last executing test programs: 1m2.102014698s ago: executing program 1 (id=1159): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000000080003400000008000300", @ANYRES32=r2, @ANYBLOB="14005500000043000000000000000000000000000a0034"], 0x3c}}, 0x4) 1m2.044760076s ago: executing program 1 (id=1160): r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x2041, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000002000000000000000000000203000000000000000100000d0000000000000000010000000000000000000002"], &(0x7f0000000140)=""/227, 0x46, 0xe3, 0x1}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x5}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x801) bind$802154_dgram(r1, &(0x7f0000000400)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) r4 = syz_clone(0x0, 0x0, 0xffffff36, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) waitid$P_PIDFD(0x3, r5, 0x0, 0xa000000c, 0x0) listen(r3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f00000007c0)=0x42000401, 0x4) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000001a40)=""/102392, 0x18ff8) connect$802154_dgram(r1, &(0x7f0000000180), 0x14) syz_io_uring_setup(0x1334, &(0x7f00000000c0)={0x0, 0x5039, 0x8, 0x3, 0x3cf, 0x0, r0}, &(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x5ee7, &(0x7f00000002c0)={0x0, 0xa2f, 0x8, 0x3, 0x223, 0x0, r0}, &(0x7f0000000340), &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_modify_offsets$generic(r9, r10, 0x50, 0xfffffff4) sendmmsg(r1, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) 1m0.485753541s ago: executing program 1 (id=1165): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 59.569858748s ago: executing program 1 (id=1170): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r0, 0x80480911, &(0x7f0000000420)) 59.302124187s ago: executing program 1 (id=1174): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@bridge_dellink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0xa006}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x5, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x2}, {0x8, 0x1}]}}]}]}, 0x3c}}, 0x0) 58.848370564s ago: executing program 1 (id=1177): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000440)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket$inet(0x2, 0x801, 0x0) r6 = socket(0x2b, 0x1, 0x1) listen(r6, 0x5) accept4$phonet_pipe(r6, 0x0, 0x0, 0x80000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bd28, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e21}}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x40804) 43.576067215s ago: executing program 32 (id=1177): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000440)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket$inet(0x2, 0x801, 0x0) r6 = socket(0x2b, 0x1, 0x1) listen(r6, 0x5) accept4$phonet_pipe(r6, 0x0, 0x0, 0x80000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bd28, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e21}}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x40804) 5.198983039s ago: executing program 4 (id=1379): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x6071, 0x0, 0xe7}}}}}}, 0x0) 4.96368822s ago: executing program 4 (id=1381): r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x2041, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000002000000000000000000000203000000000000000100000d0000000000000000010000000000000000000002"], &(0x7f0000000140)=""/227, 0x46, 0xe3, 0x1}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x5}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x801) bind$802154_dgram(r1, &(0x7f0000000400)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_clone(0x0, 0x0, 0xffffff36, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) waitid$P_PIDFD(0x3, r5, 0x0, 0xa000000c, 0x0) setsockopt$sock_int(r3, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) listen(r3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f00000007c0)=0x42000401, 0x4) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000001a40)=""/102392, 0x18ff8) connect$802154_dgram(r1, &(0x7f0000000180), 0x14) syz_io_uring_setup(0x1334, &(0x7f00000000c0)={0x0, 0x5039, 0x8, 0x3, 0x3cf, 0x0, r0}, &(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x5ee7, &(0x7f00000002c0)={0x0, 0xa2f, 0x8, 0x3, 0x223, 0x0, r0}, &(0x7f0000000340), &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_modify_offsets$generic(r9, r10, 0x50, 0xfffffff4) sendmmsg(r1, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) 4.6257889s ago: executing program 3 (id=1384): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0) ioctl(r1, 0x542e, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$9p_virtio(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', &(0x7f0000000480), 0x9, &(0x7f0000000000)=ANY=[@ANYBLOB="7472616e733d76697274696f2c15bb1e500c979d3dfc44c7d5"]) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vxcan0\x00'}) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0x8000, 0x102) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b4003b00", 0x30}], 0x1}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000004095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000002280)={0x2, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x40, 0x0, 0x9}]}, 0x8) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xb, &(0x7f0000000340)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map=r5, 0x2b, 0x0, 0x1, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000080), &(0x7f00000001c0)=[0x0]}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x5}, 0x94) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='(JlF', @ANYRES16=0x0, @ANYBLOB="0100fffffffffcdbdf250c0000000800060099fdffff"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x90) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000840)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x15c, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x2a}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xff}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x38}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x2}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x58}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2b7d9b6f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc2}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xad1}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4000084}, 0x240000d4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f0000000280)={{0x0, 0x6, 0xfa, 0x0, 0x8, 0x7fff, 0x2, 0xfffffff8, 0xbb5, 0x7, 0x3, 0x7, 0x7710, 0xa, 0x6}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001240)={r7, 0x6}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x20, 0x0, 0x0, 0x0, 0x401, 0x0, 0x48, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x50) 3.872700993s ago: executing program 0 (id=1385): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110079, 0x1000, 0x0, 0x7fc, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x78, 0x0, 0x100000000, {0x20000, 0xcb7b, 0x0, {0x5, 0x0, 0x48b, 0xa, 0x400000000000004, 0xd, 0xfff7ffff, 0x6, 0x101, 0x4000, 0xffff1854, 0xffffffffffffffff, 0x0, 0x3, 0xf}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.624855307s ago: executing program 0 (id=1386): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd2c, 0x5dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x48000) 3.611791503s ago: executing program 3 (id=1387): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="828a32203121db517e277e5c8f1036665eae894cf4c4d41e87cc2e", 0x1b}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x18, 0x3b00, 0x0, 0xfffffffffffffdfd) 3.591696727s ago: executing program 4 (id=1388): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000200)={@void, @void, @eth={@broadcast, @remote, @val={@val={0x88a8, 0x4, 0x0, 0x5}, {0x8100, 0x4, 0x0, 0x3}}, {@ipv6={0x86dd, @generic={0x9, 0x6, "17007e", 0x0, 0x3c, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @remote}}}}}, 0x3e) 3.290120728s ago: executing program 0 (id=1389): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$proc_mixer(r1, 0x0, 0x0) 3.12827278s ago: executing program 2 (id=1390): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa2800, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000100)=0x9000) 2.888037405s ago: executing program 4 (id=1391): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, r5, 0x1, 0x0, 0x0, {0x27}}, 0x14}}, 0x20000040) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r9 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r12) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000100001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r13], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r10, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 2.717557575s ago: executing program 3 (id=1392): ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./config\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='usb_gadget/g1/functions/ecm.usb0/ifname\x00', 0x2, 0x0) 2.706548925s ago: executing program 0 (id=1393): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0x7, 0xb}, {0xffff, 0xfffd}}}, 0x24}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) 2.410529276s ago: executing program 2 (id=1394): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "ffe9ff00"]}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x6000000d}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) 2.211266624s ago: executing program 2 (id=1395): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newtfilter={0x68, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r2, {0xd, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x24, 0x1, 0x0, 0x0, {{0x0, 0x7, 0x5}, {{0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x4}, {0x7}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) 2.168324921s ago: executing program 0 (id=1396): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0) ioctl(r1, 0x542e, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$9p_virtio(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', &(0x7f0000000480), 0x9, &(0x7f0000000000)=ANY=[@ANYBLOB="7472616e733d76697274696f2c15bb1e500c979d3dfc44c7d5"]) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vxcan0\x00'}) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0x8000, 0x102) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b4003b00", 0x30}], 0x1}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000004095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000002280)={0x2, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x40, 0x0, 0x9}]}, 0x8) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xb, &(0x7f0000000340)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map=r5, 0x2b, 0x0, 0x1, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000080), &(0x7f00000001c0)=[0x0]}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x5}, 0x94) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='(JlF', @ANYRES16=0x0, @ANYBLOB="0100fffffffffcdbdf250c0000000800060099fdffff"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x90) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000840)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x15c, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x2a}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xff}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x38}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x2}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x58}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2b7d9b6f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc2}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xad1}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4000084}, 0x240000d4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f0000000280)={{0x0, 0x6, 0xfa, 0x0, 0x8, 0x7fff, 0x2, 0xfffffff8, 0xbb5, 0x7, 0x3, 0x7, 0x7710, 0xa, 0x6}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001240)={r7, 0x6}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x20, 0x0, 0x0, 0x0, 0x401, 0x0, 0x48, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x50) 2.073111661s ago: executing program 3 (id=1397): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) openat(0xffffffffffffffff, 0x0, 0xc100, 0xc2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/memory/memory9/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='online_movable', 0xe) 1.833274309s ago: executing program 3 (id=1398): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, r5, 0x1, 0x0, 0x0, {0x27}}, 0x14}}, 0x20000040) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r9 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r12) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000100001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r13], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r10, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 1.530575188s ago: executing program 4 (id=1399): openat$hwrng(0xffffffffffffff9c, 0x0, 0x20800, 0x0) syz_ublk_setup_io_uring(0x20, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bonding_masters\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='-b', 0x2) 1.232734221s ago: executing program 2 (id=1400): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0xc, 0x1, 0x2, 0x1, 0x4}) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000100)={0x2, 0x1, 0x3, 0x14, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x9, {"2ac7d502ff049538909f874a88417c00", "f977000000000000000000000300", "47010b1889b9ff01ffff470300"}, 0x4, 0x4}) 1.147450853s ago: executing program 0 (id=1401): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0', 0x1) write(r0, &(0x7f00000001a0)='1', 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 1.09863443s ago: executing program 2 (id=1402): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42902, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd27, 0x870b525, 0x8000, {0x0, 0x0, 0x0, r2, {0x8, 0xc}, {}, {0xa, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2204403c}, 0x0) 537.789684ms ago: executing program 4 (id=1403): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000440)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) r4 = socket$inet(0x2, 0x801, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r5 = socket(0x2b, 0x1, 0x1) listen(r5, 0x5) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bd28, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e21}}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x40804) 351.291468ms ago: executing program 3 (id=1404): r0 = socket(0x1e, 0x1, 0x0) recvmmsg(r0, &(0x7f0000004e80)=[{{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000400)=""/238, 0xee}], 0x1}, 0x6}], 0x1, 0x100, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x560a, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=1405): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="083c86dd0001110004600000a60c6eec00be00302bfffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) kernel console output (not intermixed with test programs): ce [ 213.511993][ T5827] lg-g15 0003:046D:0A07.000D: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 213.536606][ T5827] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.000D/input/input26 [ 213.615317][ T8165] fuse: Bad value for 'fd' [ 213.934381][ T8164] fido_id[8164]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 214.010770][ T30] usb usb38-port1: unable to enumerate USB device [ 216.287878][ T8184] binder: 8182:8184 ioctl c00c6211 0 returned -14 [ 218.339587][ T8202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.453'. [ 218.522974][ T30] lg-g15 0003:046D:0A07.000E: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 218.544800][ T30] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.000E/input/input28 [ 218.624066][ T8205] fuse: Bad value for 'fd' [ 220.797212][ T8229] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 221.762873][ T8220] netlink: 'syz.2.457': attribute type 8 has an invalid length. [ 221.846152][ T8227] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 226.088146][ T5828] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 226.213321][ T8261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.464'. [ 226.268685][ T5828] usb 6-1: Using ep0 maxpacket: 8 [ 226.273396][ T5828] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 226.290481][ T8265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.463'. [ 226.290502][ T8265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.463'. [ 226.322582][ T5828] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 226.322633][ T5828] usb 6-1: config 0 has no interface number 0 [ 226.322721][ T5828] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 226.322758][ T5828] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 226.322795][ T5828] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 226.322856][ T5828] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 226.322903][ T5828] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.366751][ T5828] usb 6-1: config 0 descriptor?? [ 226.407296][ T5828] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 229.503512][ T25] usb 6-1: USB disconnect, device number 10 [ 229.645682][ T43] audit: type=1804 audit(1787753686.008:16457): pid=8298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.467" name="bus" dev="ramfs" ino=16992 res=1 errno=0 [ 229.645757][ T43] audit: type=1804 audit(1787753686.048:16458): pid=8298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.467" name="bus" dev="ramfs" ino=16992 res=1 errno=0 [ 229.647811][ T25] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 230.804304][ T8308] vfio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 230.974529][ T43] audit: type=1804 audit(1787753687.378:16459): pid=8313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.468" name="/newroot/118/config/usb_gadget/g1/functions/midi2.usb0/iface_name" dev="configfs" ino=17002 res=1 errno=0 [ 231.041796][ T43] audit: type=1800 audit(1787753687.438:16460): pid=8313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.468" name="iface_name" dev="configfs" ino=17002 res=0 errno=0 [ 231.068851][ T8316] binder: Unknown parameter 'hash' [ 231.083333][ T8316] netlink: 32 bytes leftover after parsing attributes in process `syz.0.468'. [ 231.102768][ T8316] netlink: 44 bytes leftover after parsing attributes in process `syz.0.468'. [ 231.164517][ T8317] bridge1: entered promiscuous mode [ 231.164803][ T8317] bridge1: entered allmulticast mode [ 232.823509][ T8329] program syz.0.474 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 233.152315][ T5744] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 233.421668][ T5745] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 234.129339][ T8339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.476'. [ 234.129494][ T8339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.476'. [ 234.495090][ T8342] 8021q: VLANs not supported on sit0 [ 234.518954][ T8342] 9p: Bad value for 'rfdno' [ 235.141228][ T8344] netlink: 'syz.3.478': attribute type 1 has an invalid length. [ 235.318811][ T8344] 8021q: adding VLAN 0 to HW filter on device bond5 [ 235.454307][ T8348] 8021q: adding VLAN 0 to HW filter on device bond5 [ 235.454521][ T8348] bond5: (slave gre1): The slave device specified does not support setting the MAC address [ 235.455086][ T8348] bond5: (slave gre1): Error -95 calling set_mac_address [ 235.565973][ T8352] ntfs3(nullb0): Primary boot signature is not NTFS. [ 235.583976][ T8352] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 235.919058][ T8349] bond5 (unregistering): Released all slaves [ 235.981601][ T8347] netlink: 'syz.2.479': attribute type 4 has an invalid length. [ 237.544714][ T8377] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 237.571335][ T8377] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 237.571522][ T8377] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 237.572183][ T8377] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 237.577049][ T8377] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 237.863233][ T8377] pci 0000:00:01.0: Adding to iommu group 1 [ 237.868676][ T8377] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 237.868715][ T8377] pci 0000:00:01.0: vgaarb: bridge control possible [ 237.868728][ T8377] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 237.904370][ T8377] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 237.904524][ T8377] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 237.905953][ T8377] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 237.913658][ T8377] [drm] Found bochs VGA, ID 0xb0c5. [ 237.913678][ T8377] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 238.128001][ T8377] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 238.780273][ T8377] Console: switching to colour frame buffer device 160x50 [ 238.840066][ T8377] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 241.008311][ T8386] loop0: detected capacity change from 0 to 4095 [ 241.013660][ T8393] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 241.032000][ T8393] CPU: 2 UID: 0 PID: 8393 Comm: syz.2.488 Not tainted syzkaller #0 PREEMPT(full) [ 241.032046][ T8393] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 241.032059][ T8393] Call Trace: [ 241.032066][ T8393] [ 241.032075][ T8393] dump_stack_lvl+0x100/0x190 [ 241.032171][ T8393] sysfs_warn_dup.cold+0x1c/0x28 [ 241.032206][ T8393] sysfs_create_dir_ns+0x24b/0x2b0 [ 241.032254][ T8393] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 241.032272][ T8393] ? find_held_lock+0x2b/0x80 [ 241.032291][ T8393] ? kobject_add_internal+0x25f/0x930 [ 241.032340][ T8393] ? kobject_add_internal+0x25f/0x930 [ 241.032365][ T8393] ? class_dir_child_ns_type+0xd/0x60 [ 241.032387][ T8393] kobject_add_internal+0x2c8/0x930 [ 241.032413][ T8393] kobject_add+0x16a/0x1e0 [ 241.032434][ T8393] ? __pfx_kobject_add+0x10/0x10 [ 241.032457][ T8393] ? get_device_parent+0x1b3/0x4c0 [ 241.032484][ T8393] ? kobject_put+0xb9/0x640 [ 241.032530][ T8393] device_add+0x294/0x1970 [ 241.032551][ T8393] ? lockdep_init_map_type+0x5c/0x250 [ 241.032576][ T8393] ? __pfx_device_add+0x10/0x10 [ 241.032593][ T8393] ? lockdep_init_map_type+0x5c/0x250 [ 241.032617][ T8393] ? __init_waitqueue_head+0xca/0x150 [ 241.032648][ T8393] tty_register_device_attr+0x388/0x7f0 [ 241.032676][ T8393] ? lockdep_init_map_type+0x5c/0x250 [ 241.032700][ T8393] ? __pfx_tty_register_device_attr+0x10/0x10 [ 241.032733][ T8393] ? tty_port_init+0x156/0x1c0 [ 241.032765][ T8393] gsm_activate_mux+0x155/0x2a0 [ 241.032792][ T8393] gsmld_ioctl+0xbbc/0x15c0 [ 241.032815][ T8393] ? __pfx_gsmld_ioctl+0x10/0x10 [ 241.032848][ T8393] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 241.032875][ T8393] ? __pfx_gsmld_ioctl+0x10/0x10 [ 241.032892][ T8393] tty_compat_ioctl+0x396/0x420 [ 241.032916][ T8393] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 241.032941][ T8393] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 241.032974][ T8393] __do_fast_syscall_32+0x13a/0x8b0 [ 241.032997][ T8393] do_fast_syscall_32+0x32/0x70 [ 241.033013][ T8393] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 241.033034][ T8393] RIP: 0023:0xf704efec [ 241.033058][ T8393] Code: Unable to access opcode bytes at 0xf704efc2. [ 241.033067][ T8393] RSP: 002b:00000000f53fb50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 241.033085][ T8393] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000404c4701 [ 241.033098][ T8393] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 241.033110][ T8393] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 241.033120][ T8393] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 241.033131][ T8393] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 241.033153][ T8393] [ 241.033279][ T8393] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 242.669972][ T8398] netlink: 'syz.1.490': attribute type 1 has an invalid length. [ 242.815323][ T8398] 8021q: adding VLAN 0 to HW filter on device bond1 [ 243.161288][ T8399] 8021q: adding VLAN 0 to HW filter on device bond1 [ 243.161680][ T8399] bond1: (slave gre2): The slave device specified does not support setting the MAC address [ 243.162314][ T8399] bond1: (slave gre2): Error -95 calling set_mac_address [ 243.407584][ T8405] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 243.545370][ T8398] bond1 (unregistering): Released all slaves [ 243.657657][ T64] Bluetooth: hci0: command 0x0406 tx timeout [ 243.739188][ T8402] veth0: entered promiscuous mode [ 243.739315][ T8402] veth0: left promiscuous mode [ 244.485839][ T8426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.492'. [ 245.223760][ T8431] netlink: 'syz.1.498': attribute type 1 has an invalid length. [ 245.263128][ T8431] 8021q: adding VLAN 0 to HW filter on device bond1 [ 245.347766][ T5827] lg-g15 0003:046D:0A07.000F: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 245.352868][ T5827] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.000F/input/input30 [ 245.393232][ T8431] 8021q: adding VLAN 0 to HW filter on device bond1 [ 245.393845][ T8431] bond1: (slave gre2): The slave device specified does not support setting the MAC address [ 245.394422][ T8431] bond1: (slave gre2): Error -95 calling set_mac_address [ 245.470454][ T8438] fuse: Bad value for 'fd' [ 245.694223][ T8441] 8021q: adding VLAN 0 to HW filter on device bond4 [ 246.000172][ T8441] bond1: (slave bond4): Enslaving as an active interface with a down link [ 246.044003][ T8435] bond1 (unregistering): (slave bond4): Releasing active interface [ 246.462029][ T8435] bond1 (unregistering): Released all slaves [ 246.882145][ T8459] netlink: 'syz.1.501': attribute type 1 has an invalid length. [ 246.959394][ T8455] UDC core: g1: couldn't find an available UDC or it's busy [ 247.141298][ T8459] 8021q: adding VLAN 0 to HW filter on device bond1 [ 247.229044][ T8471] netlink: 'syz.0.503': attribute type 1 has an invalid length. [ 247.252943][ T8459] 8021q: adding VLAN 0 to HW filter on device bond5 [ 247.332645][ T8459] bond1: (slave bond5): Enslaving as an active interface with a down link [ 247.769225][ T8466] bond1 (unregistering): (slave bond5): Releasing active interface [ 247.807933][ T8466] bond1 (unregistering): Released all slaves [ 248.008245][ T8471] 8021q: adding VLAN 0 to HW filter on device bond2 [ 248.154276][ T8472] 8021q: adding VLAN 0 to HW filter on device bond2 [ 248.154652][ T8472] bond2: (slave gre2): The slave device specified does not support setting the MAC address [ 248.155187][ T8472] bond2: (slave gre2): Error -95 calling set_mac_address [ 248.226726][ T8479] loop0: detected capacity change from 0 to 63 [ 248.364221][ T8473] 8021q: adding VLAN 0 to HW filter on device bond3 [ 248.370364][ T8473] bond2: (slave bond3): Enslaving as an active interface with a down link [ 248.417646][ T8474] bond2 (unregistering): (slave bond3): Releasing active interface [ 248.440733][ T8474] bond2 (unregistering): Released all slaves [ 248.447414][ T8486] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 248.447489][ T8486] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 248.447617][ T8486] loop0: [ 248.503860][ T8488] uhci_hcd 0000:00:1d.0: remove, state 4 [ 248.504000][ T8488] usb usb1: USB disconnect, device number 1 [ 248.642080][ T5149] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 248.642523][ T5149] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 248.642601][ T5149] loop0: [ 248.774774][ T8468] netlink: 20 bytes leftover after parsing attributes in process `syz.2.502'. [ 248.901113][ T8488] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered [ 249.576613][ T5827] lg-g15 0003:046D:0A07.0010: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 249.581665][ T5827] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0010/input/input31 [ 250.001476][ T8497] fuse: Bad value for 'fd' [ 250.976965][ T8511] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 251.736829][ T8508] ima: policy update failed [ 251.771959][ T43] audit: type=1802 audit(1787753708.148:16461): pid=8508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.510" res=0 errno=0 [ 253.247824][ T8522] 8021q: VLANs not supported on sit0 [ 253.290678][ T8522] 9p: Bad value for 'rfdno' [ 254.357012][ T8528] netlink: 'syz.1.514': attribute type 1 has an invalid length. [ 254.451303][ T8528] 8021q: adding VLAN 0 to HW filter on device bond1 [ 254.510669][ T8536] binder: BINDER_SET_CONTEXT_MGR already set [ 254.510728][ T8536] binder: 8530:8536 ioctl 4018620d 80004a80 returned -16 [ 254.511749][ T8536] binder: 8530:8536 ioctl 89fa 80000280 returned -22 [ 254.517572][ T8535] 8021q: adding VLAN 0 to HW filter on device bond1 [ 254.517908][ T8535] bond1: (slave gre2): The slave device specified does not support setting the MAC address [ 254.518438][ T8535] bond1: (slave gre2): Error -95 calling set_mac_address [ 254.747579][ T8528] 8021q: adding VLAN 0 to HW filter on device bond6 [ 254.755237][ T8528] bond1: (slave bond6): Enslaving as an active interface with a down link [ 255.132136][ T8537] bond1 (unregistering): (slave bond6): Releasing active interface [ 255.182350][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.182911][ T1431] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 255.550806][ T8537] bond1 (unregistering): Released all slaves [ 256.153918][ T8553] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 256.153989][ T8553] CIFS mount error: No usable UNC path provided in device string! [ 256.153989][ T8553] [ 256.154236][ T8553] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 256.236250][ T8550] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.377916][ T8553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.518'. [ 257.747819][ T5844] lg-g15 0003:046D:0A07.0011: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 257.756663][ T5844] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0011/input/input32 [ 257.849530][ T8571] fuse: Bad value for 'fd' [ 257.878573][ T8574] 8021q: VLANs not supported on sit0 [ 257.885556][ T8574] 9p: Bad value for 'rfdno' [ 258.394031][ T8573] fido_id[8573]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 258.824727][ T8551] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.897516][ T8578] netlink: 'syz.1.524': attribute type 1 has an invalid length. [ 259.397538][ T8578] 8021q: adding VLAN 0 to HW filter on device bond1 [ 259.420266][ T8579] 8021q: adding VLAN 0 to HW filter on device bond1 [ 259.433972][ T8579] bond1: (slave gre2): The slave device specified does not support setting the MAC address [ 259.442143][ T8579] bond1: (slave gre2): Error -95 calling set_mac_address [ 259.696333][ T8581] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 259.753231][ T8584] bond1 (unregistering): Released all slaves [ 260.069274][ T43] audit: type=1800 audit(1787753716.478:16462): pid=8588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.523" name="bus" dev="ramfs" ino=17317 res=0 errno=0 [ 260.081985][ T8551] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.411660][ T8551] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.675835][ T5826] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.675911][ T5826] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.685796][ T5826] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.685858][ T5826] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.827593][ T43] audit: type=1800 audit(1787753717.208:16463): pid=8590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.525" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 260.893259][ T8601] netlink: 68 bytes leftover after parsing attributes in process `syz.2.528'. [ 260.957402][ T8601] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 261.533468][ T8606] ntfs3(nullb0): Primary boot signature is not NTFS. [ 261.533616][ T8606] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 262.860458][ T8614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.531'. [ 263.097684][ T8615] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 263.311297][ T8615] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 263.311342][ T8615] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 263.311509][ T8615] vhci_hcd vhci_hcd.0: Device attached [ 263.592038][ T8614] hsr_slave_1 (unregistering): left promiscuous mode [ 263.617832][ T30] usb 42-1: SetAddress Request (6) to port 0 [ 263.617970][ T30] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 264.070513][ T7523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.070579][ T7523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.104834][ T8624] vhci_hcd: connection reset by peer [ 264.107188][ T13] vhci_hcd vhci_hcd.2: stop threads [ 264.107214][ T13] vhci_hcd vhci_hcd.2: release socket [ 264.108770][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 264.364884][ T5827] lg-g15 0003:046D:0A07.0012: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 264.371005][ T5827] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0012/input/input33 [ 264.529167][ T8634] fuse: Bad value for 'fd' [ 264.567369][ T8630] wg2 speed is unknown, defaulting to 1000 [ 264.572317][ T8637] netlink: 'syz.3.534': attribute type 1 has an invalid length. [ 264.769622][ T8637] 8021q: adding VLAN 0 to HW filter on device bond5 [ 265.431370][ T8639] 8021q: adding VLAN 0 to HW filter on device bond5 [ 265.431843][ T8639] bond5: (slave gre1): The slave device specified does not support setting the MAC address [ 265.435541][ T8639] bond5: (slave gre1): Error -95 calling set_mac_address [ 265.566778][ T8637] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 265.572659][ T8641] bond5 (unregistering): Released all slaves [ 265.582130][ T8644] netlink: 'syz.1.535': attribute type 11 has an invalid length. [ 265.802626][ T8646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.843911][ T8646] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.877946][ T8648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.535'. [ 265.877992][ T8648] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 266.071613][ T8646] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 266.093561][ T8646] veth1_vlan: left promiscuous mode [ 266.094606][ T8646] veth0_vlan: left promiscuous mode [ 266.096368][ T8646] veth0_vlan: entered promiscuous mode [ 266.098393][ T8646] veth1_vlan: entered promiscuous mode [ 266.102658][ T8646] veth1_macvtap: left promiscuous mode [ 266.103955][ T8646] veth0_macvtap: left promiscuous mode [ 266.104804][ T8646] veth0_macvtap: entered promiscuous mode [ 266.106349][ T8646] veth1_macvtap: entered promiscuous mode [ 266.198237][ T8646] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 266.202694][ T8646] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 266.207441][ T8646] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 266.217640][ T8646] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 266.407822][ T8646] 8021q: adding VLAN 0 to HW filter on device bond2 [ 266.411907][ T8646] 8021q: adding VLAN 0 to HW filter on device bond3 [ 266.417781][ T8646] 8021q: adding VLAN 0 to HW filter on device bond4 [ 266.435229][ T8646] 8021q: adding VLAN 0 to HW filter on device bond5 [ 266.440143][ T8646] 8021q: adding VLAN 0 to HW filter on device bond6 [ 266.443704][ T8646] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 266.476187][ T12] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 266.477249][ T12] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 266.477692][ T12] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 266.477858][ T12] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 266.583941][ T8656] netlink: 32 bytes leftover after parsing attributes in process `syz.3.536'. [ 266.778594][ T8650] slcan: can't register candev [ 266.894547][ T8647] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 266.897810][ T7523] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.897932][ T7523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.935993][ T7523] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.936272][ T7523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.057423][ T8668] 9pnet_virtio: no channels available for device syz [ 268.717609][ T30] usb 42-1: device descriptor read/8, error -110 [ 268.907895][ T8674] ntfs3(nullb0): Primary boot signature is not NTFS. [ 268.917045][ T8674] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 269.135371][ T30] usb usb42-port1: attempt power cycle [ 269.708380][ T30] usb usb42-port1: unable to enumerate USB device [ 269.952827][ T8680] netlink: 'syz.2.542': attribute type 1 has an invalid length. [ 271.344430][ T8680] 8021q: adding VLAN 0 to HW filter on device bond3 [ 272.997370][ T8682] 8021q: adding VLAN 0 to HW filter on device bond3 [ 272.997770][ T8682] bond3: (slave gre2): The slave device specified does not support setting the MAC address [ 273.004846][ T8682] bond3: (slave gre2): Error -95 calling set_mac_address [ 273.096684][ T8684] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 273.103373][ T8685] bond3 (unregistering): Released all slaves [ 273.385797][ T8695] netlink: 'syz.2.544': attribute type 1 has an invalid length. [ 273.418863][ T8695] 8021q: adding VLAN 0 to HW filter on device bond3 [ 273.527122][ T8695] 8021q: adding VLAN 0 to HW filter on device bond3 [ 273.527460][ T8695] bond3: (slave gre2): The slave device specified does not support setting the MAC address [ 273.528326][ T8695] bond3: (slave gre2): Error -95 calling set_mac_address [ 275.015491][ T8699] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 275.024732][ T1036] lg-g15 0003:046D:0A07.0013: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 275.026295][ T1036] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0013/input/input34 [ 275.227187][ T8714] fuse: Bad value for 'fd' [ 275.499379][ T8701] bond3 (unregistering): Released all slaves [ 276.487862][ T8710] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 276.487899][ T8710] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 276.487989][ T8710] vhci_hcd vhci_hcd.0: Device attached [ 276.765816][ T5916] usb 40-1: SetAddress Request (2) to port 0 [ 276.768931][ T5916] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 276.922954][ T8732] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 277.111887][ T8732] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 277.111925][ T8732] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 277.112069][ T8732] vhci_hcd vhci_hcd.0: Device attached [ 277.190593][ T1288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.190681][ T1288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.604516][ T853] usb 44-1: SetAddress Request (10) to port 0 [ 277.604663][ T853] usb 44-1: new SuperSpeed USB device number 10 using vhci_hcd [ 277.879641][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 278.085878][ T8743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.551'. [ 278.258002][ T8743] hsr_slave_1 (unregistering): left promiscuous mode [ 278.501847][ T8733] vhci_hcd: connection reset by peer [ 278.517337][ T12] vhci_hcd vhci_hcd.3: stop threads [ 278.517391][ T12] vhci_hcd vhci_hcd.3: release socket [ 278.517744][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 278.826047][ T8719] vhci_hcd: connection reset by peer [ 278.832068][ T12] vhci_hcd vhci_hcd.1: stop threads [ 278.832134][ T12] vhci_hcd vhci_hcd.1: release socket [ 278.832233][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 278.926609][ T8746] netlink: 72 bytes leftover after parsing attributes in process `syz.0.552'. [ 278.944478][ T8739] wg2 speed is unknown, defaulting to 1000 [ 279.982908][ T8752] wg2 speed is unknown, defaulting to 1000 [ 281.529408][ T43] audit: type=1804 audit(1787753737.858:16464): pid=8766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.553" name="bus" dev="ramfs" ino=19273 res=1 errno=0 [ 281.529891][ T43] audit: type=1804 audit(1787753737.858:16465): pid=8766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.553" name="bus" dev="ramfs" ino=19273 res=1 errno=0 [ 281.919750][ T5916] usb 40-1: device descriptor read/8, error -110 [ 282.416779][ T5916] usb usb40-port1: attempt power cycle [ 282.695871][ T853] usb 44-1: device descriptor read/8, error -110 [ 283.021677][ T5916] usb usb40-port1: unable to enumerate USB device [ 283.083045][ T30] lg-g15 0003:046D:0A07.0014: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 283.084702][ T30] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0014/input/input35 [ 283.086793][ T853] usb usb44-port1: attempt power cycle [ 283.134293][ T8774] netlink: 20 bytes leftover after parsing attributes in process `syz.3.555'. [ 283.166054][ T8781] fuse: Bad value for 'fd' [ 283.432144][ T8783] fido_id[8783]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 283.452280][ T8300] udevd[8300]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 283.696667][ T853] usb usb44-port1: unable to enumerate USB device [ 285.326981][ T8801] netlink: 'syz.1.559': attribute type 1 has an invalid length. [ 285.424391][ T8801] 8021q: adding VLAN 0 to HW filter on device bond1 [ 285.452528][ T8803] 8021q: adding VLAN 0 to HW filter on device bond1 [ 285.457266][ T8803] bond1: (slave gre2): The slave device specified does not support setting the MAC address [ 285.460219][ T8803] bond1: (slave gre2): Error -95 calling set_mac_address [ 285.814463][ T8804] 8021q: adding VLAN 0 to HW filter on device bond7 [ 285.869677][ T8804] bond1: (slave bond7): Enslaving as an active interface with a down link [ 285.871032][ T8808] 9pnet_fd: Insufficient options for proto=fd [ 285.924001][ T8805] bond1 (unregistering): (slave bond7): Releasing active interface [ 285.938728][ T8808] xhci_hcd 0000:00:1f.0: init 0000:00:1f.0 fail, -16 [ 285.938797][ T8808] xhci_hcd 0000:00:1f.0: probe with driver xhci_hcd failed with error -16 [ 286.121636][ T8805] bond1 (unregistering): Released all slaves [ 287.078265][ T8823] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 287.082368][ T8823] pci 0000:00:1d.0: BAR 4 [io 0xc0e0-0xc0ff] [ 287.184298][ T8823] pci 0000:00:1d.0: Adding to iommu group 7 [ 287.253452][ T8823] pci 0000:00:1d.0: BAR 4 [io 0x2000-0x201f]: assigned [ 287.871274][ T8823] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 565431 usecs [ 288.064250][ T8823] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 288.478366][ T8823] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1 [ 288.483745][ T8823] uhci_hcd 0000:00:1d.0: detected 2 ports [ 288.498355][ T8823] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002000 [ 288.644494][ T8823] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 288.683830][ T8823] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 288.683922][ T8823] usb usb1: Product: UHCI Host Controller [ 288.683995][ T8823] usb usb1: Manufacturer: Linux syzkaller uhci_hcd [ 288.689399][ T8823] usb usb1: SerialNumber: 0000:00:1d.0 [ 288.759865][ T8823] hub 1-0:1.0: USB hub found [ 288.761505][ T8823] hub 1-0:1.0: 2 ports detected [ 290.296410][ T8840] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 290.355202][ T8840] gadgetfs: bound to dummy_udc driver [ 290.889363][ T1036] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 290.890266][ C0] gadgetfs: connected [ 290.903522][ T1036] gadgetfs: disconnected [ 290.980868][ T8843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.570'. [ 291.109363][ C0] gadgetfs: connected [ 291.113535][ T1036] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 291.175818][ T1036] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 291.176126][ T1036] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.215212][ C0] gadgetfs: configuration #1 [ 293.266022][ T64] Bluetooth: hci3: command 0x0405 tx timeout [ 293.978145][ T8841] gadgetfs: suspended from state 3 [ 293.981972][ T8841] gadgetfs: disconnected [ 294.036169][ T5981] usb 6-1: USB disconnect, device number 11 [ 294.649704][ T8870] netlink: 16 bytes leftover after parsing attributes in process `syz.3.571'. [ 294.925207][ T8872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.572'. [ 295.168175][ T8874] netlink: 'syz.1.573': attribute type 1 has an invalid length. [ 295.476644][ T8874] 8021q: adding VLAN 0 to HW filter on device bond1 [ 295.737416][ T8876] 8021q: adding VLAN 0 to HW filter on device bond1 [ 295.737812][ T8876] bond1: (slave gre2): The slave device specified does not support setting the MAC address [ 295.738640][ T8876] bond1: (slave gre2): Error -95 calling set_mac_address [ 295.901058][ T8884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.575'. [ 296.245754][ T8874] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 296.279346][ T8881] bond1 (unregistering): Released all slaves [ 297.195907][ T5744] Bluetooth: hci2: unexpected event for opcode 0x2005 [ 297.420454][ C2] hpet: Lost 1 RTC interrupts [ 297.515408][ T8897] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 297.739273][ C2] hpet: Lost 1 RTC interrupts [ 297.863857][ C2] hpet: Lost 4 RTC interrupts [ 297.958623][ C2] hpet: Lost 1 RTC interrupts [ 298.275750][ C2] hpet: Lost 1 RTC interrupts [ 299.008268][ T8915] batadv_slave_1: entered promiscuous mode [ 299.012053][ T8916] batadv_slave_1: left promiscuous mode [ 301.807885][ T8928] netlink: 8752 bytes leftover after parsing attributes in process `syz.1.579'. [ 305.308034][ T8945] wg2 speed is unknown, defaulting to 1000 [ 305.598190][ T8953] netlink: 152 bytes leftover after parsing attributes in process `syz.2.585'. [ 306.453492][ T8954] siw: device registration error -23 [ 306.743694][ T8963] ntfs3(nullb0): Primary boot signature is not NTFS. [ 306.779555][ T8963] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 307.591459][ T8970] netlink: 'syz.0.588': attribute type 1 has an invalid length. [ 308.415271][ T8970] bond2: entered promiscuous mode [ 308.418589][ T8970] 8021q: adding VLAN 0 to HW filter on device bond2 [ 308.707771][ T8982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.589'. [ 308.963814][ T8972] bond2: (slave bridge1): making interface the new active one [ 308.963869][ T8972] bridge1: entered promiscuous mode [ 309.317697][ T8972] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 311.144362][ T8994] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 311.947085][ T9000] netlink: 152 bytes leftover after parsing attributes in process `syz.3.595'. [ 312.060687][ T8996] raw_sendmsg: syz.0.592 forgot to set AF_INET. Fix it! [ 312.162464][ T9005] program syz.0.592 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 312.222046][ T5744] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 312.232879][ T9004] siw: device registration error -23 [ 312.287437][ T8996] ceph: No mds server is up or the cluster is laggy [ 312.289207][ T5829] libceph: connect (1)[c::]:6789 error -101 [ 312.289596][ T5829] libceph: mon0 (1)[c::]:6789 connect error [ 313.070407][ T9017] ntfs3(nullb0): Primary boot signature is not NTFS. [ 313.198028][ T9017] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 313.904805][ T43] audit: type=1800 audit(1787753770.308:16466): pid=9020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.599" name="zoned" dev="configfs" ino=20933 res=0 errno=0 [ 313.918270][ T43] audit: type=1800 audit(1787753770.328:16467): pid=9020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.599" name="zone_nr_conv" dev="configfs" ino=20934 res=0 errno=0 [ 314.314192][ T43] audit: type=1800 audit(1787753770.708:16468): pid=9022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.599" name="zoned" dev="configfs" ino=21590 res=0 errno=0 [ 314.314293][ T43] audit: type=1800 audit(1787753770.708:16469): pid=9022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.599" name="power" dev="configfs" ino=21591 res=0 errno=0 [ 316.102434][ T9028] netlink: 'syz.2.601': attribute type 1 has an invalid length. [ 316.246957][ T9028] bond3: entered promiscuous mode [ 316.247330][ T9028] 8021q: adding VLAN 0 to HW filter on device bond3 [ 316.695306][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.727825][ T1431] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 316.780539][ T9032] bond3: (slave bridge2): making interface the new active one [ 316.780862][ T9032] bridge2: entered promiscuous mode [ 316.824178][ T9032] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 319.666874][ T9054] netlink: 152 bytes leftover after parsing attributes in process `syz.1.606'. [ 320.130299][ T9058] siw: device registration error -23 [ 320.695214][ T9061] netlink: 'syz.3.609': attribute type 1 has an invalid length. [ 322.402090][ T9061] 8021q: adding VLAN 0 to HW filter on device bond5 [ 322.528116][ T43] audit: type=1800 audit(1787753778.938:16470): pid=9078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.610" name="addr_trtype" dev="configfs" ino=23608 res=0 errno=0 [ 322.532406][ T9077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.611'. [ 322.553249][ T43] audit: type=1800 audit(1787753778.958:16471): pid=9078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.610" name="addr_traddr" dev="configfs" ino=23609 res=0 errno=0 [ 322.594102][ T43] audit: type=1800 audit(1787753778.998:16472): pid=9071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.610" name="addr_trsvcid" dev="configfs" ino=22592 res=0 errno=0 [ 322.596352][ T43] audit: type=1800 audit(1787753779.008:16473): pid=9071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.610" name="addr_adrfam" dev="configfs" ino=22593 res=0 errno=0 [ 322.597257][ T9071] nvmet: Invalid value 'ipv' for adrfam [ 322.612239][ T9071] nvmet_tcp: address family 255 not supported [ 322.633197][ T9064] 8021q: adding VLAN 0 to HW filter on device bond5 [ 322.633609][ T9064] bond5: (slave gre1): The slave device specified does not support setting the MAC address [ 322.634362][ T9064] bond5: (slave gre1): Error -95 calling set_mac_address [ 322.665143][ T9067] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 322.677113][ T9068] bond5 (unregistering): Released all slaves [ 322.898897][ T9070] wg2 speed is unknown, defaulting to 1000 [ 323.949640][ T9097] binder: BINDER_SET_CONTEXT_MGR already set [ 323.949703][ T9097] binder: 9091:9097 ioctl 4018620d 80000100 returned -16 [ 323.958034][ T9097] binder: BINDER_SET_CONTEXT_MGR already set [ 323.962391][ T9097] binder: 9091:9097 ioctl 4018620d 80004a80 returned -16 [ 323.966274][ T9097] binder: 9091:9097 ioctl c0306201 80000280 returned -14 [ 324.442613][ T8662] lg-g15 0003:046D:0A07.0015: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 324.443989][ T8662] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0015/input/input36 [ 324.528493][ T9110] netlink: 152 bytes leftover after parsing attributes in process `syz.1.619'. [ 324.710708][ T9118] siw: device registration error -23 [ 325.491088][ T9125] netlink: 'syz.3.621': attribute type 1 has an invalid length. [ 325.701041][ T9125] 8021q: adding VLAN 0 to HW filter on device bond5 [ 325.955763][ T9127] 8021q: adding VLAN 0 to HW filter on device bond5 [ 325.966224][ T9127] bond5: (slave gre1): The slave device specified does not support setting the MAC address [ 325.967760][ T9127] bond5: (slave gre1): Error -95 calling set_mac_address [ 326.119625][ T9128] 8021q: adding VLAN 0 to HW filter on device bond7 [ 326.357061][ T9128] bond5: (slave bond7): Enslaving as an active interface with a down link [ 326.974985][ T9125] bond5 (unregistering): (slave bond7): Releasing active interface [ 327.331771][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 327.378446][ T9125] bond5 (unregistering): Released all slaves [ 327.465978][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 327.469718][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 327.477762][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.490756][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.495099][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 327.511969][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.585993][ T9] usb 6-1: config 0 descriptor?? [ 327.719670][ T9145] netlink: 'syz.2.625': attribute type 1 has an invalid length. [ 328.008522][ T9156] netlink: 152 bytes leftover after parsing attributes in process `syz.2.628'. [ 328.145842][ T9157] siw: device registration error -23 [ 328.237689][ T9141] xt_ipcomp: unknown flags 1D [ 331.755649][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 333.013287][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 333.013374][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 333.014423][ T9] usb 6-1: USB disconnect, device number 12 [ 333.237098][ T9169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.631'. [ 333.278876][ T9169] batadv0: entered promiscuous mode [ 333.281772][ T9169] macsec1: entered promiscuous mode [ 333.282114][ T9169] macsec1: entered allmulticast mode [ 333.282144][ T9169] batadv0: entered allmulticast mode [ 333.283707][ T9169] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 333.304219][ T9170] UDC core: g1: couldn't find an available UDC or it's busy [ 333.312471][ T9169] batadv0: left allmulticast mode [ 333.319473][ T9169] batadv0: left promiscuous mode [ 333.969489][ T9184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.634'. [ 334.016546][ T9186] netlink: 'syz.2.635': attribute type 1 has an invalid length. [ 334.263011][ T9186] 8021q: adding VLAN 0 to HW filter on device bond5 [ 334.508845][ T9188] 8021q: adding VLAN 0 to HW filter on device bond5 [ 334.509190][ T9188] bond5: (slave gre2): The slave device specified does not support setting the MAC address [ 334.510052][ T9188] bond5: (slave gre2): Error -95 calling set_mac_address [ 334.789768][ T9198] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 334.789875][ T9198] CPU: 0 UID: 0 PID: 9198 Comm: syz.3.636 Not tainted syzkaller #0 PREEMPT(full) [ 334.789912][ T9198] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 334.789924][ T9198] Call Trace: [ 334.789931][ T9198] [ 334.789939][ T9198] dump_stack_lvl+0x100/0x190 [ 334.789971][ T9198] sysfs_warn_dup.cold+0x1c/0x28 [ 334.789997][ T9198] sysfs_create_dir_ns+0x24b/0x2b0 [ 334.790015][ T9198] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 334.790031][ T9198] ? find_held_lock+0x2b/0x80 [ 334.790049][ T9198] ? kobject_add_internal+0x25f/0x930 [ 334.790069][ T9198] ? kobject_add_internal+0x25f/0x930 [ 334.790092][ T9198] ? class_dir_child_ns_type+0xd/0x60 [ 334.790115][ T9198] kobject_add_internal+0x2c8/0x930 [ 334.790140][ T9198] kobject_add+0x16a/0x1e0 [ 334.790160][ T9198] ? __pfx_kobject_add+0x10/0x10 [ 334.790181][ T9198] ? get_device_parent+0x1b3/0x4c0 [ 334.790207][ T9198] ? kobject_put+0xb9/0x640 [ 334.790232][ T9198] device_add+0x294/0x1970 [ 334.790251][ T9198] ? lockdep_init_map_type+0x5c/0x250 [ 334.790275][ T9198] ? __pfx_device_add+0x10/0x10 [ 334.790292][ T9198] ? lockdep_init_map_type+0x5c/0x250 [ 334.790317][ T9198] ? __init_waitqueue_head+0xca/0x150 [ 334.790346][ T9198] tty_register_device_attr+0x388/0x7f0 [ 334.790371][ T9198] ? lockdep_init_map_type+0x5c/0x250 [ 334.790393][ T9198] ? __pfx_tty_register_device_attr+0x10/0x10 [ 334.790424][ T9198] ? tty_port_init+0x156/0x1c0 [ 334.790456][ T9198] gsm_activate_mux+0x155/0x2a0 [ 334.790485][ T9198] gsmld_ioctl+0xbbc/0x15c0 [ 334.790511][ T9198] ? __pfx_gsmld_ioctl+0x10/0x10 [ 334.790548][ T9198] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 334.790579][ T9198] ? __pfx_gsmld_ioctl+0x10/0x10 [ 334.790598][ T9198] tty_compat_ioctl+0x396/0x420 [ 334.790625][ T9198] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 334.790654][ T9198] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 334.790683][ T9198] __do_fast_syscall_32+0x13a/0x8b0 [ 334.790703][ T9198] do_fast_syscall_32+0x32/0x70 [ 334.790721][ T9198] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 334.790744][ T9198] RIP: 0023:0xf707efec [ 334.790765][ T9198] Code: Unable to access opcode bytes at 0xf707efc2. [ 334.790773][ T9198] RSP: 002b:00000000f542b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 334.790791][ T9198] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000404c4701 [ 334.790803][ T9198] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 334.790814][ T9198] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 334.790824][ T9198] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 334.790835][ T9198] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 334.790868][ T9198] [ 334.790984][ T9198] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 334.828071][ T9198] warning: `syz.3.636' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 335.217300][ T9186] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 335.293806][ T9202] qrtr: Invalid version 0 [ 335.294162][ T9202] qrtr: Invalid version 0 [ 335.329534][ T9192] bond5 (unregistering): Released all slaves [ 336.104199][ T9220] netlink: 152 bytes leftover after parsing attributes in process `syz.2.640'. [ 336.169179][ T9221] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 336.203684][ T9221] syz.0.639: vmalloc error: size 4294967296, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 336.321071][ T9221] CPU: 3 UID: 0 PID: 9221 Comm: syz.0.639 Not tainted syzkaller #0 PREEMPT(full) [ 336.321134][ T9221] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 336.321149][ T9221] Call Trace: [ 336.321158][ T9221] [ 336.321167][ T9221] dump_stack_lvl+0x100/0x190 [ 336.321201][ T9221] ? disksize_store+0x114/0x460 [ 336.321231][ T9221] warn_alloc.cold+0x9e/0xb2 [ 336.321263][ T9221] ? __pfx_warn_alloc+0x10/0x10 [ 336.321309][ T9221] ? __pfx___schedule+0x10/0x10 [ 336.321355][ T9221] ? disksize_store+0x114/0x460 [ 336.321387][ T9221] __vmalloc_node_range_noprof+0x123b/0x1460 [ 336.321435][ T9221] ? disksize_store+0x114/0x460 [ 336.321473][ T9221] ? lock_acquire+0x5e/0x370 [ 336.321504][ T9221] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 336.321535][ T9221] ? __pfx___might_resched+0x10/0x10 [ 336.321566][ T9221] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 336.321608][ T9221] ? disksize_store+0x114/0x460 [ 336.321638][ T9221] __vmalloc_node_noprof+0xad/0xf0 [ 336.321668][ T9221] ? disksize_store+0x114/0x460 [ 336.321703][ T9221] disksize_store+0x114/0x460 [ 336.321737][ T9221] ? sysfs_file_kobj+0xe4/0x290 [ 336.321771][ T9221] ? sysfs_file_kobj+0xe4/0x290 [ 336.321815][ T9221] ? __pfx_disksize_store+0x10/0x10 [ 336.322134][ T9221] dev_attr_store+0x58/0x80 [ 336.322162][ T9221] ? __pfx_dev_attr_store+0x10/0x10 [ 336.322186][ T9221] sysfs_kf_write+0xf2/0x150 [ 336.322225][ T9221] kernfs_fop_write_iter+0x3e0/0x5f0 [ 336.322256][ T9221] ? __pfx_sysfs_kf_write+0x10/0x10 [ 336.322294][ T9221] vfs_write+0x6af/0x1050 [ 336.322332][ T9221] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 336.322367][ T9221] ? __pfx_vfs_write+0x10/0x10 [ 336.322400][ T9221] ? find_held_lock+0x2b/0x80 [ 336.322446][ T9221] ksys_write+0x12a/0x250 [ 336.322481][ T9221] ? __pfx_ksys_write+0x10/0x10 [ 336.322526][ T9221] __do_fast_syscall_32+0x13a/0x8b0 [ 336.322556][ T9221] do_fast_syscall_32+0x32/0x70 [ 336.322580][ T9221] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 336.322609][ T9221] RIP: 0023:0xf708efec [ 336.322636][ T9221] Code: Unable to access opcode bytes at 0xf708efc2. [ 336.322646][ T9221] RSP: 002b:00000000f543b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 336.322670][ T9221] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000340 [ 336.322685][ T9221] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 336.322698][ T9221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 336.322711][ T9221] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 336.322724][ T9221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 336.322756][ T9221] [ 336.462962][ T9223] siw: device registration error -23 [ 336.815900][ T9221] Mem-Info: [ 336.815964][ T9221] active_anon:15398 inactive_anon:71 isolated_anon:0 [ 336.815964][ T9221] active_file:8885 inactive_file:26061 isolated_file:0 [ 336.815964][ T9221] unevictable:1000 dirty:1164 writeback:0 [ 336.815964][ T9221] slab_reclaimable:6283 slab_unreclaimable:58815 [ 336.815964][ T9221] mapped:36491 shmem:10957 pagetables:1318 [ 336.815964][ T9221] sec_pagetables:308 bounce:0 [ 336.815964][ T9221] kernel_misc_reclaimable:0 [ 336.815964][ T9221] free:34258 free_pcp:9217 free_cma:0 [ 336.816047][ T9221] Node 0 active_anon:908kB inactive_anon:32kB active_file:136kB inactive_file:0kB unevictable:1980kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:2840kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10016kB pagetables:1336kB sec_pagetables:1128kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 336.816121][ T9221] Node 1 active_anon:60684kB inactive_anon:252kB active_file:35404kB inactive_file:104244kB unevictable:2020kB isolated(anon):0kB isolated(file):0kB mapped:145936kB dirty:4656kB writeback:0kB shmem:40988kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5944kB pagetables:3936kB sec_pagetables:104kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 336.816187][ T9221] Node 0 DMA free:2136kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:132kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:284kB local_pcp:24kB free_cma:0kB [ 336.816279][ T9221] lowmem_reserve[]: 0 278 278 278 278 [ 336.816436][ T9221] Node 0 DMA32 free:15632kB boost:0kB min:12632kB low:15788kB high:18944kB reserved_highatomic:0KB free_highatomic:0KB active_anon:908kB inactive_anon:32kB active_file:136kB inactive_file:0kB unevictable:1848kB writepending:0kB zspages:0kB present:1032196kB managed:284912kB mlocked:0kB bounce:0kB free_pcp:6112kB local_pcp:2332kB free_cma:0kB [ 336.816525][ T9221] lowmem_reserve[]: 0 0 0 0 0 [ 336.816687][ T9221] Node 1 DMA32 free:119264kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:60684kB inactive_anon:252kB active_file:35404kB inactive_file:104244kB unevictable:2020kB writepending:4656kB zspages:1928kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:30600kB local_pcp:9200kB free_cma:0kB [ 336.816787][ T9221] lowmem_reserve[]: 0 0 0 0 0 [ 336.816968][ T9221] Node 0 DMA: 8*4kB (U) 17*8kB (U) 3*16kB (U) 8*32kB (U) 18*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 2136kB [ 336.817530][ T9221] Node 0 DMA32: 362*4kB (UE) 39*8kB (UME) 13*16kB (UME) 33*32kB (UME) 23*64kB (UME) 13*128kB (ME) 7*256kB (ME) 5*512kB (ME) 3*1024kB (UM) 1*2048kB (M) 0*4096kB = 15632kB [ 336.818275][ T9221] Node 1 DMA32: 190*4kB (UME) 194*8kB (UME) 69*16kB (UE) 66*32kB (UE) 245*64kB (UME) 166*128kB (ME) 80*256kB (ME) 14*512kB (UME) 10*1024kB (UM) 5*2048kB (UM) 7*4096kB (UM) = 119256kB [ 336.818939][ T9221] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 336.818976][ T9221] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 336.819015][ T9221] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 336.819052][ T9221] Node 1 hugepages_total=8 hugepages_free=7 hugepages_surp=4 hugepages_size=2048kB [ 336.819089][ T9221] 46160 total pagecache pages [ 336.819116][ T9221] 261 pages in swap cache [ 336.819143][ T9221] Free swap = 120988kB [ 336.819197][ T9221] Total swap = 124996kB [ 336.819226][ T9221] 524155 pages RAM [ 336.819318][ T9221] 0 pages HighMem/MovableOnly [ 336.819346][ T9221] 212035 pages reserved [ 336.819372][ T9221] 0 pages cma reserved [ 337.649406][ T9234] netlink: 12 bytes leftover after parsing attributes in process `syz.2.643'. [ 338.813895][ T30] lg-g15 0003:046D:0A07.0016: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 338.815287][ T30] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0016/input/input37 [ 339.950629][ T9261] devpts: Invalid uid '0x00000000ffffffff' [ 340.340426][ T9272] netlink: 'syz.2.648': attribute type 1 has an invalid length. [ 340.480673][ T9275] netlink: 28 bytes leftover after parsing attributes in process `syz.0.649'. [ 340.502060][ T9279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.650'. [ 340.589547][ T9272] 8021q: adding VLAN 0 to HW filter on device bond5 [ 340.798414][ T9276] 8021q: adding VLAN 0 to HW filter on device bond5 [ 340.798785][ T9276] bond5: (slave gre2): The slave device specified does not support setting the MAC address [ 340.799668][ T9276] bond5: (slave gre2): Error -95 calling set_mac_address [ 340.852047][ T9261] i2c i2c-0: new_device: Instantiated device hd3ss3220 at 0x04 [ 341.053195][ T9280] 8021q: adding VLAN 0 to HW filter on device bond6 [ 341.059560][ T9280] bond5: (slave bond6): Enslaving as an active interface with a down link [ 341.164345][ T9272] bond5 (unregistering): (slave bond6): Releasing active interface [ 341.330092][ T9272] bond5 (unregistering): Released all slaves [ 341.764915][ T9294] netlink: 152 bytes leftover after parsing attributes in process `syz.1.651'. [ 341.938224][ T9299] siw: device registration error -23 [ 344.714914][ T9296] syz.2.654 (9296) used greatest stack depth: 18232 bytes left [ 345.844638][ T9317] lo: entered allmulticast mode [ 345.872612][ T9317] lo: left allmulticast mode [ 345.888434][ T9317] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.888675][ T9317] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.321815][ T8662] lg-g15 0003:046D:0A07.0017: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 346.322927][ T8662] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0017/input/input38 [ 346.494753][ T9322] fuse: Bad value for 'fd' [ 347.060015][ T9323] fido_id[9323]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 347.894210][ T9337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.661'. [ 348.150964][ T9329] configfs-gadget.g1 gadget.32: HOST MAC aa:30:75:70:c4:db [ 348.151015][ T9329] configfs-gadget.g1 gadget.32: MAC c2:a6:96:1e:89:22 [ 348.201766][ T9339] nvmet: adding nsid 1 to subsystem testsubsys [ 348.220083][ T43] audit: type=1800 audit(1787753804.619:16474): pid=9339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.663" name="buffered_io" dev="configfs" ino=23759 res=0 errno=0 [ 348.238069][ T9339] nvmet_tcp: address family 255 not supported [ 348.385809][ T7495] nvmet: connect request for invalid subsystem testsubsys! [ 348.386038][ T9339] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 349.010348][ T9351] netlink: 152 bytes leftover after parsing attributes in process `syz.3.665'. [ 349.262921][ T9354] siw: device registration error -23 [ 349.391361][ T9353] netlink: 24 bytes leftover after parsing attributes in process `syz.1.664'. [ 349.796499][ T7529] nvmet: Created nvm controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:569441c4-9849-4dce-92bb-04d8bc6e7e3c. [ 349.833279][ T9362] nvme nvme0: creating 4 I/O queues. [ 350.079865][ T9374] smc: removing ib device syz2 [ 350.738362][ T9362] nvme nvme0: new ctrl: "testsubsys" [ 350.929097][ T9374] smbdirect: ib_dev[syz2] removed [ 350.934334][ T5744] Bluetooth: hci2: unexpected event for opcode 0x042d [ 351.322648][ T9387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.672'. [ 351.825902][ T5744] Bluetooth: hci1: unexpected event for opcode 0x042c [ 351.992329][ T9396] netlink: 152 bytes leftover after parsing attributes in process `syz.3.675'. [ 352.333205][ T9399] siw: device registration error -23 [ 352.710489][ T5744] Bluetooth: hci1: unexpected event for opcode 0x200f [ 352.780678][ T30] lg-g15 0003:046D:0A07.0018: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 352.858519][ T9411] fuse: Bad value for 'fd' [ 352.889210][ T30] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0018/input/input39 [ 353.599852][ T5744] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 354.309672][ T5744] Bluetooth: hci3: unexpected event for opcode 0x2019 [ 354.611502][ T64] Bluetooth: hci3: unexpected event for opcode 0x2006 [ 357.038005][ T5744] Bluetooth: hci2: unexpected event for opcode 0x0809 [ 357.121218][ T9447] ntfs3(nullb0): Primary boot signature is not NTFS. [ 357.144604][ T9447] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 357.167464][ T9449] lo speed is unknown, defaulting to 1000 [ 357.168470][ T9449] lo speed is unknown, defaulting to 1000 [ 357.195986][ T9449] lo speed is unknown, defaulting to 1000 [ 357.715390][ T5829] lo speed is unknown, defaulting to 1000 [ 357.718201][ T9449] infiniband syz1: set active [ 357.722949][ T9449] infiniband syz1: added lo [ 357.807859][ T9449] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 357.807946][ T9449] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 357.808012][ T9449] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 357.893344][ T9449] RDS/IB: syz1: added [ 357.893429][ T9449] smc: adding ib device syz1 with port count 1 [ 357.893477][ T9449] smc: ib device syz1 port 1 has no pnetid [ 357.893566][ T30] lo speed is unknown, defaulting to 1000 [ 357.894529][ T9449] lo speed is unknown, defaulting to 1000 [ 358.616461][ T9468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.693'. [ 359.110414][ T9449] lo speed is unknown, defaulting to 1000 [ 359.362022][ T9449] lo speed is unknown, defaulting to 1000 [ 359.574690][ T5744] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 359.975456][ T9449] lo speed is unknown, defaulting to 1000 [ 361.733646][ T9489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.734097][ T9489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.320998][ T9500] ntfs3(nullb0): Primary boot signature is not NTFS. [ 363.328989][ T9500] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 363.353487][ T9502] netlink: 'syz.2.703': attribute type 1 has an invalid length. [ 363.391256][ T9505] virtio-fs: tag not found [ 363.537969][ T9502] 8021q: adding VLAN 0 to HW filter on device bond5 [ 363.672962][ T9507] 8021q: adding VLAN 0 to HW filter on device bond5 [ 363.673339][ T9507] bond5: (slave gre2): The slave device specified does not support setting the MAC address [ 363.674227][ T9507] bond5: (slave gre2): Error -95 calling set_mac_address [ 363.778517][ T9502] 8021q: adding VLAN 0 to HW filter on device bond7 [ 363.828481][ T5744] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 363.994100][ T9502] bond5: (slave bond7): Enslaving as an active interface with a down link [ 364.071397][ T9510] bond5 (unregistering): (slave bond7): Releasing active interface [ 364.122461][ T9510] bond5 (unregistering): Released all slaves [ 364.228897][ T9515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.705'. [ 364.391638][ T5744] Bluetooth: hci2: unexpected event for opcode 0x1001 [ 364.459694][ T5744] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 364.899365][ T5744] Bluetooth: hci1: unexpected event for opcode 0x0c7a [ 365.470534][ T9545] futex_wake_op: syz.3.715 tries to shift op by -1; fix this program [ 365.685770][ T9548] netlink: 'syz.3.716': attribute type 1 has an invalid length. [ 365.691612][ T5744] Bluetooth: hci0: unexpected event for opcode 0x2062 [ 365.718780][ T9548] 8021q: adding VLAN 0 to HW filter on device bond5 [ 365.829516][ T9548] 8021q: adding VLAN 0 to HW filter on device bond5 [ 365.838595][ T9548] bond5: (slave gre1): The slave device specified does not support setting the MAC address [ 365.868554][ T9548] bond5: (slave gre1): Error -95 calling set_mac_address [ 366.205251][ T9556] 8021q: adding VLAN 0 to HW filter on device bond8 [ 366.281115][ T9556] bond5: (slave bond8): Enslaving as an active interface with a down link [ 366.449427][ T9566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.721'. [ 367.597593][ T5744] Bluetooth: hci0: unexpected event for opcode 0x0c38 [ 368.358264][ T9606] netlink: 'syz.3.729': attribute type 1 has an invalid length. [ 368.438477][ T9606] 8021q: adding VLAN 0 to HW filter on device bond9 [ 368.479537][ T5744] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 368.479664][ T5744] Bluetooth: hci2: Injecting HCI hardware error event [ 368.505020][ T5744] Bluetooth: hci2: hardware error 0x00 [ 368.766898][ T9610] 8021q: adding VLAN 0 to HW filter on device bond9 [ 368.768531][ T9610] bond9: (slave gre1): The slave device specified does not support setting the MAC address [ 368.769421][ T9610] bond9: (slave gre1): Error -95 calling set_mac_address [ 368.858007][ T9615] 8021q: adding VLAN 0 to HW filter on device bond10 [ 368.951184][ T9615] bond9: (slave bond10): Enslaving as an active interface with a down link [ 369.093663][ T9624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.742'. [ 369.093770][ T9624] openvswitch: netlink: EtherType 0 is less than min 600 [ 369.154924][ T9626] netlink: 152 bytes leftover after parsing attributes in process `syz.2.743'. [ 369.206831][ T9619] bond9 (unregistering): (slave bond10): Releasing active interface [ 369.296871][ T9619] bond9 (unregistering): Released all slaves [ 369.384768][ T9627] lo speed is unknown, defaulting to 1000 [ 369.390789][ T9627] lo speed is unknown, defaulting to 1000 [ 369.396509][ T9627] lo speed is unknown, defaulting to 1000 [ 369.440157][ T9627] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 369.448153][ T9627] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 369.449268][ T9627] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 369.550784][ T9627] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 369.594591][ T9627] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 369.710673][ T9627] lo speed is unknown, defaulting to 1000 [ 369.865840][ T9627] lo speed is unknown, defaulting to 1000 [ 369.867385][ T9627] lo speed is unknown, defaulting to 1000 [ 369.868705][ T9627] lo speed is unknown, defaulting to 1000 [ 370.667958][ T5744] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 376.179816][ T5744] Bluetooth: hci3: unexpected event for opcode 0x2040 [ 377.168457][ T9721] bond9 (unregistering): Released all slaves [ 377.403221][ T9735] netlink: 'syz.2.780': attribute type 1 has an invalid length. [ 377.516139][ T9735] 8021q: adding VLAN 0 to HW filter on device bond5 [ 377.556449][ T9741] netlink: 152 bytes leftover after parsing attributes in process `syz.3.781'. [ 377.585740][ T9739] 8021q: adding VLAN 0 to HW filter on device bond5 [ 377.590409][ T9739] bond5: (slave gre2): The slave device specified does not support setting the MAC address [ 377.591235][ T9739] bond5: (slave gre2): Error -95 calling set_mac_address [ 377.710552][ T9743] 8021q: adding VLAN 0 to HW filter on device bond8 [ 377.739698][ T9743] bond5: (slave bond8): Enslaving as an active interface with a down link [ 377.780736][ T9735] bond5 (unregistering): (slave bond8): Releasing active interface [ 377.785874][ T9735] bond5 (unregistering): Released all slaves [ 377.839899][ T9746] siw: device registration error -23 [ 378.077833][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.078329][ T1431] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 378.925694][ T9772] netlink: 28 bytes leftover after parsing attributes in process `syz.3.792'. [ 378.934257][ T9772] netlink: 28 bytes leftover after parsing attributes in process `syz.3.792'. [ 378.989707][ T64] Bluetooth: hci1: unexpected event for opcode 0x042e [ 379.028452][ T9781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.794'. [ 379.057710][ T9785] netlink: 152 bytes leftover after parsing attributes in process `syz.3.798'. [ 379.284228][ T9789] siw: device registration error -23 [ 380.218921][ T9805] netlink: 'syz.2.801': attribute type 1 has an invalid length. [ 380.488730][ T9808] bond5 (unregistering): Released all slaves [ 380.698212][ T9817] netlink: 'syz.3.807': attribute type 2 has an invalid length. [ 380.698290][ T9817] netlink: 'syz.3.807': attribute type 2 has an invalid length. [ 380.914442][ T9821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.808'. [ 381.173937][ T9824] ntfs3(nullb0): Primary boot signature is not NTFS. [ 381.195229][ T9824] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 382.296495][ T9831] lo speed is unknown, defaulting to 1000 [ 382.877626][ T9831] lo speed is unknown, defaulting to 1000 [ 383.121874][ T9833] ntfs3(nullb0): Primary boot signature is not NTFS. [ 383.122001][ T9833] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 386.911880][ T30] lg-g15 0003:046D:0A07.0019: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 386.932735][ T30] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0019/input/input40 [ 387.177553][ T9867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.820'. [ 388.043660][ T9876] netlink: 32 bytes leftover after parsing attributes in process `syz.3.823'. [ 391.187432][ C2] hpet: Lost 1 RTC interrupts [ 391.369133][ T30] lg-g15 0003:046D:0A07.001A: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 391.370562][ T30] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.001A/input/input41 [ 391.513365][ T9913] netlink: 24 bytes leftover after parsing attributes in process `syz.0.833'. [ 391.684066][ T9915] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 391.871629][ T9917] ntfs3(nullb0): Primary boot signature is not NTFS. [ 391.904509][ T9917] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 392.347316][ T9926] netlink: 'syz.3.835': attribute type 3 has an invalid length. [ 392.357168][ T9926] netlink: 'syz.3.835': attribute type 3 has an invalid length. [ 392.361032][ T9926] netlink: 'syz.3.835': attribute type 3 has an invalid length. [ 392.381652][ T9926] netlink: 'syz.3.835': attribute type 3 has an invalid length. [ 392.383005][ T9926] netlink: 'syz.3.835': attribute type 3 has an invalid length. [ 392.383065][ T9926] netlink: 'syz.3.835': attribute type 3 has an invalid length. [ 392.383112][ T9926] netlink: 'syz.3.835': attribute type 3 has an invalid length. [ 392.383150][ T9926] netlink: 'syz.3.835': attribute type 3 has an invalid length. [ 392.383189][ T9926] netlink: 'syz.3.835': attribute type 3 has an invalid length. [ 392.383228][ T9926] netlink: 'syz.3.835': attribute type 3 has an invalid length. [ 392.588238][ T9932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.837'. [ 393.904503][ T9948] 9pnet_virtio: no channels available for device syz [ 394.318875][ T9952] batadv_slave_1: entered allmulticast mode [ 396.125679][ T8662] lg-g15 0003:046D:0A07.001B: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 396.126988][ T8662] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.001B/input/input42 [ 396.168444][ T9972] ntfs3(nullb0): Primary boot signature is not NTFS. [ 396.221353][ T9972] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 396.745024][ T9982] comedi comedi2: multiq3: I/O base address or length out of range [ 397.306608][ T9988] 8021q: adding VLAN 0 to HW filter on device bond5 [ 397.456671][ T9988] 8021q: adding VLAN 0 to HW filter on device bond5 [ 397.457855][ T9988] bond5: (slave gre2): The slave device specified does not support setting the MAC address [ 397.458608][ T9988] bond5: (slave gre2): Error -95 calling set_mac_address [ 397.865940][ T9996] 8021q: adding VLAN 0 to HW filter on device bond9 [ 397.997635][ T9996] bond5: (slave bond9): Enslaving as an active interface with a down link [ 398.013782][T10006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.858'. [ 398.555338][ T9999] bond5 (unregistering): (slave bond9): Releasing active interface [ 398.759927][ T9999] bond5 (unregistering): Released all slaves [ 399.266187][T10020] validate_nla: 39 callbacks suppressed [ 399.266267][T10020] netlink: 'syz.3.865': attribute type 1 has an invalid length. [ 399.301249][T10024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.866'. [ 399.366550][T10020] 8021q: adding VLAN 0 to HW filter on device bond9 [ 399.623857][T10025] 8021q: adding VLAN 0 to HW filter on device bond9 [ 399.624196][T10025] bond9: (slave gre1): The slave device specified does not support setting the MAC address [ 399.624788][T10025] bond9: (slave gre1): Error -95 calling set_mac_address [ 400.023712][T10031] 8021q: adding VLAN 0 to HW filter on device bond11 [ 400.087534][T10031] bond9: (slave bond11): Enslaving as an active interface with a down link [ 400.100412][T10037] bond9 (unregistering): (slave bond11): Releasing active interface [ 400.147464][T10037] bond9 (unregistering): Released all slaves [ 400.317152][ T42] lg-g15 0003:046D:0A07.001C: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 400.473975][ T42] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.001C/input/input43 [ 401.984788][T10063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.873'. [ 402.691247][T10092] comedi comedi1: Minor 2 could not be opened [ 402.767984][T10094] ntfs3(nullb0): Primary boot signature is not NTFS. [ 402.768235][T10094] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 402.849078][T10099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.886'. [ 403.146621][T10108] netlink: 28 bytes leftover after parsing attributes in process `syz.1.888'. [ 405.397365][T10126] netlink: 'syz.0.893': attribute type 1 has an invalid length. [ 405.675916][ T7520] Bluetooth: hci4: Frame reassembly failed (-84) [ 406.133113][T10146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.897'. [ 406.144479][ T5744] Bluetooth: hci3: unexpected event for opcode 0x042c [ 407.033208][T10161] binder: 10159:10161 ioctl c0306201 80000280 returned -14 [ 407.400584][T10168] ntfs3(nullb0): Primary boot signature is not NTFS. [ 407.403148][T10168] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 407.804191][ T5744] Bluetooth: hci4: command 0xfc11 tx timeout [ 408.222005][ T64] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 409.645402][T10181] bond1 (unregistering): Released all slaves [ 410.435170][T10193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.909'. [ 411.404457][T10205] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 411.404618][T10205] CPU: 3 UID: 0 PID: 10205 Comm: syz.0.911 Not tainted syzkaller #0 PREEMPT(full) [ 411.404658][T10205] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 411.404673][T10205] Call Trace: [ 411.404697][T10205] [ 411.404705][T10205] dump_stack_lvl+0x100/0x190 [ 411.404739][T10205] sysfs_warn_dup.cold+0x1c/0x28 [ 411.404766][T10205] sysfs_create_dir_ns+0x24b/0x2b0 [ 411.404786][T10205] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 411.404804][T10205] ? find_held_lock+0x2b/0x80 [ 411.404823][T10205] ? kobject_add_internal+0x25f/0x930 [ 411.404845][T10205] ? kobject_add_internal+0x25f/0x930 [ 411.404870][T10205] ? class_dir_child_ns_type+0xd/0x60 [ 411.404900][T10205] kobject_add_internal+0x2c8/0x930 [ 411.404926][T10205] kobject_add+0x16a/0x1e0 [ 411.404946][T10205] ? __pfx_kobject_add+0x10/0x10 [ 411.404968][T10205] ? preempt_schedule_thunk+0x16/0x40 [ 411.404990][T10205] ? kobject_put+0xb9/0x640 [ 411.405015][T10205] device_add+0x294/0x1970 [ 411.405035][T10205] ? lockdep_init_map_type+0x5c/0x250 [ 411.405060][T10205] ? __pfx_device_add+0x10/0x10 [ 411.405079][T10205] ? lockdep_init_map_type+0x5c/0x250 [ 411.405105][T10205] ? __init_waitqueue_head+0xca/0x150 [ 411.405137][T10205] tty_register_device_attr+0x388/0x7f0 [ 411.405166][T10205] ? lockdep_init_map_type+0x5c/0x250 [ 411.405190][T10205] ? __pfx_tty_register_device_attr+0x10/0x10 [ 411.405221][T10205] ? tty_port_init+0x156/0x1c0 [ 411.405251][T10205] gsm_activate_mux+0x155/0x2a0 [ 411.405279][T10205] gsmld_ioctl+0xbbc/0x15c0 [ 411.405304][T10205] ? __pfx_gsmld_ioctl+0x10/0x10 [ 411.405328][T10205] ? preempt_schedule_irq+0x79/0x90 [ 411.405366][T10205] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 411.405395][T10205] ? __pfx_gsmld_ioctl+0x10/0x10 [ 411.405413][T10205] tty_compat_ioctl+0x396/0x420 [ 411.405441][T10205] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 411.405468][T10205] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 411.405497][T10205] __do_fast_syscall_32+0x13a/0x8b0 [ 411.405518][T10205] do_fast_syscall_32+0x32/0x70 [ 411.405536][T10205] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 411.405559][T10205] RIP: 0023:0xf708efec [ 411.405582][T10205] Code: Unable to access opcode bytes at 0xf708efc2. [ 411.405591][T10205] RSP: 002b:00000000f543b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 411.405611][T10205] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000404c4701 [ 411.405624][T10205] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 411.405635][T10205] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 411.405646][T10205] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 411.405656][T10205] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 411.405681][T10205] [ 411.406482][T10205] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 411.415648][T10204] block nbd3: not configured, cannot reconfigure [ 413.469518][ T43] audit: type=1326 audit(1787753869.883:16475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10214 comm="syz.3.914" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 413.469615][ T43] audit: type=1326 audit(1787753869.883:16476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10214 comm="syz.3.914" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 415.636244][T10230] bond9 (unregistering): Released all slaves [ 417.562691][ T8662] lg-g15 0003:046D:0A07.001D: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 417.564093][ T8662] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.001D/input/input44 [ 417.658004][T10249] fuse: Bad value for 'fd' [ 417.772367][T10252] netlink: 'syz.3.923': attribute type 1 has an invalid length. [ 418.103770][T10257] bond9 (unregistering): Released all slaves [ 418.114244][T10265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.924'. [ 418.731675][T10277] netlink: 'syz.3.931': attribute type 1 has an invalid length. [ 418.773232][T10277] 8021q: adding VLAN 0 to HW filter on device bond9 [ 418.854782][T10277] bond12 (unregistering): Released all slaves [ 419.275551][ T43] audit: type=1326 audit(1787753875.683:16477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10281 comm="syz.1.932" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97fec code=0x7ffc0000 [ 419.275787][ T43] audit: type=1326 audit(1787753875.683:16478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10281 comm="syz.1.932" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97fec code=0x7ffc0000 [ 419.288215][ T43] audit: type=1326 audit(1787753875.703:16479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10281 comm="syz.1.932" exe="/syz-executor" sig=0 arch=40000003 syscall=61 compat=1 ip=0xf7f97fec code=0x7ffc0000 [ 419.288523][ T43] audit: type=1326 audit(1787753875.703:16480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10281 comm="syz.1.932" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97fec code=0x7ffc0000 [ 419.288950][ T43] audit: type=1326 audit(1787753875.703:16481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10281 comm="syz.1.932" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97fec code=0x7ffc0000 [ 419.476987][T10293] netlink: 'syz.3.937': attribute type 1 has an invalid length. [ 419.549401][T10293] bond12 (unregistering): Released all slaves [ 420.018012][ T8662] lg-g15 0003:046D:0A07.001E: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 420.020292][ T8662] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.001E/input/input45 [ 420.159413][T10311] fuse: Bad value for 'fd' [ 421.177280][T10317] netlink: 'syz.3.942': attribute type 1 has an invalid length. [ 421.297808][T10317] 8021q: adding VLAN 0 to HW filter on device bond12 [ 421.383999][T10317] bond13 (unregistering): Released all slaves [ 421.737716][T10331] netlink: 'syz.3.947': attribute type 1 has an invalid length. [ 421.969792][T10331] bond13 (unregistering): Released all slaves [ 422.692240][T10351] netlink: 'syz.3.955': attribute type 1 has an invalid length. [ 422.739460][ T64] Bluetooth: hci0: unexpected event for opcode 0x1001 [ 422.810768][T10351] 8021q: adding VLAN 0 to HW filter on device bond13 [ 422.954488][ T8662] lg-g15 0003:046D:0A07.001F: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 422.955794][ T8662] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.001F/input/input46 [ 423.335505][T10355] bond14 (unregistering): Released all slaves [ 423.372916][T10361] fuse: Bad value for 'fd' [ 424.222716][T10373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.962'. [ 426.788739][ T64] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 426.788834][ T64] Bluetooth: hci0: Injecting HCI hardware error event [ 426.793223][ T64] Bluetooth: hci0: hardware error 0x00 [ 427.565461][T10421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.972'. [ 428.118318][T10431] netlink: 'syz.3.977': attribute type 1 has an invalid length. [ 428.850805][ T64] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 428.995860][T10431] bond14 (unregistering): Released all slaves [ 429.636149][T10442] ntfs3(nullb0): Primary boot signature is not NTFS. [ 429.646910][T10442] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 429.758658][T10438] bond14 (unregistering): Released all slaves [ 429.891808][ T8662] lg-g15 0003:046D:0A07.0020: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 429.894421][ T8662] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0020/input/input47 [ 430.069056][T10457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.982'. [ 430.148798][T10448] fuse: Bad value for 'fd' [ 430.981584][T10474] tipc: Enabling of bearer rejected, failed to enable media [ 431.225124][T10484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.993'. [ 431.501977][T10490] ntfs3(nullb0): Primary boot signature is not NTFS. [ 431.518645][T10490] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 432.390866][T10507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1002'. [ 433.062800][T10514] lo speed is unknown, defaulting to 1000 [ 433.325013][ T42] lg-g15 0003:046D:0A07.0021: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 433.326075][ T42] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0021/input/input48 [ 433.438285][T10531] ntfs3(nullb0): Primary boot signature is not NTFS. [ 433.453944][T10532] fuse: Bad value for 'fd' [ 433.459309][T10531] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 433.557353][T10514] lo speed is unknown, defaulting to 1000 [ 434.340748][T10540] bond14 (unregistering): Released all slaves [ 435.113223][T10557] netlink: 'syz.2.1018': attribute type 1 has an invalid length. [ 435.139275][T10561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1019'. [ 435.184304][T10557] 8021q: adding VLAN 0 to HW filter on device bond5 [ 435.228531][T10563] 8021q: adding VLAN 0 to HW filter on device bond5 [ 435.228935][T10563] bond5: (slave gre2): The slave device specified does not support setting the MAC address [ 435.266891][T10563] bond5: (slave gre2): Error -95 calling set_mac_address [ 435.287752][T10566] ntfs3(nullb0): Primary boot signature is not NTFS. [ 435.300773][T10566] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 435.418980][T10571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1022'. [ 435.479738][T10570] 8021q: adding VLAN 0 to HW filter on device bond10 [ 435.541170][T10570] bond5: (slave bond10): Enslaving as an active interface with a down link [ 435.602650][T10573] bond5 (unregistering): (slave bond10): Releasing active interface [ 435.649246][T10573] bond5 (unregistering): Released all slaves [ 436.877510][T10595] netlink: 'syz.1.1031': attribute type 1 has an invalid length. [ 436.965675][T10595] 8021q: adding VLAN 0 to HW filter on device bond1 [ 437.290906][T10599] bond8 (unregistering): Released all slaves [ 438.081318][T10637] netlink: 'syz.0.1046': attribute type 1 has an invalid length. [ 438.100080][T10637] 8021q: adding VLAN 0 to HW filter on device bond5 [ 438.140567][T10635] ntfs3(nullb0): Primary boot signature is not NTFS. [ 438.140853][T10635] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 438.411509][T10637] bond6 (unregistering): Released all slaves [ 439.170755][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 439.350326][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 439.354079][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 439.357291][ T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 439.374563][ T9] usb 6-1: string descriptor 0 read error: -22 [ 439.374668][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.418653][ T9] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 439.424783][ T9] dw2102: su3000_power_ctrl: 1, initialized 0 [ 439.428424][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 439.501949][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.502477][ T1431] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 439.531845][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 439.587216][ T9] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 439.606777][ T9] usb 6-1: media controller created [ 439.612195][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 439.612215][ T9] dw2102: i2c transfer failed. [ 439.612247][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 439.612260][ T9] dw2102: i2c transfer failed. [ 439.612270][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 439.612279][ T9] dw2102: i2c transfer failed. [ 439.612288][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 439.612300][ T9] dw2102: i2c transfer failed. [ 439.612309][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 439.612319][ T9] dw2102: i2c transfer failed. [ 439.612330][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 439.612340][ T9] dw2102: i2c transfer failed. [ 439.612346][ T9] dvb-usb: MAC address: 02:02:02:02:02:02 [ 439.654856][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 439.713666][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 439.713685][ T9] dw2102: command 0x0e transfer failed. [ 439.713692][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 439.713701][ T9] dw2102: command 0x0e transfer failed. [ 440.033551][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 440.050807][ T9] dw2102: command 0x0e transfer failed. [ 440.050897][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 440.050929][ T9] dw2102: command 0x0e transfer failed. [ 440.050955][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 440.050985][ T9] dw2102: command 0x51 transfer failed. [ 440.066431][T10653] dvb-usb: bulk message failed: -22 (31/0) [ 440.066454][T10653] dw2102: i2c transfer failed. [ 440.159023][ T9] DVB: Unable to find symbol ds3000_attach() [ 440.159110][ T9] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 440.292046][ T9] rc_core: IR keymap rc-su3000 not found [ 440.294200][ T9] Registered IR keymap rc-empty [ 440.306077][ T9] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 440.326365][ T9] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input49 [ 440.412426][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 440.415061][ T9] dw2102: su3000_power_ctrl: 0, initialized 1 [ 440.418027][ T9] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 440.431889][T10670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1055'. [ 440.467580][ T9] usb 6-1: USB disconnect, device number 13 [ 440.804078][T10675] netlink: 'syz.3.1057': attribute type 1 has an invalid length. [ 440.818119][ T9] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 440.928075][T10675] 8021q: adding VLAN 0 to HW filter on device bond14 [ 440.994617][T10675] 8021q: adding VLAN 0 to HW filter on device bond15 [ 441.004795][T10675] bond14: (slave bond15): Enslaving as an active interface with a down link [ 441.015317][T10675] bond14 (unregistering): (slave bond15): Releasing active interface [ 441.021414][T10675] bond14 (unregistering): Released all slaves [ 441.227004][ T43] audit: type=1800 audit(1787753897.644:16482): pid=10687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1059" name="max_speed" dev="configfs" ino=26313 res=0 errno=0 [ 442.189223][T10708] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 442.249311][T10710] netlink: 'syz.0.1068': attribute type 1 has an invalid length. [ 442.285972][T10710] bond6 (unregistering): Released all slaves [ 442.478871][T10716] ±ÿ†Ý'É|d: renamed from lo (while UP) [ 442.782001][T10724] netlink: 'syz.1.1074': attribute type 1 has an invalid length. [ 442.817409][T10724] 8021q: adding VLAN 0 to HW filter on device bond8 [ 442.917515][T10724] bond9 (unregistering): Released all slaves [ 443.127322][T10733] netlink: 'syz.2.1078': attribute type 1 has an invalid length. [ 443.166848][T10733] 8021q: adding VLAN 0 to HW filter on device bond5 [ 443.243961][T10733] bond11 (unregistering): Released all slaves [ 444.691874][ T43] audit: type=1800 audit(1787753901.104:16483): pid=10765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1087" name="zoned" dev="configfs" ino=28910 res=0 errno=0 [ 444.797210][T10767] netlink: 'syz.0.1088': attribute type 1 has an invalid length. [ 444.883291][T10767] 8021q: adding VLAN 0 to HW filter on device bond6 [ 445.177953][T10769] bond7 (unregistering): Released all slaves [ 445.409493][T10772] ntfs3(nullb0): Primary boot signature is not NTFS. [ 445.410737][T10772] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 446.165019][T10781] bridge: RTM_NEWNEIGH with invalid state 0x28 [ 446.382124][T10785] ntfs3(nullb0): Primary boot signature is not NTFS. [ 446.399580][T10785] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 446.500521][T10788] netlink: 'syz.3.1095': attribute type 12 has an invalid length. [ 446.500611][T10788] netlink: 'syz.3.1095': attribute type 29 has an invalid length. [ 446.500667][T10788] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1095'. [ 446.500705][T10788] netlink: 'syz.3.1095': attribute type 3 has an invalid length. [ 446.500718][T10788] netlink: 'syz.3.1095': attribute type 2 has an invalid length. [ 446.500729][T10788] netlink: 35 bytes leftover after parsing attributes in process `syz.3.1095'. [ 446.716807][T10795] netlink: 'syz.0.1098': attribute type 1 has an invalid length. [ 446.866791][T10795] 8021q: adding VLAN 0 to HW filter on device bond7 [ 447.001890][T10795] bond8 (unregistering): Released all slaves [ 448.780382][ T69] wiimote 0005:057E:0306.0022: hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 448.786976][ T5916] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 448.821037][T10823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.821358][T10823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.842516][ T69] wiimote 0005:057E:0306.0022: New device registered [ 448.960470][T10822] wiimote 0005:057E:0306.0022: Device removed [ 448.996669][ T5916] usb 7-1: unable to get BOS descriptor or descriptor too short [ 448.996742][ T5916] usb 7-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 448.997672][ T5916] usb 7-1: config 129 has an invalid interface number: 135 but max is 0 [ 448.997707][ T5916] usb 7-1: config 129 has an invalid interface number: 5 but max is 0 [ 448.997737][ T5916] usb 7-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 448.997768][ T5916] usb 7-1: config 129 has no interface number 0 [ 448.997796][ T5916] usb 7-1: config 129 has no interface number 1 [ 448.997848][ T5916] usb 7-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 448.997882][ T5916] usb 7-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 448.997920][ T5916] usb 7-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 448.997952][ T5916] usb 7-1: config 129 interface 135 has no altsetting 0 [ 448.998017][ T5916] usb 7-1: config 129 interface 5 has no altsetting 0 [ 449.001771][ T5916] usb 7-1: string descriptor 0 read error: -22 [ 449.001884][ T5916] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.106526][T10828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1104'. [ 449.177956][T10825] fido_id[10825]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 449.750269][ T5916] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 449.750375][ T5916] usb 7-1: MIDIStreaming interface descriptor not found [ 449.801709][T10834] netlink: 'syz.1.1108': attribute type 1 has an invalid length. [ 449.963894][ T5829] wiimote 0005:057E:0306.0022: detected device: Nintendo Wii Remote (Gen 1) [ 450.244620][T10834] 8021q: adding VLAN 0 to HW filter on device bond9 [ 450.381400][ T5916] usb 7-1: USB disconnect, device number 10 [ 451.063440][ T5829] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0022/input/input51 [ 451.110956][ T5829] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0022/input/input52 [ 451.131086][T10834] bond10 (unregistering): Released all slaves [ 451.229010][ T5829] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0022/input/input50 [ 452.483160][T10858] sch_tbf: burst 240 is lower than device lo mtu (1550) ! [ 452.550251][T10860] ntfs3(nullb0): Primary boot signature is not NTFS. [ 452.562837][T10860] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 453.623871][T10871] ntfs3(nullb0): Primary boot signature is not NTFS. [ 453.624661][T10871] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 456.218873][T10892] ntfs3(nullb0): Primary boot signature is not NTFS. [ 456.306863][T10892] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 457.926789][T10910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1131'. [ 457.926844][T10910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1131'. [ 458.858478][T10932] bond8 (unregistering): Released all slaves [ 459.631531][T10949] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 460.360766][T10961] bond10 (unregistering): Released all slaves [ 466.070210][T11045] block nbd0: Receive control failed (result -32) [ 466.664972][ T69] hid_parser_main: 12 callbacks suppressed [ 466.665053][ T69] hid-generic 0000:0000:0001.0023: unknown main item tag 0x0 [ 466.665087][ T69] hid-generic 0000:0000:0001.0023: unknown main item tag 0x0 [ 466.665118][ T69] hid-generic 0000:0000:0001.0023: unknown main item tag 0x0 [ 466.665149][ T69] hid-generic 0000:0000:0001.0023: unknown main item tag 0x0 [ 466.665180][ T69] hid-generic 0000:0000:0001.0023: unknown main item tag 0x0 [ 466.665212][ T69] hid-generic 0000:0000:0001.0023: unknown main item tag 0x0 [ 466.665243][ T69] hid-generic 0000:0000:0001.0023: unknown main item tag 0x0 [ 466.665274][ T69] hid-generic 0000:0000:0001.0023: unknown main item tag 0x0 [ 466.755957][ T69] hid-generic 0000:0000:0001.0023: hidraw1: HID v0.10 Device [syz0] on syz1 [ 467.024039][T11060] netlink: 'syz.3.1184': attribute type 1 has an invalid length. [ 467.180857][T11060] bond14 (unregistering): Released all slaves [ 467.203170][T11064] ½ [ 467.277852][T11055] fido_id[11055]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 467.607234][ T43] audit: type=1800 audit(1787753924.006:16484): pid=11068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1186" name="size" dev="configfs" ino=29867 res=0 errno=0 [ 468.490824][ T43] audit: type=1800 audit(1787753924.886:16485): pid=11084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1192" name="MaxPower" dev="configfs" ino=29886 res=0 errno=0 [ 469.909959][T11104] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.1769104431.1918985007), cmd(14) [ 470.780820][T11117] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 472.633401][T11122] ntfs3(nullb0): Primary boot signature is not NTFS. [ 472.633841][T11122] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 472.945610][T11126] rnbd_client L127: Can't parse path i: -93 [ 476.318453][T11170] ntfs3(nullb0): Primary boot signature is not NTFS. [ 476.330815][T11170] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 476.570105][T11174] ntfs3(nullb0): Primary boot signature is not NTFS. [ 476.570334][T11174] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 476.838312][T11175] bond11 (unregistering): Released all slaves [ 479.042899][T11193] netlink: 4560 bytes leftover after parsing attributes in process `syz.0.1228'. [ 479.042960][T11193] netlink: 4560 bytes leftover after parsing attributes in process `syz.0.1228'. [ 479.184092][T11195] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 479.693853][T10829] rtrs_client L1777: : Resolving route failed, err: -ENODEV [ 480.300305][T11195] rtrs_client L2636: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 481.992981][T11209] loop8: detected capacity change from 0 to 7 [ 482.029939][T11209] Dev loop8: unable to read RDB block 7 [ 482.030006][T11209] loop8: unable to read partition table [ 482.030133][T11209] loop8: partition table beyond EOD, truncated [ 482.030181][T11209] loop_reread_partitions: partition scan of loop8 (þ被xü^>æ) failed (rc=-5) [ 484.887625][ T5829] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 484.910956][ T5744] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 484.929240][ T5744] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 484.939962][ T5744] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 484.941346][ T5744] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 484.942801][ T5744] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 485.037729][ T5829] usb 7-1: Using ep0 maxpacket: 32 [ 485.080128][ T5829] usb 7-1: unable to get BOS descriptor or descriptor too short [ 485.080235][ T5829] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 485.120020][ T5829] usb 7-1: config 8 has an invalid interface number: 188 but max is 0 [ 485.120120][ T5829] usb 7-1: config 8 has no interface number 0 [ 485.120161][ T5829] usb 7-1: config 8 interface 188 has no altsetting 0 [ 485.311962][ T5829] usb 7-1: string descriptor 0 read error: -22 [ 485.312110][ T5829] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.523593][ T5829] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 485.523692][ T5829] dw2102: su3000_power_ctrl: 1, initialized 0 [ 485.528126][ T5829] dvb-usb: bulk message failed: -22 (2/0) [ 485.563740][ T5829] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 485.578246][ T5829] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 485.578337][ T5829] usb 7-1: media controller created [ 485.578387][ T5829] dvb-usb: bulk message failed: -22 (6/0) [ 485.578417][ T5829] dw2102: i2c transfer failed. [ 485.578444][ T5829] dvb-usb: bulk message failed: -22 (6/0) [ 485.578469][ T5829] dw2102: i2c transfer failed. [ 485.578506][ T5829] dvb-usb: bulk message failed: -22 (6/0) [ 485.578531][ T5829] dw2102: i2c transfer failed. [ 485.578557][ T5829] dvb-usb: bulk message failed: -22 (6/0) [ 485.578585][ T5829] dw2102: i2c transfer failed. [ 485.578619][ T5829] dvb-usb: bulk message failed: -22 (6/0) [ 485.578645][ T5829] dw2102: i2c transfer failed. [ 485.578671][ T5829] dvb-usb: bulk message failed: -22 (6/0) [ 485.578697][ T5829] dw2102: i2c transfer failed. [ 485.578720][ T5829] dvb-usb: MAC address: 02:02:02:02:02:02 [ 485.687969][ T5829] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 485.747124][ T5829] dvb-usb: bulk message failed: -22 (3/0) [ 485.747187][ T5829] dw2102: command 0x0e transfer failed. [ 485.747276][ T5829] dvb-usb: bulk message failed: -22 (3/0) [ 485.781643][ T5829] dw2102: command 0x0e transfer failed. [ 486.163894][ T5829] dvb-usb: bulk message failed: -22 (3/0) [ 486.163943][ T5829] dw2102: command 0x0e transfer failed. [ 486.163979][ T5829] dvb-usb: bulk message failed: -22 (3/0) [ 486.164006][ T5829] dw2102: command 0x0e transfer failed. [ 486.164029][ T5829] dvb-usb: bulk message failed: -22 (1/0) [ 486.164055][ T5829] dw2102: command 0x51 transfer failed. [ 486.166574][T11230] dvb-usb: bulk message failed: -22 (5/0) [ 486.166593][T11230] dw2102: i2c transfer failed. [ 486.166634][T11230] retu-mfd 2-0002: Tahvo v0.1 found [ 486.166662][T11230] dvb-usb: bulk message failed: -22 (6/0) [ 486.166674][T11230] dw2102: i2c transfer failed. [ 486.330288][T11230] dvb-usb: bulk message failed: -22 (5/0) [ 486.374517][T11230] dw2102: i2c transfer failed. [ 486.591428][ T5829] DVB: Unable to find symbol ds3000_attach() [ 486.591471][ T5829] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 486.747535][T11230] genirq: Flags mismatch irq 0. 00002000 (TAHVO) vs. 00215a00 (timer) [ 486.749661][T11230] retu-mfd 2-0002: Failed to request IRQ 0 for TAHVO: -16 [ 486.960056][T11230] retu-mfd 2-0002: probe with driver retu-mfd failed with error -16 [ 486.960349][T11230] i2c i2c-2: new_device: Instantiated device tahvo at 0x02 [ 486.987497][ T5829] rc_core: IR keymap rc-su3000 not found [ 486.987577][ T5829] Registered IR keymap rc-empty [ 486.988467][ T5829] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 486.992463][ T5829] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input53 [ 487.016974][ T5829] dvb-usb: schedule remote query interval to 150 msecs. [ 487.016999][ T5829] dw2102: su3000_power_ctrl: 0, initialized 1 [ 487.017012][ T5829] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 487.023372][ T5829] usb 7-1: USB disconnect, device number 11 [ 487.185216][ T64] Bluetooth: hci4: command tx timeout [ 488.262200][ T5829] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 488.371761][T11234] lo speed is unknown, defaulting to 1000 [ 488.604113][T11260] netlink: 'syz.3.1249': attribute type 4 has an invalid length. [ 489.151536][T11234] lo speed is unknown, defaulting to 1000 [ 489.262891][ T64] Bluetooth: hci4: command tx timeout [ 489.443337][T11266] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 491.337337][ T64] Bluetooth: hci4: command tx timeout [ 492.658888][T11234] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.658992][T11234] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.659126][T11234] bridge_slave_0: entered allmulticast mode [ 492.675167][T11234] bridge_slave_0: entered promiscuous mode [ 493.421734][ T64] Bluetooth: hci4: command tx timeout [ 493.694018][T11234] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.694216][T11234] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.694389][T11234] bridge_slave_1: entered allmulticast mode [ 493.695903][T11234] bridge_slave_1: entered promiscuous mode [ 493.913640][T11234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.929808][T11234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.228949][T11234] team0: Port device team_slave_0 added [ 494.278737][T11234] team0: Port device team_slave_1 added [ 494.460897][T11234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.468594][T11234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.468694][T11234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.470387][T11234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.470404][T11234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.470425][T11234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.836772][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 494.890903][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 495.233199][T11234] hsr_slave_0: entered promiscuous mode [ 495.243661][T11234] hsr_slave_1: entered promiscuous mode [ 495.249351][T11234] debugfs: 'hsr0' already exists in 'hsr' [ 495.301718][T11234] Cannot create hsr debugfs directory [ 495.374820][T11325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.375290][T11325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.124234][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 496.134133][T11337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.147489][T11337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.159563][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 496.872076][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 496.872170][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 497.444830][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 497.454975][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 497.905057][T11234] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 498.050263][T11234] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 498.051017][T11234] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 498.078490][T11234] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 498.079225][T11234] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 498.203673][T11234] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 498.282207][T11361] tun0: tun_chr_ioctl cmd 1074025675 [ 498.282307][T11361] tun0: persist enabled [ 498.283101][T11362] tun0: tun_chr_ioctl cmd 1074025675 [ 498.283145][T11362] tun0: persist enabled [ 498.283243][T11234] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 498.306696][T11234] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 499.145145][T11234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.208918][ T7174] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 499.398389][ T7174] usb 7-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 499.439665][ T7174] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 499.448078][ T7174] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 499.472754][ T7174] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.490895][ T7174] usb 7-1: Product: syz [ 499.492826][ T7174] usb 7-1: Manufacturer: syz [ 499.494984][ T7174] usb 7-1: SerialNumber: syz [ 499.538920][T11234] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.758594][ T7174] usblp 7-1:1.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 499.842284][ T12] bridge_slave_1: left allmulticast mode [ 499.842447][ T12] bridge_slave_1: left promiscuous mode [ 499.852794][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.901476][ T12] bridge_slave_0: left allmulticast mode [ 499.901533][ T12] bridge_slave_0: left promiscuous mode [ 499.901727][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.152124][ T7174] usb 7-1: USB disconnect, device number 12 [ 500.164467][ T7174] usblp0: removed [ 500.938989][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.939427][ T1431] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 501.336464][T11398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1286'. [ 501.555095][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.662870][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.747996][ T12] bond0 (unregistering): Released all slaves [ 501.775150][ T12] bond2 (unregistering): Released all slaves [ 501.844336][ T12] bond3 (unregistering): Released all slaves [ 501.903199][ T12] bond4 (unregistering): Released all slaves [ 501.940109][ T12] bond5 (unregistering): Released all slaves [ 501.960531][ T12] bond6 (unregistering): Released all slaves [ 501.982248][ T12] bond7 (unregistering): Released all slaves [ 501.993344][ T12] bond1 (unregistering): Released all slaves [ 502.008513][ T12] bond8 (unregistering): Released all slaves [ 502.034431][ T12] bond9 (unregistering): Released all slaves [ 502.081604][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.081746][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.139630][ T5451] 8021q: adding VLAN 0 to HW filter on device eth1 [ 502.355256][ T7494] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.355383][ T7494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.661694][ T12] : left promiscuous mode [ 503.122670][ T5451] 8021q: adding VLAN 0 to HW filter on device eth2 [ 504.020028][ T5451] 8021q: adding VLAN 0 to HW filter on device eth3 [ 504.023905][T11445] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1294'. [ 504.080601][T11445] bond8 (unregistering): Released all slaves [ 504.132666][T11234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.639159][ T5451] 8021q: adding VLAN 0 to HW filter on device eth4 [ 504.756036][T11234] veth0_vlan: entered promiscuous mode [ 504.769372][T11234] veth1_vlan: entered promiscuous mode [ 504.887495][T11234] veth0_macvtap: entered promiscuous mode [ 504.892010][T11234] veth1_macvtap: entered promiscuous mode [ 504.930508][T11234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 504.938152][T11234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.983506][T11472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1296'. [ 505.406261][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.475553][ T5782] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.552522][ T64] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 505.552632][ T64] CPU: 2 UID: 0 PID: 64 Comm: kworker/u34:0 Not tainted syzkaller #0 PREEMPT(full) [ 505.552669][ T64] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 505.552683][ T64] Workqueue: hci1 hci_rx_work [ 505.552712][ T64] Call Trace: [ 505.552719][ T64] [ 505.552727][ T64] dump_stack_lvl+0x100/0x190 [ 505.552756][ T64] sysfs_warn_dup.cold+0x1c/0x28 [ 505.552784][ T64] sysfs_create_dir_ns+0x24b/0x2b0 [ 505.552802][ T64] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 505.552818][ T64] ? find_held_lock+0x2b/0x80 [ 505.552839][ T64] ? kobject_add_internal+0x25f/0x930 [ 505.552859][ T64] ? kobject_add_internal+0x25f/0x930 [ 505.552882][ T64] ? do_raw_spin_unlock+0x145/0x1e0 [ 505.552909][ T64] kobject_add_internal+0x2c8/0x930 [ 505.552934][ T64] kobject_add+0x16a/0x1e0 [ 505.552953][ T64] ? __pfx_kobject_add+0x10/0x10 [ 505.552971][ T64] ? class_to_subsys+0x10f/0x150 [ 505.552995][ T64] ? kobject_put+0xb9/0x640 [ 505.553012][ T64] ? _raw_spin_unlock+0x28/0x50 [ 505.553040][ T64] device_add+0x294/0x1970 [ 505.553058][ T64] ? __pfx_dev_set_name+0x10/0x10 [ 505.553076][ T64] ? __pfx_device_add+0x10/0x10 [ 505.553093][ T64] ? mgmt_send_event_skb+0x2fb/0x460 [ 505.553121][ T64] hci_conn_add_sysfs+0x1a3/0x260 [ 505.553160][ T64] le_conn_complete_evt+0x121b/0x2120 [ 505.553189][ T64] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 505.553210][ T64] ? hci_event_packet+0x186/0xcd0 [ 505.553236][ T64] hci_le_conn_complete_evt+0x23c/0x3a0 [ 505.553259][ T64] ? skb_pull_data+0x15f/0x1e0 [ 505.553283][ T64] hci_le_meta_evt+0x34a/0x5f0 [ 505.553305][ T64] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 505.553331][ T64] hci_event_packet+0x51c/0xcd0 [ 505.553354][ T64] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 505.553379][ T64] ? __pfx_hci_event_packet+0x10/0x10 [ 505.553405][ T64] ? lockdep_hardirqs_on+0x7d/0x110 [ 505.553434][ T64] hci_rx_work+0x451/0xfc0 [ 505.553461][ T64] process_one_work+0xac7/0x1b10 [ 505.553494][ T64] ? __pfx_process_one_work+0x10/0x10 [ 505.553524][ T64] ? __pfx_hci_rx_work+0x10/0x10 [ 505.553548][ T64] worker_thread+0x5ef/0xe50 [ 505.553578][ T64] ? kthread+0x13a/0x450 [ 505.553594][ T64] ? __pfx_worker_thread+0x10/0x10 [ 505.553613][ T64] kthread+0x373/0x450 [ 505.553630][ T64] ? __pfx_kthread+0x10/0x10 [ 505.553649][ T64] ret_from_fork+0x730/0xd60 [ 505.553676][ T64] ? __pfx_ret_from_fork+0x10/0x10 [ 505.553703][ T64] ? __switch_to+0x800/0x10f0 [ 505.553724][ T64] ? __pfx_kthread+0x10/0x10 [ 505.553744][ T64] ret_from_fork_asm+0x1a/0x30 [ 505.553772][ T64] [ 505.600921][ T5782] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.600969][ T5782] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.633633][ T64] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 505.633676][ T64] Bluetooth: hci1: failed to register connection device [ 506.443679][ T1288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.446359][ T1288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.670711][ T7494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.670799][ T7494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.269895][T11515] loop5: detected capacity change from 0 to 7 [ 507.362889][T11515] Dev loop5: unable to read RDB block 7 [ 507.362955][T11515] loop5: AHDI p1 p3 p4 [ 507.362999][T11515] loop5: partition table partially beyond EOD, truncated [ 507.363042][T11515] loop5: p1 size 100663296 extends beyond EOD, truncated [ 507.444291][T11515] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 507.463175][ T12] hsr_slave_1: left promiscuous mode [ 507.559501][ T12] veth1_macvtap: left promiscuous mode [ 507.559694][ T12] veth0_macvtap: left promiscuous mode [ 507.559971][ T12] veth1_vlan: left promiscuous mode [ 507.560155][ T12] veth0_vlan: left promiscuous mode [ 507.721692][T11516] Dev loop5: unable to read RDB block 7 [ 507.721767][T11516] loop5: AHDI p1 p3 p4 [ 507.721812][T11516] loop5: partition table partially beyond EOD, truncated [ 507.721977][T11516] loop5: p1 size 100663296 extends beyond EOD, truncated [ 507.723306][T11516] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 508.023109][T10225] udevd[10225]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 508.023136][T10234] udevd[10234]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 508.335856][ T12] team0 (unregistering): Port device team_slave_1 removed [ 508.356076][ T12] team0 (unregistering): Port device team_slave_0 removed [ 508.705977][T11531] input: syz1 as /devices/virtual/input/input54 [ 508.877270][ T5744] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 509.015824][T11536] syzkaller1: entered promiscuous mode [ 509.015953][T11536] syzkaller1: entered allmulticast mode [ 509.079502][ T5825] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 509.167809][T11538] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1318'. [ 509.210692][T11541] LUN: removable file: (no medium) [ 509.314858][ T5825] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 509.318352][ T5825] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 509.318422][ T5825] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 509.318469][ T5825] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.518420][T11544] bond14 (unregistering): Released all slaves [ 509.596876][ T5825] usb 7-1: usb_control_msg returned -32 [ 509.596976][ T5825] usbtmc 7-1:16.0: can't read capabilities [ 510.118567][ T12] IPVS: stop unused estimator thread 0... [ 511.337792][T11579] 8021q: adding VLAN 0 to HW filter on device bond8 [ 511.366957][ T5925] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 511.406882][T11582] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 511.437007][T11579] 8021q: adding VLAN 0 to HW filter on device bond9 [ 511.438715][T11579] bond8: (slave bond9): Enslaving as an active interface with an up link [ 511.543966][T11579] bond8 (unregistering): (slave bond9): Releasing backup interface [ 511.556953][ T5925] usb 9-1: New USB device found, idVendor=7104, idProduct=2202, bcdDevice= 0.40 [ 511.558450][ T5925] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 206, changing to 4 [ 511.561086][ T5925] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.561109][ T5925] usb 9-1: Product: syz [ 511.561122][ T5925] usb 9-1: Manufacturer: syz [ 511.561134][ T5925] usb 9-1: SerialNumber: syz [ 511.591971][T11579] bond8 (unregistering): Released all slaves [ 511.838754][ T5925] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 511.839713][ T5925] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 511.921272][ T69] usb 7-1: USB disconnect, device number 13 [ 511.944552][ T5925] usb 9-1: USB disconnect, device number 2 [ 512.854147][T11604] jffs2: notice: (11604) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 512.976507][T11608] 8021q: adding VLAN 0 to HW filter on device bond8 [ 513.047336][T11608] 8021q: adding VLAN 0 to HW filter on device bond10 [ 513.048960][T11608] bond8: (slave bond10): Enslaving as an active interface with an up link [ 513.089390][T11610] bond8 (unregistering): (slave bond10): Releasing backup interface [ 513.101616][T11610] bond8 (unregistering): Released all slaves [ 513.188125][ T10] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 513.366183][ T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 513.421022][ T10] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 513.423217][ T10] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 513.423245][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 513.423262][ T10] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 513.423292][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.431006][T11605] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 513.433204][ T10] cyberjack 7-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 513.441998][ T10] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 513.550622][ T9] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 513.552106][ T9] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 513.552147][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.552166][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.552182][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 513.552269][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.556361][ T9] usb 9-1: config 0 descriptor?? [ 513.682391][ T5925] usb 7-1: USB disconnect, device number 14 [ 513.721476][ T5925] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 513.721957][ T5925] cyberjack 7-1:1.0: device disconnected [ 514.047576][ T9] plantronics 0003:047F:FFFF.0024: reserved main item tag 0xd [ 514.277097][ T9] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 514.336929][ T9] usb 9-1: USB disconnect, device number 3 [ 514.406819][T11620] fido_id[11620]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb9/9-1/report_descriptor': No such file or directory [ 514.912476][T11627] Bluetooth: ISO socket layer initialized [ 515.128831][T11633] VFS: Can't find a romfs filesystem on dev mtdblock0. [ 515.128831][T11633] [ 515.255887][ T30] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 515.443252][ T30] usb 7-1: Using ep0 maxpacket: 8 [ 515.456730][ T30] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 515.457877][ T30] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 515.457919][ T30] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 515.457960][ T30] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 515.457999][ T30] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 515.458041][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.722039][ T30] usb 7-1: GET_CAPABILITIES returned 0 [ 515.722133][ T30] usbtmc 7-1:16.0: can't read capabilities [ 515.827554][T11648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1352'. [ 515.938695][ C0] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 515.951598][ T10] usb 7-1: USB disconnect, device number 15 [ 517.163072][T11679] 8021q: adding VLAN 0 to HW filter on device bond14 [ 517.362778][T11679] 8021q: adding VLAN 0 to HW filter on device bond16 [ 517.367001][T11679] bond14: (slave bond16): Enslaving as an active interface with an up link [ 517.432957][T11700] gadgetfs: bound to dummy_udc driver [ 517.717776][T11682] bond14 (unregistering): (slave bond16): Releasing backup interface [ 517.733253][T11682] bond14 (unregistering): Released all slaves [ 517.905377][ T5744] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 517.905453][ T5744] CPU: 1 UID: 0 PID: 5744 Comm: kworker/u34:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 517.905484][ T5744] Tainted: [L]=SOFTLOCKUP [ 517.905496][ T5744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 517.905509][ T5744] Workqueue: hci4 hci_rx_work [ 517.905540][ T5744] Call Trace: [ 517.905548][ T5744] [ 517.905556][ T5744] dump_stack_lvl+0x100/0x190 [ 517.905584][ T5744] sysfs_warn_dup.cold+0x1c/0x28 [ 517.905631][ T5744] sysfs_create_dir_ns+0x24b/0x2b0 [ 517.905652][ T5744] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 517.905668][ T5744] ? find_held_lock+0x2b/0x80 [ 517.905688][ T5744] ? kobject_add_internal+0x25f/0x930 [ 517.905710][ T5744] ? kobject_add_internal+0x25f/0x930 [ 517.905731][ T5744] ? do_raw_spin_unlock+0x145/0x1e0 [ 517.905760][ T5744] kobject_add_internal+0x2c8/0x930 [ 517.905787][ T5744] kobject_add+0x16a/0x1e0 [ 517.905809][ T5744] ? __pfx_kobject_add+0x10/0x10 [ 517.905829][ T5744] ? class_to_subsys+0x10f/0x150 [ 517.905854][ T5744] ? kobject_put+0xb9/0x640 [ 517.905889][ T5744] ? _raw_spin_unlock+0x28/0x50 [ 517.905924][ T5744] device_add+0x294/0x1970 [ 517.905943][ T5744] ? __pfx_dev_set_name+0x10/0x10 [ 517.905965][ T5744] ? __pfx_device_add+0x10/0x10 [ 517.905983][ T5744] ? mgmt_send_event_skb+0x2fb/0x460 [ 517.906012][ T5744] hci_conn_add_sysfs+0x1a3/0x260 [ 517.906041][ T5744] le_conn_complete_evt+0x121b/0x2120 [ 517.906069][ T5744] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 517.906087][ T5744] ? hci_event_packet+0x186/0xcd0 [ 517.906116][ T5744] hci_le_conn_complete_evt+0x23c/0x3a0 [ 517.906143][ T5744] ? skb_pull_data+0x15f/0x1e0 [ 517.906168][ T5744] hci_le_meta_evt+0x34a/0x5f0 [ 517.906195][ T5744] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 517.906225][ T5744] hci_event_packet+0x51c/0xcd0 [ 517.906251][ T5744] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 517.906279][ T5744] ? __pfx_hci_event_packet+0x10/0x10 [ 517.906309][ T5744] ? lockdep_hardirqs_on+0x7d/0x110 [ 517.906371][ T5744] hci_rx_work+0x451/0xfc0 [ 517.906406][ T5744] process_one_work+0xac7/0x1b10 [ 517.906444][ T5744] ? __pfx_process_one_work+0x10/0x10 [ 517.906478][ T5744] ? __pfx_hci_rx_work+0x10/0x10 [ 517.906511][ T5744] worker_thread+0x5ef/0xe50 [ 517.906543][ T5744] ? kthread+0x13a/0x450 [ 517.906563][ T5744] ? __pfx_worker_thread+0x10/0x10 [ 517.906584][ T5744] kthread+0x373/0x450 [ 517.906601][ T5744] ? __pfx_kthread+0x10/0x10 [ 517.906622][ T5744] ret_from_fork+0x730/0xd60 [ 517.906653][ T5744] ? __pfx_ret_from_fork+0x10/0x10 [ 517.906684][ T5744] ? __switch_to+0x800/0x10f0 [ 517.906708][ T5744] ? __pfx_kthread+0x10/0x10 [ 517.906728][ T5744] ret_from_fork_asm+0x1a/0x30 [ 517.906760][ T5744] [ 517.911131][ T5744] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 517.911172][ T5744] Bluetooth: hci4: failed to register connection device [ 518.187380][T11717] syz_tun: entered allmulticast mode [ 518.258195][ T42] libceph: connect (1)127.0.0.1:6789 error -22 [ 518.258466][ T42] libceph: mon0 (1)127.0.0.1:6789 connect error [ 518.572954][ T42] libceph: connect (1)127.0.0.1:6789 error -22 [ 518.574290][ T42] libceph: mon0 (1)127.0.0.1:6789 connect error [ 518.918919][T11711] ceph: No mds server is up or the cluster is laggy [ 518.998957][T11736] 8021q: adding VLAN 0 to HW filter on device bond8 [ 519.151420][T11741] 8021q: adding VLAN 0 to HW filter on device bond11 [ 519.237223][T11736] 8021q: adding VLAN 0 to HW filter on device bond11 [ 519.239105][T11736] bond8: (slave bond11): Enslaving as an active interface with an up link [ 519.312851][ T43] audit: type=1400 audit(1787753975.679:16486): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="test" pid=11747 comm="syz.3.1383" name="test" offset=36 [ 519.619591][T11736] bond8 (unregistering): (slave bond11): Releasing backup interface [ 519.941282][T11736] bond8 (unregistering): Released all slaves [ 520.071756][T11746] 8021q: adding VLAN 0 to HW filter on device bond12 [ 520.076296][T11746] bond11: (slave bond12): Enslaving as an active interface with an up link [ 520.508873][T11752] bond11 (unregistering): (slave bond12): Releasing backup interface [ 520.541744][T11752] bond11 (unregistering): Released all slaves [ 520.885280][T11770] 9p: Bad value for 'rfdno' [ 521.188876][T11778] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1391'. [ 521.368637][T11781] gretap1: entered promiscuous mode [ 521.774651][ T43] audit: type=1800 audit(1787753978.179:16487): pid=11785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1392" name="ifname" dev="configfs" ino=33822 res=0 errno=0 [ 521.831234][T11778] bond1 (unregistering): Released all slaves [ 522.419179][T11807] 8021q: adding VLAN 0 to HW filter on device bond14 [ 522.678745][T11807] 8021q: adding VLAN 0 to HW filter on device bond17 [ 522.706367][T11807] bond14: (slave bond17): Enslaving as an active interface with an up link [ 523.143792][T11809] bond14 (unregistering): (slave bond17): Releasing backup interface [ 523.236629][T11809] bond14 (unregistering): Released all slaves [ 523.383480][T11813] bonding: unable to delete non-existent b [ 524.210350][ T28] numa_remove_cpu cpu 1 node 0: mask now 0,2-3 [ 524.210391][ T28] numa_remove_cpu cpu 1 node 1: mask now 0,2-3 [ 524.212241][ T28] ================================================================== [ 524.212253][ T28] BUG: KASAN: slab-use-after-free in irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 524.212277][ T28] Read of size 8 at addr ffff888054f491a8 by task migration/1/28 [ 524.212290][ T28] [ 524.212301][ T28] CPU: 1 UID: 0 PID: 28 Comm: migration/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 524.212323][ T28] Tainted: [L]=SOFTLOCKUP [ 524.212328][ T28] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 524.212338][ T28] Stopper: multi_cpu_stop+0x0/0x4b0 <- __stop_cpus.constprop.0+0xb1/0x140 [ 524.212371][ T28] Call Trace: [ 524.212379][ T28] [ 524.212386][ T28] dump_stack_lvl+0x100/0x190 [ 524.212406][ T28] print_report+0x13d/0x4b0 [ 524.212430][ T28] ? __virt_addr_valid+0x239/0x430 [ 524.212454][ T28] ? irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 524.212469][ T28] kasan_report+0xdf/0x1c0 [ 524.212488][ T28] ? irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 524.212506][ T28] irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 524.212522][ T28] ? native_cpu_disable+0x54/0x80 [ 524.212546][ T28] ? __pfx_take_cpu_down+0x10/0x10 [ 524.212568][ T28] fixup_irqs+0x2b/0x280 [ 524.212591][ T28] ? __pfx_take_cpu_down+0x10/0x10 [ 524.212611][ T28] native_cpu_disable+0x59/0x80 [ 524.212634][ T28] take_cpu_down+0xb6/0x190 [ 524.212655][ T28] multi_cpu_stop+0x16a/0x4b0 [ 524.212669][ T28] ? __stop_cpus.constprop.0+0xb1/0x140 [ 524.212693][ T28] ? __pfx_multi_cpu_stop+0x10/0x10 [ 524.212706][ T28] cpu_stopper_thread+0x21e/0x450 [ 524.212731][ T28] ? __pfx_cpu_stopper_thread+0x10/0x10 [ 524.212754][ T28] smpboot_thread_fn+0x3d3/0xab0 [ 524.212770][ T28] ? kthread+0x13a/0x450 [ 524.212785][ T28] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 524.212798][ T28] kthread+0x373/0x450 [ 524.212813][ T28] ? __pfx_kthread+0x10/0x10 [ 524.212830][ T28] ret_from_fork+0x730/0xd60 [ 524.212852][ T28] ? __pfx_ret_from_fork+0x10/0x10 [ 524.212875][ T28] ? __switch_to+0x800/0x10f0 [ 524.212894][ T28] ? __pfx_kthread+0x10/0x10 [ 524.212910][ T28] ret_from_fork_asm+0x1a/0x30 [ 524.212928][ T28] [ 524.212933][ T28] [ 524.212936][ T28] Allocated by task 7501: [ 524.212944][ T28] kasan_save_stack+0x30/0x50 [ 524.212958][ T28] kasan_save_track+0x14/0x30 [ 524.212972][ T28] __kasan_kmalloc+0xaa/0xb0 [ 524.212985][ T28] __kmalloc_noprof+0x32f/0x840 [ 524.212999][ T28] ieee802_11_parse_elems_full+0x17c/0x3c90 [ 524.213019][ T28] ieee80211_ibss_rx_queued_mgmt+0xc96/0x1c70 [ 524.213036][ T28] ieee80211_iface_work+0xa9a/0x1070 [ 524.213058][ T28] cfg80211_wiphy_work+0x2b7/0x550 [ 524.213073][ T28] process_one_work+0xac7/0x1b10 [ 524.213090][ T28] worker_thread+0x5ef/0xe50 [ 524.213106][ T28] kthread+0x373/0x450 [ 524.213119][ T28] ret_from_fork+0x730/0xd60 [ 524.213139][ T28] ret_from_fork_asm+0x1a/0x30 [ 524.213151][ T28] [ 524.213154][ T28] Freed by task 7501: [ 524.213161][ T28] kasan_save_stack+0x30/0x50 [ 524.213174][ T28] kasan_save_track+0x14/0x30 [ 524.213188][ T28] kasan_save_free_info+0x3b/0x70 [ 524.213208][ T28] __kasan_slab_free+0x5f/0x80 [ 524.213222][ T28] kfree+0x22b/0x6d0 [ 524.213241][ T28] ieee80211_ibss_rx_queued_mgmt+0xf2f/0x1c70 [ 524.213257][ T28] ieee80211_iface_work+0xa9a/0x1070 [ 524.213274][ T28] cfg80211_wiphy_work+0x2b7/0x550 [ 524.213289][ T28] process_one_work+0xac7/0x1b10 [ 524.213305][ T28] worker_thread+0x5ef/0xe50 [ 524.213321][ T28] kthread+0x373/0x450 [ 524.213334][ T28] ret_from_fork+0x730/0xd60 [ 524.213355][ T28] ret_from_fork_asm+0x1a/0x30 [ 524.213367][ T28] [ 524.213370][ T28] The buggy address belongs to the object at ffff888054f49000 [ 524.213370][ T28] which belongs to the cache kmalloc-1k of size 1024 [ 524.213383][ T28] The buggy address is located 424 bytes inside of [ 524.213383][ T28] freed 1024-byte region [ffff888054f49000, ffff888054f49400) [ 524.213398][ T28] [ 524.213401][ T28] The buggy address belongs to the physical page: [ 524.213408][ T28] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x54f48 [ 524.213422][ T28] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 524.213433][ T28] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 524.213447][ T28] page_type: f5(slab) [ 524.213460][ T28] raw: 04fff00000000040 ffff88801c042dc0 dead000000000100 dead000000000122 [ 524.213473][ T28] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 524.213487][ T28] head: 04fff00000000040 ffff88801c042dc0 dead000000000100 dead000000000122 [ 524.213500][ T28] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 524.213513][ T28] head: 04fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 524.213526][ T28] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 524.213534][ T28] page dumped because: kasan: bad access detected [ 524.213542][ T28] page_owner tracks the page as allocated [ 524.213547][ T28] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10637, tgid 10636 (syz.0.1046), ts 438099595087 [ 524.213572][ T28] post_alloc_hook+0xfd/0x120 [ 524.213591][ T28] get_page_from_freelist+0x110d/0x35b0 [ 524.213612][ T28] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 524.213634][ T28] new_slab+0xa9/0x6e0 [ 524.213653][ T28] refill_objects+0xe3/0x410 [ 524.213673][ T28] __pcs_replace_empty_main+0x35e/0x650 [ 524.213694][ T28] __kmalloc_node_noprof+0x6ad/0x880 [ 524.213707][ T28] qdisc_alloc+0xbb/0xb30 [ 524.213722][ T28] qdisc_create_dflt+0x93/0x490 [ 524.213735][ T28] dev_activate+0x64f/0xce0 [ 524.213749][ T28] __dev_open+0x490/0x8f0 [ 524.213762][ T28] __dev_change_flags+0x596/0x850 [ 524.213781][ T28] rtnl_configure_link+0x161/0x4c0 [ 524.213801][ T28] rtnl_newlink+0x16d1/0x2620 [ 524.213813][ T28] rtnetlink_rcv_msg+0x95e/0xe90 [ 524.213825][ T28] netlink_rcv_skb+0x159/0x420 [ 524.213844][ T28] page last free pid 10637 tgid 10636 ts 438090657495 stack trace: [ 524.213854][ T28] __free_frozen_pages+0x79f/0x10f0 [ 524.213871][ T28] qlist_free_all+0x47/0xf0 [ 524.213884][ T28] kasan_quarantine_reduce+0x1a0/0x1f0 [ 524.213897][ T28] __kasan_slab_alloc+0x69/0x90 [ 524.213912][ T28] __kmalloc_cache_noprof+0x278/0x6d0 [ 524.213932][ T28] ref_tracker_alloc+0x190/0x590 [ 524.213947][ T28] net_rx_queue_update_kobjects+0x32e/0x760 [ 524.213965][ T28] netdev_register_kobject+0x2c6/0x410 [ 524.213981][ T28] register_netdevice+0x15b6/0x25a0 [ 524.213993][ T28] bond_newlink+0x6a/0x100 [ 524.214014][ T28] rtnl_newlink+0x1697/0x2620 [ 524.214026][ T28] rtnetlink_rcv_msg+0x95e/0xe90 [ 524.214038][ T28] netlink_rcv_skb+0x159/0x420 [ 524.214059][ T28] netlink_unicast+0x585/0x850 [ 524.214076][ T28] netlink_sendmsg+0x8b0/0xda0 [ 524.214093][ T28] ____sys_sendmsg+0xa4d/0xbe0 [ 524.214107][ T28] [ 524.214110][ T28] Memory state around the buggy address: [ 524.214117][ T28] ffff888054f49080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 524.214128][ T28] ffff888054f49100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 524.214138][ T28] >ffff888054f49180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 524.214145][ T28] ^ [ 524.214153][ T28] ffff888054f49200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 524.214163][ T28] ffff888054f49280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 524.214171][ T28] ================================================================== [ 524.214180][ T28] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 524.700820][ T28] CPU: 1 UID: 0 PID: 28 Comm: migration/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 524.706487][ T28] Tainted: [L]=SOFTLOCKUP [ 524.708459][ T28] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 524.712974][ T28] Stopper: multi_cpu_stop+0x0/0x4b0 <- __stop_cpus.constprop.0+0xb1/0x140 [ 524.716928][ T28] Call Trace: [ 524.718381][ T28] [ 524.719671][ T28] dump_stack_lvl+0x100/0x190 [ 524.721579][ T28] vpanic+0x553/0x970 [ 524.723389][ T28] ? __pfx_vpanic+0x10/0x10 [ 524.725355][ T28] ? __pfx_vprintk_emit+0x10/0x10 [ 524.728020][ T28] ? irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 524.732158][ T28] panic+0xd1/0xe0 [ 524.734693][ T28] ? __pfx_panic+0x10/0x10 [ 524.737435][ T28] check_panic_on_warn.cold+0x19/0x34 [ 524.740794][ T28] end_report.part.0+0x3a/0x90 [ 524.743776][ T28] kasan_report.cold+0xe/0x18 [ 524.749072][ T28] ? irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 524.753902][ T28] irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 524.756724][ T28] ? native_cpu_disable+0x54/0x80 [ 524.759673][ T28] ? __pfx_take_cpu_down+0x10/0x10 [ 524.762393][ T28] fixup_irqs+0x2b/0x280 [ 524.765101][ T28] ? __pfx_take_cpu_down+0x10/0x10 [ 524.768397][ T28] native_cpu_disable+0x59/0x80 [ 524.771074][ T28] take_cpu_down+0xb6/0x190 [ 524.773292][ T28] multi_cpu_stop+0x16a/0x4b0 [ 524.775315][ T28] ? __stop_cpus.constprop.0+0xb1/0x140 [ 524.777291][ T28] ? __pfx_multi_cpu_stop+0x10/0x10 [ 524.779220][ T28] cpu_stopper_thread+0x21e/0x450 [ 524.781049][ T28] ? __pfx_cpu_stopper_thread+0x10/0x10 [ 524.783415][ T28] smpboot_thread_fn+0x3d3/0xab0 [ 524.786384][ T28] ? kthread+0x13a/0x450 [ 524.788705][ T28] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 524.793210][ T28] kthread+0x373/0x450 [ 524.795610][ T28] ? __pfx_kthread+0x10/0x10 [ 524.798407][ T28] ret_from_fork+0x730/0xd60 [ 524.801081][ T28] ? __pfx_ret_from_fork+0x10/0x10 [ 524.804115][ T28] ? __switch_to+0x800/0x10f0 [ 524.807133][ T28] ? __pfx_kthread+0x10/0x10 [ 524.809487][ T28] ret_from_fork_asm+0x1a/0x30 [ 524.811837][ T28] [ 526.507130][ T28] Shutting down cpus with NMI [ 526.510967][ T28] Kernel Offset: disabled [ 526.513723][ T28] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:19:42 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000003 RCX=ffffffff82076777 RDX=0000000000000001 RSI=0000000000000003 RDI=ffff88801c762580 RBP=ffffc900072af894 RSP=ffffc9000046fd28 R8 =0000000000000004 R9 =0000000000000003 R10=0000000000000003 R11=0000000000000000 R12=ffffc900072af870 R13=fffff52000e55f12 R14=0000000000000003 R15=0000000000000003 RIP=ffffffff8bce05e0 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096976000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c388ddb CR3=000000005e8e8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff85ac18c5 RDI=ffffffff9bc411c0 RBP=ffffffff9bc41180 RSP=ffffc90000567448 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000005 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff85ac18ef RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096a76000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f543aff4 CR3=000000000eb96000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=0040 FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000003800000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000003 RCX=ffffffff82076777 RDX=0000000000000003 RSI=0000000000000003 RDI=0000000000000003 RBP=ffffc900072af894 RSP=ffffc9000050fd28 R8 =0000000000000005 R9 =0000000000000004 R10=0000000000000003 R11=0000000000000000 R12=ffffc900072af870 R13=fffff52000e55f12 R14=0000000000000003 R15=0000000000000003 RIP=ffffffff820b1a0a RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 000fffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 000fffff 00000000 FS =0000 0000000000000000 000fffff 00000000 GS =0000 ffff888096b76000 000fffff 00000000 LDT=0000 0000000000000000 000fffff 00000000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7317a3c CR3=000000004ede0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000005bc744 RBX=ffff88802b533de8 RCX=0000000000000001 RDX=1ffffffff1cd5b27 RSI=ffffffff8c61e200 RDI=ffffffff8e6ad938 RBP=0000000000000003 RSP=ffffc900005bfd18 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000663 R11=0000000000000000 R12=ffffc900072af870 R13=fffff52000e55f12 R14=0000000000000003 R15=0000000000000003 RIP=ffffffff81f03580 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096c76000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f7a190 CR3=000000005e8e8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=0040 FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000003800000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000