last executing test programs: 51.556064741s ago: executing program 3 (id=423): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, 0x0, 0x0) 51.37998178s ago: executing program 3 (id=428): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x38, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x3, @remote, 0x40}, @in6={0xa, 0x4e22, 0x0, @private1, 0x80000001}]}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000900)=@assoc_value, 0x8) 50.436168921s ago: executing program 3 (id=452): mkdirat(0xffffffffffffff9c, &(0x7f0000019180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000040)) 50.355320681s ago: executing program 3 (id=455): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1052, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x84000, 0x0) 50.274885898s ago: executing program 3 (id=456): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev\x00') read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002600)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000004c40)={0x2020}, 0x2020) 49.116087513s ago: executing program 3 (id=483): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680), &(0x7f00000006c0)=0xc) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008c4}, 0x88c0) 49.077021471s ago: executing program 32 (id=483): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680), &(0x7f00000006c0)=0xc) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008c4}, 0x88c0) 20.674122867s ago: executing program 1 (id=1020): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc_mnt\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./export_dir\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='localhost ./export_di', 0x15) 20.501428757s ago: executing program 1 (id=1021): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0xffffffff], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @local}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) syz_emit_ethernet(0x18, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, @private, @dev}}}}}}, 0x0) 20.499792473s ago: executing program 1 (id=1023): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80a00) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1}) 20.499261466s ago: executing program 1 (id=1026): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 20.486808247s ago: executing program 1 (id=1028): execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 20.203535387s ago: executing program 1 (id=1032): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000400)='./myconfig/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 20.09924863s ago: executing program 33 (id=1032): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000400)='./myconfig/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 4.524917263s ago: executing program 4 (id=1333): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xfffffffd, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0x0, 0x8}, {0xc, 0x3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048090) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44081}, 0x0) 4.305752282s ago: executing program 4 (id=1337): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x4802) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000706010800000000000180000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r4, 0xffffffffffffffff, 0x0) 3.475851448s ago: executing program 4 (id=1355): r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x3, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f00000000c0)="a109a8", 0x0, 0x0, 0x10012, 0x0, 0x0}) 3.399339211s ago: executing program 4 (id=1357): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x5}, @TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r4, 0x3c}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000080)="55ee47dd4f070400000000008257931df1cad507f291765599e46af0dd3790b5600e", 0x22}], 0x1}, 0x8810) 2.974648303s ago: executing program 4 (id=1362): openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000ec82, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) 2.904678479s ago: executing program 4 (id=1364): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x5d) 2.536059416s ago: executing program 5 (id=1371): syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60122d9203803afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000000000000000000000000000aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af030200010000000500000000260004000018fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978001d06aa85616177c41bc943afcb84619755403946b0730a18"], 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e"], 0x22) 1.615773542s ago: executing program 5 (id=1377): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x118, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x104, 0x11, 0x0, 0x1, [@nested={0xfd, 0x160, 0x0, 0x1, [@generic="dd9782d56297a2e1ec225e89e9b6f83643f3903257", @generic="0af81bacd23740f1aa12795b64e8c4cb3883437e68266173ea60830fe0f511a25d8f32ee00b1ee3579798dcfa2c50f1127d1739d35dafc4b95f75374196863d7f73098bcffb3e1dd49aed1d0a7bd1df036bc6efe995286f58423d6a50b589d68119a05d794cdde677030a15f4320fe009b74c7a14a9759d05811ec53a78280559131dba5776bf54942441221", @typed={0x8, 0xe1, 0x0, 0x0, @u32=0x7}, @generic="1f28fddd8499010c65b59485d3ec32dd57f803250770a356842dbba0a571cadb8199a74049e4f2d02dc1a4adc0828b4831f70839e0868f5174adebd1", @typed={0x8, 0xeb, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x5, 0xf, 0x0, 0x0, @binary='H'}, @nested={0x4, 0xf3}]}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) 1.54190797s ago: executing program 5 (id=1379): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 1.541140566s ago: executing program 5 (id=1381): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x2, 0x0, {0xa, 0x20, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1001a}, [@FRA_DST={0x14, 0x1, @private1}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x29}}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a00000000000009"], 0x3c}}, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r2, &(0x7f0000002c00)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c, 0x0}}], 0x2, 0x0) 1.423456588s ago: executing program 5 (id=1382): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='psmouse', 0x7) syz_usb_connect(0x0, 0x32, 0x0, 0x0) 526.238477ms ago: executing program 0 (id=1390): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x4b4b, 0x0) 525.839244ms ago: executing program 2 (id=1392): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x134) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x101002, 0x0) pivot_root(&(0x7f0000000040)='./proc\x00', &(0x7f0000000180)='./proc\x00') 435.845367ms ago: executing program 0 (id=1393): bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7dc) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x20) write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000280)='0', 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 435.367493ms ago: executing program 2 (id=1394): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r1, 0x42}, 0x80, &(0x7f0000004300)=[{&(0x7f00000001c0)="27030200dc0f14000e0007000024c1020000ff8807c2fb7fe0406e52534b4f6b3d327db412f40000000000080000", 0x2e}], 0x1}, 0x4005) 295.554249ms ago: executing program 2 (id=1395): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x118, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x104, 0x11, 0x0, 0x1, [@nested={0xff, 0x160, 0x0, 0x1, [@generic="dd9782d56297a2e1ec225e89e9b6f83643f3903257", @generic="0af81bacd23740f1aa12795b64e8c4cb3883437e68266173ea60830fe0f511a25d8f32ee00b1ee3579798dcfa2c50f1127d1739d35dafc4b95f75374196863d7f73098bcffb3e1dd49aed1d0a7bd1df036bc6efe995286f58423d6a50b589d68119a05d794cdde677030a15f4320fe009b74c7a14a9759d05811ec53a78280559131dba5776bf54942441221", @typed={0x8, 0xe1, 0x0, 0x0, @u32=0x7}, @generic="1f28fddd8499010c65b59485d3ec32dd57f803250770a356842dbba0a571cadb8199a74049e4f2d02dc1a4adc0828b4831f70839e0868f5174adebd1777c", @typed={0x8, 0xeb, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x5, 0xf, 0x0, 0x0, @binary='H'}, @nested={0x4, 0xf3}]}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) 235.628384ms ago: executing program 0 (id=1396): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x5}, @TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r4, 0x3c}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000080)="55ee47dd4f070400000000008257931df1cad507f291765599e46af0dd3790b5600e", 0x22}], 0x1}, 0x8810) 175.948228ms ago: executing program 2 (id=1397): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000640)=[{0x0}], 0x1}, 0x20004014) 175.570493ms ago: executing program 0 (id=1398): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) 73.429683ms ago: executing program 0 (id=1399): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 73.057173ms ago: executing program 2 (id=1400): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f00000004c0)='\n', 0x1) 69.407496ms ago: executing program 0 (id=1401): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) mount(0x0, &(0x7f00000002c0)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/16], 0x50) write(r3, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) socket$inet6(0xa, 0x1, 0x0) 176.901µs ago: executing program 5 (id=1402): socket$inet6(0xa, 0x5, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) dup(r0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x400e704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=1403): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000200)={0x0, 0xfff7, 0x0, 0x0, 0x0, "e1aa535c8d201159"}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x57, 0xf7fe, 0xa8, {0x6, 0x1}, {0x68, 0x3e}, @cond=[{0x7, 0x208, 0xfff9, 0xffff, 0x2, 0x3}, {0x8, 0x5, 0x1, 0x52, 0x9, 0xd}]}) r2 = syz_open_dev$evdev(0x0, 0x1, 0x8c2b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x12d8) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:18992' (ED25519) to the list of known hosts. syzkaller login: [ 92.740282][ T5736] cgroup: Unknown subsys name 'net' [ 92.977503][ T5736] cgroup: Unknown subsys name 'cpuset' [ 92.998413][ T5736] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 93.607685][ T64] cfg80211: failed to load regulatory.db [ 95.484010][ T5736] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 110.804174][ T5771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 110.807912][ T5771] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 110.810685][ T5771] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 110.815766][ T5773] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 110.820261][ T5773] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 110.821538][ T5773] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 110.822905][ T5773] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 110.823908][ T5773] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 110.824891][ T5773] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 110.832119][ T5772] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 110.833652][ T5772] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 110.849583][ T5773] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 110.856306][ T5772] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 110.858362][ T5772] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 110.858818][ T5772] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 110.866954][ T5774] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 110.867924][ T5774] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 110.868439][ T5774] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 110.870982][ T5772] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 110.872943][ T5772] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 112.931135][ T5100] Bluetooth: hci0: command tx timeout [ 112.970004][ T68] Bluetooth: hci3: command tx timeout [ 112.973731][ T5100] Bluetooth: hci1: command tx timeout [ 113.046485][ T5100] Bluetooth: hci2: command tx timeout [ 113.320996][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.321879][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.322254][ T5768] bridge_slave_0: entered allmulticast mode [ 113.325214][ T5768] bridge_slave_0: entered promiscuous mode [ 113.589206][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.589341][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.589634][ T5768] bridge_slave_1: entered allmulticast mode [ 113.600600][ T5768] bridge_slave_1: entered promiscuous mode [ 113.754953][ T5760] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.755069][ T5760] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.755268][ T5760] bridge_slave_0: entered allmulticast mode [ 113.756685][ T5760] bridge_slave_0: entered promiscuous mode [ 113.760132][ T5760] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.760210][ T5760] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.761384][ T5760] bridge_slave_1: entered allmulticast mode [ 113.763779][ T5760] bridge_slave_1: entered promiscuous mode [ 113.847119][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.849726][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.879880][ T5762] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.880070][ T5762] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.880192][ T5762] bridge_slave_0: entered allmulticast mode [ 113.881590][ T5762] bridge_slave_0: entered promiscuous mode [ 113.935094][ T5768] team0: Port device team_slave_0 added [ 113.935751][ T5762] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.935855][ T5762] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.935955][ T5762] bridge_slave_1: entered allmulticast mode [ 113.937323][ T5762] bridge_slave_1: entered promiscuous mode [ 113.989973][ T5760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.993660][ T5760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.021183][ T5768] team0: Port device team_slave_1 added [ 114.048808][ T5759] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.048927][ T5759] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.049052][ T5759] bridge_slave_0: entered allmulticast mode [ 114.053199][ T5759] bridge_slave_0: entered promiscuous mode [ 114.073499][ T5760] team0: Port device team_slave_0 added [ 114.077044][ T5760] team0: Port device team_slave_1 added [ 114.126728][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.140162][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.140200][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.145951][ T5762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.152117][ T5762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.178848][ T5759] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.194083][ T5759] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.194222][ T5759] bridge_slave_1: entered allmulticast mode [ 114.195434][ T5759] bridge_slave_1: entered promiscuous mode [ 114.238383][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.238444][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.238522][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.288461][ T5762] team0: Port device team_slave_0 added [ 114.325179][ T5762] team0: Port device team_slave_1 added [ 114.327204][ T5760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.327219][ T5760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.327239][ T5760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.329806][ T5760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.329822][ T5760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.329840][ T5760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.369949][ T5759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.403970][ T5759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.525138][ T5768] hsr_slave_0: entered promiscuous mode [ 114.529555][ T5768] hsr_slave_1: entered promiscuous mode [ 114.552565][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.552619][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.552684][ T5762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.651497][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.651553][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.651598][ T5762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.657038][ T5760] hsr_slave_0: entered promiscuous mode [ 114.667124][ T5760] hsr_slave_1: entered promiscuous mode [ 114.667812][ T5760] debugfs: 'hsr0' already exists in 'hsr' [ 114.667889][ T5760] Cannot create hsr debugfs directory [ 114.669721][ T5759] team0: Port device team_slave_0 added [ 114.769328][ T5759] team0: Port device team_slave_1 added [ 114.938197][ T5759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.938266][ T5759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.938327][ T5759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.945465][ T5762] hsr_slave_0: entered promiscuous mode [ 114.946747][ T5762] hsr_slave_1: entered promiscuous mode [ 114.947466][ T5762] debugfs: 'hsr0' already exists in 'hsr' [ 114.947489][ T5762] Cannot create hsr debugfs directory [ 114.955069][ T5100] Bluetooth: hci0: command tx timeout [ 114.969642][ T5759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.969667][ T5759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.969687][ T5759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.043235][ T68] Bluetooth: hci3: command tx timeout [ 115.047606][ T5100] Bluetooth: hci1: command tx timeout [ 115.123121][ T5100] Bluetooth: hci2: command tx timeout [ 115.223493][ T5759] hsr_slave_0: entered promiscuous mode [ 115.233896][ T5759] hsr_slave_1: entered promiscuous mode [ 115.234442][ T5759] debugfs: 'hsr0' already exists in 'hsr' [ 115.234460][ T5759] Cannot create hsr debugfs directory [ 115.681052][ T5760] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 115.718786][ T5760] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 115.731849][ T5760] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 115.754680][ T5760] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 115.851825][ T5760] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 115.877236][ T5760] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 115.916932][ T5760] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 115.970579][ T5760] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 116.113162][ T5768] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 116.121309][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 116.124196][ T5768] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 116.180433][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 116.234004][ T5768] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 116.264770][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 116.265886][ T5768] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 116.279853][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 116.509944][ T5762] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 116.553148][ T5762] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 116.554756][ T5762] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 116.576535][ T5762] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 116.580481][ T5762] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 116.605606][ T5762] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 116.722167][ T5762] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 116.788889][ T5762] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 116.830092][ T5760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.975275][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.975677][ T5759] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 117.014714][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 117.015436][ T5759] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 117.048020][ T5100] Bluetooth: hci0: command tx timeout [ 117.048436][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 117.081157][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.081574][ T5759] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 117.092241][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 117.093221][ T5759] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 117.117891][ T5100] Bluetooth: hci1: command tx timeout [ 117.117926][ T5100] Bluetooth: hci3: command tx timeout [ 117.125371][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 117.137001][ T5760] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.193307][ T68] Bluetooth: hci2: command tx timeout [ 117.220176][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.220408][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.271723][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.277472][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.296679][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.300335][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.312370][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.318609][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.538854][ T5762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.626024][ T5759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.645601][ T5768] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 117.666250][ T5762] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.725727][ T5759] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.794700][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.794969][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.798601][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.798711][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.802850][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.802945][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.855969][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.856226][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.001549][ T5759] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 118.850846][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.923109][ T5768] veth0_vlan: entered promiscuous mode [ 118.991856][ T5768] veth1_vlan: entered promiscuous mode [ 119.130742][ T68] Bluetooth: hci0: command tx timeout [ 119.136149][ T5760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.202573][ T68] Bluetooth: hci3: command tx timeout [ 119.202669][ T68] Bluetooth: hci1: command tx timeout [ 119.210222][ T5768] veth0_macvtap: entered promiscuous mode [ 119.232745][ T5768] veth1_macvtap: entered promiscuous mode [ 119.249580][ T5759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.302263][ T5760] veth0_vlan: entered promiscuous mode [ 119.309952][ T5100] Bluetooth: hci2: command tx timeout [ 119.385243][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.400543][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.428918][ T5762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.448858][ T5759] veth0_vlan: entered promiscuous mode [ 119.458650][ T5760] veth1_vlan: entered promiscuous mode [ 119.481413][ T5759] veth1_vlan: entered promiscuous mode [ 119.583986][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.584446][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.584519][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.584573][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.656396][ T5759] veth0_macvtap: entered promiscuous mode [ 119.667664][ T5759] veth1_macvtap: entered promiscuous mode [ 119.763006][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.767419][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.822927][ T5762] veth0_vlan: entered promiscuous mode [ 119.845040][ T5759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.855921][ T5759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.868526][ T5760] veth0_macvtap: entered promiscuous mode [ 119.912072][ T5760] veth1_macvtap: entered promiscuous mode [ 119.971048][ T5760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.984958][ T5762] veth1_vlan: entered promiscuous mode [ 119.994278][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.994348][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.020017][ T5760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.286375][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.286440][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.295602][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.365197][ T14] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.430919][ T5762] veth0_macvtap: entered promiscuous mode [ 120.439381][ T5762] veth1_macvtap: entered promiscuous mode [ 120.495996][ T5768] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 120.521387][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.530804][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.530931][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.530992][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.531052][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.531113][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.624616][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.648388][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.648475][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.745266][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.810348][ T14] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.810706][ T14] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.810842][ T14] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.811939][ T14] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.833565][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.833590][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.894629][ T5768] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 121.040550][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.045611][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.066047][ T5768] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 121.135902][ T5768] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 121.376813][ T5768] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 121.463291][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.463391][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.522161][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.556700][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.767718][ T5925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7'. [ 124.772596][ T44] audit: type=1326 audit(1788177043.749:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.3.19" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fec code=0x7ffc0000 [ 124.772700][ T44] audit: type=1326 audit(1788177043.749:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.3.19" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fec code=0x7ffc0000 [ 124.792084][ T44] audit: type=1326 audit(1788177043.769:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.3.19" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fec code=0x7ffc0000 [ 124.794784][ T44] audit: type=1326 audit(1788177043.769:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.3.19" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fec code=0x7ffc0000 [ 124.794947][ T44] audit: type=1326 audit(1788177043.769:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.3.19" exe="/syz-executor" sig=0 arch=40000003 syscall=94 compat=1 ip=0xf7f36fec code=0x7ffc0000 [ 124.795539][ T44] audit: type=1326 audit(1788177043.769:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.3.19" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fec code=0x7ffc0000 [ 124.795850][ T44] audit: type=1326 audit(1788177043.769:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.3.19" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fec code=0x7ffc0000 [ 124.796544][ T44] audit: type=1326 audit(1788177043.769:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.3.19" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f36fec code=0x7ffc0000 [ 124.796578][ T44] audit: type=1326 audit(1788177043.769:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.3.19" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7f36fec code=0x7ffc0000 [ 125.652981][ T5975] syz.2.23 uses obsolete (PF_INET,SOCK_PACKET) [ 125.671313][ T5976] sctp: [Deprecated]: syz.3.27 (pid 5976) Use of struct sctp_assoc_value in delayed_ack socket option. [ 125.671313][ T5976] Use struct sctp_sack_info instead [ 125.688098][ T5976] FAULT_INJECTION: forcing a failure. [ 125.688098][ T5976] name failslab, interval 1, probability 0, space 0, times 1 [ 125.688213][ T5976] CPU: 3 UID: 0 PID: 5976 Comm: syz.3.27 Not tainted syzkaller #0 PREEMPT(full) [ 125.688252][ T5976] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 125.688266][ T5976] Call Trace: [ 125.688273][ T5976] [ 125.688283][ T5976] dump_stack_lvl+0x100/0x190 [ 125.688316][ T5976] should_fail_ex.cold+0x5/0xa [ 125.688339][ T5976] should_failslab+0xc2/0x120 [ 125.688364][ T5976] __kvmalloc_node_noprof+0x113/0x9b0 [ 125.688382][ T5976] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 125.688407][ T5976] ? percpu_ref_init+0xec/0x3f0 [ 125.688432][ T5976] ? io_alloc_cache_init+0x38/0x170 [ 125.688459][ T5976] io_alloc_cache_init+0x38/0x170 [ 125.688485][ T5976] io_uring_setup.cold+0x450/0x1c5e [ 125.688512][ T5976] ? ksys_write+0x190/0x250 [ 125.688528][ T5976] ? ksys_write+0x190/0x250 [ 125.688544][ T5976] ? __pfx_io_uring_setup+0x10/0x10 [ 125.688566][ T5976] ? do_futex+0x190/0x440 [ 125.688586][ T5976] ? __pfx_do_futex+0x10/0x10 [ 125.688613][ T5976] ? xfd_validate_state+0x129/0x190 [ 125.688649][ T5976] __ia32_sys_io_uring_setup+0xc2/0x170 [ 125.688671][ T5976] __do_fast_syscall_32+0x13a/0x8b0 [ 125.688699][ T5976] do_fast_syscall_32+0x32/0x70 [ 125.688721][ T5976] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 125.688744][ T5976] RIP: 0023:0xf7f36fec [ 125.688768][ T5976] Code: Unable to access opcode bytes at 0xf7f36fc2. [ 125.688777][ T5976] RSP: 002b:00000000f53d54bc EFLAGS: 00000282 ORIG_RAX: 00000000000001a9 [ 125.688799][ T5976] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 0000000080000040 [ 125.688813][ T5976] RDX: 00000000f7160fd7 RSI: 0000000000000001 RDI: 00000000f53d553c [ 125.688825][ T5976] RBP: 0000000080000100 R08: 0000000000000000 R09: 0000000000000000 [ 125.688838][ T5976] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 125.688851][ T5976] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 125.688875][ T5976] [ 125.756328][ T5978] Zero length message leads to an empty skb [ 126.475527][ T5974] syz.3.27 (5974) used greatest stack depth: 18680 bytes left [ 128.320999][ T6034] netlink: 32 bytes leftover after parsing attributes in process `syz.3.53'. [ 131.272728][ T6134] syzkaller0: entered promiscuous mode [ 131.272803][ T6134] syzkaller0: entered allmulticast mode [ 132.277606][ T6177] netlink: 12 bytes leftover after parsing attributes in process `syz.3.116'. [ 133.138573][ T6201] syzkaller0: entered promiscuous mode [ 133.138652][ T6201] syzkaller0: entered allmulticast mode [ 133.143404][ T6201] tipc: Started in network mode [ 133.143461][ T6201] tipc: Node identity 8209cd226aa8, cluster identity 4711 [ 133.144295][ T6201] tipc: Enabled bearer , priority 0 [ 133.182289][ T6200] tipc: Resetting bearer [ 133.394775][ T6200] tipc: Disabling bearer [ 134.902874][ T50] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 135.115500][ T50] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 135.135611][ T50] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 135.147079][ T50] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 135.161113][ T50] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 135.167921][ T50] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 135.180101][ T50] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 135.201866][ T50] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 135.210131][ T50] usb 8-1: Product: syz [ 135.218990][ T50] usb 8-1: Manufacturer: syz [ 135.293378][ T50] cdc_wdm 8-1:1.0: skipping garbage [ 135.297295][ T50] cdc_wdm 8-1:1.0: skipping garbage [ 135.315321][ T50] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 135.321027][ T50] cdc_wdm 8-1:1.0: Unknown control protocol [ 136.073219][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 136.542178][ T6285] syzkaller0: entered promiscuous mode [ 136.542599][ T6285] syzkaller0: entered allmulticast mode [ 136.783871][ T6287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.162'. [ 137.560588][ T6308] syzkaller0: entered promiscuous mode [ 137.560703][ T6308] syzkaller0: entered allmulticast mode [ 137.637150][ T64] usb 8-1: USB disconnect, device number 2 [ 138.415479][ T6344] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 138.419028][ T6342] IPVS: stopping backup sync thread 6344 ... [ 138.659358][ T6350] netlink: 24 bytes leftover after parsing attributes in process `syz.3.186'. [ 138.818051][ T6353] can0: slcan on ttyS3. [ 138.945449][ T6353] can0 (unregistered): slcan off ttyS3. [ 139.076056][ T6369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.194'. [ 139.160039][ T6372] syzkaller0: entered promiscuous mode [ 139.160119][ T6372] syzkaller0: entered allmulticast mode [ 139.683878][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.684094][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.303185][ T6448] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.453489][ T6462] syzkaller0: entered promiscuous mode [ 140.453528][ T6462] syzkaller0: entered allmulticast mode [ 140.454727][ T44] audit: type=1326 audit(1788177059.439:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6465 comm="syz.3.238" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f36fec code=0x0 [ 141.046200][ T6483] syzkaller0: entered promiscuous mode [ 141.046315][ T6483] syzkaller0: entered allmulticast mode [ 142.047272][ T6522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.264'. [ 142.171226][ T6439] Set syz1 is full, maxelem 65536 reached [ 142.684494][ T6562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.282'. [ 142.684574][ T6562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.282'. [ 143.538649][ T6611] syzkaller0: entered promiscuous mode [ 143.538709][ T6611] syzkaller0: entered allmulticast mode [ 143.548877][ T6611] tipc: Enabled bearer , priority 0 [ 143.557720][ T6607] tipc: Resetting bearer [ 143.583368][ T6607] tipc: Disabling bearer [ 143.874437][ T6645] syzkaller0: entered promiscuous mode [ 143.874492][ T6645] syzkaller0: entered allmulticast mode [ 143.877045][ T6645] tipc: Started in network mode [ 143.877066][ T6645] tipc: Node identity 7ebcfed45269, cluster identity 4711 [ 143.877161][ T6645] tipc: Enabled bearer , priority 0 [ 143.885135][ T6644] tipc: Resetting bearer [ 143.903229][ T6644] tipc: Disabling bearer [ 144.098901][ T6668] sctp: [Deprecated]: syz.2.329 (pid 6668) Use of struct sctp_assoc_value in delayed_ack socket option. [ 144.098901][ T6668] Use struct sctp_sack_info instead [ 144.958697][ T44] audit: type=1326 audit(1788177063.939:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6713 comm="syz.3.353" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fec code=0x7ffc0000 [ 144.959703][ T44] audit: type=1326 audit(1788177063.939:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6713 comm="syz.3.353" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fec code=0x7ffc0000 [ 144.959827][ T44] audit: type=1326 audit(1788177063.939:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6713 comm="syz.3.353" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fec code=0x7ffc0000 [ 144.962596][ T44] audit: type=1326 audit(1788177063.949:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6713 comm="syz.3.353" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fec code=0x7ffc0000 [ 144.962801][ T44] audit: type=1326 audit(1788177063.949:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6713 comm="syz.3.353" exe="/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7f36fec code=0x7ffc0000 [ 144.962983][ T44] audit: type=1326 audit(1788177063.949:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6713 comm="syz.3.353" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fec code=0x7ffc0000 [ 144.963116][ T44] audit: type=1326 audit(1788177063.949:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6713 comm="syz.3.353" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fec code=0x7ffc0000 [ 144.963391][ T44] audit: type=1326 audit(1788177063.949:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6713 comm="syz.3.353" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f36fec code=0x7ffc0000 [ 144.963509][ T44] audit: type=1326 audit(1788177063.949:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6713 comm="syz.3.353" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7f36fec code=0x7ffc0000 [ 145.099518][ T6720] syzkaller0: entered promiscuous mode [ 145.099569][ T6720] syzkaller0: entered allmulticast mode [ 145.105760][ T6720] tipc: Started in network mode [ 145.105805][ T6720] tipc: Node identity 7e6931a908ee, cluster identity 4711 [ 145.105951][ T6720] tipc: Enabled bearer , priority 0 [ 145.110762][ T6719] tipc: Resetting bearer [ 145.128433][ T6719] tipc: Disabling bearer [ 145.422944][ T6718] ======================================================= [ 145.422944][ T6718] WARNING: The mand mount option has been deprecated and [ 145.422944][ T6718] and is ignored by this kernel. Remove the mand [ 145.422944][ T6718] option from the mount to silence this warning. [ 145.422944][ T6718] ======================================================= [ 145.808400][ T6767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.377'. [ 146.138306][ T6796] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.147485][ T6803] netlink: 168 bytes leftover after parsing attributes in process `syz.0.394'. [ 146.210705][ T6796] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.275588][ T6796] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.357986][ T6796] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.443573][ T6816] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 146.485600][ T6816] syzkaller0: entered promiscuous mode [ 146.485709][ T6816] syzkaller0: entered allmulticast mode [ 147.763870][ T6830] syzkaller0: entered promiscuous mode [ 147.763986][ T6830] syzkaller0: entered allmulticast mode [ 147.774152][ T6850] tipc: Enabled bearer , priority 0 [ 147.785537][ T6823] tipc: Resetting bearer [ 147.799807][ T6823] tipc: Disabling bearer [ 147.862611][ T14] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.862691][ T14] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.862768][ T14] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.862812][ T14] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.155797][ T6871] syzkaller0: entered promiscuous mode [ 148.155855][ T6871] syzkaller0: entered allmulticast mode [ 148.163843][ T6871] tipc: Enabled bearer , priority 0 [ 148.167094][ T6868] tipc: Resetting bearer [ 148.179744][ T6868] tipc: Disabling bearer [ 148.658575][ T6899] sctp: [Deprecated]: syz.3.428 (pid 6899) Use of struct sctp_assoc_value in delayed_ack socket option. [ 148.658575][ T6899] Use struct sctp_sack_info instead [ 149.022955][ T6920] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 149.028977][ T6920] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 149.029859][ T6920] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 149.034173][ T6920] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 149.044985][ T6920] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 150.747914][ T7012] sctp: [Deprecated]: syz.0.482 (pid 7012) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.747914][ T7012] Use struct sctp_sack_info instead [ 150.757362][ T7013] 9p: Bad value for 'rfdno' [ 150.947908][ T68] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 150.952168][ T68] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 150.957240][ T68] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 150.963168][ T68] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 150.963725][ T68] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 151.496894][ T7019] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.500456][ T7019] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.509495][ T7019] bridge_slave_0: entered allmulticast mode [ 151.515244][ T7019] bridge_slave_0: entered promiscuous mode [ 151.524518][ T7019] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.533802][ T7019] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.537227][ T7019] bridge_slave_1: entered allmulticast mode [ 151.540910][ T7019] bridge_slave_1: entered promiscuous mode [ 151.577532][ T7019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.583872][ T7019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.614609][ T7019] team0: Port device team_slave_0 added [ 151.616191][ T7019] team0: Port device team_slave_1 added [ 151.635494][ T7019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.635540][ T7019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.635595][ T7019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.636577][ T7019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.636588][ T7019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.636601][ T7019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.638524][ T7060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.497'. [ 151.638542][ T7060] openvswitch: netlink: Flow actions attr not present in new flow. [ 151.660279][ T7019] hsr_slave_0: entered promiscuous mode [ 151.660745][ T7019] hsr_slave_1: entered promiscuous mode [ 151.661235][ T7019] debugfs: 'hsr0' already exists in 'hsr' [ 151.661248][ T7019] Cannot create hsr debugfs directory [ 151.834707][ T7019] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 151.840320][ T7019] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 151.840990][ T7019] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 151.858768][ T7019] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 151.878117][ T7019] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 151.888231][ T7019] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 151.889042][ T7019] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 151.898930][ T7019] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 151.971731][ T7019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.984179][ T7019] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.988916][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.989015][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.004731][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.004891][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.165219][ T7102] netlink: 44 bytes leftover after parsing attributes in process `syz.0.512'. [ 152.317040][ T1161] IPVS: starting estimator thread 0... [ 152.415259][ T7116] IPVS: using max 30 ests per chain, 72000 per kthread [ 152.449874][ T7019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.608916][ T14] IPVS: stop unused estimator thread 0... [ 152.635303][ T7146] netlink: 44 bytes leftover after parsing attributes in process `syz.0.527'. [ 152.729723][ T7019] veth0_vlan: entered promiscuous mode [ 152.734853][ T7019] veth1_vlan: entered promiscuous mode [ 152.750067][ T7019] veth0_macvtap: entered promiscuous mode [ 152.756287][ T7019] veth1_macvtap: entered promiscuous mode [ 152.768354][ T7019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.772270][ T7019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.796850][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.797086][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.797468][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.797566][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.836707][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.836765][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.856779][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.856856][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.901537][ T7165] isofs_fill_super: bread failed, dev=mtdblock0, iso_blknum=64, block=128 [ 153.033018][ T5100] Bluetooth: hci1: command tx timeout [ 153.171280][ T7181] tipc: Started in network mode [ 153.171333][ T7181] tipc: Node identity d66f9636cee6, cluster identity 4711 [ 153.171638][ T7181] tipc: Enabled bearer , priority 0 [ 153.181162][ T7180] tipc: Disabling bearer [ 153.390810][ T7185] syzkaller0: entered promiscuous mode [ 153.390872][ T7185] syzkaller0: entered allmulticast mode [ 154.009691][ T7203] openvswitch: netlink: Flow actions attr not present in new flow. [ 154.096714][ T7207] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 155.029234][ T7230] syzkaller0: entered promiscuous mode [ 155.031801][ T7230] syzkaller0: entered allmulticast mode [ 155.062160][ T7241] team0: Device wg0 is of different type [ 155.081259][ T7241] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 155.112758][ T5100] Bluetooth: hci1: command tx timeout [ 156.375395][ T7270] syzkaller0: entered promiscuous mode [ 156.375456][ T7270] syzkaller0: entered allmulticast mode [ 156.389773][ T7279] sctp: [Deprecated]: syz.4.577 (pid 7279) Use of struct sctp_assoc_value in delayed_ack socket option. [ 156.389773][ T7279] Use struct sctp_sack_info instead [ 156.516761][ T7292] block2mtd: error: cannot open device /dev/loop0 [ 156.586683][ T7298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.585'. [ 157.194578][ T5100] Bluetooth: hci1: command tx timeout [ 157.409005][ T7332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.596'. [ 158.298760][ T7373] tipc: Enabling of bearer rejected, failed to enable media [ 158.722974][ T7404] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.943785][ T4212] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 158.971597][ T76] IPVS: starting estimator thread 0... [ 158.973041][ T7419] FAULT_INJECTION: forcing a failure. [ 158.973041][ T7419] name failslab, interval 1, probability 0, space 0, times 0 [ 158.973061][ T7419] CPU: 3 UID: 0 PID: 7419 Comm: syz.1.628 Not tainted syzkaller #0 PREEMPT(full) [ 158.973073][ T7419] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 158.973080][ T7419] Call Trace: [ 158.973084][ T7419] [ 158.973088][ T7419] dump_stack_lvl+0x100/0x190 [ 158.973115][ T7419] should_fail_ex.cold+0x5/0xa [ 158.973131][ T7419] should_failslab+0xc2/0x120 [ 158.973148][ T7419] __kmalloc_noprof+0xfc/0x840 [ 158.973162][ T7419] ? __register_sysctl_table+0xac/0x1650 [ 158.973180][ T7419] __register_sysctl_table+0xac/0x1650 [ 158.973196][ T7419] ? trace_kmalloc+0xeb/0x110 [ 158.973209][ T7419] ? __kasan_kmalloc+0xaa/0xb0 [ 158.973222][ T7419] ? __kmalloc_node_track_caller_noprof+0x35b/0x870 [ 158.973235][ T7419] ? __pfx___register_sysctl_table+0x10/0x10 [ 158.973249][ T7419] ? register_pidns_sysctls+0x48/0x1c0 [ 158.973263][ T7419] ? __asan_memcpy+0x3c/0x60 [ 158.973274][ T7419] register_pidns_sysctls+0x11d/0x1c0 [ 158.973286][ T7419] ? __ns_common_init+0x299/0x4b0 [ 158.973304][ T7419] copy_pid_ns+0x680/0x10a0 [ 158.973322][ T7419] ? __pfx_copy_pid_ns+0x10/0x10 [ 158.973339][ T7419] ? __pfx_copy_mnt_ns+0x10/0x10 [ 158.973355][ T7419] ? create_new_namespaces+0x30/0xac0 [ 158.973373][ T7419] create_new_namespaces+0x2aa/0xac0 [ 158.973392][ T7419] unshare_nsproxy_namespaces+0xf2/0x220 [ 158.973410][ T7419] ksys_unshare+0x4a2/0xa70 [ 158.973421][ T7419] ? __pfx_ksys_unshare+0x10/0x10 [ 158.973437][ T7419] __ia32_sys_unshare+0x30/0x40 [ 158.973447][ T7419] __do_fast_syscall_32+0x13a/0x8b0 [ 158.973465][ T7419] do_fast_syscall_32+0x32/0x70 [ 158.973480][ T7419] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 158.973494][ T7419] RIP: 0023:0xf7f94fec [ 158.973505][ T7419] Code: Unable to access opcode bytes at 0xf7f94fc2. [ 158.973510][ T7419] RSP: 002b:00000000f543550c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 158.973522][ T7419] RAX: ffffffffffffffda RBX: 0000000062040200 RCX: 0000000000000000 [ 158.973529][ T7419] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 158.973535][ T7419] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 158.973541][ T7419] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 158.973547][ T7419] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 158.973589][ T7419] [ 158.998757][ T7420] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 159.063130][ T7421] IPVS: using max 44 ests per chain, 105600 per kthread [ 159.143161][ T4212] usb 7-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 159.148957][ T4212] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 159.154201][ T4212] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.163417][ T7402] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 159.173279][ T4212] opticon 7-1:1.0: opticon converter detected [ 159.177664][ T12] IPVS: stop unused estimator thread 0... [ 159.184226][ T4212] usb 7-1: opticon converter now attached to ttyUSB0 [ 159.270451][ T7441] syzkaller0: entered promiscuous mode [ 159.270512][ T7441] syzkaller0: entered allmulticast mode [ 159.678343][ T7470] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.679987][ T7470] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.737766][ T7470] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.741773][ T7470] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.843170][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.843279][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.843316][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.843345][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.914482][ T4212] usb 7-1: USB disconnect, device number 2 [ 159.928317][ T4212] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 159.929342][ T4212] opticon 7-1:1.0: device disconnected [ 160.534460][ T7463] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 160.857262][ T7495] syzkaller0: entered promiscuous mode [ 160.857326][ T7495] syzkaller0: entered allmulticast mode [ 161.128012][ T7516] overlayfs: overlapping lowerdir path [ 161.198385][ T7522] syzkaller0: entered promiscuous mode [ 161.198453][ T7522] syzkaller0: entered allmulticast mode [ 161.261511][ T7526] syzkaller0: entered promiscuous mode [ 161.261615][ T7526] syzkaller0: entered allmulticast mode [ 161.266689][ T7526] tipc: Enabled bearer , priority 0 [ 161.269735][ T7525] tipc: Resetting bearer [ 161.293736][ T7525] tipc: Disabling bearer [ 161.549145][ T7552] team0: Device wg0 is of different type [ 161.555095][ T7552] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 161.736974][ T1161] IPVS: starting estimator thread 0... [ 161.857265][ T7570] IPVS: using max 44 ests per chain, 105600 per kthread [ 162.061691][ T13] IPVS: stop unused estimator thread 0... [ 162.109376][ T7591] syzkaller0: entered promiscuous mode [ 162.109450][ T7591] syzkaller0: entered allmulticast mode [ 162.188328][ T7595] syzkaller0: entered promiscuous mode [ 162.188402][ T7595] syzkaller0: entered allmulticast mode [ 162.256354][ T7572] syz.4.698 (7572): drop_caches: 2 [ 162.293813][ T7599] block2mtd: error: cannot open device /dev/loop0 [ 162.303551][ T5853] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 162.463628][ T5853] usb 6-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 162.466574][ T5853] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 162.466612][ T5853] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.476479][ T7585] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 162.478716][ T5853] opticon 6-1:1.0: opticon converter detected [ 162.482961][ T5853] usb 6-1: opticon converter now attached to ttyUSB0 [ 162.488065][ T1172] IPVS: starting estimator thread 0... [ 162.573464][ T7614] IPVS: using max 44 ests per chain, 105600 per kthread [ 162.622879][ T7118] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 162.696651][ T7620] syzkaller0: entered promiscuous mode [ 162.696708][ T7620] syzkaller0: entered allmulticast mode [ 162.783554][ T7118] usb 7-1: Using ep0 maxpacket: 32 [ 162.859441][ T7118] usb 7-1: unable to get BOS descriptor or descriptor too short [ 162.859520][ T7118] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 162.860395][ T7118] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 162.860425][ T7118] usb 7-1: can't read configurations, error -71 [ 164.013689][ T7633] netlink: 36 bytes leftover after parsing attributes in process `syz.2.728'. [ 164.139574][ T7642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.733'. [ 164.141035][ T7642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.733'. [ 164.141217][ T7642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.733'. [ 164.143547][ T7642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.733'. [ 164.143664][ T7642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.733'. [ 164.283882][ T7650] syzkaller0: entered promiscuous mode [ 164.283930][ T7650] syzkaller0: entered allmulticast mode [ 164.553050][ T7652] syzkaller0: entered promiscuous mode [ 164.553099][ T7652] syzkaller0: entered allmulticast mode [ 164.587978][ T7656] netlink: 68 bytes leftover after parsing attributes in process `syz.2.738'. [ 164.623698][ T7658] netlink: 36 bytes leftover after parsing attributes in process `syz.2.739'. [ 165.000981][ T5846] usb 6-1: USB disconnect, device number 2 [ 165.028881][ T5846] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 165.029260][ T5846] opticon 6-1:1.0: device disconnected [ 165.034102][ T43] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 165.146522][ T7673] UDC core: g1: couldn't find an available UDC or it's busy [ 165.198934][ T7680] 9p: Bad value for 'rfdno' [ 165.203076][ T43] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 165.208589][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.211474][ T43] usb 5-1: Product: syz [ 165.213369][ T43] usb 5-1: Manufacturer: syz [ 165.218202][ T43] usb 5-1: SerialNumber: syz [ 165.346087][ T1349] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 165.477143][ T44] audit: type=1800 audit(1788177084.459:21): pid=7694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.755" name="p_srate" dev="configfs" ino=16609 res=0 errno=0 [ 165.914885][ T58] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 166.063053][ T58] usb 6-1: Using ep0 maxpacket: 32 [ 166.246636][ T58] usb 6-1: unable to get BOS descriptor or descriptor too short [ 166.246714][ T58] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 166.247439][ T58] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 166.247456][ T58] usb 6-1: can't read configurations, error -71 [ 166.292550][ T4212] usb 5-1: USB disconnect, device number 2 [ 166.353242][ T7714] syzkaller0: entered promiscuous mode [ 166.353309][ T7714] syzkaller0: entered allmulticast mode [ 166.356984][ T7714] tipc: Enabled bearer , priority 0 [ 166.359457][ T7713] tipc: Resetting bearer [ 166.371833][ T7713] tipc: Disabling bearer [ 166.403495][ T1349] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 166.403770][ T1349] ath9k_htc: Failed to initialize the device [ 166.405033][ T4212] usb 5-1: ath9k_htc: USB layer deinitialized [ 166.546330][ T7718] syzkaller0: entered promiscuous mode [ 166.546396][ T7718] syzkaller0: entered allmulticast mode [ 166.750426][ T7724] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.751728][ T7724] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.940569][ T7734] FAULT_INJECTION: forcing a failure. [ 166.940569][ T7734] name fail_futex, interval 1, probability 0, space 0, times 1 [ 166.940661][ T7734] CPU: 1 UID: 0 PID: 7734 Comm: syz.2.774 Not tainted syzkaller #0 PREEMPT(full) [ 166.940697][ T7734] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 166.940710][ T7734] Call Trace: [ 166.940717][ T7734] [ 166.940725][ T7734] dump_stack_lvl+0x100/0x190 [ 166.940756][ T7734] should_fail_ex.cold+0x5/0xa [ 166.940782][ T7734] get_futex_key+0x1d0/0x14f0 [ 166.940816][ T7734] ? __pfx_get_futex_key+0x10/0x10 [ 166.940856][ T7734] futex_wait_setup+0x91/0x540 [ 166.940886][ T7734] __futex_wait+0x19f/0x300 [ 166.940911][ T7734] ? __pfx___futex_wait+0x10/0x10 [ 166.940931][ T7734] ? __pfx_try_to_wake_up+0x10/0x10 [ 166.940956][ T7734] ? futex_hash+0x311/0x400 [ 166.940985][ T7734] ? __pfx_futex_wake_mark+0x10/0x10 [ 166.941012][ T7734] ? find_held_lock+0x2b/0x80 [ 166.941029][ T7734] ? futex_wake+0x4ea/0x5e0 [ 166.941067][ T7734] futex_wait+0xe6/0x370 [ 166.941090][ T7734] ? __pfx_futex_wait+0x10/0x10 [ 166.941117][ T7734] ? rcu_read_lock_any_held+0x6a/0x90 [ 166.941138][ T7734] ? find_held_lock+0x2b/0x80 [ 166.941156][ T7734] ? ksys_write+0x190/0x250 [ 166.941175][ T7734] ? ksys_write+0x190/0x250 [ 166.941195][ T7734] do_futex+0x265/0x440 [ 166.941214][ T7734] ? __pfx_do_futex+0x10/0x10 [ 166.941233][ T7734] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 166.941262][ T7734] __ia32_sys_futex_time32+0x2f4/0x470 [ 166.941285][ T7734] ? fput+0x7c/0x100 [ 166.941306][ T7734] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 166.941326][ T7734] ? ksys_write+0x1ac/0x250 [ 166.941342][ T7734] ? __pfx_ksys_write+0x10/0x10 [ 166.941367][ T7734] __do_fast_syscall_32+0x13a/0x8b0 [ 166.941396][ T7734] do_fast_syscall_32+0x32/0x70 [ 166.941422][ T7734] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 166.941446][ T7734] RIP: 0023:0xf704efec [ 166.941466][ T7734] Code: Unable to access opcode bytes at 0xf704efc2. [ 166.941474][ T7734] RSP: 002b:00000000f543d5bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 166.941493][ T7734] RAX: ffffffffffffffda RBX: 00000000f7444f88 RCX: 0000000000000080 [ 166.941505][ T7734] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7444f8c [ 166.941551][ T7734] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 166.941564][ T7734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.941576][ T7734] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 166.941608][ T7734] [ 167.144985][ T44] audit: type=1800 audit(1788177086.129:22): pid=7746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.779" name="addr_trtype" dev="configfs" ino=17620 res=0 errno=0 [ 167.155787][ T7746] nvmet_tcp: address family 255 not supported [ 167.214664][ T7740] configfs-gadget.g1 gadget.0: HOST MAC 8a:54:ae:a1:8f:55 [ 167.214725][ T7740] configfs-gadget.g1 gadget.0: MAC 22:04:dc:9c:ce:5e [ 167.287042][ T7753] syzkaller0: entered promiscuous mode [ 167.287100][ T7753] syzkaller0: entered allmulticast mode [ 167.679281][ T7791] netlink: 20 bytes leftover after parsing attributes in process `syz.0.797'. [ 167.729374][ T7797] overlayfs: missing 'lowerdir' [ 167.852782][ T1349] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 168.006597][ T1349] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 168.011660][ T1349] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 168.011720][ T1349] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 168.011754][ T1349] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 168.011807][ T1349] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 168.011847][ T1349] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 168.039326][ T1349] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 168.039377][ T1349] usb 9-1: Product: syz [ 168.039434][ T1349] usb 9-1: Manufacturer: syz [ 168.055276][ T1349] cdc_wdm 9-1:1.0: skipping garbage [ 168.058530][ T1349] cdc_wdm 9-1:1.0: skipping garbage [ 168.070195][ T1349] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 168.073162][ T1349] cdc_wdm 9-1:1.0: Unknown control protocol [ 168.120547][ T7826] syzkaller0: entered promiscuous mode [ 168.120628][ T7826] syzkaller0: entered allmulticast mode [ 168.823543][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -EPIPE [ 169.468922][ T7847] team0: Device wg0 is of different type [ 169.581947][ T7857] tipc: Enabled bearer , priority 0 [ 169.593433][ T7856] tipc: Disabling bearer [ 169.752598][ T2220] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 169.902508][ T2220] usb 6-1: Using ep0 maxpacket: 32 [ 169.944288][ T2220] usb 6-1: unable to get BOS descriptor or descriptor too short [ 169.944359][ T2220] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 169.947278][ T2220] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 169.947300][ T2220] usb 6-1: can't read configurations, error -71 [ 170.628085][ T43] usb 9-1: USB disconnect, device number 2 [ 171.135716][ T7930] sctp: [Deprecated]: syz.1.854 (pid 7930) Use of struct sctp_assoc_value in delayed_ack socket option. [ 171.135716][ T7930] Use struct sctp_sack_info instead [ 171.142713][ T7118] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 171.242498][ T43] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 171.302518][ T7118] usb 7-1: Using ep0 maxpacket: 32 [ 171.336798][ T7118] usb 7-1: unable to get BOS descriptor or descriptor too short [ 171.336844][ T7118] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 171.343123][ T7118] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 171.346051][ T7118] usb 7-1: can't read configurations, error -71 [ 171.395775][ T43] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 171.398958][ T43] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 171.398984][ T43] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 171.399002][ T43] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 171.399039][ T43] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 171.399122][ T43] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 171.403319][ T43] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 171.403335][ T43] usb 5-1: Product: syz [ 171.403344][ T43] usb 5-1: Manufacturer: syz [ 171.415284][ T43] cdc_wdm 5-1:1.0: skipping garbage [ 171.415305][ T43] cdc_wdm 5-1:1.0: skipping garbage [ 171.419028][ T43] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 171.419048][ T43] cdc_wdm 5-1:1.0: Unknown control protocol [ 172.161701][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -EPIPE [ 172.207358][ T7968] sctp: [Deprecated]: syz.1.871 (pid 7968) Use of struct sctp_assoc_value in delayed_ack socket option. [ 172.207358][ T7968] Use struct sctp_sack_info instead [ 172.422622][ T7118] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 172.592470][ T7118] usb 7-1: Using ep0 maxpacket: 32 [ 172.621303][ T7118] usb 7-1: unable to get BOS descriptor or descriptor too short [ 172.621354][ T7118] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 172.622149][ T7118] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 172.622182][ T7118] usb 7-1: can't read configurations, error -71 [ 172.622503][ T7118] usb usb7-port1: attempt power cycle [ 173.167940][ T5100] Bluetooth: hci1: connection err: -111 [ 173.190949][ T7989] syzkaller0: entered promiscuous mode [ 173.190995][ T7989] syzkaller0: entered allmulticast mode [ 173.655126][ T8034] 9p: Bad value for 'rfdno' [ 173.908518][ T8060] syzkaller0: entered promiscuous mode [ 173.908592][ T8060] syzkaller0: entered allmulticast mode [ 173.916763][ T8060] tipc: Enabled bearer , priority 0 [ 173.919407][ T8059] tipc: Resetting bearer [ 173.935517][ T8059] tipc: Disabling bearer [ 173.961807][ T8064] process 'syz.4.917' launched '/dev/fd/3' with NULL argv: empty string added [ 173.973885][ T8064] FAULT_INJECTION: forcing a failure. [ 173.973885][ T8064] name failslab, interval 1, probability 0, space 0, times 0 [ 173.973924][ T8064] CPU: 0 UID: 0 PID: 8064 Comm: syz.4.917 Not tainted syzkaller #0 PREEMPT(full) [ 173.973938][ T8064] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 173.973945][ T8064] Call Trace: [ 173.973949][ T8064] [ 173.973954][ T8064] dump_stack_lvl+0x100/0x190 [ 173.973986][ T8064] should_fail_ex.cold+0x5/0xa [ 173.974001][ T8064] should_failslab+0xc2/0x120 [ 173.974019][ T8064] __kmalloc_noprof+0xfc/0x840 [ 173.974035][ T8064] ? tomoyo_profile+0x47/0x60 [ 173.974050][ T8064] ? tomoyo_supervisor+0x65d/0x1340 [ 173.974071][ T8064] tomoyo_supervisor+0x65d/0x1340 [ 173.974090][ T8064] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 173.974108][ T8064] ? tomoyo_realpath_from_path+0x19c/0x690 [ 173.974135][ T8064] ? tomoyo_check_path_number_acl+0x1e6/0x2f0 [ 173.974163][ T8064] tomoyo_path_number_perm+0x445/0x580 [ 173.974186][ T8064] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 173.974205][ T8064] ? futex_wait+0x11e/0x370 [ 173.974238][ T8064] ? __lock_acquire+0x4c5/0x1ec0 [ 173.974260][ T8064] ? __fget_files+0x34/0x3d0 [ 173.974272][ T8064] ? find_held_lock+0x2b/0x80 [ 173.974283][ T8064] ? __fget_files+0x215/0x3d0 [ 173.974295][ T8064] ? hook_file_ioctl_common+0x140/0x440 [ 173.974315][ T8064] ? __fget_files+0x21f/0x3d0 [ 173.974330][ T8064] security_file_ioctl_compat+0xd3/0x230 [ 173.974347][ T8064] __ia32_compat_sys_ioctl+0xc2/0x360 [ 173.974367][ T8064] __do_fast_syscall_32+0x13a/0x8b0 [ 173.974384][ T8064] do_fast_syscall_32+0x32/0x70 [ 173.974400][ T8064] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 173.974414][ T8064] RIP: 0023:0xf701efec [ 173.974428][ T8064] Code: Unable to access opcode bytes at 0xf701efc2. [ 173.974434][ T8064] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 173.974445][ T8064] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c0145608 [ 173.974453][ T8064] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 173.974459][ T8064] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 173.974465][ T8064] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 173.974471][ T8064] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 173.974486][ T8064] [ 174.027823][ T2407] usb 5-1: USB disconnect, device number 3 [ 174.081570][ T8070] random: crng reseeded on system resumption [ 174.722577][ T1349] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 174.874787][ T1349] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 174.879712][ T1349] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.887990][ T1349] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.893318][ T1349] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.899185][ T8111] syzkaller0: entered promiscuous mode [ 174.899240][ T8111] syzkaller0: entered allmulticast mode [ 174.905390][ T1349] usb 5-1: config 0 descriptor?? [ 174.944128][ T8113] syzkaller0: entered promiscuous mode [ 174.944197][ T8113] syzkaller0: entered allmulticast mode [ 174.949053][ T8113] tipc: Enabled bearer , priority 0 [ 174.952906][ T8112] tipc: Resetting bearer [ 174.966704][ T8112] tipc: Disabling bearer [ 175.262636][ T8132] syzkaller0: entered promiscuous mode [ 175.267427][ T8132] syzkaller0: entered allmulticast mode [ 175.297923][ T8132] tipc: Enabled bearer , priority 0 [ 175.301189][ T8131] tipc: Resetting bearer [ 175.316712][ T8131] tipc: Disabling bearer [ 175.338102][ T1349] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 175.339189][ T8136] syzkaller0: entered promiscuous mode [ 175.339203][ T8136] syzkaller0: entered allmulticast mode [ 175.369744][ T1349] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0926:3333.0002/input/input5 [ 175.529113][ T1349] keytouch 0003:0926:3333.0002: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 175.556181][ T8104] usb 5-1: USB disconnect, device number 4 [ 175.585372][ T8158] syzkaller0: entered promiscuous mode [ 175.585448][ T8158] syzkaller0: entered allmulticast mode [ 175.591312][ T8158] tipc: Started in network mode [ 175.591374][ T8158] tipc: Node identity 8218671a3c51, cluster identity 4711 [ 175.591541][ T8158] tipc: Enabled bearer , priority 0 [ 175.596021][ T8157] tipc: Resetting bearer [ 175.605381][ T8153] fido_id[8153]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb5/5-1/report_descriptor': No such file or directory [ 175.629184][ T8157] tipc: Disabling bearer [ 175.846613][ T8169] syzkaller0: entered promiscuous mode [ 175.846680][ T8169] syzkaller0: entered allmulticast mode [ 175.980929][ T8179] syzkaller0: entered promiscuous mode [ 175.980979][ T8179] syzkaller0: entered allmulticast mode [ 176.011276][ T8179] tipc: Enabled bearer , priority 0 [ 176.016575][ T8178] tipc: Resetting bearer [ 176.034431][ T8178] tipc: Disabling bearer [ 176.204481][ T8197] syzkaller0: entered promiscuous mode [ 176.204555][ T8197] syzkaller0: entered allmulticast mode [ 176.205801][ T8201] syzkaller0: entered promiscuous mode [ 176.205817][ T8201] syzkaller0: entered allmulticast mode [ 177.420116][ T8216] syzkaller0: entered promiscuous mode [ 177.420206][ T8216] syzkaller0: entered allmulticast mode [ 177.652330][ T5100] Bluetooth: hci0: connection err: -111 [ 177.664646][ T8248] syzkaller0: entered promiscuous mode [ 177.664711][ T8248] syzkaller0: entered allmulticast mode [ 178.951926][ T8261] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 179.085602][ T5100] Bluetooth: hci2: connection err: -111 [ 179.252303][ T8319] syzkaller0: entered promiscuous mode [ 179.254362][ T8319] syzkaller0: entered allmulticast mode [ 179.259885][ T8319] tipc: Enabled bearer , priority 0 [ 179.263817][ T8317] tipc: Resetting bearer [ 179.291380][ T8317] tipc: Disabling bearer [ 179.409977][ T8332] syzkaller0: entered promiscuous mode [ 179.410024][ T8332] syzkaller0: entered allmulticast mode [ 179.765892][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.819177][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.909633][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.922112][ T44] audit: type=1800 audit(1788177098.899:23): pid=8349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1034" name="addr_trtype" dev="configfs" ino=17341 res=0 errno=0 [ 179.930827][ T8349] nvmet_tcp: address family 255 not supported [ 179.944210][ T68] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 179.948996][ T68] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 179.950285][ T68] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 179.959046][ T68] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 179.961248][ T68] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 180.024291][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.072134][ T8356] syzkaller0: entered promiscuous mode [ 180.072231][ T8356] syzkaller0: entered allmulticast mode [ 180.085036][ T8356] tipc: Enabled bearer , priority 0 [ 180.088972][ T8355] tipc: Resetting bearer [ 180.110927][ T8355] tipc: Disabling bearer [ 180.313718][ T13] bridge_slave_1: left allmulticast mode [ 180.313806][ T13] bridge_slave_1: left promiscuous mode [ 180.316837][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.331230][ T13] bridge_slave_0: left allmulticast mode [ 180.331319][ T13] bridge_slave_0: left promiscuous mode [ 180.333224][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.478499][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.497641][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.505350][ T13] bond0 (unregistering): Released all slaves [ 180.506025][ T8376] nvmet_tcp: address family 255 not supported [ 180.515447][ T1162] smbdirect: ib_dev[syz1] removed [ 180.571895][ T36] syz1: Port: 1 Link DOWN [ 180.739753][ T13] tipc: Left network mode [ 180.758714][ T8389] syzkaller0: entered promiscuous mode [ 180.758756][ T8389] syzkaller0: entered allmulticast mode [ 180.761186][ T8389] tipc: Enabled bearer , priority 0 [ 180.789337][ T8388] tipc: Resetting bearer [ 180.817744][ T8388] tipc: Disabling bearer [ 180.928382][ T5454] 8021q: adding VLAN 0 to HW filter on device eth2 [ 181.098749][ T8412] nvmet_tcp: address family 255 not supported [ 181.104929][ T8350] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.109447][ T8350] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.109922][ T8350] bridge_slave_0: entered allmulticast mode [ 181.111160][ T8350] bridge_slave_0: entered promiscuous mode [ 181.126756][ T8350] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.126851][ T8350] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.126933][ T8350] bridge_slave_1: entered allmulticast mode [ 181.128034][ T8350] bridge_slave_1: entered promiscuous mode [ 181.179489][ T13] hsr_slave_0: left promiscuous mode [ 181.181989][ T13] hsr_slave_1: left promiscuous mode [ 181.184351][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.184372][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.186193][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.186204][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.223311][ T13] veth1_macvtap: left promiscuous mode [ 181.223395][ T13] veth0_macvtap: left promiscuous mode [ 181.223521][ T13] veth1_vlan: left promiscuous mode [ 181.223597][ T13] veth0_vlan: left promiscuous mode [ 181.512173][ T13] team0 (unregistering): Port device team_slave_1 removed [ 181.521905][ T13] team0 (unregistering): Port device team_slave_0 removed [ 181.595186][ T8350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.606722][ T5454] 8021q: adding VLAN 0 to HW filter on device eth3 [ 181.616735][ T8350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.667624][ T8350] team0: Port device team_slave_0 added [ 181.669835][ T8350] team0: Port device team_slave_1 added [ 181.711199][ T8350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.711246][ T8350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.711280][ T8350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.735002][ T8350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.735043][ T8350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.735098][ T8350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.767851][ T8350] hsr_slave_0: entered promiscuous mode [ 181.768314][ T8350] hsr_slave_1: entered promiscuous mode [ 181.855555][ T8430] syzkaller0: entered promiscuous mode [ 181.855634][ T8430] syzkaller0: entered allmulticast mode [ 181.867740][ T8430] tipc: Enabled bearer , priority 0 [ 181.873390][ T8429] tipc: Resetting bearer [ 181.902232][ T8429] tipc: Disabling bearer [ 181.991843][ T8435] syzkaller0: entered promiscuous mode [ 181.991915][ T8435] syzkaller0: entered allmulticast mode [ 181.998745][ T5454] 8021q: adding VLAN 0 to HW filter on device eth4 [ 182.005193][ T5100] Bluetooth: hci3: command tx timeout [ 183.312030][ T8350] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 183.331867][ T8350] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 183.332380][ T8350] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 183.341165][ T8350] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 183.348720][ T8350] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 183.354506][ T8350] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 183.355128][ T8350] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 183.365924][ T8350] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 183.367425][ T8455] syzkaller0: entered promiscuous mode [ 183.367446][ T8455] syzkaller0: entered allmulticast mode [ 183.389218][ T8455] tipc: Enabled bearer , priority 0 [ 183.393643][ T8454] tipc: Resetting bearer [ 183.395317][ T8468] nvmet_tcp: address family 255 not supported [ 183.412336][ T8454] tipc: Disabling bearer [ 183.468311][ T8350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.480181][ T8350] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.490165][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.490300][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.497504][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.497587][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.524102][ T8477] block2mtd: error: cannot open device /dev/loo [ 183.539599][ T5454] 8021q: adding VLAN 0 to HW filter on device eth5 [ 183.851684][ T8506] syzkaller0: entered promiscuous mode [ 183.851760][ T8506] syzkaller0: entered allmulticast mode [ 183.917704][ T8350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.960456][ T8511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1079'. [ 183.960538][ T8511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1079'. [ 184.082571][ T5100] Bluetooth: hci3: command tx timeout [ 184.140917][ T8350] veth0_vlan: entered promiscuous mode [ 184.151388][ T8350] veth1_vlan: entered promiscuous mode [ 184.177716][ T8350] veth0_macvtap: entered promiscuous mode [ 184.181596][ T8350] veth1_macvtap: entered promiscuous mode [ 184.196204][ T8350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.206583][ T8350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.252534][ T14] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.252605][ T14] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.252661][ T14] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.252681][ T14] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.330846][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.330917][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.377524][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.377572][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.684406][ T8552] syzkaller0: entered promiscuous mode [ 184.684450][ T8552] syzkaller0: entered allmulticast mode [ 184.722123][ T8555] syzkaller0: entered promiscuous mode [ 184.722182][ T8555] syzkaller0: entered allmulticast mode [ 184.728655][ T8555] tipc: Enabled bearer , priority 0 [ 184.731518][ T8553] tipc: Resetting bearer [ 184.744209][ T8553] tipc: Disabling bearer [ 184.901818][ T8570] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 184.993386][ T8581] syzkaller0: entered promiscuous mode [ 184.993449][ T8581] syzkaller0: entered allmulticast mode [ 185.097512][ T8589] syzkaller0: entered promiscuous mode [ 185.097557][ T8589] syzkaller0: entered allmulticast mode [ 185.108144][ T8589] tipc: Enabled bearer , priority 0 [ 185.111463][ T8588] tipc: Resetting bearer [ 185.134702][ T8588] tipc: Disabling bearer [ 185.284243][ T8596] Console: switching to colour dummy device 80x25 [ 185.384374][ T8598] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 185.397165][ T8598] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 185.397471][ T8598] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 185.398042][ T8598] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 185.399343][ T8598] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 185.412234][ T8598] pci 0000:00:01.0: Adding to iommu group 1 [ 185.417376][ T8598] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 185.417392][ T8598] pci 0000:00:01.0: vgaarb: bridge control possible [ 185.417399][ T8598] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 185.432209][ T8598] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 185.438508][ T8598] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 185.456710][ T8598] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 185.471903][ T8598] [drm] Found bochs VGA, ID 0xb0c5. [ 185.471962][ T8598] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 185.489136][ T8598] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 185.658435][ T8598] Console: switching to colour frame buffer device 160x50 [ 185.721511][ T8598] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 186.022598][ T58] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 186.163690][ T5100] Bluetooth: hci3: command tx timeout [ 186.192604][ T58] usb 7-1: Using ep0 maxpacket: 32 [ 186.216777][ T58] usb 7-1: unable to get BOS descriptor or descriptor too short [ 186.216842][ T58] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 186.218031][ T58] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 186.218048][ T58] usb 7-1: can't read configurations, error -71 [ 186.284485][ T8623] syzkaller0: entered promiscuous mode [ 186.284552][ T8623] syzkaller0: entered allmulticast mode [ 186.867323][ T8641] syzkaller0: entered promiscuous mode [ 186.867362][ T8641] syzkaller0: entered allmulticast mode [ 186.900062][ T8645] syzkaller0: entered promiscuous mode [ 186.900121][ T8645] syzkaller0: entered allmulticast mode [ 187.232536][ T5846] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 187.382583][ T5846] usb 10-1: Using ep0 maxpacket: 32 [ 187.386349][ T8684] syzkaller0: entered promiscuous mode [ 187.388838][ T8684] syzkaller0: entered allmulticast mode [ 187.440072][ T5846] usb 10-1: unable to get BOS descriptor or descriptor too short [ 187.440165][ T5846] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 187.441074][ T5846] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 187.441133][ T5846] usb 10-1: can't read configurations, error -71 [ 187.845098][ T5100] Bluetooth: hci0: connection err: -111 [ 187.872580][ T58] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 187.924194][ T8716] syzkaller0: entered promiscuous mode [ 187.924232][ T8716] syzkaller0: entered allmulticast mode [ 188.025461][ T58] usb 9-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 188.026420][ T58] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 188.026448][ T58] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.030711][ T8702] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 188.039641][ T58] opticon 9-1:1.0: opticon converter detected [ 188.048333][ T58] usb 9-1: opticon converter now attached to ttyUSB0 [ 188.223310][ T5100] Bluetooth: hci0: connection err: -111 [ 188.232549][ T5100] Bluetooth: hci3: command tx timeout [ 188.442116][ T8756] syzkaller0: entered promiscuous mode [ 188.442217][ T8756] syzkaller0: entered allmulticast mode [ 188.453353][ T8756] tipc: Started in network mode [ 188.453406][ T8756] tipc: Node identity f69ca93c8e3c, cluster identity 4711 [ 188.453700][ T8756] tipc: Enabled bearer , priority 0 [ 188.459546][ T8755] tipc: Resetting bearer [ 188.483350][ T8758] block2mtd: error: cannot open device /dev/loop [ 188.506832][ T8755] tipc: Disabling bearer [ 188.600817][ T5100] Bluetooth: hci2: connection err: -111 [ 188.689967][ T43] usb 9-1: USB disconnect, device number 3 [ 188.697014][ T43] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 188.697449][ T43] opticon 9-1:1.0: device disconnected [ 188.903164][ T8787] syzkaller0: entered promiscuous mode [ 188.903232][ T8787] syzkaller0: entered allmulticast mode [ 188.909682][ T8787] tipc: Enabled bearer , priority 0 [ 188.913575][ T8786] tipc: Resetting bearer [ 188.929727][ T8786] tipc: Disabling bearer [ 189.004708][ T5100] Bluetooth: hci3: connection err: -111 [ 189.022973][ T1349] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 189.186602][ T5100] Bluetooth: hci3: unexpected subevent 0x18 length: 30 > 19 [ 189.187889][ T5100] Bluetooth: hci3: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 189.198595][ T1349] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 189.203248][ T1349] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 189.203326][ T1349] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 189.203357][ T1349] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 189.203408][ T1349] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 189.203429][ T1349] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 189.208271][ T1349] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 189.208290][ T1349] usb 7-1: Product: syz [ 189.208300][ T1349] usb 7-1: Manufacturer: syz [ 189.212789][ T1349] cdc_wdm 7-1:1.0: skipping garbage [ 189.212806][ T1349] cdc_wdm 7-1:1.0: skipping garbage [ 189.224089][ T1349] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 189.224107][ T1349] cdc_wdm 7-1:1.0: Unknown control protocol [ 189.690009][ T8818] tipc: Enabling of bearer rejected, failed to enable media [ 189.966596][ T8803] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 189.969505][ T8803] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 189.976104][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -EPIPE [ 189.980625][ T8803] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 189.982917][ T8803] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 189.982998][ T8803] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 189.991177][ T8803] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 189.996098][ T8803] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 189.996198][ T8803] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 190.004929][ T8803] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 190.008083][ T8803] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 190.010692][ T8803] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 190.016028][ T8803] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 190.101940][ T8829] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.104216][ T8829] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.395413][ T8852] syzkaller0: entered promiscuous mode [ 190.395458][ T8852] syzkaller0: entered allmulticast mode [ 190.405205][ T8852] tipc: Enabled bearer , priority 0 [ 190.408472][ T8851] tipc: Resetting bearer [ 190.426306][ T8851] tipc: Disabling bearer [ 190.462629][ T5853] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 190.643612][ T5853] usb 10-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 190.644503][ T5853] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 190.644526][ T5853] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.648084][ T8840] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 190.650225][ T5853] opticon 10-1:1.0: opticon converter detected [ 190.655405][ T5853] usb 10-1: opticon converter now attached to ttyUSB0 [ 190.821945][ T8877] syzkaller0: entered promiscuous mode [ 190.822016][ T8877] syzkaller0: entered allmulticast mode [ 190.828581][ T8877] tipc: Enabled bearer , priority 0 [ 190.833731][ T8876] tipc: Resetting bearer [ 190.854322][ T8876] tipc: Disabling bearer [ 191.283400][ T5100] Bluetooth: hci0: command 0x0c1a tx timeout [ 191.306939][ T64] usb 10-1: USB disconnect, device number 4 [ 191.321505][ T64] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 191.321822][ T64] opticon 10-1:1.0: device disconnected [ 191.339168][ T8901] syzkaller0: entered promiscuous mode [ 191.339258][ T8901] syzkaller0: entered allmulticast mode [ 191.344442][ T8901] tipc: Enabled bearer , priority 0 [ 191.346875][ T8900] tipc: Resetting bearer [ 191.359496][ T8900] tipc: Disabling bearer [ 191.496019][ T8903] syzkaller0: entered promiscuous mode [ 191.496089][ T8903] syzkaller0: entered allmulticast mode [ 191.802073][ T64] usb 7-1: USB disconnect, device number 10 [ 191.995260][ T5100] Bluetooth: hci2: command 0x0c1a tx timeout [ 192.066974][ T5100] Bluetooth: hci3: connection err: -111 [ 192.072909][ T5100] Bluetooth: hci1: command 0x0c1a tx timeout [ 192.084783][ T5100] Bluetooth: hci3: command 0x0c1a tx timeout [ 192.231637][ T8928] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 192.491360][ T5100] Bluetooth: hci0: connection err: -111 [ 193.302181][ T8955] tipc: Enabling of bearer rejected, failed to enable media [ 193.352524][ T5100] Bluetooth: hci0: command 0x0c1a tx timeout [ 193.367724][ T8948] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 193.367903][ T8948] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 193.368010][ T8948] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 193.368164][ T8948] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 193.439169][ T5100] Bluetooth: hci2: connection err: -111 [ 193.619334][ T8987] syzkaller0: entered promiscuous mode [ 193.619384][ T8987] syzkaller0: entered allmulticast mode [ 193.625377][ T8989] syzkaller0: entered promiscuous mode [ 193.625418][ T8989] syzkaller0: entered allmulticast mode [ 193.637151][ T8987] tipc: Enabled bearer , priority 0 [ 193.638780][ T8991] syzkaller0: entered promiscuous mode [ 193.638799][ T8991] syzkaller0: entered allmulticast mode [ 193.660984][ T8986] tipc: Resetting bearer [ 193.679598][ T8986] tipc: Disabling bearer [ 193.706427][ T8991] tc action pedit offset must be on 32 bit boundaries [ 193.706496][ T8991] tc action pedit offset must be on 32 bit boundaries [ 193.706535][ T8991] tc action pedit offset must be on 32 bit boundaries [ 193.706558][ T8991] tc action pedit offset must be on 32 bit boundaries [ 193.706581][ T8991] tc action pedit offset must be on 32 bit boundaries [ 193.706591][ T8991] tc action pedit offset must be on 32 bit boundaries [ 193.706598][ T8991] tc action pedit offset must be on 32 bit boundaries [ 193.706605][ T8991] tc action pedit offset must be on 32 bit boundaries [ 193.706612][ T8991] tc action pedit offset must be on 32 bit boundaries [ 193.706620][ T8991] tc action pedit offset must be on 32 bit boundaries [ 193.706637][ T8991] 0: reclassify loop, rule prio 0, protocol 800 [ 193.839502][ T9003] FAULT_INJECTION: forcing a failure. [ 193.839502][ T9003] name failslab, interval 1, probability 0, space 0, times 0 [ 193.839594][ T9003] CPU: 1 UID: 0 PID: 9003 Comm: syz.2.1285 Not tainted syzkaller #0 PREEMPT(full) [ 193.839627][ T9003] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 193.839639][ T9003] Call Trace: [ 193.839646][ T9003] [ 193.839654][ T9003] dump_stack_lvl+0x100/0x190 [ 193.839749][ T9003] should_fail_ex.cold+0x5/0xa [ 193.839773][ T9003] should_failslab+0xc2/0x120 [ 193.839819][ T9003] __kmalloc_cache_noprof+0x91/0x6d0 [ 193.839849][ T9003] ? uprobe_register+0x177/0xa90 [ 193.839878][ T9003] uprobe_register+0x177/0xa90 [ 193.839901][ T9003] ? bpf_uprobe_multi_link_attach+0xf8f/0x1510 [ 193.839925][ T9003] bpf_uprobe_multi_link_attach+0xb80/0x1510 [ 193.839953][ T9003] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 193.839971][ T9003] ? __fget_files+0x21f/0x3d0 [ 193.839995][ T9003] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 193.840024][ T9003] __sys_bpf+0x427a/0x4a30 [ 193.840042][ T9003] ? plist_check_list+0x1b8/0x280 [ 193.840088][ T9003] ? plist_check_list+0x190/0x280 [ 193.840108][ T9003] ? __pfx___sys_bpf+0x10/0x10 [ 193.840125][ T9003] ? find_held_lock+0x2b/0x80 [ 193.840146][ T9003] ? futex_wake+0x4ea/0x5e0 [ 193.840171][ T9003] ? futex_private_hash_put.part.0+0xdc/0x180 [ 193.840197][ T9003] ? futex_private_hash_put+0x24/0x30 [ 193.840227][ T9003] ? __pfx_futex_wake+0x10/0x10 [ 193.840252][ T9003] ? rcu_read_lock_any_held+0x6a/0x90 [ 193.840271][ T9003] ? find_held_lock+0x2b/0x80 [ 193.840289][ T9003] ? ksys_write+0x190/0x250 [ 193.840305][ T9003] ? ksys_write+0x190/0x250 [ 193.840338][ T9003] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 193.840358][ T9003] ? xfd_validate_state+0x129/0x190 [ 193.840390][ T9003] ? __ia32_sys_bpf+0xcc/0x170 [ 193.840408][ T9003] __ia32_sys_bpf+0xcc/0x170 [ 193.840426][ T9003] ? __do_fast_syscall_32+0xb3/0x8b0 [ 193.840452][ T9003] __do_fast_syscall_32+0x13a/0x8b0 [ 193.840479][ T9003] do_fast_syscall_32+0x32/0x70 [ 193.840504][ T9003] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 193.840527][ T9003] RIP: 0023:0xf704efec [ 193.840546][ T9003] Code: Unable to access opcode bytes at 0xf704efc2. [ 193.840557][ T9003] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 193.840575][ T9003] RAX: ffffffffffffffda RBX: 000000000000001c RCX: 00000000800012c0 [ 193.840588][ T9003] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 193.840600][ T9003] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 193.840612][ T9003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.840623][ T9003] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 193.840648][ T9003] [ 194.032536][ T44] audit: type=1800 audit(1788177113.009:24): pid=9020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1290" name="addr_trtype" dev="configfs" ino=24877 res=0 errno=0 [ 194.032630][ T44] audit: type=1800 audit(1788177113.009:25): pid=9020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1290" name="addr_traddr" dev="configfs" ino=24878 res=0 errno=0 [ 194.033456][ T44] audit: type=1800 audit(1788177113.019:26): pid=9020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1290" name="addr_trsvcid" dev="configfs" ino=24879 res=0 errno=0 [ 194.034234][ T44] audit: type=1800 audit(1788177113.019:27): pid=9020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1290" name="addr_adrfam" dev="configfs" ino=24880 res=0 errno=0 [ 194.037116][ T9020] nvmet_tcp: enabling port 1 (127.0.0.1:8) [ 194.111034][ T9023] syzkaller0: entered promiscuous mode [ 194.111101][ T9023] syzkaller0: entered allmulticast mode [ 194.228222][ T1172] IPVS: starting estimator thread 0... [ 194.233663][ T9042] IPVS: sync thread started: state = BACKUP, mcast_ifn = syz_tun, syncid = 0, id = 0 [ 194.309698][ T76] IPVS: starting estimator thread 0... [ 194.322881][ T9041] IPVS: using max 44 ests per chain, 105600 per kthread [ 194.402812][ T9052] IPVS: using max 26 ests per chain, 62400 per kthread [ 194.453681][ T9067] FAULT_INJECTION: forcing a failure. [ 194.453681][ T9067] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 194.453735][ T9067] CPU: 1 UID: 0 PID: 9067 Comm: syz.2.1305 Not tainted syzkaller #0 PREEMPT(full) [ 194.453761][ T9067] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 194.453770][ T9067] Call Trace: [ 194.453775][ T9067] [ 194.453780][ T9067] dump_stack_lvl+0x100/0x190 [ 194.453800][ T9067] should_fail_ex.cold+0x5/0xa [ 194.453816][ T9067] save_fsave_header+0x14c/0x2f0 [ 194.453834][ T9067] ? __pfx_save_fsave_header+0x10/0x10 [ 194.453857][ T9067] ? copy_fpstate_to_sigframe+0x2b8/0xae0 [ 194.453875][ T9067] ? __local_bh_enable_ip+0xa5/0x120 [ 194.453898][ T9067] copy_fpstate_to_sigframe+0x755/0xae0 [ 194.453918][ T9067] ? __hrtimer_rearm_deferred+0x23c/0x7b0 [ 194.453934][ T9067] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 194.453951][ T9067] ? do_raw_spin_unlock+0x145/0x1e0 [ 194.453972][ T9067] ? rcu_is_watching+0x13/0xc0 [ 194.453984][ T9067] ? irqentry_exit+0x24d/0xa10 [ 194.454000][ T9067] ? x86_task_fpu+0x5f/0x90 [ 194.454021][ T9067] get_sigframe+0x3fb/0x940 [ 194.454040][ T9067] ? __pfx_get_sigframe+0x10/0x10 [ 194.454058][ T9067] ? _raw_spin_unlock_irq+0x29/0x50 [ 194.454071][ T9067] ? siginfo_layout+0x156/0x290 [ 194.454092][ T9067] ia32_setup_rt_frame+0xe7/0xaf0 [ 194.454118][ T9067] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 194.454140][ T9067] ? do_futex+0x190/0x440 [ 194.454235][ T9067] arch_do_signal_or_restart+0x459/0x7a0 [ 194.454261][ T9067] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 194.454282][ T9067] ? fput+0x7c/0x100 [ 194.454302][ T9067] exit_to_user_mode_loop+0x139/0x700 [ 194.454324][ T9067] ? rcu_is_watching+0x13/0xc0 [ 194.454340][ T9067] __do_fast_syscall_32+0x59f/0x8b0 [ 194.454356][ T9067] ? lockdep_hardirqs_on+0x7d/0x110 [ 194.454371][ T9067] do_fast_syscall_32+0x32/0x70 [ 194.454387][ T9067] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 194.454403][ T9067] RIP: 0023:0xf704efea [ 194.454414][ T9067] Code: 19 85 d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 194.454425][ T9067] RSP: 002b:00000000f543d5bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 194.454438][ T9067] RAX: 00000000000000f0 RBX: 00000000f7444f88 RCX: 0000000000000080 [ 194.454445][ T9067] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7444f8c [ 194.454452][ T9067] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 194.454458][ T9067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.454465][ T9067] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 194.454479][ T9067] [ 194.540291][ T9072] syzkaller0: entered promiscuous mode [ 194.540315][ T9072] syzkaller0: entered allmulticast mode [ 194.597595][ T9077] Bluetooth: MGMT ver 1.23 [ 194.602548][ T7118] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 194.753459][ T7118] usb 9-1: Using ep0 maxpacket: 32 [ 194.831014][ T7118] usb 9-1: unable to get BOS descriptor or descriptor too short [ 194.831064][ T7118] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 194.831752][ T7118] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 194.831772][ T7118] usb 9-1: can't read configurations, error -71 [ 194.901028][ T9106] syzkaller0: entered promiscuous mode [ 194.901118][ T9106] syzkaller0: entered allmulticast mode [ 195.353217][ T9144] block2mtd: illegal erase size [ 195.370274][ T9145] gadgetfs: bound to dummy_udc driver [ 195.433312][ T5100] Bluetooth: hci3: command 0x0c1a tx timeout [ 195.433430][ T5100] Bluetooth: hci0: command 0x0c1a tx timeout [ 195.433433][ T5772] Bluetooth: hci2: command 0x0c1a tx timeout [ 195.441066][ T68] Bluetooth: hci1: command 0x0c1a tx timeout [ 195.471498][ T9149] syzkaller0: entered promiscuous mode [ 195.472891][ T9149] syzkaller0: entered allmulticast mode [ 195.633592][ T50] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 195.633858][ C1] gadgetfs: connected [ 195.633958][ T50] gadgetfs: disconnected [ 195.730188][ T9166] FAULT_INJECTION: forcing a failure. [ 195.730188][ T9166] name failslab, interval 1, probability 0, space 0, times 0 [ 195.736138][ T9166] CPU: 2 UID: 0 PID: 9166 Comm: syz.5.1338 Not tainted syzkaller #0 PREEMPT(full) [ 195.736185][ T9166] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 195.736198][ T9166] Call Trace: [ 195.736208][ T9166] [ 195.736217][ T9166] dump_stack_lvl+0x100/0x190 [ 195.736250][ T9166] should_fail_ex.cold+0x5/0xa [ 195.736272][ T9166] should_failslab+0xc2/0x120 [ 195.736298][ T9166] __kmalloc_noprof+0xfc/0x840 [ 195.736318][ T9166] ? rcu_is_watching+0x13/0xc0 [ 195.736338][ T9166] ? tomoyo_realpath_from_path+0xb6/0x690 [ 195.736372][ T9166] tomoyo_realpath_from_path+0xb6/0x690 [ 195.736407][ T9166] tomoyo_path2_perm+0x29f/0x700 [ 195.736432][ T9166] ? tomoyo_path2_perm+0x291/0x700 [ 195.736458][ T9166] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 195.736495][ T9166] ? __pfx_stack_trace_save+0x10/0x10 [ 195.736524][ T9166] ? stack_depot_save_flags+0x27/0x9f0 [ 195.736553][ T9166] ? kasan_save_stack+0x3f/0x50 [ 195.736572][ T9166] ? kasan_save_stack+0x30/0x50 [ 195.736596][ T9166] ? kasan_save_track+0x14/0x30 [ 195.736622][ T9166] ? kasan_save_free_info+0x3b/0x70 [ 195.736660][ T9166] ? hook_sb_pivotroot+0x1e2/0x320 [ 195.736688][ T9166] ? apparmor_capable+0x1d7/0x4d0 [ 195.736718][ T9166] security_sb_pivotroot+0xc4/0x210 [ 195.736744][ T9166] path_pivot_root+0x14f/0x1320 [ 195.736777][ T9166] ? kasan_quarantine_put+0x104/0x240 [ 195.736796][ T9166] ? lockdep_hardirqs_on+0x7d/0x110 [ 195.736818][ T9166] ? __pfx_path_pivot_root+0x10/0x10 [ 195.736842][ T9166] ? putname+0xb1/0x110 [ 195.736860][ T9166] ? kmem_cache_free+0x127/0x6c0 [ 195.736894][ T9166] __ia32_sys_pivot_root+0x199/0x1c0 [ 195.736917][ T9166] ? __pfx___ia32_sys_pivot_root+0x10/0x10 [ 195.736979][ T9166] __do_fast_syscall_32+0x13a/0x8b0 [ 195.737011][ T9166] do_fast_syscall_32+0x32/0x70 [ 195.737038][ T9166] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 195.737064][ T9166] RIP: 0023:0xf708efec [ 195.737088][ T9166] Code: Unable to access opcode bytes at 0xf708efc2. [ 195.737097][ T9166] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000d9 [ 195.737117][ T9166] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000080000180 [ 195.737131][ T9166] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 195.737144][ T9166] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 195.737155][ T9166] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 195.737168][ T9166] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 195.737195][ T9166] [ 195.782721][ T9166] ERROR: Out of memory at tomoyo_realpath_from_path. [ 195.803587][ C1] gadgetfs: connected [ 195.804189][ T50] usb 6-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 195.804830][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.818805][ C1] gadgetfs: configuration #1 [ 195.855370][ T9142] gadgetfs: suspended from state 3 [ 195.856067][ T50] usb 6-1: can't set config #1, error -71 [ 195.857754][ T9142] gadgetfs: disconnected [ 195.864750][ T50] usb 6-1: USB disconnect, device number 7 [ 196.364587][ T9214] FAULT_INJECTION: forcing a failure. [ 196.364587][ T9214] name failslab, interval 1, probability 0, space 0, times 0 [ 196.364649][ T9214] CPU: 2 UID: 0 PID: 9214 Comm: syz.0.1353 Not tainted syzkaller #0 PREEMPT(full) [ 196.364684][ T9214] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 196.364698][ T9214] Call Trace: [ 196.364705][ T9214] [ 196.364713][ T9214] dump_stack_lvl+0x100/0x190 [ 196.364743][ T9214] should_fail_ex.cold+0x5/0xa [ 196.364767][ T9214] should_failslab+0xc2/0x120 [ 196.364791][ T9214] __kmalloc_noprof+0xfc/0x840 [ 196.364811][ T9214] ? udpv6_init_sock+0x24e/0x450 [ 196.364885][ T9214] udpv6_init_sock+0x24e/0x450 [ 196.364909][ T9214] ? __pfx_udpv6_init_sock+0x10/0x10 [ 196.364935][ T9214] inet6_create+0xb1a/0x12b0 [ 196.364970][ T9214] ? inet6_create+0x7f/0x12b0 [ 196.365003][ T9214] __sock_create+0x339/0x860 [ 196.365048][ T9214] __sys_socket+0x14d/0x260 [ 196.365075][ T9214] ? fput+0x7c/0x100 [ 196.365097][ T9214] ? __pfx___sys_socket+0x10/0x10 [ 196.365122][ T9214] ? ksys_write+0x1ac/0x250 [ 196.365138][ T9214] ? __pfx_ksys_write+0x10/0x10 [ 196.365160][ T9214] __ia32_sys_socket+0x72/0xb0 [ 196.365187][ T9214] ? lockdep_hardirqs_on+0x7d/0x110 [ 196.365211][ T9214] __do_fast_syscall_32+0x13a/0x8b0 [ 196.365241][ T9214] do_fast_syscall_32+0x32/0x70 [ 196.365267][ T9214] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 196.365290][ T9214] RIP: 0023:0xf703efec [ 196.365310][ T9214] Code: Unable to access opcode bytes at 0xf703efc2. [ 196.365318][ T9214] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 196.365338][ T9214] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000080002 [ 196.365350][ T9214] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 196.365362][ T9214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 196.365374][ T9214] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 196.365414][ T9214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 196.365440][ T9214] [ 196.731870][ T9233] fuse: Bad value for 'fd' [ 196.905741][ T9191] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 196.905972][ T9191] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 196.906162][ T9191] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 196.906295][ T9191] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 197.262527][ T7118] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 197.392630][ T50] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 197.413126][ T7118] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 197.417659][ T7118] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 197.420752][ T7118] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 197.420769][ T7118] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 197.420796][ T7118] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 197.420810][ T7118] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 197.438495][ T7118] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 197.441929][ T7118] usb 9-1: Product: syz [ 197.443477][ T7118] usb 9-1: Manufacturer: syz [ 197.450629][ T7118] cdc_wdm 9-1:1.0: skipping garbage [ 197.452602][ T7118] cdc_wdm 9-1:1.0: skipping garbage [ 197.456743][ T68] Bluetooth: hci3: unexpected subevent 0x18 length: 30 > 19 [ 197.456804][ T68] Bluetooth: hci3: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 197.457825][ T7118] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 197.457878][ T7118] cdc_wdm 9-1:1.0: Unknown control protocol [ 197.573270][ T50] usb 7-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 197.574209][ T50] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 197.574243][ T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.577171][ T9252] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 197.581055][ T50] opticon 7-1:1.0: opticon converter detected [ 197.583616][ T50] usb 7-1: opticon converter now attached to ttyUSB0 [ 198.039131][ T7118] usb 7-1: USB disconnect, device number 11 [ 198.055248][ T7118] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 198.058254][ T7118] opticon 7-1:1.0: device disconnected [ 198.237427][ T9259] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 198.237744][ T9259] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 198.237880][ T9259] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 198.238009][ T9259] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 198.441678][ T9285] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1381'. [ 198.441776][ T9285] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 198.441785][ T9285] IPv6: NLM_F_CREATE should be set when creating new route [ 198.523479][ T9288] misc userio: Invalid payload size [ 199.512690][ T5100] Bluetooth: hci0: command 0x0c1a tx timeout [ 199.942087][ T9342] udc dummy_udc.1: failed to start USB Gadget filesystem: -12 [ 199.942205][ T9342] gadgetfs gadget.1: probe with driver gadgetfs failed with error -12 [ 199.951419][ T9342] udc dummy_udc.2: failed to start USB Gadget filesystem: -12 [ 199.951474][ T9342] gadgetfs gadget.2: probe with driver gadgetfs failed with error -12 [ 199.951606][ T9342] ================================================================== [ 199.951615][ T9342] BUG: KASAN: slab-use-after-free in gadgetfs_bind+0x82e/0x890 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 199.951637][ T9342] Write of size 8 at addr ffff88804d2c30c0 by task syz.0.1401/9342 [ 199.951647][ T9342] [ 199.951653][ T9342] CPU: 1 UID: 0 PID: 9342 Comm: syz.0.1401 Not tainted syzkaller #0 PREEMPT(full) [ 199.951667][ T9342] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 199.951675][ T9342] Call Trace: [ 199.951679][ T9342] [ 199.951684][ T9342] dump_stack_lvl+0x100/0x190 [ 199.951700][ T9342] print_report+0x13d/0x4b0 [ 199.951719][ T9342] ? __virt_addr_valid+0x239/0x430 [ 199.951738][ T9342] ? gadgetfs_bind+0x82e/0x890 [ 199.951755][ T9342] kasan_report+0xdf/0x1c0 [ 199.951770][ T9342] ? gadgetfs_bind+0x82e/0x890 [ 199.951789][ T9342] gadgetfs_bind+0x82e/0x890 [ 199.951807][ T9342] ? kernfs_create_link+0x1bd/0x240 [ 199.951826][ T9342] gadget_bind_driver+0x28c/0xbf0 [ 199.951839][ T9342] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 199.951857][ T9342] ? __pfx_gadget_bind_driver+0x10/0x10 [ 199.951869][ T9342] really_probe+0x241/0xa60 [ 199.951883][ T9342] __driver_probe_device+0x210/0x460 [ 199.951897][ T9342] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 199.951911][ T9342] driver_probe_device+0x4a/0x140 [ 199.951925][ T9342] __driver_attach+0x21f/0x5b0 [ 199.951938][ T9342] ? __pfx___driver_attach+0x10/0x10 [ 199.951953][ T9342] bus_for_each_dev+0x13e/0x1d0 [ 199.951978][ T9342] ? __pfx_bus_for_each_dev+0x10/0x10 [ 199.952002][ T9342] ? bus_add_driver+0x2b5/0x5b0 [ 199.952021][ T9342] bus_add_driver+0x305/0x5b0 [ 199.952042][ T9342] driver_register+0x1e2/0x360 [ 199.952068][ T9342] usb_gadget_register_driver_owner+0x132/0x210 [ 199.952088][ T9342] dev_config+0xdce/0x1610 [ 199.952105][ T9342] ? ksys_write+0xd0/0x250 [ 199.952122][ T9342] ? __pfx_dev_config+0x10/0x10 [ 199.952141][ T9342] vfs_write+0x2aa/0x1050 [ 199.952152][ T9342] ? __pfx_dev_config+0x10/0x10 [ 199.952169][ T9342] ? lock_acquire+0x1d1/0x380 [ 199.952184][ T9342] ? __fget_files+0x34/0x3d0 [ 199.952196][ T9342] ? __pfx_vfs_write+0x10/0x10 [ 199.952206][ T9342] ? find_held_lock+0x2b/0x80 [ 199.952217][ T9342] ? __fget_files+0x215/0x3d0 [ 199.952230][ T9342] ? __fget_files+0x21f/0x3d0 [ 199.952243][ T9342] ksys_write+0x12a/0x250 [ 199.952253][ T9342] ? __pfx_ksys_write+0x10/0x10 [ 199.952267][ T9342] __do_fast_syscall_32+0x13a/0x8b0 [ 199.952284][ T9342] do_fast_syscall_32+0x32/0x70 [ 199.952300][ T9342] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 199.952316][ T9342] RIP: 0023:0xf703efec [ 199.952330][ T9342] Code: Unable to access opcode bytes at 0xf703efc2. [ 199.952336][ T9342] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 199.952349][ T9342] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000400 [ 199.952356][ T9342] RDX: 000000000000001f RSI: 0000000000000000 RDI: 0000000000000000 [ 199.952363][ T9342] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 199.952370][ T9342] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 199.952377][ T9342] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 199.952402][ T9342] [ 199.952407][ T9342] [ 199.952409][ T9342] Allocated by task 5768: [ 199.952415][ T9342] kasan_save_stack+0x30/0x50 [ 199.952428][ T9342] kasan_save_track+0x14/0x30 [ 199.952440][ T9342] __kasan_kmalloc+0xaa/0xb0 [ 199.952451][ T9342] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 199.952467][ T9342] gadgetfs_fill_super+0x1da/0x430 [ 199.952484][ T9342] get_tree_single+0xe2/0x190 [ 199.952501][ T9342] vfs_get_tree+0x92/0x320 [ 199.952515][ T9342] path_mount+0x7d0/0x24c0 [ 199.952528][ T9342] __ia32_sys_mount+0x292/0x310 [ 199.952541][ T9342] __do_fast_syscall_32+0x13a/0x8b0 [ 199.952556][ T9342] do_fast_syscall_32+0x32/0x70 [ 199.952570][ T9342] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 199.952583][ T9342] [ 199.952586][ T9342] Freed by task 9342: [ 199.952591][ T9342] kasan_save_stack+0x30/0x50 [ 199.952602][ T9342] kasan_save_track+0x14/0x30 [ 199.952616][ T9342] kasan_save_free_info+0x3b/0x70 [ 199.952632][ T9342] __kasan_slab_free+0x5f/0x80 [ 199.952644][ T9342] kfree+0x22b/0x6d0 [ 199.952659][ T9342] put_dev+0xb4/0xd0 [ 199.952673][ T9342] gadgetfs_bind+0x6bc/0x890 [ 199.952689][ T9342] gadget_bind_driver+0x28c/0xbf0 [ 199.952700][ T9342] really_probe+0x241/0xa60 [ 199.952711][ T9342] __driver_probe_device+0x210/0x460 [ 199.952723][ T9342] driver_probe_device+0x4a/0x140 [ 199.952735][ T9342] __driver_attach+0x21f/0x5b0 [ 199.952747][ T9342] bus_for_each_dev+0x13e/0x1d0 [ 199.952763][ T9342] bus_add_driver+0x305/0x5b0 [ 199.952773][ T9342] driver_register+0x1e2/0x360 [ 199.952786][ T9342] usb_gadget_register_driver_owner+0x132/0x210 [ 199.952797][ T9342] dev_config+0xdce/0x1610 [ 199.952813][ T9342] vfs_write+0x2aa/0x1050 [ 199.952822][ T9342] ksys_write+0x12a/0x250 [ 199.952831][ T9342] __do_fast_syscall_32+0x13a/0x8b0 [ 199.952845][ T9342] do_fast_syscall_32+0x32/0x70 [ 199.952860][ T9342] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 199.952873][ T9342] [ 199.952876][ T9342] The buggy address belongs to the object at ffff88804d2c3000 [ 199.952876][ T9342] which belongs to the cache kmalloc-1k of size 1024 [ 199.952884][ T9342] The buggy address is located 192 bytes inside of [ 199.952884][ T9342] freed 1024-byte region [ffff88804d2c3000, ffff88804d2c3400) [ 199.952895][ T9342] [ 199.952898][ T9342] The buggy address belongs to the physical page: [ 199.952903][ T9342] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804d2c0800 pfn:0x4d2c0 [ 199.952913][ T9342] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 199.952922][ T9342] flags: 0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff) [ 199.952934][ T9342] page_type: f5(slab) [ 199.952944][ T9342] raw: 04fff00000000240 ffff88801c042dc0 ffffea0001b9ea10 ffffea0001b15610 [ 199.952954][ T9342] raw: ffff88804d2c0800 0000000000100007 00000000f5000000 0000000000000000 [ 199.952964][ T9342] head: 04fff00000000240 ffff88801c042dc0 ffffea0001b9ea10 ffffea0001b15610 [ 199.952974][ T9342] head: ffff88804d2c0800 0000000000100007 00000000f5000000 0000000000000000 [ 199.952985][ T9342] head: 04fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 199.952995][ T9342] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 199.953001][ T9342] page dumped because: kasan: bad access detected [ 199.953006][ T9342] page_owner tracks the page as allocated [ 199.953010][ T9342] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1161, tgid 1161 (kworker/u33:9), ts 120196380113 [ 199.953028][ T9342] post_alloc_hook+0xfd/0x120 [ 199.953044][ T9342] get_page_from_freelist+0x110d/0x35d0 [ 199.953062][ T9342] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 199.953079][ T9342] new_slab+0xa9/0x6e0 [ 199.953095][ T9342] refill_objects+0xe3/0x410 [ 199.953116][ T9342] __pcs_replace_empty_main+0x35e/0x650 [ 199.953133][ T9342] __kmalloc_noprof+0x67c/0x840 [ 199.953143][ T9342] ___neigh_create+0x172/0x2940 [ 199.953158][ T9342] ip_finish_output2+0x1d3c/0x2400 [ 199.953172][ T9342] __ip_finish_output.part.0+0x444/0x6f0 [ 199.953185][ T9342] ip_output+0x39b/0xc10 [ 199.953197][ T9342] ip_local_out+0x193/0x1f0 [ 199.953209][ T9342] iptunnel_xmit+0x722/0xd30 [ 199.953224][ T9342] send4+0x414/0x1130 [ 199.953233][ T9342] wg_socket_send_skb_to_peer+0x18f/0x210 [ 199.953244][ T9342] wg_socket_send_buffer_to_peer+0x148/0x1a0 [ 199.953255][ T9342] page last free pid 5762 tgid 5762 ts 118568136835 stack trace: [ 199.953263][ T9342] __free_frozen_pages+0x79f/0x10f0 [ 199.953277][ T9342] qlist_free_all+0x47/0xf0 [ 199.953287][ T9342] kasan_quarantine_reduce+0x1a0/0x1f0 [ 199.953301][ T9342] __kasan_slab_alloc+0x69/0x90 [ 199.953313][ T9342] __kmalloc_cache_noprof+0x278/0x6d0 [ 199.953329][ T9342] ____ip_mc_inc_group+0x40b/0x10d0 [ 199.953340][ T9342] ip_mc_up+0x154/0x390 [ 199.953350][ T9342] inetdev_event+0x6f0/0x17f0 [ 199.953390][ T9342] notifier_call_chain+0x99/0x3f0 [ 199.953407][ T9342] call_netdevice_notifiers_info+0xbe/0x110 [ 199.953428][ T9342] __dev_notify_flags+0x22c/0x4b0 [ 199.953445][ T9342] netif_change_flags+0x108/0x160 [ 199.953457][ T9342] do_setlink.isra.0+0x1ac4/0x3e60 [ 199.953470][ T9342] rtnl_newlink+0x13c1/0x2620 [ 199.953483][ T9342] rtnetlink_rcv_msg+0x95e/0xe90 [ 199.953497][ T9342] netlink_rcv_skb+0x159/0x420 [ 199.953507][ T9342] [ 199.953510][ T9342] Memory state around the buggy address: [ 199.953516][ T9342] ffff88804d2c2f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 199.953523][ T9342] ffff88804d2c3000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 199.953531][ T9342] >ffff88804d2c3080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 199.953537][ T9342] ^ [ 199.953544][ T9342] ffff88804d2c3100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 199.953551][ T9342] ffff88804d2c3180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 199.953558][ T9342] ================================================================== [ 199.953985][ T9342] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 200.324986][ T9342] CPU: 1 UID: 0 PID: 9342 Comm: syz.0.1401 Not tainted syzkaller #0 PREEMPT(full) [ 200.329413][ T9342] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 200.334627][ T9342] Call Trace: [ 200.335996][ T9342] [ 200.337235][ T9342] dump_stack_lvl+0x100/0x190 [ 200.339286][ T9342] vpanic+0x553/0x970 [ 200.340939][ T9342] ? __pfx_vpanic+0x10/0x10 [ 200.342826][ T9342] ? mark_held_locks+0x40/0x70 [ 200.344694][ T9342] ? gadgetfs_bind+0x82e/0x890 [ 200.346676][ T9342] panic+0xd1/0xe0 [ 200.348282][ T9342] ? __pfx_panic+0x10/0x10 [ 200.350302][ T9342] ? gadgetfs_bind+0x82e/0x890 [ 200.352590][ T9342] ? preempt_schedule_common+0x3c/0xb0 [ 200.355097][ T9342] check_panic_on_warn.cold+0x19/0x34 [ 200.357433][ T9342] end_report.part.0+0x3a/0x90 [ 200.359550][ T9342] kasan_report.cold+0xe/0x18 [ 200.361586][ T9342] ? gadgetfs_bind+0x82e/0x890 [ 200.363696][ T9342] gadgetfs_bind+0x82e/0x890 [ 200.365721][ T9342] ? kernfs_create_link+0x1bd/0x240 [ 200.367883][ T9342] gadget_bind_driver+0x28c/0xbf0 [ 200.370188][ T9342] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 200.372786][ T9342] ? __pfx_gadget_bind_driver+0x10/0x10 [ 200.375427][ T9342] really_probe+0x241/0xa60 [ 200.377558][ T9342] __driver_probe_device+0x210/0x460 [ 200.379735][ T9342] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 200.382176][ T9342] driver_probe_device+0x4a/0x140 [ 200.384260][ T9342] __driver_attach+0x21f/0x5b0 [ 200.386325][ T9342] ? __pfx___driver_attach+0x10/0x10 [ 200.389069][ T9342] bus_for_each_dev+0x13e/0x1d0 [ 200.391763][ T9342] ? __pfx_bus_for_each_dev+0x10/0x10 [ 200.394542][ T9342] ? bus_add_driver+0x2b5/0x5b0 [ 200.396546][ T9342] bus_add_driver+0x305/0x5b0 [ 200.398485][ T9342] driver_register+0x1e2/0x360 [ 200.400432][ T9342] usb_gadget_register_driver_owner+0x132/0x210 [ 200.402979][ T9342] dev_config+0xdce/0x1610 [ 200.404787][ T9342] ? ksys_write+0xd0/0x250 [ 200.406616][ T9342] ? __pfx_dev_config+0x10/0x10 [ 200.408627][ T9342] vfs_write+0x2aa/0x1050 [ 200.410463][ T9342] ? __pfx_dev_config+0x10/0x10 [ 200.412438][ T9342] ? lock_acquire+0x1d1/0x380 [ 200.414375][ T9342] ? __fget_files+0x34/0x3d0 [ 200.416559][ T9342] ? __pfx_vfs_write+0x10/0x10 [ 200.418783][ T9342] ? find_held_lock+0x2b/0x80 [ 200.421153][ T9342] ? __fget_files+0x215/0x3d0 [ 200.423362][ T9342] ? __fget_files+0x21f/0x3d0 [ 200.425304][ T9342] ksys_write+0x12a/0x250 [ 200.427114][ T9342] ? __pfx_ksys_write+0x10/0x10 [ 200.429131][ T9342] __do_fast_syscall_32+0x13a/0x8b0 [ 200.431313][ T9342] do_fast_syscall_32+0x32/0x70 [ 200.433565][ T9342] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 200.436492][ T9342] RIP: 0023:0xf703efec [ 200.438183][ T9342] Code: Unable to access opcode bytes at 0xf703efc2. [ 200.441061][ T9342] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 200.444957][ T9342] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000400 [ 200.448387][ T9342] RDX: 000000000000001f RSI: 0000000000000000 RDI: 0000000000000000 [ 200.452206][ T9342] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 200.455480][ T9342] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 200.458919][ T9342] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 200.462221][ T9342] [ 200.464447][ T9342] Kernel Offset: disabled [ 200.466696][ T9342] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:52:00 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=ffffffff9bbd1e78 RCX=ffffffff81e6e603 RDX=1ffffffff377a3d1 RSI=0000000000000004 RDI=ffffffff9bbd1e78 RBP=ffffffff9bbd1e80 RSP=ffffc90002dbf7e8 R8 =0000000000000000 R9 =fffffbfff377a3cf R10=ffffffff9bbd1e7b R11=0000000000000000 R12=ffffffff9bbd1e88 R13=0000000000000006 R14=0000000000000006 R15=ffff8880146d3000 RIP=ffffffff81e6e6b2 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f7f10901c80 ffffffff 00c00000 GS =0000 ffff888096968000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000567ad1fc CR3=000000002a2b3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000008 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000559521ad7c50 0000559521ad7c50 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc3f43baf0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3120534f4942202c 2939303032202c39 484349202b203533 5128204350206472 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 333d737265666675 6264616572202c35 333535363d65646f 6d6465646e657478 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65202c362f343d65 6d61726672657065 6d6974202c317830 3d65646f6d657275 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 74706163202c3078 303d7974696c6962 61706163202c7061 632d6469763d6570 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7974203a35322d20 726f727265203a4d 5241505f535f434f 49444956203a306f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000062 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85ae0315 RDI=ffffffff9bc4f1e0 RBP=ffffffff9bc4f1a0 RSP=ffffc9002231f0d8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3038383866666666 R12=0000000000000000 R13=0000000000000062 R14=0000000000000000 R15=ffffc9002231f3f0 RIP=ffffffff85ae033f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096a68000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f703f000 CR3=0000000077aaa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000008 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000559521ad7c50 0000559521ad7c50 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc3f43baf0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 333d737265666675 6264616572202c35 333535363d65646f 6d6465646e657478 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65202c362f343d65 6d61726672657065 6d6974202c317830 3d65646f6d657275 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 74706163202c3078 303d7974696c6962 61706163202c7061 632d6469763d6570 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7974203a35322d20 726f727265203a4d 5241505f535f434f 49444956203a306f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080080783 RBX=0000000000000000 RCX=ffff88802175d1b0 RDX=000000000000009d RSI=ffffffff8703b721 RDI=ffff88802175d420 RBP=0000000000000001 RSP=ffffc90000558ba8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000004e20 R14=ffff88802175d1b0 R15=0000000000000001 RIP=ffffffff8703b768 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fdf71635300 ffffffff 00c00000 GS =0000 ffff888096b68000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fdf70f225d0 CR3=00000000270d1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 646142203a39206f 6e7272652820303d 6e20303d76636572 20343d746e617720 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a29726f74706972 6373656420656c69 6620646142203a39 206f6e7272652820 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 303d6e20303d7663 657220343d746e61 7720333d64660a63 7072207663657220 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2d72ffffffff81af 2668ffffffff81af 2d2cffffffff81af 28ae000000130300 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000090000 000cffffff3e0000 03e6000000080004 0000000800080000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0014000000c40000 00e8000001000000 0114000001340000 0006000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030000000000000e 0000000cffffffea ffffffff8291c30b ffffffff8291c1a7 ZMM25=f5372d59f5372d59 f5372d59f5372d59 f5372d59f5372d59 f5372d59f5372d59 f5372d59f5372d59 f5372d59f5372d59 f5372d59f5372d59 f5372d59f5372d59 ZMM26=f11570dbf11570db f11570dbf11570db f11570dbf11570db f11570dbf11570db f11570dbf11570db f11570dbf11570db f11570dbf11570db f11570dbf11570db ZMM27=fd381523fd381523 fd381523fd381523 fd381523fd381523 fd381523fd381523 fd381523fd381523 fd381523fd381523 fd381523fd381523 fd381523fd381523 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=6f0a00006f0a0000 6f0a00006f0a0000 6f0a00006f0a0000 6f0a00006f0a0000 6f0a00006f0a0000 6f0a00006f0a0000 6f0a00006f0a0000 6f0a00006f0a0000 info registers vcpu 3 CPU#3 RAX=0000000000000002 RBX=0000000000000001 RCX=ffffffff81fe8493 RDX=0000000000000000 RSI=0000000000000000 RDI=ffff888024e3a580 RBP=ffff88802b343b40 RSP=ffffc90007acf878 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed10049c7763 R13=0000000000000003 R14=ffffed1005668769 R15=0000000000000001 RIP=ffffffff820b30d7 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096c68000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7f66ec0 CR3=000000007523d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000