last executing test programs: 4m50.301751906s ago: executing program 1 (id=490): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x168) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x2ed1, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWFLOWTABLE={0x3c, 0x16, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x64}, 0x1, 0x0, 0x0, 0x4880}, 0x2000000) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r5, &(0x7f0000000240)="c7", 0x1) sendfile(r5, r4, 0x0, 0x3ffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0000000085000000c0000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca2", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="06ff03076844babeb89e14f008ff", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m46.117132236s ago: executing program 1 (id=496): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f0000000800)='1', 0x1) writev(r1, &(0x7f0000001d80)=[{&(0x7f0000000000)="0300000000", 0x5}], 0x1) r3 = openat(r2, &(0x7f0000000900)='./my_sys/bus/pci/rescan\x00', 0x1, 0x15) openat(r2, &(0x7f00000000c0)='./my_sys/bus/pci/devices/0000:00:01.0/config/file0\x00', 0x200, 0x108) write(r3, &(0x7f0000000a00), 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r4 = eventfd2(0x0, 0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r4}) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000440)={0xa0000010}) read$eventfd(r4, &(0x7f0000000400), 0x8) futex_waitv(&(0x7f0000001b00)=[{0xffb, 0x0, 0xa}], 0x1, 0x0, 0x0, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_procfs(0x0, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) writev(r4, &(0x7f0000000340)=[{&(0x7f0000000100)="569534ab1b", 0x5}], 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4m42.466832896s ago: executing program 1 (id=504): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, r5, 0x1, 0x0, 0x0, {0x27}}, 0x14}}, 0x20000040) r6 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r7 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000100001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r11], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 4m39.407081692s ago: executing program 1 (id=508): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x2000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x1, 0x3, 0x4, {0x1, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x2, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:1d.0/remove\x00', 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x7}}, './sys/bus/pci/devices/0000:00:1d.0/remove\x00'}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r3, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r3, &(0x7f0000000100)="55aa", 0x2, 0x1fe) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r5, 0x733, 0x70bd28, 0x259fdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040080}, 0x4000) r6 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r6, 0x4c00, r3) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCGNPMODE(r7, 0xc008744c, &(0x7f0000000080)={0x80fd, 0x1}) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', '\x00', "00000000000000000000000000000000000000000000000000001000"}) write(r2, &(0x7f0000000400)='1', 0x1) 4m36.797473663s ago: executing program 1 (id=511): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', 0x0, 0x1000080, 0x0) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x8, 0x8002}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, 0x0, 0x0}, 0x20) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20007, 0x30}, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x4) sendmmsg$sock(r5, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)}], 0x1}}], 0x1, 0x8015) 4m35.474172884s ago: executing program 1 (id=514): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1bf5b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}]}}}]}, 0x3c}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x14, r2, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x814) mkdir(&(0x7f00000002c0)='./file0\x00', 0xa0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') r4 = open(&(0x7f00000000c0)='./file0\x00', 0x149442, 0x0) ftruncate(r4, 0x200002) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) pwritev2(r5, &(0x7f0000001c40)=[{&(0x7f0000000380)="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", 0xff}, {&(0x7f0000000500)="5727883bd75da0fcd6c80f16623cb58bb6b9041e356c9c0d285e33645f7dc77a46489bdd93acb43cc655ba274e830ac51dd9a3b3ef49d2e1281f4acbe253863ba1a61a0633916d26c1e01fd4e2eb35bcc61874476bf1887482fbbaab62bb6774669d4551a53a52f7d09e4985859e979f8b5106507cb93a911dbda302", 0x7c}, {&(0x7f0000000640)="f493ab9e9d5eb3a6facf8207fca5183d9f39c1d8985b45d26f69ad4e3713d91d3da3ee78e38675f67452dd21e737fad050b220c2c0b5e9a3473544fcc78cb98a7c759239c556b61dcb5d7802ce5af5d1cb4ac7b7cefc9e61a28e2c05ca680d2f69f33c11a570eca9da13b1b2beb7d2a0706e0b5f187154f44023a9b11d4e21ca3021de01a37540be224b655d2b5374b60d0f73623864dc5bc3dde598fad0d2e4645036b909878135556099c0e536e731dc6844910f5ec6f9078fe4ead930aa58fb7d4a9db687eaafe3f90e528cd97a6297", 0xd1}, {&(0x7f0000000740)="fb97584112f0198719d463f9f635d06c30437e7a8f2e52d8fe07208b4e6dc6b5dd94f2ace07d955e829a9c9bb1df3cdf17ff82e98cbddce573e52bcc04aeefc64024c60d2891b5871af600940f5abff11b523d98387eb9042419af7be9b9c2e5aaefeacd44028738abcbe0b0c5347eab34f6fcc35bad56576da1022beedd2b73029b80b35cc06b90ec295ec9", 0x8c}, {&(0x7f0000000c40)="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", 0x1000}], 0x5, 0x2, 0xfffffffd, 0x2) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @loopback}, 0x10) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r8, 0x400455c8, 0x4) ioctl$TCFLSH(r8, 0x800455c9, 0x4000000) connect$pppl2tp(r6, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) sendfile(r6, r5, 0x0, 0x80001d00c0d0) unlink(0x0) socket$pppoe(0x18, 0x1, 0x0) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000040)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, 'veth1_to_team\x00'}}, 0x1e) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000000)='./file0\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) ioctl$HIDIOCGRAWINFO(r5, 0x80084803, &(0x7f0000000240)=""/72) 4m35.053750193s ago: executing program 32 (id=514): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1bf5b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}]}}}]}, 0x3c}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x14, r2, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x814) mkdir(&(0x7f00000002c0)='./file0\x00', 0xa0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') r4 = open(&(0x7f00000000c0)='./file0\x00', 0x149442, 0x0) ftruncate(r4, 0x200002) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) pwritev2(r5, &(0x7f0000001c40)=[{&(0x7f0000000380)="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", 0xff}, {&(0x7f0000000500)="5727883bd75da0fcd6c80f16623cb58bb6b9041e356c9c0d285e33645f7dc77a46489bdd93acb43cc655ba274e830ac51dd9a3b3ef49d2e1281f4acbe253863ba1a61a0633916d26c1e01fd4e2eb35bcc61874476bf1887482fbbaab62bb6774669d4551a53a52f7d09e4985859e979f8b5106507cb93a911dbda302", 0x7c}, {&(0x7f0000000640)="f493ab9e9d5eb3a6facf8207fca5183d9f39c1d8985b45d26f69ad4e3713d91d3da3ee78e38675f67452dd21e737fad050b220c2c0b5e9a3473544fcc78cb98a7c759239c556b61dcb5d7802ce5af5d1cb4ac7b7cefc9e61a28e2c05ca680d2f69f33c11a570eca9da13b1b2beb7d2a0706e0b5f187154f44023a9b11d4e21ca3021de01a37540be224b655d2b5374b60d0f73623864dc5bc3dde598fad0d2e4645036b909878135556099c0e536e731dc6844910f5ec6f9078fe4ead930aa58fb7d4a9db687eaafe3f90e528cd97a6297", 0xd1}, {&(0x7f0000000740)="fb97584112f0198719d463f9f635d06c30437e7a8f2e52d8fe07208b4e6dc6b5dd94f2ace07d955e829a9c9bb1df3cdf17ff82e98cbddce573e52bcc04aeefc64024c60d2891b5871af600940f5abff11b523d98387eb9042419af7be9b9c2e5aaefeacd44028738abcbe0b0c5347eab34f6fcc35bad56576da1022beedd2b73029b80b35cc06b90ec295ec9", 0x8c}, {&(0x7f0000000c40)="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", 0x1000}], 0x5, 0x2, 0xfffffffd, 0x2) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @loopback}, 0x10) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r8, 0x400455c8, 0x4) ioctl$TCFLSH(r8, 0x800455c9, 0x4000000) connect$pppl2tp(r6, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) sendfile(r6, r5, 0x0, 0x80001d00c0d0) unlink(0x0) socket$pppoe(0x18, 0x1, 0x0) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000040)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, 'veth1_to_team\x00'}}, 0x1e) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000000)='./file0\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) ioctl$HIDIOCGRAWINFO(r5, 0x80084803, &(0x7f0000000240)=""/72) 1m47.183067251s ago: executing program 4 (id=993): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0) ioctl(r1, 0x542e, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$9p_virtio(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', &(0x7f0000000480), 0x9, &(0x7f0000000000)=ANY=[@ANYBLOB="7472616e733d76697274696f2c15bb1e500c979d3dfc44c7d5"]) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vxcan0\x00'}) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0x8000, 0x102) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b4003b00", 0x30}], 0x1}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000004095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000002280)={0x2, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x40, 0x0, 0x9}]}, 0x8) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xb, &(0x7f0000000340)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map=r5, 0x2b, 0x0, 0x1, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000080), &(0x7f00000001c0)=[0x0]}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/12], 0x0, 0x5}, 0x94) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='(JlF', @ANYRES16=0x0, @ANYBLOB="0100fffffffffcdbdf250c0000000800060099fdffff"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x90) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000840)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x15c, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x2a}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xff}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x38}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x2}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x58}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2b7d9b6f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc2}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xad1}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4000084}, 0x240000d4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f0000000280)={{0x0, 0x6, 0xfa, 0x0, 0x8, 0x7fff, 0x2, 0xfffffff8, 0xbb5, 0x7, 0x3, 0x7, 0x7710, 0xa, 0x6}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x20, 0x0, 0x0, 0x0, 0x401, 0x0, 0x48, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x50) 1m46.261857831s ago: executing program 4 (id=999): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000002c0), r1, 0x0, 0x2, 0x4}}, 0x20) 1m45.916446129s ago: executing program 4 (id=1001): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000170000005400068014000300303132333435363738393031323334353c00040067636d286165732900000000000000000000000000000000000000000000000014"], 0x68}}, 0x0) 1m45.782622863s ago: executing program 4 (id=1003): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, r4, 0x1, 0x0, 0x0, {0x27}}, 0x14}}, 0x20000040) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r8 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000100001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r12], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 1m45.36962301s ago: executing program 4 (id=1008): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x8000, 0x5a) r1 = openat$cgroup_int(r0, &(0x7f0000000400)='cpu.max\x00', 0x2, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000040)="961a", 0x2}], 0x1) 1m45.226360769s ago: executing program 4 (id=1011): mlockall(0x2) move_pages(0x0, 0x1ffffffffffffc17, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) shmat(0x0, &(0x7f0000000000/0x3000)=nil, 0x4000) 1m30.182678291s ago: executing program 33 (id=1011): mlockall(0x2) move_pages(0x0, 0x1ffffffffffffc17, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) shmat(0x0, &(0x7f0000000000/0x3000)=nil, 0x4000) 10.234099812s ago: executing program 3 (id=1488): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, r5, 0x1, 0x0, 0x0, {0x27}}, 0x14}}, 0x20000040) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r9 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r12) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000100001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r13], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r10, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 9.143769096s ago: executing program 3 (id=1494): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f00000000c0)={0x3, 0xffffffff, 0x70e00000, 0x9, 0x7, 0xf}) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x2c}], 0x1, 0x890) 5.692995405s ago: executing program 3 (id=1515): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 5.166874793s ago: executing program 5 (id=1520): openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0xc, 0x0, 0x0, 0x7, 0x1, 0x4f3, 0x9, 0x9, 0x2, 0x1, 'syz1\x00'}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000000)={0x0, 0x0}) 4.709864876s ago: executing program 5 (id=1521): openat$random(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) timerfd_create(0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 3.431646148s ago: executing program 5 (id=1525): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r0, r1, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)={@cgroup=r1, r1, 0x2f, 0x202c, 0x4, @void, @void, @value=r2}, 0x20) 3.163847238s ago: executing program 5 (id=1527): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000340)="2e1221b23bb601c494d3df173e75963d86dd9d90491c3248320000dbb8a1", 0x1e}, {&(0x7f0000000300)="0400000002e877da", 0x8}, {&(0x7f0000000180)="5d6d5a46fc44e10be7065c681a2064dcfd0d0be3", 0x14}], 0x3) 2.905368843s ago: executing program 0 (id=1529): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000002c0)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x81) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000500)={0x0, 0x4, 0x6}, 0x8) 2.768358771s ago: executing program 5 (id=1530): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) io_setup(0xd4, &(0x7f0000000040)) io_setup(0x202, &(0x7f0000000200)) write(r0, &(0x7f0000000000)="2e000000010002", 0x7) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e0402240c0e9f0919155626128f0ac6fe659497d46febe7830694f02be0368beca0f5bf35ba0da3e4be54144444f413b47b67f0dda0860f3198293537345e64c9a11c675a281f94fa7873090d7fc2f720f0b505a0bbe186def428198002e0e1143a728c9d1ad6e74379dc0c97da589b8ed2c3a82f728954d9dd53d642d1ae7cdb4a60a0a31b"], 0x7) 2.745639095s ago: executing program 0 (id=1531): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0x4}, {0x0, 0x9}, {0xb, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 2.589981693s ago: executing program 5 (id=1532): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) 2.43034679s ago: executing program 2 (id=1533): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="0a00180003030303030300003c00238006000a000080000008000b00ffffff7f080014004cffffff08001c00290c000008001c00fc070000050008009ff100000500110000000000"], 0x64}, 0x1, 0x0, 0x0, 0x85}, 0x40000) 2.429989725s ago: executing program 0 (id=1534): r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x2041, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000002000000000000000000000203000000000000000100000d0000000000000000010000000000000000000002"], &(0x7f0000000140)=""/227, 0x46, 0xe3, 0x1}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x5}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x801) bind$802154_dgram(r1, &(0x7f0000000400)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_clone(0x0, 0x0, 0xffffff36, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) waitid$P_PIDFD(0x3, r5, 0x0, 0xa000000c, 0x0) setsockopt$sock_int(r3, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) listen(r3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f00000007c0)=0x42000401, 0x4) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000001a40)=""/102392, 0x18ff8) connect$802154_dgram(r1, &(0x7f0000000180), 0x14) syz_io_uring_setup(0x1334, &(0x7f00000000c0)={0x0, 0x5039, 0x8, 0x3, 0x3cf, 0x0, r0}, &(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x5ee7, &(0x7f00000002c0)={0x0, 0xa2f, 0x8, 0x3, 0x223, 0x0, r0}, &(0x7f0000000340), &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_modify_offsets$generic(r9, r10, 0x50, 0xfffffff4) sendmmsg(r1, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) 2.348867155s ago: executing program 2 (id=1535): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, r5, 0x1, 0x0, 0x0, {0x27}}, 0x14}}, 0x20000040) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r9 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r12) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000100001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r13], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r10, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 2.128568217s ago: executing program 3 (id=1536): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0xc, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)=0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x4, 0x800087, 0xffffffff, 0xfffffffe}) r8 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r8, r7, &(0x7f0000000340)={0x0, 0x7193, 0x400, 0x2, 0x2ce}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x72bc, 0x40, 0x2, 0x30c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1887, 0x40, 0x3, 0x322}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x468b, 0x4, 0x1, 0xc5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc7a, 0x44, 0x0, 0x20a, 0x0, r1}}], 0x4, &(0x7f0000001dc0)={0x2e, 0x0, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xff}, 0x0, r6, '\x00', {0x4, 0xe52, 0x0, 0x0}}, &(0x7f0000001e40)) 1.579548031s ago: executing program 3 (id=1537): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(r1, 0x4, 0xc00) read$char_usb(r1, 0x0, 0x0) 1.245512505s ago: executing program 0 (id=1538): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000001640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x22004000}, 0x44015) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 1.088643345s ago: executing program 2 (id=1539): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x9) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100, 0x0, 0x0, 0x1}, 'syz1\x00', 0x1a}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 944.031437ms ago: executing program 0 (id=1540): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0) write(r0, &(0x7f0000000480)="ecd5616b", 0x4) 715.275175ms ago: executing program 0 (id=1541): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x5c9800, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x1100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000002c0)={0x1, @win={{0x0, 0x7fffffff, 0x8, 0x2}, 0x0, 0xffffffff, &(0x7f0000000280)={{0x7, 0x8000, 0x108}, &(0x7f0000000100)={{0xffffff65, 0x0, 0x4, 0x5}}}, 0x6, &(0x7f00000003c0)="d2202226f196cd4f75fdcac5955c4afaf740e0be19a85ef8f8c5d7126464b68146f552a21f803f67869ed6f16565d31a26e9138b6b593a7f8826ee508de915", 0x2}}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x18, &(0x7f0000000180)={&(0x7f0000001780)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) close(r6) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x74, r5, {0x6, 0xc}, {0x2}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) r7 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r8 = openat$zero(0xffffff9c, &(0x7f00000004c0), 0x802, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, 0x0) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) 714.99962ms ago: executing program 2 (id=1542): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing/events/msr/read_msr/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1\x00', 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r1, 0xc008ae88, &(0x7f0000000200)={0x4, 0x0, [{0x8b}, {0x10}, {0x1a0}, {0xce}]}) 362.301866ms ago: executing program 2 (id=1543): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) listen(r0, 0x1) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) listen(r1, 0x0) 183.205817ms ago: executing program 2 (id=1544): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, r5, 0x1, 0x0, 0x0, {0x27}}, 0x14}}, 0x20000040) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r9 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r12) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000100001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r13], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r10, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 0s ago: executing program 3 (id=1545): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0', 0x1) write(r0, &(0x7f00000001a0)='1', 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) kernel console output (not intermixed with test programs): 621][ T8494] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 260.340644][ T8494] usb usb2: Product: UHCI Host Controller [ 260.340656][ T8494] usb usb2: Manufacturer: Linux syzkaller uhci_hcd [ 260.340667][ T8494] usb usb2: SerialNumber: 0000:00:1d.0 [ 260.682699][ T8531] ntfs3(nullb0): Primary boot signature is not NTFS. [ 260.712039][ T8531] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 260.753410][ T8494] hub 2-0:1.0: USB hub found [ 260.779441][ T8494] hub 2-0:1.0: 2 ports detected [ 261.227145][ T12] bond1 (unregistering): (slave gretap1): Releasing active interface [ 261.235570][ T5735] Bluetooth: hci3: command tx timeout [ 261.368133][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.391896][ T5735] Bluetooth: hci0: command 0x0406 tx timeout [ 261.504261][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.529342][ T12] bond0 (unregistering): Released all slaves [ 261.558223][ T12] bond1 (unregistering): (slave bond2): Releasing active interface [ 261.583022][ T12] bond1 (unregistering): Released all slaves [ 261.599153][ T12] bond2 (unregistering): Released all slaves [ 261.680090][ T12] bond3 (unregistering): (slave bond4): Releasing active interface [ 261.686665][ T12] bond3 (unregistering): Released all slaves [ 261.703957][ T12] bond4 (unregistering): Released all slaves [ 261.770672][ T12] bond5 (unregistering): (slave bond6): Releasing active interface [ 261.864455][ T12] bond5 (unregistering): Released all slaves [ 261.892701][ T12] bond6 (unregistering): Released all slaves [ 262.307650][ T12] : left promiscuous mode [ 262.670546][ T8549] netlink: 'syz.0.525': attribute type 1 has an invalid length. [ 262.734531][ T8549] 8021q: adding VLAN 0 to HW filter on device bond8 [ 262.998153][ T8552] 8021q: adding VLAN 0 to HW filter on device bond8 [ 263.002061][ T8552] bond8: (slave gre1): The slave device specified does not support setting the MAC address [ 263.006381][ T8552] bond8: (slave gre1): Error -95 calling set_mac_address [ 263.113705][ T12] tipc: Left network mode [ 263.157380][ T5448] 8021q: adding VLAN 0 to HW filter on device eth1 [ 263.239925][ T8556] 8021q: adding VLAN 0 to HW filter on device bond10 [ 263.313726][ T5742] Bluetooth: hci3: command tx timeout [ 263.414254][ T8556] bond8: (slave bond10): Enslaving as an active interface with a down link [ 263.664416][ T8557] bond8 (unregistering): (slave bond10): Releasing active interface [ 263.713768][ T8557] bond8 (unregistering): Released all slaves [ 264.123681][ T5735] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 264.248879][ T8573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.528'. [ 264.663127][ T8485] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.682724][ T8485] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.700844][ T8485] bridge_slave_0: entered allmulticast mode [ 264.714920][ T8485] bridge_slave_0: entered promiscuous mode [ 264.730961][ T8485] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.746827][ T8485] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.751749][ T8485] bridge_slave_1: entered allmulticast mode [ 264.788540][ T8485] bridge_slave_1: entered promiscuous mode [ 265.072709][ T43] audit: type=1804 audit(1787753730.558:688): pid=8579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.530" name="bus" dev="ramfs" ino=19609 res=1 errno=0 [ 265.072820][ T43] audit: type=1804 audit(1787753730.558:689): pid=8579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.530" name="bus" dev="ramfs" ino=19609 res=1 errno=0 [ 265.250324][ T8573] hsr_slave_1 (unregistering): left promiscuous mode [ 265.583748][ T5448] 8021q: adding VLAN 0 to HW filter on device eth2 [ 265.759716][ T8485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.161498][ T8590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.531'. [ 266.238105][ T8485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.356736][ T8485] team0: Port device team_slave_0 added [ 266.371720][ T8485] team0: Port device team_slave_1 added [ 266.548220][ T8485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.548268][ T8485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.548326][ T8485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.576486][ T8593] Console: switching to colour dummy device 80x25 [ 266.654330][ T8485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.657467][ T8485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.728896][ T8485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.305975][ T8485] hsr_slave_0: entered promiscuous mode [ 267.306903][ T8485] hsr_slave_1: entered promiscuous mode [ 267.307453][ T8485] debugfs: 'hsr0' already exists in 'hsr' [ 267.307490][ T8485] Cannot create hsr debugfs directory [ 267.735967][ T5448] 8021q: adding VLAN 0 to HW filter on device eth4 [ 267.784742][ T8625] ntfs3(nullb0): Primary boot signature is not NTFS. [ 267.794013][ T8625] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 267.845969][ T12] hsr_slave_0: left promiscuous mode [ 267.860757][ T12] hsr_slave_1: left promiscuous mode [ 267.861743][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.861834][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.863754][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.863778][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.893440][ T12] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 267.893498][ T12] batman_adv: batadv0: Removing interface: ipvlan2 [ 267.983076][ T12] veth1_macvtap: left promiscuous mode [ 267.983222][ T12] veth0_macvtap: left promiscuous mode [ 267.983335][ T12] veth1_vlan: left promiscuous mode [ 267.983408][ T12] veth0_vlan: left promiscuous mode [ 268.312155][ T5742] Bluetooth: hci0: unexpected event for opcode 0x2005 [ 269.532073][ T12] team0 (unregistering): Port device team_slave_1 removed [ 269.856938][ T8641] ntfs3(nullb0): Primary boot signature is not NTFS. [ 269.863506][ T12] team0 (unregistering): Port device team_slave_0 removed [ 269.888802][ T8641] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 270.206883][ T8630] batadv_slave_1: entered promiscuous mode [ 270.210634][ T8631] batadv_slave_1: left promiscuous mode [ 270.680551][ T8485] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 272.118042][ T8485] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 272.120026][ T8485] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 272.137329][ T8485] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 272.241661][ T8650] raw_sendmsg: syz.3.539 forgot to set AF_INET. Fix it! [ 272.306586][ T8652] program syz.3.539 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 272.337577][ T5742] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 272.374188][ T8485] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 272.406204][ T8650] ceph: No mds server is up or the cluster is laggy [ 272.408416][ T62] libceph: connect (1)[c::]:6789 error -101 [ 272.430528][ T62] libceph: mon0 (1)[c::]:6789 connect error [ 272.601908][ T8656] netlink: 'syz.2.540': attribute type 1 has an invalid length. [ 272.618771][ T8485] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 272.619622][ T8485] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 272.671918][ T8485] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 272.904738][ T8656] 8021q: adding VLAN 0 to HW filter on device bond7 [ 272.947719][ T8665] faux_driver vgem: [drm] Unknown color mode 55545; guessing buffer size. [ 273.063228][ T8657] 8021q: adding VLAN 0 to HW filter on device bond7 [ 273.071396][ T8657] bond7: (slave gre1): The slave device specified does not support setting the MAC address [ 273.082172][ T8657] bond7: (slave gre1): Error -95 calling set_mac_address [ 273.276870][ T8662] 8021q: adding VLAN 0 to HW filter on device bond8 [ 273.410723][ T8662] bond7: (slave bond8): Enslaving as an active interface with a down link [ 273.541170][ T8664] bond7 (unregistering): (slave bond8): Releasing active interface [ 273.626322][ T8664] bond7 (unregistering): Released all slaves [ 273.806033][ T5448] 8021q: adding VLAN 0 to HW filter on device eth3 [ 274.107411][ T8485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.277082][ T8485] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.391115][ T8693] gadgetfs: bound to dummy_udc driver [ 274.490867][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.490977][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.493001][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.493085][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.737747][ T8024] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 274.738356][ C2] gadgetfs: connected [ 274.783657][ T8024] gadgetfs: disconnected [ 275.265632][ C2] gadgetfs: connected [ 275.359174][ T8024] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 275.360874][ T8024] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 275.360948][ T8024] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.363872][ C2] gadgetfs: configuration #1 [ 275.746223][ T8485] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 276.021751][ T8671] lo speed is unknown, defaulting to 1000 [ 276.084833][ T8693] gadgetfs: suspended from state 3 [ 276.085001][ T8693] gadgetfs: disconnected [ 276.098121][ T2331] usb 6-1: USB disconnect, device number 6 [ 276.239646][ T43] audit: type=1800 audit(1787753741.748:690): pid=8689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.542" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 276.904983][ T8708] netlink: 8752 bytes leftover after parsing attributes in process `syz.3.544'. [ 277.070479][ T8712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.545'. [ 279.481348][ T8485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.864311][ T8760] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 281.370271][ T8762] ntfs3(nullb0): Primary boot signature is not NTFS. [ 281.382063][ T8762] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 281.641859][ T8485] veth0_vlan: entered promiscuous mode [ 281.665365][ T8485] veth1_vlan: entered promiscuous mode [ 281.705292][ T8485] veth0_macvtap: entered promiscuous mode [ 281.710149][ T8485] veth1_macvtap: entered promiscuous mode [ 281.727450][ T8485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.732213][ T8485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.895384][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.895493][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.895555][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.895584][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.170287][ T222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.170363][ T222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.213317][ T222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.213375][ T222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.322546][ T8775] jffs2: notice: (8775) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 282.404489][ T8775] lo: entered promiscuous mode [ 282.493913][ T8775] gre0: entered promiscuous mode [ 282.553439][ T8775] gretap0: entered promiscuous mode [ 282.622752][ T8775] erspan0: entered promiscuous mode [ 282.625172][ T8775] ip_vti0: entered promiscuous mode [ 282.626817][ T8775] ip6_vti0: entered promiscuous mode [ 282.628430][ T8775] sit0: entered promiscuous mode [ 282.637051][ T8775] ip6tnl0: entered promiscuous mode [ 282.643566][ T8775] ip6gre0: entered promiscuous mode [ 282.690028][ T8775] bridge0: port 3(syz_tun) entered disabled state [ 282.729618][ T8775] ip6gretap0: entered promiscuous mode [ 282.786165][ T8775] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.790350][ T8775] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.829805][ T8775] bridge0: entered promiscuous mode [ 283.247281][ T8790] ntfs3(nullb0): Primary boot signature is not NTFS. [ 283.266149][ T8790] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 283.713834][ T8793] netlink: 'syz.4.515': attribute type 1 has an invalid length. [ 283.713885][ T8793] netlink: 756 bytes leftover after parsing attributes in process `syz.4.515'. [ 284.309401][ T8798] ntfs3(nullb0): Primary boot signature is not NTFS. [ 284.309808][ T8798] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 284.467892][ T8803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.552'. [ 286.585907][ T8808] lo speed is unknown, defaulting to 1000 [ 287.944533][ T8844] netlink: 'syz.3.555': attribute type 1 has an invalid length. [ 289.089468][ T43] audit: type=1800 audit(1787753754.588:691): pid=8857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.556" name="zoned" dev="configfs" ino=20003 res=0 errno=0 [ 289.089766][ T43] audit: type=1800 audit(1787753754.588:692): pid=8857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.556" name="power" dev="configfs" ino=20004 res=0 errno=0 [ 289.232142][ T8844] bond8: entered promiscuous mode [ 289.232419][ T8844] 8021q: adding VLAN 0 to HW filter on device bond8 [ 289.429352][ T8846] bond8: (slave bridge1): making interface the new active one [ 289.437256][ T8846] bridge1: entered promiscuous mode [ 289.638912][ T8846] bond8: (slave bridge1): Enslaving as an active interface with an up link [ 292.774165][ T8880] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 292.785370][ T8880] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 292.785517][ T8880] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 292.785762][ T8880] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 292.806183][ T8880] pci 0000:00:01.0: Adding to iommu group 1 [ 292.812394][ T8880] pci 0000:00:01.0: vgaarb: bridge control possible [ 292.812417][ T8880] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=none,locks=none [ 292.835962][ T8880] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 292.836441][ T8880] pci 0000:00:01.0: ROM [mem 0x81000000-0x8100ffff pref]: assigned [ 292.836503][ T8880] pci 0000:00:01.0: BAR 2 [mem 0x81010000-0x81010fff]: assigned [ 292.935052][ T8880] bochs-drm 0000:00:01.0: enabling device (0100 -> 0102) [ 293.143419][ T8880] [drm] Found bochs VGA, ID 0xb0c5. [ 293.187792][ T8880] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81010000. [ 293.347605][ T8880] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 294.028393][ T8880] Console: switching to colour frame buffer device 160x50 [ 294.061535][ T8880] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 296.365343][ T8902] 9pnet_fd: Insufficient options for proto=fd [ 296.579151][ T8902] xhci_hcd 0000:00:1f.0: init 0000:00:1f.0 fail, -16 [ 296.579209][ T8902] xhci_hcd 0000:00:1f.0: probe with driver xhci_hcd failed with error -16 [ 297.614764][ T8918] gadgetfs: bound to dummy_udc driver [ 297.620804][ T62] kernel write not supported for file /dummy_udc (pid: 62 comm: kworker/1:1) [ 297.999763][ T5811] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 298.000056][ C1] gadgetfs: connected [ 298.001546][ T5811] gadgetfs: disconnected [ 298.214753][ C1] gadgetfs: connected [ 298.248651][ T5811] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 298.338899][ T5811] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 298.338988][ T5811] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.443005][ C1] gadgetfs: configuration #1 [ 299.000740][ T8912] gadgetfs: suspended from state 3 [ 299.014799][ T5844] usb 6-1: USB disconnect, device number 7 [ 299.018853][ T8912] gadgetfs: disconnected [ 300.719999][ T8950] netlink: 'syz.0.569': attribute type 1 has an invalid length. [ 300.906999][ T8944] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 300.907040][ T8944] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 300.907212][ T8944] vhci_hcd vhci_hcd.0: Device attached [ 300.959897][ T8950] 8021q: adding VLAN 0 to HW filter on device bond8 [ 301.060015][ T8954] 8021q: adding VLAN 0 to HW filter on device bond8 [ 301.060334][ T8954] bond8: (slave gre1): The slave device specified does not support setting the MAC address [ 301.061372][ T8954] bond8: (slave gre1): Error -95 calling set_mac_address [ 301.198817][ T5840] usb 42-1: SetAddress Request (10) to port 0 [ 301.198934][ T5840] usb 42-1: new SuperSpeed USB device number 10 using vhci_hcd [ 301.284721][ T8958] 8021q: adding VLAN 0 to HW filter on device bond11 [ 301.298054][ T8958] bond8: (slave bond11): Enslaving as an active interface with a down link [ 301.410872][ T8950] bond8 (unregistering): (slave bond11): Releasing active interface [ 301.873298][ T8950] bond8 (unregistering): Released all slaves [ 303.476233][ T8946] vhci_hcd: connection reset by peer [ 303.532185][ T5810] vhci_hcd vhci_hcd.2: stop threads [ 303.532253][ T5810] vhci_hcd vhci_hcd.2: release socket [ 303.532345][ T5810] vhci_hcd vhci_hcd.2: disconnect device [ 304.115178][ T8990] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 304.232613][ T55] IPVS: starting estimator thread 0... [ 304.369248][ T8991] IPVS: using max 21 ests per chain, 50400 per kthread [ 306.242887][ T9007] netlink: 'syz.4.579': attribute type 1 has an invalid length. [ 306.268986][ T5840] usb 42-1: device descriptor read/8, error -110 [ 306.273770][ T9009] jffs2: notice: (9009) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 306.562660][ T9013] bond1 (unregistering): Released all slaves [ 306.707806][ T5840] usb usb42-port1: attempt power cycle [ 307.172306][ T9024] netlink: 'syz.4.582': attribute type 1 has an invalid length. [ 307.311859][ T5840] usb usb42-port1: unable to enumerate USB device [ 307.319908][ T43] audit: type=1800 audit(1787753772.828:693): pid=9017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.577" name="test2" dev="jffs2" ino=3 res=0 errno=0 [ 307.349924][ T9025] gretap1: entered promiscuous mode [ 307.600653][ T9024] bond1 (unregistering): Released all slaves [ 307.929438][ T9025] hsr_slave_1 (unregistering): left promiscuous mode [ 308.034817][ T9038] 9pnet_fd: Insufficient options for proto=fd [ 308.068874][ T9038] xhci_hcd 0000:00:1f.0: init 0000:00:1f.0 fail, -16 [ 308.099599][ T9038] xhci_hcd 0000:00:1f.0: probe with driver xhci_hcd failed with error -16 [ 308.170943][ T9031] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 309.132958][ T9045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.586'. [ 309.929476][ T9057] ntfs3(nullb0): Primary boot signature is not NTFS. [ 309.929760][ T9057] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 310.928451][ T9050] lo speed is unknown, defaulting to 1000 [ 312.586092][ T9081] ntfs3(nullb0): Primary boot signature is not NTFS. [ 312.649510][ T9081] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 313.403050][ T9086] 9pnet_fd: Insufficient options for proto=fd [ 313.532436][ T9086] xhci_hcd 0000:00:1f.0: init 0000:00:1f.0 fail, -16 [ 313.532519][ T9086] xhci_hcd 0000:00:1f.0: probe with driver xhci_hcd failed with error -16 [ 313.883592][ T9089] netlink: 'syz.3.595': attribute type 1 has an invalid length. [ 314.128389][ T9089] 8021q: adding VLAN 0 to HW filter on device bond10 [ 314.285927][ T9093] 8021q: adding VLAN 0 to HW filter on device bond10 [ 314.286345][ T9093] bond10: (slave gre2): The slave device specified does not support setting the MAC address [ 314.287232][ T9093] bond10: (slave gre2): Error -95 calling set_mac_address [ 314.672447][ T9089] 8021q: adding VLAN 0 to HW filter on device bond11 [ 315.061616][ T9089] bond10: (slave bond11): Enslaving as an active interface with a down link [ 315.105370][ T9100] ntfs3(nullb0): Primary boot signature is not NTFS. [ 315.120573][ T9100] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 315.121576][ T9097] bond10 (unregistering): (slave bond11): Releasing active interface [ 315.293376][ T9097] bond10 (unregistering): Released all slaves [ 315.786939][ T9108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.598'. [ 316.409871][ T9111] ntfs3(nullb0): Primary boot signature is not NTFS. [ 316.420269][ T9111] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 316.608521][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.943361][ T9114] netlink: 28 bytes leftover after parsing attributes in process `syz.0.600'. [ 317.917276][ T9123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.603'. [ 317.958016][ T9123] batadv0: entered promiscuous mode [ 318.006637][ T9123] macsec1: entered promiscuous mode [ 318.009031][ T9123] macsec1: entered allmulticast mode [ 318.011479][ T9123] batadv0: entered allmulticast mode [ 318.015479][ T9123] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 318.054081][ T9123] batadv0: left allmulticast mode [ 318.056581][ T9123] batadv0: left promiscuous mode [ 318.298382][ T9128] smc: removing ib device syz0 [ 318.495311][ T9128] smbdirect: ib_dev[syz0] removed [ 318.511542][ T9132] f_midi2: Invalid MIDI1 group definitions for block 0:0 [ 318.578395][ T9132] UDC core: g1: couldn't find an available UDC or it's busy [ 318.932423][ T9140] netlink: 'syz.3.607': attribute type 1 has an invalid length. [ 319.162720][ T9140] 8021q: adding VLAN 0 to HW filter on device bond10 [ 319.244149][ T9142] 8021q: adding VLAN 0 to HW filter on device bond10 [ 319.244559][ T9142] bond10: (slave gre2): The slave device specified does not support setting the MAC address [ 319.259408][ T9142] bond10: (slave gre2): Error -95 calling set_mac_address [ 319.507927][ T9151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.608'. [ 319.508077][ T9146] 8021q: adding VLAN 0 to HW filter on device bond12 [ 319.629119][ T9146] bond10: (slave bond12): Enslaving as an active interface with a down link [ 319.866643][ T9140] bond10 (unregistering): (slave bond12): Releasing active interface [ 319.923208][ T9140] bond10 (unregistering): Released all slaves [ 320.444839][ T43] audit: type=1800 audit(1787753785.958:694): pid=9158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.609" name="addr_trtype" dev="configfs" ino=21222 res=0 errno=0 [ 320.446104][ T9155] lo speed is unknown, defaulting to 1000 [ 320.446812][ T43] audit: type=1800 audit(1787753785.958:695): pid=9158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.609" name="addr_traddr" dev="configfs" ino=21223 res=0 errno=0 [ 320.448268][ T43] audit: type=1800 audit(1787753785.958:696): pid=9158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.609" name="addr_trsvcid" dev="configfs" ino=21224 res=0 errno=0 [ 320.450225][ T43] audit: type=1800 audit(1787753785.968:697): pid=9158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.609" name="addr_adrfam" dev="configfs" ino=21225 res=0 errno=0 [ 320.451213][ T9158] nvmet: Invalid value 'ipv' for adrfam [ 320.451954][ T9158] nvmet_tcp: address family 255 not supported [ 320.452382][ T9157] /dev/nullb0: Can't open blockdev [ 321.160022][ T9164] ntfs3(nullb0): Primary boot signature is not NTFS. [ 321.161427][ T9164] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 323.005284][ T2331] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 323.005613][ C2] raw-gadget.0 gadget.2: ignoring, device is not running [ 323.108288][ T9179] overlayfs: failed to resolve './file1/file0': -2 [ 323.149704][ T9179] comedi comedi3: comedi_config --init_data is deprecated [ 323.185237][ T2331] usb 7-1: device descriptor read/64, error -32 [ 323.202380][ T9179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.615'. [ 323.484414][ T2331] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 323.668909][ T2331] usb 7-1: Using ep0 maxpacket: 8 [ 323.669666][ T2331] usb 7-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 323.671176][ T2331] usb 7-1: config 3 has an invalid interface number: 45 but max is 0 [ 323.671276][ T2331] usb 7-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 323.671319][ T2331] usb 7-1: config 3 has no interface number 0 [ 323.671367][ T2331] usb 7-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 323.671405][ T2331] usb 7-1: config 3 interface 45 has no altsetting 0 [ 323.735016][ T2331] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.735039][ T2331] usb 7-1: Product: syz [ 323.735050][ T2331] usb 7-1: Manufacturer: syz [ 323.735062][ T2331] usb 7-1: SerialNumber: syz [ 323.987458][ T9192] fuse: Bad value for 'fd' [ 324.242008][ T9196] netlink: 'syz.3.618': attribute type 1 has an invalid length. [ 324.242079][ T9176] netlink: 28 bytes leftover after parsing attributes in process `syz.2.613'. [ 324.635904][ T9196] 8021q: adding VLAN 0 to HW filter on device bond10 [ 324.983793][ T2331] usb 7-1: USB disconnect, device number 8 [ 325.012502][ T9204] netlink: 'syz.0.619': attribute type 1 has an invalid length. [ 325.116417][ T9202] bond10 (unregistering): Released all slaves [ 325.508368][ T9210] ntfs3(nullb0): Primary boot signature is not NTFS. [ 325.510767][ T8299] udevd[8299]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 325.528188][ T9210] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 325.783700][ T9216] ntfs3(nullb0): Primary boot signature is not NTFS. [ 325.787274][ T9216] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 326.272074][ T9224] Invalid ELF header magic: != ELF [ 326.430897][ T9225] overlayfs: overlapping lowerdir path [ 327.753245][ T9241] lo: entered allmulticast mode [ 327.774938][ T9235] nvmet_tcp: address family 255 not supported [ 327.805388][ T9241] lo: left allmulticast mode [ 327.822241][ T9236] bridge0: port 3(syz_tun) entered disabled state [ 327.822539][ T9236] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.822666][ T9236] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.844681][ T9231] nvmet: adding nsid 1 to subsystem testsubsys [ 328.093878][ T1161] nvmet: connect request for invalid subsystem testsubsys! [ 328.101319][ T9235] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 329.470972][ T5742] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 330.931317][ T9244] syz.4.627 (9244) used greatest stack depth: 19256 bytes left [ 332.025979][ T9269] netlink: 'syz.0.631': attribute type 1 has an invalid length. [ 332.613402][ T9268] ntfs3(nullb0): Primary boot signature is not NTFS. [ 332.623324][ T9268] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 332.644464][ T9269] 8021q: adding VLAN 0 to HW filter on device bond12 [ 333.715085][ T9272] 8021q: adding VLAN 0 to HW filter on device bond13 [ 334.687672][ T9272] bond12: (slave bond13): Enslaving as an active interface with a down link [ 335.864929][ T9275] bond12 (unregistering): (slave bond13): Releasing active interface [ 335.884909][ T9285] ntfs3(nullb0): Primary boot signature is not NTFS. [ 335.897441][ T9285] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 336.429011][ T9275] bond12 (unregistering): Released all slaves [ 336.507379][ T9288] binder: 9287:9288 ioctl c0306201 80000280 returned -14 [ 337.033146][ T9297] syz.2.637: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 337.421804][ T63] nvmet: connect request for invalid subsystem testsubsys! [ 337.434723][ T9303] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 337.559240][ T9309] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 337.560316][ T9309] syz.4.638: vmalloc error: size 4294967296, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 337.560591][ T9309] CPU: 1 UID: 0 PID: 9309 Comm: syz.4.638 Not tainted syzkaller #0 PREEMPT(full) [ 337.560621][ T9309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 337.560632][ T9309] Call Trace: [ 337.560638][ T9309] [ 337.560645][ T9309] dump_stack_lvl+0x100/0x190 [ 337.560727][ T9309] ? disksize_store+0x114/0x460 [ 337.560777][ T9309] warn_alloc.cold+0x9e/0xb2 [ 337.560796][ T9309] ? __pfx_warn_alloc+0x10/0x10 [ 337.560830][ T9309] ? add_lock_to_list+0x9d/0x1d0 [ 337.560854][ T9309] ? disksize_store+0x114/0x460 [ 337.560902][ T9309] __vmalloc_node_range_noprof+0x123b/0x1460 [ 337.560926][ T9309] ? __lock_acquire+0xe15/0x1ec0 [ 337.560954][ T9309] ? disksize_store+0x114/0x460 [ 337.560980][ T9309] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 337.561000][ T9309] ? __pfx___might_resched+0x10/0x10 [ 337.561018][ T9309] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 337.561042][ T9309] ? disksize_store+0x114/0x460 [ 337.561061][ T9309] __vmalloc_node_noprof+0xad/0xf0 [ 337.561079][ T9309] ? disksize_store+0x114/0x460 [ 337.561101][ T9309] disksize_store+0x114/0x460 [ 337.561120][ T9309] ? sysfs_file_kobj+0xe4/0x290 [ 337.561141][ T9309] ? sysfs_file_kobj+0xe4/0x290 [ 337.561163][ T9309] ? __pfx_disksize_store+0x10/0x10 [ 337.561182][ T9309] dev_attr_store+0x58/0x80 [ 337.561197][ T9309] ? __pfx_dev_attr_store+0x10/0x10 [ 337.561211][ T9309] sysfs_kf_write+0xf2/0x150 [ 337.561234][ T9309] kernfs_fop_write_iter+0x3e0/0x5f0 [ 337.561253][ T9309] ? __pfx_sysfs_kf_write+0x10/0x10 [ 337.561276][ T9309] vfs_write+0x6af/0x1050 [ 337.561299][ T9309] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 337.561320][ T9309] ? __pfx_vfs_write+0x10/0x10 [ 337.561341][ T9309] ? find_held_lock+0x2b/0x80 [ 337.561370][ T9309] ksys_write+0x12a/0x250 [ 337.561391][ T9309] ? __pfx_ksys_write+0x10/0x10 [ 337.561419][ T9309] __do_fast_syscall_32+0x13a/0x8b0 [ 337.561464][ T9309] ? lockdep_hardirqs_on+0x7d/0x110 [ 337.561490][ T9309] do_fast_syscall_32+0x32/0x70 [ 337.561506][ T9309] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 337.561527][ T9309] RIP: 0023:0xf7f83fec [ 337.561546][ T9309] Code: Unable to access opcode bytes at 0xf7f83fc2. [ 337.561552][ T9309] RSP: 002b:00000000f540450c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 337.561566][ T9309] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000340 [ 337.561575][ T9309] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 337.561583][ T9309] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 337.561591][ T9309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 337.561599][ T9309] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 337.561620][ T9309] [ 337.604294][ T9309] Mem-Info: [ 337.604317][ T9309] active_anon:5008 inactive_anon:1944 isolated_anon:0 [ 337.604317][ T9309] active_file:11461 inactive_file:13221 isolated_file:0 [ 337.604317][ T9309] unevictable:1000 dirty:399 writeback:0 [ 337.604317][ T9309] slab_reclaimable:6362 slab_unreclaimable:58038 [ 337.604317][ T9309] mapped:27681 shmem:2056 pagetables:1338 [ 337.604317][ T9309] sec_pagetables:312 bounce:0 [ 337.604317][ T9309] kernel_misc_reclaimable:0 [ 337.604317][ T9309] free:53585 free_pcp:11705 free_cma:0 [ 337.604375][ T9309] Node 0 active_anon:56kB inactive_anon:20kB active_file:20kB inactive_file:852kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:92kB dirty:0kB writeback:0kB shmem:4kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9184kB pagetables:1104kB sec_pagetables:1140kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 337.604428][ T9309] Node 1 active_anon:19976kB inactive_anon:7756kB active_file:45824kB inactive_file:52032kB unevictable:4000kB isolated(anon):0kB isolated(file):0kB mapped:110632kB dirty:1596kB writeback:0kB shmem:8220kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6312kB pagetables:4248kB sec_pagetables:108kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 337.604492][ T9309] Node 0 DMA free:1992kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:504kB local_pcp:156kB free_cma:0kB [ 337.604554][ T9309] lowmem_reserve[]: 0 278 278 278 278 [ 337.604592][ T9309] Node 0 DMA32 free:15916kB boost:0kB min:12632kB low:15788kB high:18944kB reserved_highatomic:0KB free_highatomic:0KB active_anon:56kB inactive_anon:20kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB zspages:0kB present:1032196kB managed:284912kB mlocked:0kB bounce:0kB free_pcp:11236kB local_pcp:3852kB free_cma:0kB [ 337.604649][ T9309] lowmem_reserve[]: 0 0 0 0 0 [ 337.604684][ T9309] Node 1 DMA32 free:196432kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19976kB inactive_anon:7756kB active_file:45824kB inactive_file:52032kB unevictable:4000kB writepending:1596kB zspages:2124kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:35080kB local_pcp:3912kB free_cma:0kB [ 337.604742][ T9309] lowmem_reserve[]: 0 0 0 0 0 [ 337.604778][ T9309] Node 0 DMA: 54*4kB (UM) 12*8kB (UM) 5*16kB (UM) 14*32kB (UM) 2*64kB (UM) 0*128kB 0*256kB 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 1992kB [ 337.604983][ T9309] Node 0 DMA32: 149*4kB (UME) 109*8kB (UME) 34*16kB (UME) 64*32kB (UME) 34*64kB (UME) 22*128kB (UME) 9*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 0*2048kB 0*4096kB = 15964kB [ 337.605142][ T9309] Node 1 DMA32: 1192*4kB (ME) 512*8kB (M) 679*16kB (UME) 503*32kB (UME) 302*64kB (UME) 257*128kB (UME) 119*256kB (UME) 56*512kB (UME) 26*1024kB (UM) 9*2048kB (U) 1*4096kB (U) = 196336kB [ 337.605311][ T9309] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 337.605327][ T9309] Node 0 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 337.605343][ T9309] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 337.605359][ T9309] Node 1 hugepages_total=7 hugepages_free=7 hugepages_surp=4 hugepages_size=2048kB [ 337.605375][ T9309] 27074 total pagecache pages [ 337.605382][ T9309] 339 pages in swap cache [ 337.605388][ T9309] Free swap = 120952kB [ 337.605397][ T9309] Total swap = 124996kB [ 337.605406][ T9309] 524155 pages RAM [ 337.605413][ T9309] 0 pages HighMem/MovableOnly [ 337.605419][ T9309] 212035 pages reserved [ 337.605427][ T9309] 0 pages cma reserved [ 338.376307][ T9318] lo speed is unknown, defaulting to 1000 [ 338.379670][ T9318] lo speed is unknown, defaulting to 1000 [ 338.380349][ T9318] lo speed is unknown, defaulting to 1000 [ 339.155008][ T9328] ntfs3(nullb0): Primary boot signature is not NTFS. [ 339.160686][ T9328] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 339.346783][ T9333] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 339.346864][ T9333] CPU: 3 UID: 0 PID: 9333 Comm: syz.4.645 Not tainted syzkaller #0 PREEMPT(full) [ 339.346901][ T9333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 339.346913][ T9333] Call Trace: [ 339.346919][ T9333] [ 339.346928][ T9333] dump_stack_lvl+0x100/0x190 [ 339.346961][ T9333] sysfs_warn_dup.cold+0x1c/0x28 [ 339.346990][ T9333] sysfs_create_dir_ns+0x24b/0x2b0 [ 339.347007][ T9333] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 339.347020][ T9333] ? find_held_lock+0x2b/0x80 [ 339.347035][ T9333] ? kobject_add_internal+0x25f/0x930 [ 339.347052][ T9333] ? kobject_add_internal+0x25f/0x930 [ 339.347069][ T9333] ? class_dir_child_ns_type+0xd/0x60 [ 339.347087][ T9333] kobject_add_internal+0x2c8/0x930 [ 339.347106][ T9333] kobject_add+0x16a/0x1e0 [ 339.347122][ T9333] ? __pfx_kobject_add+0x10/0x10 [ 339.347139][ T9333] ? get_device_parent+0x1b3/0x4c0 [ 339.347162][ T9333] ? kobject_put+0xb9/0x640 [ 339.347184][ T9333] device_add+0x294/0x1970 [ 339.347201][ T9333] ? lockdep_init_map_type+0x5c/0x250 [ 339.347219][ T9333] ? __pfx_device_add+0x10/0x10 [ 339.347232][ T9333] ? lockdep_init_map_type+0x5c/0x250 [ 339.347251][ T9333] ? __init_waitqueue_head+0xca/0x150 [ 339.347277][ T9333] tty_register_device_attr+0x388/0x7f0 [ 339.347298][ T9333] ? lockdep_init_map_type+0x5c/0x250 [ 339.347317][ T9333] ? __pfx_tty_register_device_attr+0x10/0x10 [ 339.347342][ T9333] ? tty_port_init+0x156/0x1c0 [ 339.347366][ T9333] gsm_activate_mux+0x155/0x2a0 [ 339.347388][ T9333] gsmld_ioctl+0xbbc/0x15c0 [ 339.347407][ T9333] ? __pfx_gsmld_ioctl+0x10/0x10 [ 339.347435][ T9333] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 339.347458][ T9333] ? __pfx_gsmld_ioctl+0x10/0x10 [ 339.347471][ T9333] tty_compat_ioctl+0x396/0x420 [ 339.347491][ T9333] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 339.347513][ T9333] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 339.347542][ T9333] __do_fast_syscall_32+0x13a/0x8b0 [ 339.347561][ T9333] do_fast_syscall_32+0x32/0x70 [ 339.347576][ T9333] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 339.347596][ T9333] RIP: 0023:0xf7f83fec [ 339.347631][ T9333] Code: Unable to access opcode bytes at 0xf7f83fc2. [ 339.347641][ T9333] RSP: 002b:00000000f540450c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 339.347661][ T9333] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000404c4701 [ 339.347674][ T9333] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 339.347685][ T9333] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 339.347694][ T9333] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 339.347704][ T9333] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 339.347728][ T9333] [ 339.347830][ T9333] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 339.450431][ T5811] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 339.652931][ T9333] warning: `syz.4.645' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 339.707765][ T5811] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 339.777949][ T5811] usb 7-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0x79, changing to 0x9 [ 339.777978][ T5811] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x9 has invalid wMaxPacketSize 0 [ 339.777994][ T5811] usb 7-1: config 0 interface 0 has no altsetting 0 [ 339.839781][ T5811] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 339.839826][ T5811] usb 7-1: Product: syz [ 339.839860][ T5811] usb 7-1: Manufacturer: syz [ 339.839885][ T5811] usb 7-1: SerialNumber: syz [ 339.868905][ T5811] usb 7-1: config 0 descriptor?? [ 339.895263][ T5811] usb 7-1: selecting invalid altsetting 0 [ 340.159035][ T5811] usb 7-1: USB disconnect, device number 9 [ 341.201193][ T8300] udevd[8300]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 341.458047][ T9318] infiniband syz1: set active [ 341.458108][ T9318] infiniband syz1: added lo [ 341.462616][ T9318] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 341.749593][ T9318] infiniband syz1: Couldn't open port 1 [ 341.763758][ T9318] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 341.763792][ T9318] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 341.763830][ T9318] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 342.011213][ T9350] netlink: 'syz.3.647': attribute type 1 has an invalid length. [ 342.239228][ T9318] RDS/IB: syz1: added [ 342.239306][ T9318] smc: adding ib device syz1 with port count 1 [ 342.239354][ T9318] smc: ib device syz1 port 1 has no pnetid [ 342.257514][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 342.376305][ T5844] lo speed is unknown, defaulting to 1000 [ 342.444703][ T9350] 8021q: adding VLAN 0 to HW filter on device bond10 [ 342.557976][ T9352] 8021q: adding VLAN 0 to HW filter on device bond13 [ 342.635326][ T9352] bond10: (slave bond13): Enslaving as an active interface with a down link [ 342.662837][ T853] lo speed is unknown, defaulting to 1000 [ 342.667922][ T9318] lo speed is unknown, defaulting to 1000 [ 342.862648][ T9362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.649'. [ 343.410385][ T9366] bond7 (unregistering): Released all slaves [ 343.737920][ T9318] lo speed is unknown, defaulting to 1000 [ 344.178015][ T9383] ntfs3(nullb0): Primary boot signature is not NTFS. [ 344.178400][ T9383] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 344.588514][ T9318] lo speed is unknown, defaulting to 1000 [ 345.579889][ T9318] lo speed is unknown, defaulting to 1000 [ 346.318140][ T5742] Bluetooth: hci3: unexpected event for opcode 0x0809 [ 347.185801][ T9402] configfs-gadget.g1 gadget.32: HOST MAC f6:10:e2:69:97:95 [ 347.185887][ T9402] configfs-gadget.g1 gadget.32: MAC aa:c8:73:5f:b5:9c [ 347.304203][ T9417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.658'. [ 347.575582][ T9411] netlink: 24 bytes leftover after parsing attributes in process `syz.2.659'. [ 348.079564][ T9425] devpts: Invalid uid '0x00000000ffffffff' [ 348.136325][ T9425] i2c i2c-0: new_device: Instantiated device hd3ss3220 at 0x04 [ 348.163084][ T9425] i2c i2c-0: delete_device: Can't find device in list [ 348.562533][ T5742] Bluetooth: hci1: unexpected event for opcode 0x042d [ 348.878792][ T5742] Bluetooth: hci3: unexpected event for opcode 0x0403 [ 349.064735][ T9446] netlink: 'syz.0.668': attribute type 1 has an invalid length. [ 349.312222][ T9446] 8021q: adding VLAN 0 to HW filter on device bond12 [ 349.320974][ T9452] gretap1: entered promiscuous mode [ 349.390763][ T9458] 8021q: adding VLAN 0 to HW filter on device bond14 [ 349.421049][ T9458] bond12: (slave bond14): Enslaving as an active interface with a down link [ 349.639255][ T9461] bond12 (unregistering): (slave bond14): Releasing active interface [ 349.749392][ T9461] bond12 (unregistering): Released all slaves [ 349.781559][ T5742] Bluetooth: hci2: unexpected event for opcode 0x042c [ 349.817977][ T9454] bond1 (unregistering): Released all slaves [ 349.949815][ T9474] futex_wake_op: syz.3.672 tries to shift op by -1; fix this program [ 349.986560][ T5742] Bluetooth: hci1: unexpected event for opcode 0x200f [ 350.066556][ T5742] Bluetooth: hci0: unexpected event for opcode 0x2019 [ 350.314830][ T5742] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 350.585312][ T9496] netlink: 'syz.3.681': attribute type 1 has an invalid length. [ 350.676412][ T9496] 8021q: adding VLAN 0 to HW filter on device bond14 [ 350.755464][ T9496] 8021q: adding VLAN 0 to HW filter on device bond15 [ 350.864175][ T9496] bond14: (slave bond15): Enslaving as an active interface with a down link [ 351.385237][ T9499] bond14 (unregistering): (slave bond15): Releasing active interface [ 351.464253][ T9518] netlink: 'syz.0.686': attribute type 1 has an invalid length. [ 351.685560][ T9499] bond14 (unregistering): Released all slaves [ 352.084088][ T9522] bond12 (unregistering): Released all slaves [ 352.158767][ T5742] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 352.414476][ T5742] Bluetooth: hci0: unexpected event for opcode 0x0c38 [ 352.507824][ T9537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.687'. [ 352.741240][ T5742] Bluetooth: hci2: unexpected event for opcode 0x1001 [ 352.977705][ T9547] ntfs3(nullb0): Primary boot signature is not NTFS. [ 352.983775][ T9547] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 353.478480][ T5742] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 353.799295][ T9565] netlink: 'syz.3.701': attribute type 1 has an invalid length. [ 354.124627][ T9565] bond14 (unregistering): Released all slaves [ 354.680425][ T9576] hpfs: hpfs_map_sector(): read error [ 355.056537][ T43] audit: type=1326 audit(1787753820.569:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.3.711" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fec code=0x7ffc0000 [ 355.056639][ T43] audit: type=1326 audit(1787753820.569:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.3.711" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fec code=0x7ffc0000 [ 355.133539][ T43] audit: type=1326 audit(1787753820.639:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.3.711" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fec code=0x7ffc0000 [ 355.159996][ T43] audit: type=1326 audit(1787753820.679:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.3.711" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fec code=0x7ffc0000 [ 355.161106][ T43] audit: type=1326 audit(1787753820.679:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.3.711" exe="/syz-executor" sig=0 arch=40000003 syscall=184 compat=1 ip=0xf7fb3fec code=0x7ffc0000 [ 355.162263][ T43] audit: type=1326 audit(1787753820.679:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.3.711" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fec code=0x7ffc0000 [ 355.163314][ T43] audit: type=1326 audit(1787753820.679:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.3.711" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fec code=0x7ffc0000 [ 355.166825][ T43] audit: type=1326 audit(1787753820.679:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.3.711" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7fb3fec code=0x7ffc0000 [ 355.167845][ T43] audit: type=1326 audit(1787753820.679:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.3.711" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7fb3fec code=0x7ffc0000 [ 355.334691][ T9598] netlink: 4 bytes leftover after parsing attributes in process `syz.4.707'. [ 355.378878][ T9600] netlink: 'syz.3.712': attribute type 1 has an invalid length. [ 355.432932][ T9600] bond14 (unregistering): Released all slaves [ 355.601438][ T9605] fuse: Bad value for 'fd' [ 355.661518][ T5840] lg-g15 0003:046D:0A07.000F: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 355.666883][ T5840] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.000F/input/input36 [ 355.967898][ T9606] fido_id[9606]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 356.157216][ T5742] Bluetooth: hci3: unexpected event for opcode 0x2062 [ 356.620908][ T9625] kAFS: unable to lookup cell ' [ 356.620908][ T9625] $)-.ÌײfÍY¹Ç²a×ïÅ2sˆ [ 356.620908][ T9625] ' [ 356.633571][ T5742] Bluetooth: hci2: unexpected event for opcode 0x0c7a [ 357.348639][ T9651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.722'. [ 357.420991][ T5742] Bluetooth: hci0: unexpected cc 0x2027 length: 9 > 1 [ 357.421097][ T5742] Bluetooth: hci0: unexpected event for opcode 0x2027 [ 357.927336][ T9667] ntfs3(nullb0): Primary boot signature is not NTFS. [ 357.939501][ T9667] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 358.315794][ T5840] lg-g15 0003:046D:0A07.0010: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 358.317046][ T5840] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0010/input/input37 [ 358.628310][ T9678] fuse: Bad value for 'fd' [ 359.118072][ T9694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.743'. [ 360.042672][ T9703] ntfs3(nullb0): Primary boot signature is not NTFS. [ 360.061022][ T9703] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 362.689448][ T9743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.756'. [ 363.094621][ T9750] ntfs3(nullb0): Primary boot signature is not NTFS. [ 363.096938][ T9750] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 363.157513][ T5742] Bluetooth: hci1: unexpected event for opcode 0x2040 [ 364.006699][ T9766] bond14 (unregistering): Released all slaves [ 364.850653][ T9784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.769'. [ 365.278369][ T9786] ntfs3(nullb0): Primary boot signature is not NTFS. [ 365.339007][ T9786] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 368.852250][ T9816] gretap1: entered promiscuous mode [ 369.309764][ T9829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.781'. [ 369.523932][ T9821] bond1 (unregistering): Released all slaves [ 370.024543][ T9823] netlink: 'syz.3.782': attribute type 3 has an invalid length. [ 370.025322][ T9823] netlink: 'syz.3.782': attribute type 3 has an invalid length. [ 370.599289][ T9839] ntfs3(nullb0): Primary boot signature is not NTFS. [ 370.616990][ T9839] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 370.778127][ T9843] ntfs3(nullb0): Primary boot signature is not NTFS. [ 370.778384][ T9843] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 372.397530][ T9852] ntfs3(nullb0): Primary boot signature is not NTFS. [ 372.433248][ T9852] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 374.536839][ T9897] netlink: 'syz.3.800': attribute type 1 has an invalid length. [ 374.625370][ T9897] 8021q: adding VLAN 0 to HW filter on device bond14 [ 374.875933][ T9897] bond16 (unregistering): Released all slaves [ 375.091993][ T9913] netlink: 'syz.0.805': attribute type 1 has an invalid length. [ 375.231759][ T9913] bond12 (unregistering): Released all slaves [ 375.250909][ T5742] Bluetooth: hci2: unexpected event for opcode 0x042e [ 375.348914][ T9924] ntfs3(nullb0): Primary boot signature is not NTFS. [ 375.367247][ T9924] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 377.531627][ T9944] netlink: 'syz.0.816': attribute type 3 has an invalid length. [ 377.531828][ T9944] netlink: 'syz.0.816': attribute type 3 has an invalid length. [ 377.531870][ T9944] netlink: 'syz.0.816': attribute type 3 has an invalid length. [ 377.531909][ T9944] netlink: 'syz.0.816': attribute type 3 has an invalid length. [ 377.531946][ T9944] netlink: 'syz.0.816': attribute type 3 has an invalid length. [ 377.531983][ T9944] netlink: 'syz.0.816': attribute type 3 has an invalid length. [ 377.532021][ T9944] netlink: 'syz.0.816': attribute type 3 has an invalid length. [ 377.532055][ T9944] netlink: 'syz.0.816': attribute type 3 has an invalid length. [ 377.532089][ T9944] netlink: 'syz.0.816': attribute type 3 has an invalid length. [ 377.669375][ T9946] 8021q: adding VLAN 0 to HW filter on device bond7 [ 378.009675][ T9946] bond9 (unregistering): Released all slaves [ 378.035446][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.172294][ T9960] netlink: 32 bytes leftover after parsing attributes in process `syz.3.821'. [ 378.310023][ T9955] 8021q: adding VLAN 0 to HW filter on device bond12 [ 378.640535][ T9958] 8021q: adding VLAN 0 to HW filter on device bond15 [ 379.090012][ T9958] bond12: (slave bond15): Enslaving as an active interface with a down link [ 379.259144][ T9978] ntfs3(nullb0): Primary boot signature is not NTFS. [ 379.265105][ T9978] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 379.522540][ T9961] bond12 (unregistering): (slave bond15): Releasing active interface [ 379.647025][ T9961] bond12 (unregistering): Released all slaves [ 379.658521][ T9982] ntfs3(nullb0): Primary boot signature is not NTFS. [ 379.658744][ T9982] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 380.071065][ T9987] 8021q: adding VLAN 0 to HW filter on device bond9 [ 380.117474][ T5735] Bluetooth: hci3: command 0x0405 tx timeout [ 380.472251][ T9987] 8021q: adding VLAN 0 to HW filter on device bond10 [ 380.606877][ T9987] bond9: (slave bond10): Enslaving as an active interface with a down link [ 380.860177][ T9989] bond9 (unregistering): (slave bond10): Releasing active interface [ 381.025715][ T9989] bond9 (unregistering): Released all slaves [ 381.370024][ T9997] validate_nla: 51 callbacks suppressed [ 381.370136][ T9997] netlink: 'syz.4.831': attribute type 1 has an invalid length. [ 381.653989][T10005] netlink: 'syz.4.833': attribute type 1 has an invalid length. [ 381.654065][T10005] netlink: 224 bytes leftover after parsing attributes in process `syz.4.833'. [ 381.851927][T10007] ntfs3(nullb0): Primary boot signature is not NTFS. [ 381.876352][T10007] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 382.453216][ T5735] Bluetooth: hci3: command 0x0405 tx timeout [ 383.960220][T10036] ntfs3(nullb0): Primary boot signature is not NTFS. [ 384.076008][T10036] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 385.467436][T10049] netlink: 'syz.3.841': attribute type 1 has an invalid length. [ 385.591753][T10049] bond16 (unregistering): Released all slaves [ 385.747927][T10056] netlink: 'syz.2.843': attribute type 1 has an invalid length. [ 385.868112][T10056] 8021q: adding VLAN 0 to HW filter on device bond9 [ 385.874060][T10059] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 386.147471][T10056] 8021q: adding VLAN 0 to HW filter on device bond11 [ 386.340032][T10056] bond9: (slave bond11): Enslaving as an active interface with a down link [ 386.659087][T10058] bond9 (unregistering): (slave bond11): Releasing active interface [ 386.730466][T10058] bond9 (unregistering): Released all slaves [ 386.903845][T10066] comedi comedi2: multiq3: I/O base address or length out of range [ 387.327077][T10073] comedi comedi1: Minor 2 could not be opened [ 387.617283][T10082] ntfs3(nullb0): Primary boot signature is not NTFS. [ 387.666749][T10082] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 388.850758][T10103] netlink: 'syz.0.856': attribute type 1 has an invalid length. [ 389.261898][T10103] 8021q: adding VLAN 0 to HW filter on device bond12 [ 389.592601][T10107] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 390.152998][T10108] bond12 (unregistering): Released all slaves [ 392.215554][T10131] ntfs3(nullb0): Primary boot signature is not NTFS. [ 392.263609][T10131] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 392.536689][ T10] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 392.735300][ T10] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 392.739953][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.744701][ T10] usb 8-1: config 0 descriptor?? [ 392.783456][T10139] sg_write: process 861 (syz.2.869) changed security contexts after opening file descriptor, this is not allowed. [ 393.000025][ T10] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 393.000448][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 393.108093][ T10] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 2 [ 393.108184][ T10] [drm] Initialized udl on minor 2 [ 393.211420][ T10] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 393.293318][ T10] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 393.299112][ T10] usb 8-1: USB disconnect, device number 9 [ 393.865745][ T5742] Bluetooth: hci2: Unable to find connection for big 0x00 [ 393.984929][T10152] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.873' resets device [ 398.570333][T10191] ntfs3(nullb0): Primary boot signature is not NTFS. [ 398.570708][T10191] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 398.990205][ T62] lg-g15 0003:046D:0A07.0011: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 398.991476][ T62] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0011/input/input38 [ 399.776548][T10203] fido_id[10203]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 400.299599][T10213] netlink: 'syz.3.891': attribute type 1 has an invalid length. [ 400.372256][T10213] 8021q: adding VLAN 0 to HW filter on device bond16 [ 400.578544][T10213] 8021q: adding VLAN 0 to HW filter on device bond17 [ 400.653141][T10213] bond16: (slave bond17): Enslaving as an active interface with a down link [ 400.723380][T10215] bond16 (unregistering): (slave bond17): Releasing active interface [ 400.740775][T10225] ntfs3(nullb0): Primary boot signature is not NTFS. [ 400.746838][T10225] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 400.763851][T10215] bond16 (unregistering): Released all slaves [ 401.184983][T10235] netlink: 'syz.0.897': attribute type 1 has an invalid length. [ 401.250763][T10235] 8021q: adding VLAN 0 to HW filter on device bond12 [ 401.442122][T10235] 8021q: adding VLAN 0 to HW filter on device bond16 [ 401.547731][T10235] bond12: (slave bond16): Enslaving as an active interface with a down link [ 401.872538][T10237] bond12 (unregistering): (slave bond16): Releasing active interface [ 402.078597][T10237] bond12 (unregistering): Released all slaves [ 402.490116][ T62] lg-g15 0003:046D:0A07.0012: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 402.497334][ T62] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0012/input/input39 [ 402.674644][T10260] fuse: Bad value for 'fd' [ 402.676623][T10264] netlink: 'syz.2.903': attribute type 1 has an invalid length. [ 402.874827][T10258] bond9 (unregistering): Released all slaves [ 403.688129][T10279] 9pnet_virtio: no channels available for device syz [ 403.808179][T10281] ntfs3(nullb0): Primary boot signature is not NTFS. [ 403.897797][T10281] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 404.455667][T10290] netlink: 'syz.2.910': attribute type 1 has an invalid length. [ 404.702684][T10290] 8021q: adding VLAN 0 to HW filter on device bond9 [ 405.005035][T10290] bond12 (unregistering): Released all slaves [ 405.155728][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 405.552747][T10302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.921'. [ 405.945874][T10311] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 405.948945][T10311] syz.2.913: vmalloc error: size 4294967296, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 405.949192][T10311] CPU: 3 UID: 0 PID: 10311 Comm: syz.2.913 Not tainted syzkaller #0 PREEMPT(full) [ 405.949225][T10311] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 405.949238][T10311] Call Trace: [ 405.949245][T10311] [ 405.949254][T10311] dump_stack_lvl+0x100/0x190 [ 405.949284][T10311] ? disksize_store+0x114/0x460 [ 405.949304][T10311] warn_alloc.cold+0x9e/0xb2 [ 405.949322][T10311] ? __pfx_warn_alloc+0x10/0x10 [ 405.949356][T10311] ? register_lock_class+0x3f/0x7b0 [ 405.949380][T10311] ? __pfx_stack_trace_save+0x10/0x10 [ 405.949402][T10311] ? stack_depot_save_flags+0x27/0x9f0 [ 405.949425][T10311] ? disksize_store+0x114/0x460 [ 405.949449][T10311] __vmalloc_node_range_noprof+0x123b/0x1460 [ 405.949474][T10311] ? __lock_acquire+0x4c5/0x1ec0 [ 405.949494][T10311] ? _parse_integer_limit+0x1ac/0x220 [ 405.949515][T10311] ? disksize_store+0x114/0x460 [ 405.949540][T10311] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 405.949561][T10311] ? __pfx___might_resched+0x10/0x10 [ 405.949579][T10311] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 405.949606][T10311] ? disksize_store+0x114/0x460 [ 405.949625][T10311] __vmalloc_node_noprof+0xad/0xf0 [ 405.949645][T10311] ? disksize_store+0x114/0x460 [ 405.949668][T10311] disksize_store+0x114/0x460 [ 405.949689][T10311] ? sysfs_file_kobj+0xe4/0x290 [ 405.949711][T10311] ? sysfs_file_kobj+0xe4/0x290 [ 405.949734][T10311] ? __pfx_disksize_store+0x10/0x10 [ 405.949755][T10311] dev_attr_store+0x58/0x80 [ 405.949794][T10311] ? __pfx_dev_attr_store+0x10/0x10 [ 405.949812][T10311] sysfs_kf_write+0xf2/0x150 [ 405.949838][T10311] kernfs_fop_write_iter+0x3e0/0x5f0 [ 405.949858][T10311] ? __pfx_sysfs_kf_write+0x10/0x10 [ 405.949883][T10311] vfs_write+0x6af/0x1050 [ 405.949907][T10311] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 405.949929][T10311] ? __pfx_vfs_write+0x10/0x10 [ 405.949950][T10311] ? find_held_lock+0x2b/0x80 [ 405.949981][T10311] ksys_write+0x12a/0x250 [ 405.950002][T10311] ? __pfx_ksys_write+0x10/0x10 [ 405.950031][T10311] __do_fast_syscall_32+0x13a/0x8b0 [ 405.950054][T10311] do_fast_syscall_32+0x32/0x70 [ 405.950071][T10311] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 405.950091][T10311] RIP: 0023:0xf7fe4fec [ 405.950119][T10311] Code: Unable to access opcode bytes at 0xf7fe4fc2. [ 405.950127][T10311] RSP: 002b:00000000f546450c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 405.950145][T10311] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000340 [ 405.950154][T10311] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 405.950163][T10311] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 405.950172][T10311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 405.950181][T10311] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 405.950202][T10311] [ 405.950276][T10311] Mem-Info: [ 405.950303][T10311] active_anon:26658 inactive_anon:5773 isolated_anon:0 [ 405.950303][T10311] active_file:12015 inactive_file:12452 isolated_file:0 [ 405.950303][T10311] unevictable:1000 dirty:324 writeback:0 [ 405.950303][T10311] slab_reclaimable:6446 slab_unreclaimable:60187 [ 405.950303][T10311] mapped:34716 shmem:26721 pagetables:1634 [ 405.950303][T10311] sec_pagetables:315 bounce:0 [ 405.950303][T10311] kernel_misc_reclaimable:0 [ 405.950303][T10311] free:26809 free_pcp:10836 free_cma:0 [ 405.950362][T10311] Node 0 active_anon:24kB inactive_anon:20kB active_file:20kB inactive_file:852kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:92kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9088kB pagetables:1088kB sec_pagetables:1140kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 405.950420][T10311] Node 1 active_anon:106608kB inactive_anon:23072kB active_file:48040kB inactive_file:48956kB unevictable:4000kB isolated(anon):0kB isolated(file):0kB mapped:138772kB dirty:1296kB writeback:0kB shmem:106884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7192kB pagetables:5448kB sec_pagetables:120kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 405.950474][T10311] Node 0 DMA free:2052kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:444kB local_pcp:224kB free_cma:0kB [ 405.950554][T10311] lowmem_reserve[]: 0 278 278 278 278 [ 405.950697][T10311] Node 0 DMA32 free:17648kB boost:2048kB min:14680kB low:17836kB high:20992kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24kB inactive_anon:20kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB zspages:0kB present:1032196kB managed:284912kB mlocked:0kB bounce:0kB free_pcp:11120kB local_pcp:1884kB free_cma:0kB [ 405.950829][T10311] lowmem_reserve[]: 0 0 0 0 0 [ 405.950975][T10311] Node 1 DMA32 free:87536kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:106608kB inactive_anon:23072kB active_file:48040kB inactive_file:48956kB unevictable:4000kB writepending:1296kB zspages:2124kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:31780kB local_pcp:6456kB free_cma:0kB [ 405.951064][T10311] lowmem_reserve[]: 0 0 0 0 0 [ 405.951217][T10311] Node 0 DMA: 21*4kB (UM) 18*8kB (UM) 8*16kB (UM) 15*32kB (UM) 3*64kB (UM) 0*128kB 0*256kB 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2052kB [ 405.951690][T10311] Node 0 DMA32: 296*4kB (UE) 136*8kB (UE) 33*16kB (UME) 64*32kB (UME) 52*64kB (UME) 26*128kB (UME) 10*256kB (UM) 3*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 17648kB [ 406.025681][T10311] Node 1 DMA32: 2*4kB (ME) 0*8kB 18*16kB (UME) 6*32kB (UME) 27*64kB (UE) 129*128kB (UME) 70*256kB (UME) 25*512kB (UM) 21*1024kB (UM) 6*2048kB (U) 1*4096kB (U) = 87336kB [ 406.028394][T10311] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 406.028523][T10311] Node 0 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 406.028544][T10311] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 406.028586][T10311] Node 1 hugepages_total=7 hugepages_free=7 hugepages_surp=4 hugepages_size=2048kB [ 406.028605][T10311] 51531 total pagecache pages [ 406.028614][T10311] 346 pages in swap cache [ 406.028621][T10311] Free swap = 120952kB [ 406.028630][T10311] Total swap = 124996kB [ 406.028741][T10311] 524155 pages RAM [ 406.028756][T10311] 0 pages HighMem/MovableOnly [ 406.028815][T10311] 212035 pages reserved [ 406.028824][T10311] 0 pages cma reserved [ 406.678322][ T5742] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 406.805616][T10319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.917'. [ 406.814102][T10319] bridge_slave_0: default FDB implementation only supports local addresses [ 406.992516][T10323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.918'. [ 407.866023][T10334] netlink: 'syz.4.922': attribute type 1 has an invalid length. [ 407.916203][T10334] 8021q: adding VLAN 0 to HW filter on device bond1 [ 408.038368][T10337] ntfs3(nullb0): Primary boot signature is not NTFS. [ 408.052812][T10337] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 408.087912][T10338] gretap1: entered promiscuous mode [ 408.267665][T10334] bond2 (unregistering): Released all slaves [ 408.301972][T10343] ntfs3(nullb0): Primary boot signature is not NTFS. [ 408.305058][T10343] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 408.777154][T10347] netlink: 'syz.4.926': attribute type 1 has an invalid length. [ 409.955347][T10360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.929'. [ 410.298493][T10371] netlink: 'syz.0.934': attribute type 1 has an invalid length. [ 410.337526][T10371] 8021q: adding VLAN 0 to HW filter on device bond12 [ 410.517195][T10371] bond17 (unregistering): Released all slaves [ 411.109675][T10385] ntfs3(nullb0): Primary boot signature is not NTFS. [ 411.133758][T10385] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 411.332030][T10393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.940'. [ 412.492447][T10409] ntfs3(nullb0): Primary boot signature is not NTFS. [ 412.598542][T10409] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 413.919443][T10421] ntfs3(nullb0): Primary boot signature is not NTFS. [ 414.045586][T10421] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 414.396577][T10429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.951'. [ 415.295472][T10447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.299244][T10447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.928850][T10456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.960'. [ 416.811077][T10475] ntfs3(nullb0): Primary boot signature is not NTFS. [ 416.811316][T10475] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 416.943433][T10481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.969'. [ 418.262223][ T43] audit: type=1800 audit(1787753883.772:707): pid=10489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.970" name="zoned" dev="configfs" ino=23371 res=0 errno=0 [ 418.314100][ T43] audit: type=1800 audit(1787753883.802:708): pid=10489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.970" name="zone_nr_conv" dev="configfs" ino=23372 res=0 errno=0 [ 419.218490][T10499] ntfs3(nullb0): Primary boot signature is not NTFS. [ 419.229730][T10499] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 420.168666][ T43] audit: type=1800 audit(1787753885.662:709): pid=10490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.970" name="zoned" dev="configfs" ino=26293 res=0 errno=0 [ 420.168754][ T43] audit: type=1800 audit(1787753885.662:710): pid=10490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.970" name="power" dev="configfs" ino=26294 res=0 errno=0 [ 420.635426][T10512] ntfs3(nullb0): Primary boot signature is not NTFS. [ 420.635811][T10512] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 420.789310][T10509] bond17 (unregistering): Released all slaves [ 421.341362][ T43] audit: type=1800 audit(1787753886.852:711): pid=10524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.984" name="addr_adrfam" dev="configfs" ino=25489 res=0 errno=0 [ 421.910448][ T2333] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 422.104780][ T2333] usb 8-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 422.107684][ T2333] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 422.107743][ T2333] usb 8-1: config 1 has no interface number 0 [ 422.107792][ T2333] usb 8-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 422.107832][ T2333] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 422.107878][ T2333] usb 8-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.110703][ T2333] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.110753][ T2333] usb 8-1: Product: syz [ 422.111187][ T2333] usb 8-1: Manufacturer: syz [ 422.111401][ T2333] usb 8-1: SerialNumber: syz [ 422.117959][T10531] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 422.406112][T10550] 9pnet_virtio: no channels available for device syz [ 422.468279][T10531] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 422.813582][ T2333] sierra_net 8-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 422.897606][ T2333] sierra_net 8-1:1.7 wwan0: Submit SYNC failed -71 [ 422.897678][ T2333] sierra_net 8-1:1.7 wwan0: Send SYNC failed, status -71 [ 422.899236][ T2333] sierra_net 8-1:1.7 wwan0: Submit SYNC failed -71 [ 422.899257][ T2333] sierra_net 8-1:1.7 wwan0: Send SYNC failed, status -71 [ 422.910362][ T2333] usb 8-1: USB disconnect, device number 10 [ 422.915142][ T2333] sierra_net 8-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem [ 423.400799][ T2333] sierra_net 8-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 423.659825][T10571] bond3 (unregistering): Released all slaves [ 424.352932][T10592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1007'. [ 425.706260][T10604] bond16 (unregistering): Released all slaves [ 426.455976][T10625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1024'. [ 426.693829][T10628] ntfs3(nullb0): Primary boot signature is not NTFS. [ 426.693981][T10628] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 427.106167][T10636] bond12 (unregistering): Released all slaves [ 427.555400][T10653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1033'. [ 428.812422][T10679] netlink: 'syz.3.1043': attribute type 1 has an invalid length. [ 428.849621][T10679] 8021q: adding VLAN 0 to HW filter on device bond16 [ 428.903376][T10679] bond18 (unregistering): Released all slaves [ 429.592235][T10694] ntfs3(nullb0): Primary boot signature is not NTFS. [ 429.592373][T10694] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 431.087209][T10708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1051'. [ 431.554881][ T5742] Bluetooth: hci2: command 0x0406 tx timeout [ 432.540883][T10734] ntfs3(nullb0): Primary boot signature is not NTFS. [ 432.541034][T10734] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 434.695426][T10766] ntfs3(nullb0): Primary boot signature is not NTFS. [ 434.695610][T10766] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 435.903314][T10785] ntfs3(nullb0): Primary boot signature is not NTFS. [ 435.903470][T10785] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 436.495569][T10790] netlink: 'syz.2.1081': attribute type 1 has an invalid length. [ 436.530751][T10790] 8021q: adding VLAN 0 to HW filter on device bond12 [ 436.539264][T10793] bridge: RTM_NEWNEIGH with invalid state 0x28 [ 436.695298][T10790] 8021q: adding VLAN 0 to HW filter on device bond13 [ 436.865743][T10790] bond12: (slave bond13): Enslaving as an active interface with a down link [ 436.948386][T10801] ptrace attach of "/syz-executor exec"[5732] was attempted by "/syz-executor exec"[10801] [ 437.003587][T10803] netlink: 'syz.3.1086': attribute type 1 has an invalid length. [ 437.030686][T10794] bond12 (unregistering): (slave bond13): Releasing active interface [ 437.043949][T10794] bond12 (unregistering): Released all slaves [ 437.097762][T10803] bond18 (unregistering): Released all slaves [ 438.234085][ T5844] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 438.410955][ T5844] usb 7-1: unable to get BOS descriptor or descriptor too short [ 438.411044][ T5844] usb 7-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 438.412134][ T5844] usb 7-1: config 129 has an invalid interface number: 135 but max is 0 [ 438.412173][ T5844] usb 7-1: config 129 has an invalid interface number: 5 but max is 0 [ 438.412214][ T5844] usb 7-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 438.412248][ T5844] usb 7-1: config 129 has no interface number 0 [ 438.412279][ T5844] usb 7-1: config 129 has no interface number 1 [ 438.412335][ T5844] usb 7-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 438.412375][ T5844] usb 7-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 438.412456][ T5844] usb 7-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 438.412496][ T5844] usb 7-1: config 129 interface 135 has no altsetting 0 [ 438.412529][ T5844] usb 7-1: config 129 interface 5 has no altsetting 0 [ 438.415886][ T5844] usb 7-1: string descriptor 0 read error: -22 [ 438.416002][ T5844] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.479877][ T5844] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 438.479921][ T5844] usb 7-1: MIDIStreaming interface descriptor not found [ 438.714185][ T853] usb 7-1: USB disconnect, device number 10 [ 439.410721][ T5739] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 439.431563][ T5739] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 439.481697][ T5739] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 439.489299][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.576927][ T5739] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 439.583335][ T5739] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 440.095406][T10845] lo speed is unknown, defaulting to 1000 [ 440.099393][T10845] lo speed is unknown, defaulting to 1000 [ 440.236877][T10871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.237328][T10871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.701815][T10876] netlink: 'syz.2.1109': attribute type 12 has an invalid length. [ 440.701916][T10876] netlink: 'syz.2.1109': attribute type 29 has an invalid length. [ 440.701959][T10876] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1109'. [ 440.701992][T10876] netlink: 'syz.2.1109': attribute type 3 has an invalid length. [ 440.702005][T10876] netlink: 'syz.2.1109': attribute type 2 has an invalid length. [ 440.702016][T10876] netlink: 35 bytes leftover after parsing attributes in process `syz.2.1109'. [ 441.189308][T10845] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.189489][T10845] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.189792][T10845] bridge_slave_0: entered allmulticast mode [ 441.191207][T10845] bridge_slave_0: entered promiscuous mode [ 441.193543][T10845] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.193672][T10845] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.193777][T10845] bridge_slave_1: entered allmulticast mode [ 441.195368][T10845] bridge_slave_1: entered promiscuous mode [ 441.308390][T10845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.311379][T10845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.447675][T10845] team0: Port device team_slave_0 added [ 441.502740][T10845] team0: Port device team_slave_1 added [ 441.567083][T10845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.567174][T10845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.567471][T10845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.601732][T10845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.601749][T10845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.601770][T10845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.671811][ T5742] Bluetooth: hci4: command tx timeout [ 441.786927][T10845] hsr_slave_0: entered promiscuous mode [ 441.787802][T10845] hsr_slave_1: entered promiscuous mode [ 442.778157][T10919] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input40 [ 443.069734][T10845] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 443.206579][T10845] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 443.207421][T10845] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 443.262048][T10845] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 443.262818][T10845] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 443.344593][T10845] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 443.353473][T10845] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 443.456257][T10930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.462824][T10930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.474982][T10845] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 443.649925][T10845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.678384][T10845] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.683898][ T9066] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.684047][ T9066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.692284][ T43] audit: type=1800 audit(1787753909.204:712): pid=10939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1128" name="zone_nr_conv" dev="configfs" ino=27958 res=0 errno=0 [ 443.699755][ T9066] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.699835][ T9066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.722482][ T5742] Bluetooth: hci4: command tx timeout [ 444.252603][T10952] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1133'. [ 444.693946][T10966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1131'. [ 444.752351][ T5742] Bluetooth: hci2: command 0x0406 tx timeout [ 445.056753][T10845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.599981][T10989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1139'. [ 445.816043][ T5735] Bluetooth: hci4: command tx timeout [ 446.049104][T10845] veth0_vlan: entered promiscuous mode [ 446.081846][T10845] veth1_vlan: entered promiscuous mode [ 446.184148][T10845] veth0_macvtap: entered promiscuous mode [ 446.216262][T10845] veth1_macvtap: entered promiscuous mode [ 446.296683][T10845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.315373][T10845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.662389][ T5810] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.663161][ T5810] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.663312][ T5810] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.663360][ T5810] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.732688][ T4865] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.732710][ T4865] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.854883][ T7527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.854943][ T7527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.864926][ T5735] Bluetooth: hci4: command tx timeout [ 448.176823][T11036] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1153'. [ 451.094229][ T5819] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 451.337494][ T5819] usb 8-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 451.392985][ T5819] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 451.393043][ T5819] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 451.393120][ T5819] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 451.433595][ T5819] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.433646][ T5819] usb 8-1: Product: syz [ 451.433685][ T5819] usb 8-1: Manufacturer: syz [ 451.433711][ T5819] usb 8-1: SerialNumber: syz [ 451.452645][ T5819] usb 8-1: config 0 descriptor?? [ 451.505163][T11074] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 452.776498][ T5819] rc_core: IR keymap rc-streamzap not found [ 452.776569][ T5819] Registered IR keymap rc-empty [ 452.777990][ T5819] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 452.811258][ T5819] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input41 [ 452.929148][ T5819] usb 8-1: USB disconnect, device number 11 [ 453.042465][T11086] netlink: 'syz.3.1174': attribute type 1 has an invalid length. [ 453.525984][T11086] bond18 (unregistering): Released all slaves [ 454.532800][ T42] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 454.725808][ T42] usb 10-1: unable to get BOS descriptor or descriptor too short [ 454.725870][ T42] usb 10-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 454.801773][ T42] usb 10-1: config 129 has an invalid interface number: 135 but max is 0 [ 454.807795][ T42] usb 10-1: config 129 has an invalid interface number: 5 but max is 0 [ 454.811473][ T42] usb 10-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 454.820678][ T42] usb 10-1: config 129 has no interface number 0 [ 454.830806][ T42] usb 10-1: config 129 has no interface number 1 [ 454.833576][ T42] usb 10-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 454.842586][ T42] usb 10-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 454.850062][ T42] usb 10-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 454.858708][ T42] usb 10-1: config 129 interface 135 has no altsetting 0 [ 454.865597][ T42] usb 10-1: config 129 interface 5 has no altsetting 0 [ 454.904959][ T42] usb 10-1: string descriptor 0 read error: -22 [ 454.905088][ T42] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.004410][ T42] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 455.020080][ T42] usb 10-1: MIDIStreaming interface descriptor not found [ 455.503948][ T42] usb 10-1: USB disconnect, device number 2 [ 455.562690][ T5840] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 455.772901][ T5840] usb 8-1: Using ep0 maxpacket: 8 [ 455.773773][ T5840] usb 8-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 455.774823][ T5840] usb 8-1: config 0 has an invalid interface number: 186 but max is 0 [ 455.774870][ T5840] usb 8-1: config 0 has no interface number 0 [ 455.774921][ T5840] usb 8-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 455.774957][ T5840] usb 8-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 455.774994][ T5840] usb 8-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 455.775033][ T5840] usb 8-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 455.775072][ T5840] usb 8-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 455.777211][ T5840] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.777250][ T5840] usb 8-1: Product: syz [ 455.777279][ T5840] usb 8-1: Manufacturer: syz [ 455.777307][ T5840] usb 8-1: SerialNumber: syz [ 455.977361][ T5840] usb 8-1: config 0 descriptor?? [ 456.585117][ T5840] iowarrior 8-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 456.605250][T11129] netlink: 'syz.5.1189': attribute type 1 has an invalid length. [ 456.863828][ T5840] usb 8-1: USB disconnect, device number 12 [ 457.010191][T11133] gretap1: entered promiscuous mode [ 457.298380][T11136] bond1 (unregistering): Released all slaves [ 458.012574][T11155] ½ [ 458.277599][ T43] audit: type=1800 audit(1787753923.784:713): pid=11159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1202" name="size" dev="configfs" ino=27043 res=0 errno=0 [ 458.384810][T11161] netlink: 'syz.5.1203': attribute type 1 has an invalid length. [ 458.515586][T11161] bond1 (unregistering): Released all slaves [ 458.800283][T11167] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.838493][T11167] bridge_slave_1 (unregistering): left allmulticast mode [ 458.838577][T11167] bridge_slave_1 (unregistering): left promiscuous mode [ 458.839080][T11167] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.964871][ T43] audit: type=1800 audit(1787753924.464:714): pid=11173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1208" name="MaxPower" dev="configfs" ino=30271 res=0 errno=0 [ 460.296546][ T7532] IPVS: starting estimator thread 0... [ 460.322202][T11214] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1226'. [ 460.402832][T11213] IPVS: using max 27 ests per chain, 64800 per kthread [ 460.431965][T11217] ntfs3(nullb0): Primary boot signature is not NTFS. [ 460.463262][T11217] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 461.292893][ T8404] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.680662][T10998] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 461.746357][T11237] ntfs3(nullb0): Primary boot signature is not NTFS. [ 461.764852][T11237] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 461.902263][T10998] usb 8-1: Using ep0 maxpacket: 32 [ 461.922313][T10998] usb 8-1: unable to get BOS descriptor or descriptor too short [ 461.922405][T10998] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 461.923447][T10998] usb 8-1: config 8 has an invalid interface number: 188 but max is 0 [ 461.923493][T10998] usb 8-1: config 8 has no interface number 0 [ 461.923537][T10998] usb 8-1: config 8 interface 188 has no altsetting 0 [ 461.926408][T10998] usb 8-1: string descriptor 0 read error: -22 [ 461.926506][T10998] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.935584][T10998] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 461.935619][T10998] dw2102: su3000_power_ctrl: 1, initialized 0 [ 461.993059][T10998] dvb-usb: bulk message failed: -22 (2/0) [ 462.079205][T10998] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 462.080963][T10998] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 462.081007][T10998] usb 8-1: media controller created [ 462.091689][T10998] dvb-usb: bulk message failed: -22 (6/0) [ 462.091758][T10998] dw2102: i2c transfer failed. [ 462.091824][T10998] dvb-usb: bulk message failed: -22 (6/0) [ 462.091836][T10998] dw2102: i2c transfer failed. [ 462.091845][T10998] dvb-usb: bulk message failed: -22 (6/0) [ 462.091854][T10998] dw2102: i2c transfer failed. [ 462.091862][T10998] dvb-usb: bulk message failed: -22 (6/0) [ 462.091871][T10998] dw2102: i2c transfer failed. [ 462.091879][T10998] dvb-usb: bulk message failed: -22 (6/0) [ 462.091889][T10998] dw2102: i2c transfer failed. [ 462.091898][T10998] dvb-usb: bulk message failed: -22 (6/0) [ 462.091907][T10998] dw2102: i2c transfer failed. [ 462.091913][T10998] dvb-usb: MAC address: 02:02:02:02:02:02 [ 462.108698][ T8404] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.186440][T10998] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 462.373184][T10998] dvb-usb: bulk message failed: -22 (3/0) [ 462.373258][T10998] dw2102: command 0x0e transfer failed. [ 462.373291][T10998] dvb-usb: bulk message failed: -22 (3/0) [ 462.373318][T10998] dw2102: command 0x0e transfer failed. [ 462.631398][ T8404] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.701754][T10998] dvb-usb: bulk message failed: -22 (3/0) [ 462.701843][T10998] dw2102: command 0x0e transfer failed. [ 462.701878][T10998] dvb-usb: bulk message failed: -22 (3/0) [ 462.701906][T10998] dw2102: command 0x0e transfer failed. [ 462.701933][T10998] dvb-usb: bulk message failed: -22 (1/0) [ 462.701946][T10998] dw2102: command 0x51 transfer failed. [ 462.789195][T11230] dvb-usb: bulk message failed: -22 (5/0) [ 462.820693][T10998] DVB: Unable to find symbol ds3000_attach() [ 462.820787][T10998] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 462.895020][T11230] dw2102: i2c transfer failed. [ 462.898223][T11230] retu-mfd 2-0002: Tahvo v0.1 found [ 462.899639][T11230] dvb-usb: bulk message failed: -22 (6/0) [ 462.899658][T11230] dw2102: i2c transfer failed. [ 462.904078][T11230] dvb-usb: bulk message failed: -22 (5/0) [ 462.904097][T11230] dw2102: i2c transfer failed. [ 462.911818][T11230] genirq: Flags mismatch irq 0. 00002000 (TAHVO) vs. 00215a00 (timer) [ 462.915908][T11230] retu-mfd 2-0002: Failed to request IRQ 0 for TAHVO: -16 [ 462.935915][T11230] retu-mfd 2-0002: probe with driver retu-mfd failed with error -16 [ 462.936193][T11230] i2c i2c-2: new_device: Instantiated device tahvo at 0x02 [ 463.002275][T10998] rc_core: IR keymap rc-su3000 not found [ 463.002344][T10998] Registered IR keymap rc-empty [ 463.003312][T10998] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 463.020013][T10998] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input42 [ 463.021914][T10998] dvb-usb: schedule remote query interval to 150 msecs. [ 463.021932][T10998] dw2102: su3000_power_ctrl: 0, initialized 1 [ 463.021941][T10998] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 463.043639][T10998] usb 8-1: USB disconnect, device number 13 [ 463.150243][T11261] netlink: 'syz.0.1240': attribute type 1 has an invalid length. [ 463.256566][ T8404] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.334663][T10998] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 463.397452][T11265] bond17 (unregistering): Released all slaves [ 464.020775][ T8404] bridge_slave_1: left allmulticast mode [ 464.020845][ T8404] bridge_slave_1: left promiscuous mode [ 464.021069][ T8404] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.105482][ T8404] bridge_slave_0: left allmulticast mode [ 464.105563][ T8404] bridge_slave_0: left promiscuous mode [ 464.105793][ T8404] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.597554][T11298] ntfs3(nullb0): Primary boot signature is not NTFS. [ 464.673630][T11298] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 465.091905][T11312] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.1769104431.1918985007), cmd(14) [ 465.378966][ T8404] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 465.545429][ T8404] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 465.594501][ T8404] bond0 (unregistering): Released all slaves [ 465.614151][ T8404] bond1 (unregistering): Released all slaves [ 465.654860][ T8404] bond2 (unregistering): Released all slaves [ 465.717492][ T5448] 8021q: adding VLAN 0 to HW filter on device eth5 [ 465.737505][T11309] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 465.790722][ T62] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 465.963122][ T62] usb 7-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 465.981780][ T62] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 465.981877][ T62] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 466.010542][ T62] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.010619][ T62] usb 7-1: Product: syz [ 466.010662][ T62] usb 7-1: Manufacturer: syz [ 466.010698][ T62] usb 7-1: SerialNumber: syz [ 466.264177][T11335] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1260'. [ 466.298835][ T62] usblp 7-1:1.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 466.470474][ T5448] 8021q: adding VLAN 0 to HW filter on device eth6 [ 466.715331][T11344] gretap1: entered promiscuous mode [ 466.790395][ T2333] usb 7-1: USB disconnect, device number 11 [ 466.797238][ T2333] usblp0: removed [ 467.302741][T11348] bond1 (unregistering): Released all slaves [ 467.497119][ T5448] 8021q: adding VLAN 0 to HW filter on device eth7 [ 468.086633][T11361] workqueue: Failed to create a rescuer kthread for wq "bond18": -EINTR [ 468.157417][T11376] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 468.450821][ T9734] rtrs_client L1777: : Resolving route failed, err: -ENODEV [ 468.656399][T11376] rtrs_client L2636: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 469.180646][ T8404] hsr_slave_0: left promiscuous mode [ 469.181401][ T8404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.181472][ T8404] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.236765][ T8404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.236844][ T8404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.333708][ T8404] veth1_macvtap: left promiscuous mode [ 469.333807][ T8404] veth0_macvtap: left promiscuous mode [ 469.334307][ T8404] veth1_vlan: left promiscuous mode [ 469.334389][ T8404] veth0_vlan: left promiscuous mode [ 469.801722][ T8404] team0 (unregistering): Port device team_slave_1 removed [ 469.815995][T11402] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1277'. [ 469.834022][ T8404] team0 (unregistering): Port device team_slave_0 removed [ 470.217956][ T5448] 8021q: adding VLAN 0 to HW filter on device eth8 [ 470.243957][T11393] workqueue: Failed to create a rescuer kthread for wq "bond18": -EINTR [ 470.762988][T11414] bond12 (unregistering): Released all slaves [ 471.292967][T11439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.296582][T11439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.555302][T11441] bond18 (unregistering): Released all slaves [ 471.673592][T11446] ntfs3(nullb0): Primary boot signature is not NTFS. [ 471.702171][T11446] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 472.259344][T11453] bond18 (unregistering): Released all slaves [ 473.340075][T11473] ntfs3(nullb0): Primary boot signature is not NTFS. [ 473.353846][T11473] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 473.539700][T11475] bond12 (unregistering): Released all slaves [ 474.109401][T11489] netlink: 4560 bytes leftover after parsing attributes in process `syz.5.1305'. [ 474.128996][T11489] netlink: 4560 bytes leftover after parsing attributes in process `syz.5.1305'. [ 475.224153][T11511] Illegal XDP return value 2647550932 on prog (id 115) dev syz_tun, expect packet loss! [ 475.493523][T11521] netlink: 'syz.2.1319': attribute type 4 has an invalid length. [ 475.918740][T11535] bond18 (unregistering): Released all slaves [ 476.651931][T11559] jffs2: notice: (11559) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 476.667972][T11561] device-mapper: ioctl: Unable to rename non-existent device, to $ [ 477.163661][T10998] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 477.344388][T10998] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 477.349479][T10998] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 477.375966][T10998] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 477.382028][T10998] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 477.393636][T10998] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 477.395922][T11577] gretap1: entered promiscuous mode [ 477.438051][T10998] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.502011][T10998] usb 7-1: config 0 descriptor?? [ 477.658783][T11582] bond1 (unregistering): Released all slaves [ 477.864346][T11592] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 478.455462][T10998] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 478.582542][ T57] usb 7-1: USB disconnect, device number 12 [ 478.759253][T11603] fido_id[11603]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb7/7-1/report_descriptor': No such file or directory [ 478.851016][ T5819] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 479.005456][ T5819] usb 10-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 479.011061][ T5819] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 479.011087][ T5819] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 479.020030][ T5819] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.020054][ T5819] usb 10-1: Product: syz [ 479.020065][ T5819] usb 10-1: Manufacturer: syz [ 479.020075][ T5819] usb 10-1: SerialNumber: syz [ 479.447490][ T5819] usblp 10-1:1.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 479.886571][ T2333] usb 10-1: USB disconnect, device number 3 [ 480.004525][ T2333] usblp0: removed [ 480.020791][T11613] tipc: Started in network mode [ 480.044953][T11613] tipc: Node identity , cluster identity 4711 [ 480.047997][T11613] tipc: Failed to obtain node identity [ 480.051668][T11613] tipc: Enabling of bearer rejected, failed to enable media [ 480.112015][T11615] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1351'. [ 480.811812][T11615] bond17 (unregistering): Released all slaves [ 484.075347][T11674] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1366'. [ 484.274287][T11674] bond18 (unregistering): Released all slaves [ 484.392081][T11679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.434433][T11679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.966398][T11693] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 484.966560][T11693] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 484.966930][T11693] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 484.967052][T11693] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 484.967242][T11693] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 484.967311][T11693] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 484.967485][T11693] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 484.967551][T11693] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 484.967719][T11693] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 484.967790][T11693] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 486.839938][T11727] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1378'. [ 487.109074][T11727] bond17 (unregistering): Released all slaves [ 487.310993][ T5844] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 487.476713][ T5844] usb 7-1: Using ep0 maxpacket: 32 [ 487.534690][ T5844] usb 7-1: unable to get BOS descriptor or descriptor too short [ 487.561277][ T5844] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 487.567217][ T5844] usb 7-1: config 8 has an invalid interface number: 188 but max is 0 [ 487.567295][ T5844] usb 7-1: config 8 has no interface number 0 [ 487.567337][ T5844] usb 7-1: config 8 interface 188 has no altsetting 0 [ 487.570531][ T5844] usb 7-1: string descriptor 0 read error: -22 [ 487.570636][ T5844] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.629307][ T5844] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 487.666819][ T5844] dw2102: su3000_power_ctrl: 1, initialized 0 [ 487.667176][ T5844] dvb-usb: bulk message failed: -22 (2/0) [ 487.696523][ T5844] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 487.699329][ T5844] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 487.700710][ T5844] usb 7-1: media controller created [ 487.742108][ T5844] dvb-usb: bulk message failed: -22 (6/0) [ 487.742175][ T5844] dw2102: i2c transfer failed. [ 487.742203][ T5844] dvb-usb: bulk message failed: -22 (6/0) [ 487.742231][ T5844] dw2102: i2c transfer failed. [ 487.742259][ T5844] dvb-usb: bulk message failed: -22 (6/0) [ 487.742286][ T5844] dw2102: i2c transfer failed. [ 487.742313][ T5844] dvb-usb: bulk message failed: -22 (6/0) [ 487.742340][ T5844] dw2102: i2c transfer failed. [ 487.742374][ T5844] dvb-usb: bulk message failed: -22 (6/0) [ 487.742401][ T5844] dw2102: i2c transfer failed. [ 487.742429][ T5844] dvb-usb: bulk message failed: -22 (6/0) [ 487.742458][ T5844] dw2102: i2c transfer failed. [ 487.742482][ T5844] dvb-usb: MAC address: 02:02:02:02:02:02 [ 487.763072][ T5844] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 488.232108][ T5844] dvb-usb: bulk message failed: -22 (3/0) [ 488.232154][ T5844] dw2102: command 0x0e transfer failed. [ 488.232226][ T5844] dvb-usb: bulk message failed: -22 (3/0) [ 488.232249][ T5844] dw2102: command 0x0e transfer failed. [ 488.551784][T11751] ntfs3(nullb0): Primary boot signature is not NTFS. [ 488.558495][ T5844] dvb-usb: bulk message failed: -22 (3/0) [ 488.558517][ T5844] dw2102: command 0x0e transfer failed. [ 488.558525][ T5844] dvb-usb: bulk message failed: -22 (3/0) [ 488.558536][ T5844] dw2102: command 0x0e transfer failed. [ 488.558542][ T5844] dvb-usb: bulk message failed: -22 (1/0) [ 488.558551][ T5844] dw2102: command 0x51 transfer failed. [ 488.568999][T11736] dvb-usb: bulk message failed: -22 (5/0) [ 488.569023][T11736] dw2102: i2c transfer failed. [ 488.569044][T11736] retu-mfd 2-0002: Tahvo v0.1 found [ 488.569076][T11736] dvb-usb: bulk message failed: -22 (6/0) [ 488.569090][T11736] dw2102: i2c transfer failed. [ 488.569640][T11736] dvb-usb: bulk message failed: -22 (5/0) [ 488.569655][T11736] dw2102: i2c transfer failed. [ 488.781824][T11751] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 488.827828][T11736] genirq: Flags mismatch irq 0. 00002000 (TAHVO) vs. 00215a00 (timer) [ 488.828392][T11736] retu-mfd 2-0002: Failed to request IRQ 0 for TAHVO: -16 [ 488.856915][ T5844] DVB: Unable to find symbol ds3000_attach() [ 488.856988][ T5844] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 489.035753][T11736] retu-mfd 2-0002: probe with driver retu-mfd failed with error -16 [ 489.037242][T11736] i2c i2c-2: new_device: Instantiated device tahvo at 0x02 [ 489.075491][ T5844] rc_core: IR keymap rc-su3000 not found [ 489.075505][ T5844] Registered IR keymap rc-empty [ 489.076382][ T5844] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 489.083063][ T5844] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input44 [ 489.097281][ T5844] dvb-usb: schedule remote query interval to 150 msecs. [ 489.097303][ T5844] dw2102: su3000_power_ctrl: 0, initialized 1 [ 489.097315][ T5844] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 489.117229][ T5844] usb 7-1: USB disconnect, device number 13 [ 490.048828][ T5844] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 490.623068][T11776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1390'. [ 491.081479][T11779] bond18 (unregistering): Released all slaves [ 491.252352][ C3] net_ratelimit: 630 callbacks suppressed [ 491.252485][ C3] IPv4: Oversized IP packet from 172.20.20.24 [ 491.546345][T11787] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1393'. [ 491.840967][ T5840] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 492.002318][ T5840] usb 8-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 492.012768][ T5840] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 492.012835][ T5840] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 492.012870][ T5840] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 492.012912][ T5840] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.030243][T11789] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 492.031539][ T5840] cyberjack 8-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 492.123825][ T5840] usb 8-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 492.280665][ T5840] usb 8-1: USB disconnect, device number 14 [ 492.288304][ T5840] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 492.288940][ T5840] cyberjack 8-1:1.0: device disconnected [ 492.292269][T11798] bond12 (unregistering): Released all slaves [ 493.190002][T11804] svc: failed to register nfsdv3 RPC service (errno 97). [ 493.190090][T11804] svc: failed to register nfsaclv3 RPC service (errno 97). [ 493.232647][T11810] ntfs3(nullb0): Primary boot signature is not NTFS. [ 493.240226][T11810] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 494.133669][T11818] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1402'. [ 494.186690][T11820] tun0: tun_chr_ioctl cmd 1074025675 [ 494.186778][T11820] tun0: persist enabled [ 494.187777][T11820] tun0: tun_chr_ioctl cmd 1074025675 [ 494.187792][T11820] tun0: persist enabled [ 494.229587][T11818] gretap1: entered promiscuous mode [ 494.463691][T11822] bond1 (unregistering): Released all slaves [ 495.742253][T11847] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1412'. [ 495.762047][T11847] gretap1: entered promiscuous mode [ 496.002640][T11853] 9p: Bad value for 'wfdno' [ 496.119171][T11849] bond1 (unregistering): Released all slaves [ 496.586159][ T8772] kernel write not supported for file /tomoyo/domain_policy (pid: 8772 comm: kworker/0:5) [ 497.076957][T11865] loop5: detected capacity change from 0 to 7 [ 497.085498][T11865] Dev loop5: unable to read RDB block 7 [ 497.085535][T11865] loop5: AHDI p1 p3 p4 [ 497.085558][T11865] loop5: partition table partially beyond EOD, truncated [ 497.087073][T11865] loop5: p1 size 100663296 extends beyond EOD, truncated [ 497.152446][T11865] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 497.233621][T11868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.234033][T11868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.303028][ T5742] Bluetooth: hci3: command 0x1003 tx timeout [ 497.305465][ T5735] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 497.351732][T11866] Dev loop5: unable to read RDB block 7 [ 497.351806][T11866] loop5: AHDI p1 p3 p4 [ 497.352166][T11866] loop5: partition table partially beyond EOD, truncated [ 497.352539][T11866] loop5: p1 size 100663296 extends beyond EOD, truncated [ 497.354597][T11866] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 497.711921][ T9334] udevd[9334]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 497.720902][ T9335] udevd[9335]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 498.129824][T11877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1424'. [ 498.684271][T11886] bond12 (unregistering): Released all slaves [ 499.637617][T11897] LUN: removable file: (no medium) [ 499.960302][ T2333] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 500.133825][ T2333] usb 8-1: New USB device found, idVendor=7104, idProduct=2202, bcdDevice= 0.40 [ 500.135041][ T2333] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 206, changing to 4 [ 500.137489][ T2333] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.137508][ T2333] usb 8-1: Product: syz [ 500.137518][ T2333] usb 8-1: Manufacturer: syz [ 500.137528][ T2333] usb 8-1: SerialNumber: syz [ 500.437652][ T2333] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 500.440641][ T2333] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 500.638651][ T2333] usb 8-1: USB disconnect, device number 15 [ 500.929898][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.722517][ T5735] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 506.722600][ T5735] CPU: 0 UID: 0 PID: 5735 Comm: kworker/u34:2 Not tainted syzkaller #0 PREEMPT(full) [ 506.722624][ T5735] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 506.722639][ T5735] Workqueue: hci4 hci_rx_work [ 506.722712][ T5735] Call Trace: [ 506.722720][ T5735] [ 506.722734][ T5735] dump_stack_lvl+0x100/0x190 [ 506.722761][ T5735] sysfs_warn_dup.cold+0x1c/0x28 [ 506.722785][ T5735] sysfs_create_dir_ns+0x24b/0x2b0 [ 506.722802][ T5735] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 506.722819][ T5735] ? find_held_lock+0x2b/0x80 [ 506.722837][ T5735] ? kobject_add_internal+0x25f/0x930 [ 506.722858][ T5735] ? kobject_add_internal+0x25f/0x930 [ 506.722880][ T5735] ? do_raw_spin_unlock+0x145/0x1e0 [ 506.722909][ T5735] kobject_add_internal+0x2c8/0x930 [ 506.722935][ T5735] kobject_add+0x16a/0x1e0 [ 506.722956][ T5735] ? __pfx_kobject_add+0x10/0x10 [ 506.722975][ T5735] ? class_to_subsys+0x10f/0x150 [ 506.722999][ T5735] ? kobject_put+0xb9/0x640 [ 506.723018][ T5735] ? _raw_spin_unlock+0x28/0x50 [ 506.723046][ T5735] device_add+0x294/0x1970 [ 506.723065][ T5735] ? __pfx_dev_set_name+0x10/0x10 [ 506.723090][ T5735] ? __pfx_device_add+0x10/0x10 [ 506.723109][ T5735] ? mgmt_send_event_skb+0x2fb/0x460 [ 506.723140][ T5735] hci_conn_add_sysfs+0x1a3/0x260 [ 506.723170][ T5735] le_conn_complete_evt+0x121b/0x2120 [ 506.723202][ T5735] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 506.723226][ T5735] ? hci_event_packet+0x186/0xcd0 [ 506.723254][ T5735] hci_le_conn_complete_evt+0x23c/0x3a0 [ 506.723397][ T5735] ? skb_pull_data+0x15f/0x1e0 [ 506.723421][ T5735] hci_le_meta_evt+0x34a/0x5f0 [ 506.723446][ T5735] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 506.723477][ T5735] hci_event_packet+0x51c/0xcd0 [ 506.723502][ T5735] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 506.723528][ T5735] ? __pfx_hci_event_packet+0x10/0x10 [ 506.723557][ T5735] ? lockdep_hardirqs_on+0x7d/0x110 [ 506.723589][ T5735] hci_rx_work+0x451/0xfc0 [ 506.723616][ T5735] process_one_work+0xac7/0x1b10 [ 506.723650][ T5735] ? __pfx_process_one_work+0x10/0x10 [ 506.723681][ T5735] ? __pfx_hci_rx_work+0x10/0x10 [ 506.723706][ T5735] worker_thread+0x5ef/0xe50 [ 506.723743][ T5735] ? kthread+0x13a/0x450 [ 506.723778][ T5735] ? __pfx_worker_thread+0x10/0x10 [ 506.723801][ T5735] kthread+0x373/0x450 [ 506.723820][ T5735] ? __pfx_kthread+0x10/0x10 [ 506.723841][ T5735] ret_from_fork+0x730/0xd60 [ 506.723871][ T5735] ? __pfx_ret_from_fork+0x10/0x10 [ 506.723899][ T5735] ? __switch_to+0x800/0x10f0 [ 506.723921][ T5735] ? __pfx_kthread+0x10/0x10 [ 506.723941][ T5735] ret_from_fork_asm+0x1a/0x30 [ 506.723972][ T5735] [ 506.747302][ T5735] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 506.747345][ T5735] Bluetooth: hci4: failed to register connection device [ 507.556361][T11937] loop5: detected capacity change from 0 to 7 [ 507.627703][T11937] Dev loop5: unable to read RDB block 7 [ 507.627808][T11937] loop5: unable to read partition table [ 507.628012][T11937] loop5: partition table beyond EOD, truncated [ 507.628044][T11937] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 508.985433][T11941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1446'. [ 510.186811][T11948] bond12 (unregistering): Released all slaves [ 510.501463][T11956] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1447'. [ 511.155944][T11961] gretap1: entered promiscuous mode [ 511.546834][T11962] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 512.468300][T11980] input: syz1 as /devices/virtual/input/input45 [ 512.937872][ T2333] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 513.187926][ T2333] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 513.225338][ T2333] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 513.225401][ T2333] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 513.225454][ T2333] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.482556][T11830] syz.3.1405 (11830) used greatest stack depth: 18632 bytes left [ 513.511202][T11838] syz.0.1409 (11838) used greatest stack depth: 16984 bytes left [ 513.568793][ T2333] usb 7-1: usb_control_msg returned -32 [ 513.568880][ T2333] usbtmc 7-1:16.0: can't read capabilities [ 514.252804][T11994] VFS: Can't find a romfs filesystem on dev mtdblock0. [ 514.252804][T11994] [ 514.872550][ T43] audit: type=1400 audit(1787753980.338:715): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="test" pid=12001 comm="syz.3.1462" name="test" offset=36 [ 515.129716][T12004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.130147][T12004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.481677][ T5840] usb 7-1: USB disconnect, device number 14 [ 515.720004][T12011] input: syz1 as /devices/virtual/input/input46 [ 517.058407][T12030] 8021q: adding VLAN 0 to HW filter on device bond18 [ 517.113683][T12037] netlink: 'syz.5.1475': attribute type 1 has an invalid length. [ 517.432984][T12030] 8021q: adding VLAN 0 to HW filter on device bond19 [ 517.435104][T12030] bond18: (slave bond19): Enslaving as an active interface with an up link [ 518.003137][T12032] bond18 (unregistering): (slave bond19): Releasing backup interface [ 518.064947][T12032] bond18 (unregistering): Released all slaves [ 518.265695][ T43] audit: type=1800 audit(1787753983.788:716): pid=12052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1480" name="ifname" dev="configfs" ino=34322 res=0 errno=0 [ 519.071233][T12068] netlink: 'syz.5.1487': attribute type 1 has an invalid length. [ 519.130558][T12068] 8021q: adding VLAN 0 to HW filter on device bond1 [ 519.189457][T12073] 8021q: adding VLAN 0 to HW filter on device bond18 [ 519.214100][T12068] gretap1: entered promiscuous mode [ 519.244815][T12068] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 519.309682][T12072] 8021q: adding VLAN 0 to HW filter on device bond2 [ 519.330883][T12072] bond1: (slave bond2): Enslaving as an active interface with an up link [ 519.367015][T12073] 8021q: adding VLAN 0 to HW filter on device bond20 [ 519.383739][T12073] bond18: (slave bond20): Enslaving as an active interface with an up link [ 519.568818][T12068] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 519.596473][T12068] bond1 (unregistering): (slave bond2): Releasing backup interface [ 519.631429][T12068] bond1 (unregistering): Released all slaves [ 519.648850][ T43] audit: type=1326 audit(1787753985.168:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12086 comm="syz.2.1492" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe4fec code=0x0 [ 519.854199][T12081] bond18 (unregistering): (slave bond20): Releasing backup interface [ 519.928150][T12081] bond18 (unregistering): Released all slaves [ 520.479184][ T10] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 520.644148][ T10] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 520.666375][ T10] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 520.666432][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 520.666498][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 520.666530][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 520.666612][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.756280][ T10] usb 8-1: config 0 descriptor?? [ 520.841894][ T5840] hid_parser_main: 12 callbacks suppressed [ 520.842021][ T5840] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 520.843483][ T5840] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 521.212400][ T10] plantronics 0003:047F:FFFF.0015: ignoring exceeding usage max [ 521.282057][ T10] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 521.774258][T12122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.778290][T12122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.867532][T12125] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800 [ 521.986124][T12122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.986842][T12122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.705848][ T2333] usb 8-1: reset high-speed USB device number 16 using dummy_hcd [ 522.941176][ T2333] usb 8-1: device descriptor read/64, error -32 [ 524.015257][ T2333] usb 8-1: reset high-speed USB device number 16 using dummy_hcd [ 524.016117][ T2333] usb 8-1: device reset changed ep0 maxpacket size! [ 524.189195][ T57] usb 8-1: USB disconnect, device number 16 [ 524.462054][ T57] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 524.648473][T12170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1516'. [ 525.200381][ T57] usb 8-1: Using ep0 maxpacket: 8 [ 525.201434][ T57] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 525.202431][ T57] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 525.202474][ T57] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 525.202495][ T57] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 525.202541][ T57] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 525.202561][ T57] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 525.202600][ T57] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.474158][ T57] usb 8-1: usb_control_msg returned -32 [ 525.474232][ T57] usbtmc 8-1:16.0: can't read capabilities [ 525.594340][T12179] 8021q: adding VLAN 0 to HW filter on device bond12 [ 525.681477][T12184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.681888][T12184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.720680][T12179] 8021q: adding VLAN 0 to HW filter on device bond14 [ 525.722332][T12179] bond12: (slave bond14): Enslaving as an active interface with an up link [ 525.814974][T12181] bond12 (unregistering): (slave bond14): Releasing backup interface [ 525.862382][T12181] bond12 (unregistering): Released all slaves qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 526.279024][T12194] usbtmc 8-1:16.0: usb_control_msg returned -32 [ 526.486957][ T8772] usb 8-1: USB disconnect, device number 17 [ 526.968720][ T5811] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 526.971426][T12211] netlink: 'syz.2.1535': attribute type 1 has an invalid length. [ 527.052962][T12211] 8021q: adding VLAN 0 to HW filter on device bond12 [ 527.131709][ T5811] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 527.147045][ T5811] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 527.147082][ T5811] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 527.147122][ T5811] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.335854][T12211] 8021q: adding VLAN 0 to HW filter on device bond15 [ 527.430792][T12211] bond12: (slave bond15): Enslaving as an active interface with an up link [ 527.532674][ T5811] usb 10-1: usb_control_msg returned -32 [ 527.554132][ T5811] usbtmc 10-1:16.0: can't read capabilities [ 527.737750][T12214] bond12 (unregistering): (slave bond15): Releasing backup interface [ 527.922009][T12214] bond12 (unregistering): Released all slaves [ 527.952563][ T57] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 528.148894][ T57] usb 8-1: Using ep0 maxpacket: 32 [ 528.149766][ T57] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 528.151107][ T57] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 528.151148][ T57] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 528.151190][ T57] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 528.151252][ T57] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 528.151290][ T57] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 528.151330][ T57] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 528.151384][ T57] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.189702][ T57] usb 8-1: config 0 descriptor?? [ 528.209815][T12228] input: syz1 as /devices/virtual/input/input47 [ 528.403793][ T57] usblp 8-1:0.0: usblp1: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 528.610771][T12223] usbtmc 10-1:16.0: send_request_dev_dep_msg_in returned -90 [ 528.611812][ T57] usb 8-1: USB disconnect, device number 18 [ 528.614883][ T57] usblp1: removed [ 529.169980][T12242] 8021q: adding VLAN 0 to HW filter on device bond12 [ 529.194376][T12245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1541'. [ 529.317139][T12242] 8021q: adding VLAN 0 to HW filter on device bond16 [ 529.321551][T12242] bond12: (slave bond16): Enslaving as an active interface with an up link [ 529.559435][T12249] bond12 (unregistering): (slave bond16): Releasing backup interface [ 529.843533][ T2333] usb 10-1: USB disconnect, device number 4 [ 529.932242][ T28] numa_remove_cpu cpu 1 node 0: mask now 0,2-3 [ 529.932280][ T28] numa_remove_cpu cpu 1 node 1: mask now 0,2-3 [ 529.934015][ T28] ================================================================== [ 529.934028][ T28] BUG: KASAN: slab-use-after-free in irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 529.934052][ T28] Read of size 8 at addr ffff88805121d1a8 by task migration/1/28 [ 529.934064][ T28] [ 529.934072][ T28] CPU: 1 UID: 0 PID: 28 Comm: migration/1 Not tainted syzkaller #0 PREEMPT(full) [ 529.934090][ T28] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 529.934100][ T28] Stopper: multi_cpu_stop+0x0/0x4b0 <- __stop_cpus.constprop.0+0xb1/0x140 [ 529.934133][ T28] Call Trace: [ 529.934140][ T28] [ 529.934147][ T28] dump_stack_lvl+0x100/0x190 [ 529.934168][ T28] print_report+0x13d/0x4b0 [ 529.934191][ T28] ? __virt_addr_valid+0x239/0x430 [ 529.934214][ T28] ? irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 529.934229][ T28] kasan_report+0xdf/0x1c0 [ 529.934247][ T28] ? irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 529.934265][ T28] irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 529.934281][ T28] ? native_cpu_disable+0x54/0x80 [ 529.934304][ T28] ? __pfx_take_cpu_down+0x10/0x10 [ 529.934326][ T28] fixup_irqs+0x2b/0x280 [ 529.934348][ T28] ? __pfx_take_cpu_down+0x10/0x10 [ 529.934369][ T28] native_cpu_disable+0x59/0x80 [ 529.934391][ T28] take_cpu_down+0xb6/0x190 [ 529.934412][ T28] multi_cpu_stop+0x16a/0x4b0 [ 529.934426][ T28] ? __stop_cpus.constprop.0+0xb1/0x140 [ 529.934449][ T28] ? __pfx_multi_cpu_stop+0x10/0x10 [ 529.934463][ T28] cpu_stopper_thread+0x21e/0x450 [ 529.934487][ T28] ? __pfx_cpu_stopper_thread+0x10/0x10 [ 529.934510][ T28] smpboot_thread_fn+0x3d3/0xab0 [ 529.934532][ T28] ? kthread+0x13a/0x450 [ 529.934547][ T28] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 529.934561][ T28] kthread+0x373/0x450 [ 529.934576][ T28] ? __pfx_kthread+0x10/0x10 [ 529.934592][ T28] ret_from_fork+0x730/0xd60 [ 529.934615][ T28] ? __pfx_ret_from_fork+0x10/0x10 [ 529.934639][ T28] ? __switch_to+0x800/0x10f0 [ 529.934657][ T28] ? __pfx_kthread+0x10/0x10 [ 529.934673][ T28] ret_from_fork_asm+0x1a/0x30 [ 529.934691][ T28] [ 529.934696][ T28] [ 529.934699][ T28] Allocated by task 12211: [ 529.934708][ T28] kasan_save_stack+0x30/0x50 [ 529.934722][ T28] kasan_save_track+0x14/0x30 [ 529.934736][ T28] __kasan_kmalloc+0xaa/0xb0 [ 529.934749][ T28] __kmalloc_node_noprof+0x342/0x880 [ 529.934764][ T28] qdisc_alloc+0xbb/0xb30 [ 529.934777][ T28] qdisc_create_dflt+0x93/0x490 [ 529.934790][ T28] dev_activate+0x64f/0xce0 [ 529.934804][ T28] __dev_open+0x490/0x8f0 [ 529.934817][ T28] __dev_change_flags+0x596/0x850 [ 529.934836][ T28] rtnl_configure_link+0x161/0x4c0 [ 529.934856][ T28] rtnl_newlink+0x16d1/0x2620 [ 529.934868][ T28] rtnetlink_rcv_msg+0x95e/0xe90 [ 529.934881][ T28] netlink_rcv_skb+0x159/0x420 [ 529.934899][ T28] netlink_unicast+0x585/0x850 [ 529.934916][ T28] netlink_sendmsg+0x8b0/0xda0 [ 529.934933][ T28] ____sys_sendmsg+0xa4d/0xbe0 [ 529.934948][ T28] ___sys_sendmsg+0x190/0x1e0 [ 529.934963][ T28] __sys_sendmsg+0x160/0x210 [ 529.934984][ T28] __do_fast_syscall_32+0x13a/0x8b0 [ 529.934998][ T28] do_fast_syscall_32+0x32/0x70 [ 529.935011][ T28] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 529.935028][ T28] [ 529.935031][ T28] Freed by task 34: [ 529.935038][ T28] kasan_save_stack+0x30/0x50 [ 529.935052][ T28] kasan_save_track+0x14/0x30 [ 529.935066][ T28] kasan_save_free_info+0x3b/0x70 [ 529.935085][ T28] __kasan_slab_free+0x5f/0x80 [ 529.935100][ T28] kfree+0x22b/0x6d0 [ 529.935119][ T28] rcu_core+0x5f0/0x1260 [ 529.935140][ T28] handle_softirqs+0x1e6/0x9d0 [ 529.935160][ T28] run_ksoftirqd+0x38/0x60 [ 529.935180][ T28] smpboot_thread_fn+0x3d3/0xab0 [ 529.935192][ T28] kthread+0x373/0x450 [ 529.935206][ T28] ret_from_fork+0x730/0xd60 [ 529.935227][ T28] ret_from_fork_asm+0x1a/0x30 [ 529.935239][ T28] [ 529.935242][ T28] Last potentially related work creation: [ 529.935247][ T28] kasan_save_stack+0x30/0x50 [ 529.935261][ T28] kasan_record_aux_stack+0xa7/0xc0 [ 529.935281][ T28] __call_rcu_common.constprop.0+0xa5/0x9b0 [ 529.935302][ T28] qdisc_put+0xb0/0xf0 [ 529.935313][ T28] shutdown_scheduler_queue+0xa5/0x160 [ 529.935327][ T28] dev_shutdown+0xb3/0x440 [ 529.935341][ T28] unregister_netdevice_many_notify+0xd55/0x2150 [ 529.935365][ T28] rtnl_dellink+0x472/0xb40 [ 529.935384][ T28] rtnetlink_rcv_msg+0x95e/0xe90 [ 529.935397][ T28] netlink_rcv_skb+0x159/0x420 [ 529.935414][ T28] netlink_unicast+0x585/0x850 [ 529.935431][ T28] netlink_sendmsg+0x8b0/0xda0 [ 529.935449][ T28] ____sys_sendmsg+0xa4d/0xbe0 [ 529.935463][ T28] ___sys_sendmsg+0x190/0x1e0 [ 529.935478][ T28] __sys_sendmsg+0x160/0x210 [ 529.935498][ T28] __do_fast_syscall_32+0x13a/0x8b0 [ 529.935510][ T28] do_fast_syscall_32+0x32/0x70 [ 529.935523][ T28] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 529.935543][ T28] [ 529.935546][ T28] The buggy address belongs to the object at ffff88805121d000 [ 529.935546][ T28] which belongs to the cache kmalloc-1k of size 1024 [ 529.935558][ T28] The buggy address is located 424 bytes inside of [ 529.935558][ T28] freed 1024-byte region [ffff88805121d000, ffff88805121d400) [ 529.935573][ T28] [ 529.935576][ T28] The buggy address belongs to the physical page: [ 529.935584][ T28] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x51218 [ 529.935597][ T28] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 529.935609][ T28] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 529.935623][ T28] page_type: f5(slab) [ 529.935636][ T28] raw: 04fff00000000040 ffff88801c042dc0 dead000000000100 dead000000000122 [ 529.935649][ T28] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 529.935663][ T28] head: 04fff00000000040 ffff88801c042dc0 dead000000000100 dead000000000122 [ 529.935676][ T28] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 529.935689][ T28] head: 04fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 529.935702][ T28] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 529.935710][ T28] page dumped because: kasan: bad access detected [ 529.935718][ T28] page_owner tracks the page as allocated [ 529.935722][ T28] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5731, tgid 5731 (syz-executor), ts 39553993119 [ 529.935747][ T28] post_alloc_hook+0xfd/0x120 [ 529.935766][ T28] get_page_from_freelist+0x110d/0x35b0 [ 529.935788][ T28] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 529.935810][ T28] new_slab+0xa9/0x6e0 [ 529.935830][ T28] refill_objects+0xe3/0x410 [ 529.935850][ T28] __pcs_replace_empty_main+0x35e/0x650 [ 529.935871][ T28] __kmalloc_node_noprof+0x6ad/0x880 [ 529.935884][ T28] qdisc_alloc+0xbb/0xb30 [ 529.935897][ T28] qdisc_create_dflt+0x93/0x490 [ 529.935911][ T28] dev_activate+0x64f/0xce0 [ 529.935924][ T28] __dev_open+0x490/0x8f0 [ 529.935937][ T28] __dev_change_flags+0x596/0x850 [ 529.935957][ T28] netif_change_flags+0x8d/0x160 [ 529.935976][ T28] do_setlink.isra.0+0x1ac4/0x3e60 [ 529.936020][ T28] rtnl_newlink+0x13c1/0x2620 [ 529.936032][ T28] rtnetlink_rcv_msg+0x95e/0xe90 [ 529.936045][ T28] page last free pid 5731 tgid 5731 ts 39451079030 stack trace: [ 529.936056][ T28] __free_frozen_pages+0x79f/0x10f0 [ 529.936074][ T28] qlist_free_all+0x47/0xf0 [ 529.936086][ T28] kasan_quarantine_reduce+0x1a0/0x1f0 [ 529.936099][ T28] __kasan_slab_alloc+0x69/0x90 [ 529.936115][ T28] __kmalloc_cache_noprof+0x278/0x6d0 [ 529.936135][ T28] ref_tracker_alloc+0x190/0x590 [ 529.936150][ T28] sk_alloc+0x2e9/0xe80 [ 529.936168][ T28] unix_create1+0xa6/0x700 [ 529.936184][ T28] unix_create+0x10f/0x1b0 [ 529.936200][ T28] __sock_create+0x339/0x860 [ 529.936214][ T28] __sys_socket+0x14d/0x260 [ 529.936229][ T28] __ia32_compat_sys_socketcall+0x65b/0x770 [ 529.936246][ T28] __do_fast_syscall_32+0x13a/0x8b0 [ 529.936258][ T28] do_fast_syscall_32+0x32/0x70 [ 529.936271][ T28] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 529.936288][ T28] [ 529.936291][ T28] Memory state around the buggy address: [ 529.936298][ T28] ffff88805121d080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 529.936309][ T28] ffff88805121d100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 529.936319][ T28] >ffff88805121d180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 529.936327][ T28] ^ [ 529.936335][ T28] ffff88805121d200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 529.936345][ T28] ffff88805121d280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 529.936352][ T28] ================================================================== [ 529.936361][ T28] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 530.588568][ T28] CPU: 1 UID: 0 PID: 28 Comm: migration/1 Not tainted syzkaller #0 PREEMPT(full) [ 530.594551][ T28] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 530.600651][ T28] Stopper: multi_cpu_stop+0x0/0x4b0 <- __stop_cpus.constprop.0+0xb1/0x140 [ 530.605176][ T28] Call Trace: [ 530.607086][ T28] [ 530.608971][ T28] dump_stack_lvl+0x100/0x190 [ 530.611767][ T28] vpanic+0x553/0x970 [ 530.613908][ T28] ? __pfx_vpanic+0x10/0x10 [ 530.616616][ T28] ? __pfx_vprintk_emit+0x10/0x10 [ 530.619440][ T28] ? irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 530.623151][ T28] panic+0xd1/0xe0 [ 530.626810][ T28] ? __pfx_panic+0x10/0x10 [ 530.631735][ T28] check_panic_on_warn.cold+0x19/0x34 [ 530.634802][ T28] end_report.part.0+0x3a/0x90 [ 530.640744][ T28] kasan_report.cold+0xe/0x18 [ 530.643166][ T28] ? irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 530.656630][ T28] irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 530.659617][ T28] ? native_cpu_disable+0x54/0x80 [ 530.662322][ T28] ? __pfx_take_cpu_down+0x10/0x10 [ 530.665525][ T28] fixup_irqs+0x2b/0x280 [ 530.668567][ T28] ? __pfx_take_cpu_down+0x10/0x10 [ 530.671024][ T28] native_cpu_disable+0x59/0x80 [ 530.673044][ T28] take_cpu_down+0xb6/0x190 [ 530.675202][ T28] multi_cpu_stop+0x16a/0x4b0 [ 530.678950][ T28] ? __stop_cpus.constprop.0+0xb1/0x140 [ 530.682952][ T28] ? __pfx_multi_cpu_stop+0x10/0x10 [ 530.685505][ T28] cpu_stopper_thread+0x21e/0x450 [ 530.687748][ T28] ? __pfx_cpu_stopper_thread+0x10/0x10 [ 530.691312][ T28] smpboot_thread_fn+0x3d3/0xab0 [ 530.694261][ T28] ? kthread+0x13a/0x450 [ 530.697059][ T28] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 530.700527][ T28] kthread+0x373/0x450 [ 530.703208][ T28] ? __pfx_kthread+0x10/0x10 [ 530.706424][ T28] ret_from_fork+0x730/0xd60 [ 530.709447][ T28] ? __pfx_ret_from_fork+0x10/0x10 [ 530.712477][ T28] ? __switch_to+0x800/0x10f0 [ 530.715041][ T28] ? __pfx_kthread+0x10/0x10 [ 530.717473][ T28] ret_from_fork_asm+0x1a/0x30 [ 530.720089][ T28] [ 532.700082][ T28] Shutting down cpus with NMI [ 532.718279][ T28] Kernel Offset: disabled [ 532.721397][ T28] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:19:55 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000007 RBX=ffff88801cf3a580 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8c61e200 RDI=ffff88801cf3aa44 RBP=ffff88801cf3a580 RSP=ffffc9000046fd10 R8 =0000000000000007 R9 =0000000000000000 R10=000000000000049d R11=0000000000000000 R12=ffffc900040f7870 R13=fffff5200081ef12 R14=0000000000000003 R15=0000000000000003 RIP=ffffffff81f03259 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096976000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5433ff4 CR3=000000006e338000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85ac1980 RDI=ffffffff9bc411c0 RBP=ffffffff9bc41180 RSP=ffffc90000567360 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=53414b203a475542 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff378828d R15=dffffc0000000000 RIP=ffffffff85ac19a7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096a76000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000032f22ffc CR3=000000000eb96000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88802b43d0c0 RCX=0000000000000001 RDX=1ffff11005687a44 RSI=ffffffff8c61e200 RDI=ffff88802b43d224 RBP=0000000000000002 RSP=ffffc9000050fd18 R8 =0000000000000007 R9 =0000000000000000 R10=000000000000049d R11=0000000000000000 R12=ffffc900040f7870 R13=fffff5200081ef12 R14=0000000000000003 R15=0000000000000003 RIP=ffffffff81f03524 RFL=00000807 [-O---PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096b76000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000032e2421c CR3=0000000025fd6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c3000001 Opmask01=0000000000100000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffee0e15ecb 00007ffee0e15ecb ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffee0e163d0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffee0e163d0 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00006b6e696c0000 656361667265746e 692070756b636162 20676e6973616500 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000616463660000 6563616672657464 6320707561636162 2067646373616500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e6f62206576616c 7328203a29676e69 7265747369676572 6e7528203231646e ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3831203a65756c61 76207327726f7470 6972637365642065 6361667265746e69 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20656874206d6f72 6620746e65726566 666964202c73726f 7470697263736564 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20746e696f70646e 6520322073616820 3020676e69747465 73746c6120302065 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6361667265746e69 2030206769666e6f 63203a312d382062 7375205d37355420 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e656d676172 66206562206c6c69 7720656361667265 746e692073696874 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000003 RCX=0000000000000001 RDX=ffff88801d3d4b00 RSI=ffffffff8207674d RDI=ffff88801d3d4b00 RBP=ffffc900040f7894 RSP=ffffc900005bfd28 R8 =0000000000000005 R9 =0000000000000004 R10=0000000000000003 R11=0000000000000000 R12=ffffc900040f7870 R13=fffff5200081ef12 R14=0000000000000003 R15=0000000000000003 RIP=ffffffff820b20bb RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096c76000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5454ff4 CR3=0000000050e2c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000