP=ffffc900005673e8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000038 R14=0000000000000003 R15=ffffc90000567700 RIP=ffffffff85ac18ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096a76000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f50cf2f9263 CR3=000000000eb96000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000003 RCX=0000000000000001 RDX=ffff88801cf50000 RSI=ffffffff82076579 RDI=ffffffff8bed7970 RBP=ffffc90007927894 RSP=ffffc9000050fd28 R8 =0000000000000005 R9 =0000000000000004 R10=0000000000000003 R11=0000000000000000 R12=ffffc90007927870 R13=fffff52000f24f12 R14=0000000000000003 R15=0000000000000003 RIP=ffffffff8207657b RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096b76000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f50cefcae9c CR3=0000000074828000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffffffff948bdde8 RCX=0000000000000001 RDX=0000000000000004 RSI=ffffffff8c61e200 RDI=ffff88802b53d224 RBP=0000000000000003 RSP=ffffc900005bfd10 R8 =0000000000000007 R9 =0000000000000000 R10=00000000000008ca R11=0000000000000000 R12=ffffc90007927870 R13=fffff52000f24f12 R14=0000000000000003 R15=0000000000000003 RIP=ffffffff8bcad980 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096c76000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f51247f1 CR3=0000000044df0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000