last executing test programs: 1m8.327055744s ago: executing program 3 (id=9270): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd, 0x8}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x5}]}}]}, 0x40}}, 0x0) 1m8.246762455s ago: executing program 3 (id=9272): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) 1m8.117131932s ago: executing program 1 (id=9276): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="042ffd020000000000000901cdaaf10300078e60c15df36640acbce967e3e19d05dc5dd83ba298452e1b35c4a49ec78e56646874086553f36812819d35d5b6582eb675271ae90c090d172912fb7a10a55b9dff73f2a3e5424d2d4007e168ee80ba624185929136a7a9a4e818e91d439c8290c8d81c64a31cd3371b338be158a092d3c7aa8333083dc9581f700354ee4a14b7b5ae3ff2fb1f108b03fd189a72d141cb17c8a62ee457183a331cb1f91a43d32d1e3ad225bf38823cfe8bbb251381862fca291e50b580118c6dd0337fa73815b8ab6a9883299fea154fbb99d7ed794159fb7d59ad9193e1487e53e929784790e8fae420a0748f6da4856119e5c22d5a15ffffffffffff09fd4b44790c00790a00007443c6f8ed6b53826d51eac3616c07dfe09fe6efd8e74255f0081b4fac0747f5ce2531907337994eb30bab94b5b30e8b5d6c35569060dea2bd369c06877688358f5172452535cff4d3836726fa2094965f435c64ce98e4ff210722666285fe075395f91796a4716c9c735d52b9427c1d76d281be037f6461c931086aa052204f927578b23fde572778b3e92073d17bd9c549e3f4058af41520984cf2a186ec09e4f493b82fa9b08d94a564b2d43f5545f5fdf7367244d57047cae8fd2bc72f022a4e6b57ff599cc8624fa985026a84d0b743b2451c3702e9dd3f5348470ee2acdcb3c4d667f487d8646dbaecee"], 0x200) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r3}, &(0x7f0000000340), &(0x7f0000000440)=r2}, 0x20) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x84, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) io_uring_setup(0x54f3, &(0x7f0000019080)={0x0, 0xf8e2, 0x1, 0x1, 0x1fb, 0x0, r1}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) syz_open_dev$MSR(&(0x7f0000000040), 0x7, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_print_times', 0xc0901, 0x3e1) write$FUSE_DIRENT(r5, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x200001d0) r6 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') pread64(r6, 0x0, 0x0, 0x1c) 1m7.292227515s ago: executing program 3 (id=9278): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000004c0)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x1000000000000010, 0x80802, 0x0) sendmsg(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe801100090008000c00080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r5, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 1m6.131567818s ago: executing program 1 (id=9284): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r4, &(0x7f00000008c0)='/', 0x1, 0x0) lseek(r4, 0x0, 0x4) sendfile(r4, r4, &(0x7f00000001c0), 0x7fa) 1m6.022682714s ago: executing program 3 (id=9286): r0 = socket$packet(0x11, 0x2, 0x300) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000080", 0x14, 0x6, 0x0, @remote, @mcast1, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x11}}}}}}}, 0x0) 1m5.92589247s ago: executing program 3 (id=9287): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00006ec000/0x1000)=nil, &(0x7f00002c7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000559000/0x4000)=nil, &(0x7f000008d000/0x1000)=nil, &(0x7f00005e2000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000021a000/0x1000)=nil, &(0x7f00005e1000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20044800) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 1m4.161167731s ago: executing program 0 (id=9297): syz_io_uring_setup(0x8d2, &(0x7f00000001c0)={0x0, 0x54a5, 0x400, 0x2, 0x37a}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) eventfd(0xfffffff9) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r0, @ANYRES32=r2], 0x44}}, 0x0) 1m4.054314478s ago: executing program 0 (id=9298): unshare(0x22020600) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x5) 1m4.000802362s ago: executing program 0 (id=9299): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd9}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m3.883030922s ago: executing program 0 (id=9300): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) pivot_root(0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r5, 0x401c5504, 0x0) ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0x2) write$uinput_user_dev(r5, 0x0, 0x0) r6 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r6, &(0x7f0000000180)=ANY=[], 0x78) sendfile(r0, r6, &(0x7f00000001c0), 0x8) fcntl$addseals(r6, 0x409, 0x8) fallocate(r6, 0x3, 0x9100, 0x3) 1m3.572972243s ago: executing program 1 (id=9302): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) pipe2$9p(0x0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$sock(r1, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c) 1m2.706606337s ago: executing program 3 (id=9304): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) syz_open_dev$usbmon(0x0, 0xffffeffffffffffd, 0x8800) mount(&(0x7f0000000100)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}], [], 0x2f}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r1, &(0x7f0000000400)=""/4096, 0xc00) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) read$msr(r0, &(0x7f00000000c0)=""/113, 0x71) socket$inet6_tcp(0xa, 0x1, 0x0) 1m1.851026154s ago: executing program 1 (id=9306): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000040)=0xa, 0x4) sendto$packet(r0, &(0x7f0000000580)="3f03", 0x2, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x65}}, 0x14) 1m1.791020984s ago: executing program 0 (id=9307): openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x8000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000100"/16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@rand_addr=' \x01\x00', 0x4800, 0x1, 0x3, 0x1, 0x0, 0x4}, 0x20) 1m1.337616537s ago: executing program 1 (id=9308): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r5, {}, {0xb, 0xb}, {0x2, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8000) 1m1.0595575s ago: executing program 0 (id=9309): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f00000004c0)=0x6, 0x4) 50.570029829s ago: executing program 1 (id=9310): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300)=0x8df, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xffffff1f, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x5258, 0x116bf}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x300a1, 0x22}}}}}}]}, 0x48}}, 0x24008000) 39.160973471s ago: executing program 32 (id=9309): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f00000004c0)=0x6, 0x4) 39.112355543s ago: executing program 33 (id=9310): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300)=0x8df, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xffffff1f, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x5258, 0x116bf}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x300a1, 0x22}}}}}}]}, 0x48}}, 0x24008000) 39.09497648s ago: executing program 34 (id=9304): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) syz_open_dev$usbmon(0x0, 0xffffeffffffffffd, 0x8800) mount(&(0x7f0000000100)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}], [], 0x2f}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r1, &(0x7f0000000400)=""/4096, 0xc00) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) read$msr(r0, &(0x7f00000000c0)=""/113, 0x71) socket$inet6_tcp(0xa, 0x1, 0x0) 32.327538799s ago: executing program 4 (id=9312): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r2, r4, 0x16, 0x0, @void}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000100)="ac", 0x1) 32.20357196s ago: executing program 4 (id=9324): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r1, &(0x7f0000000b40)=[{&(0x7f0000000dc0)="e486b87ca16ba9bce903933883d4babd3874d1e54e226d384d4ea8926cf09da455a32046a828162691e8ceb94e62edcac98dd185882cea51fca25d2850248738535775facb85dc616593f2ce1a2d51c92d97dcf9d4a738fded65c93a51be4685eb1015218910d7917803aa2abe9a2ef30199f0b0d7acdc02bae51532976e7879288de6217ff46abec1c30d19e56192fbd06c3b503813b2a05352dc6a3da8978fc22fc8569a45b0e5fc194472401b1c0581de7c1e56facb591303c4f415f4b958512b2fedab4b792ed60bdbb400d9998711a8a06576eae9c60c3bc3590e5b9e4aeb5be91edde26dd09945af223eab89b67ae0b72a816f5cbbf6bd6b7cfb5e6a47ef0f7d95b883ca6e3c0192cb3e9b81504206c0b8", 0x114}], 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010102, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e20, 0x0, 0x4e22, 0xc, 0x2, 0x0, 0x0, 0x89, 0x0, 0xee01}, {0x2e6, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x800000000}, {0x1, 0x0, 0x0, 0x1ffffffffe}, 0x20}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x3, 0x0, 0x0, 0xfffffc01, 0x4001}}, 0xe4) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000600)='./file7\x00', 0x100, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xdde) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 32.153130174s ago: executing program 4 (id=9325): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0xac141442, @empty=0xe0000001}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x3d, 0x0, @void}}}}}}}, 0x0) 15.554728453s ago: executing program 35 (id=9325): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0xac141442, @empty=0xe0000001}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x3d, 0x0, @void}}}}}}}, 0x0) 14.513395167s ago: executing program 5 (id=9372): signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) poll(&(0x7f0000000180)=[{r0, 0x400}], 0x1, 0x7f) 14.116687854s ago: executing program 5 (id=9374): r0 = fsopen(&(0x7f0000000300)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x17, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) fchdir(r1) r7 = fanotify_init(0x1a, 0x1) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) fanotify_mark(r7, 0x541, 0x1023, r8, 0x0) 8.776897491s ago: executing program 5 (id=9387): syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = getpgid(r2) socket$packet(0x11, 0x3, 0x300) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) setpgid(r4, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/sem\x00', 0x0, 0x0) read$char_usb(r5, &(0x7f00000000c0)=""/156, 0x9c) pread64(r5, &(0x7f0000000180)=""/73, 0xfffffdef, 0x55) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8000) kcmp(r2, r1, 0x1, r3, 0xffffffffffffffff) r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, 0x0, 0xa) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, 0x0) 6.653487808s ago: executing program 5 (id=9393): r0 = socket$inet6(0xa, 0x80003, 0x5) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xfc) 5.353876491s ago: executing program 6 (id=9397): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000005c0)=r2, 0x12) r5 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, 0x0, 0x0) fcntl$setstatus(r6, 0x4, 0x40800) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_int(r6, 0x6, 0x19, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x2000009) sendfile(r6, 0xffffffffffffffff, 0x0, 0x7ffff004) write$cgroup_freezer_state(r5, &(0x7f00000000c0)='THAWED\x00', 0x7) 5.112943412s ago: executing program 2 (id=9398): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) setgroups(0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020}, 0x1397) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) socket(0x36, 0x5, 0x1000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x976, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setfsgid(0xee00) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 5.076438115s ago: executing program 6 (id=9399): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x8000000000000c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000340001800c0001"], 0x108}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 4.962491213s ago: executing program 6 (id=9400): write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000380)=[@acquire], 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r1, 0x200}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000580)=[@request_death, @clear_death], 0x0, 0x1000000, 0x0}) 3.944710465s ago: executing program 6 (id=9405): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0xb4e02000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000080)='encrypted\x00', &(0x7f00000004c0)='id:cb2e\xbbj\xd3\xde\x8d\x1f\xaeK\xa8\x1f\xb9c%\xe3\xcf\xd7u\x81\xd1mr2\xd1#\xd1*\x102KI\x87Y\xcba\xfc\xef\x83h\xf0,\x1d\xf2\x1a\xbaR7q\xc5{\x04\x03\x00\x00\\Z\xedE\xfea\x00\xf0\xa7@\xf7\x04\x15\x83\xc1\a\xac\x00V\xb4\xd2\xe2\xbf\x04\x9f\x82\xdbt\x925t\xb3x\a=(WG\xf2\xc2\xdb%\xe3p}\xcc\xd1Hx#\xbd\xc2\xb9\xd6\xd9\x12\xd1m\xd6\xd2\x1e\xd1}\xd2W\xb9b\x84\xd5wPxj0\xca\rq\xc2\\\x1a\xc3\b\xea0<\x9e\x91\xd8\xeb\x96\x93\x1cL\x13Oyk9\x8f\xa5\a\xf5EXA\x00\x00\x00\x00\x00\x00\x00\xa2\x1eL\xc9S\xd4)\xdb0\xb9\x97\f\x19-\xe6\flZ\xdcb\x91y\t\xc2\x00\x9a\xc9\xac\xabV\xe9\xed\xd8w\x8e\x17\xfe\x8c\xd5\x00\xca\xd5\xca\x06\xe53\xd5\x82\xc7\x89\x9ep\xe4\xc0\a/\x9f:\x00') fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r4, 0x1, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x8, 0xffffffffffffffff, &(0x7f0000000000), 0x0, 0xc}]) 3.756484723s ago: executing program 2 (id=9406): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0xc1f, 0x70bd29, 0x25dfdbfd, {0x2, 0x80}}, 0x18}, 0x1, 0x0, 0x0, 0x8011}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x80000000000008, &(0x7f0000000180)="8c", 0x1) setsockopt$inet_opts(r0, 0x0, 0xc, &(0x7f0000000000)="c1", 0x1) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000001640)=""/20, &(0x7f00000000c0)=0x14) 3.593473571s ago: executing program 7 (id=9407): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1180, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x20) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000000980)={0x1, [{0x0, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x4, 0x0}, {0x3, 0xffffffffffffffcd, 0x7, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x5, 0x0}, {0x3, 0x0, 0xfff, 0x0}, {0x3, 0x0, 0x2, 0x0}, {0x1, 0x0, 0xfffffffa, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1, 0x0}, {0x1, 0xc00, 0x9, &(0x7f0000000040)="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"}]}) 3.593110796s ago: executing program 2 (id=9408): r0 = fsmount(0xffffffffffffffff, 0x0, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getrlimit(0x0, &(0x7f0000000040)) write$uinput_user_dev(r0, &(0x7f0000000980)={'syz0\x00', {0x1, 0x6, 0xd, 0xb19}, 0x40, [0xff, 0x2, 0x3, 0x4, 0x2, 0x6, 0x6, 0x0, 0xfffffffb, 0x1, 0x6, 0x9, 0x2, 0x1, 0x1, 0x7, 0xfffffff9, 0x3ad, 0xe, 0x1, 0x4, 0x9, 0x3, 0x7fffffff, 0xe18, 0xfffffff8, 0x3, 0xe3, 0x8, 0x39, 0xe, 0x10, 0x9, 0xa49, 0x8000, 0x0, 0x8, 0x3, 0x5, 0x7, 0x1, 0x1, 0x9, 0x9, 0x3, 0x81, 0x80000000, 0x0, 0xffffff81, 0x1ff, 0xffffffff, 0x1, 0x80, 0xd4, 0x3, 0x1a, 0xfe75, 0x10, 0x0, 0x65, 0x19, 0x9e0e, 0x363, 0xfffffd8d], [0x2, 0xb82f, 0x8, 0xffffffff, 0x6, 0x40, 0x2, 0xed9e, 0x64, 0x8, 0x3, 0x6, 0xfc0, 0xffffffff, 0xd, 0x4, 0x6, 0x7ff, 0xf, 0x212, 0x7f, 0x9, 0x0, 0x4, 0x4, 0x0, 0xfffffffe, 0xffffffff, 0x5, 0x1ff, 0x8, 0x3, 0x5, 0xe, 0x6, 0x7, 0x1, 0x1, 0x0, 0x2, 0x9a57, 0x5, 0x0, 0x2, 0x4, 0x81, 0x0, 0x7239, 0x200, 0x0, 0x4, 0x8, 0x2, 0x5, 0xd822, 0x10001, 0x4b2, 0x1, 0x5, 0x2874defd, 0x428, 0x80000001, 0x450a, 0x4], [0x8, 0x1, 0x6, 0x401, 0x0, 0x0, 0x0, 0x80, 0x9, 0x8, 0x2308, 0x10001, 0x5a, 0x70, 0x6, 0x10, 0x8, 0x6, 0x1, 0x100, 0x3, 0x8, 0x10000, 0x8b, 0x10, 0x3, 0x10, 0x7f, 0x8000, 0xc, 0x2, 0x6, 0x1000, 0x401, 0x3, 0xb023, 0x80000000, 0x9, 0x5, 0xfffffac4, 0x1ff, 0x5, 0x8, 0x18f5, 0xffffffff, 0xf, 0xf24, 0xea8e, 0x7fffffff, 0x1000, 0xe31, 0x7, 0x3, 0x4, 0x1, 0x5a0, 0x0, 0xea, 0xb6f, 0x800, 0x6, 0x7f, 0x0, 0x76e], [0x9, 0x9, 0x7, 0x8, 0x8, 0x3ff, 0x6, 0x0, 0x21, 0xc0000000, 0x0, 0x400, 0x10000, 0x8, 0x7, 0x2, 0x6, 0xe, 0x3, 0x4, 0x2, 0x1ff, 0xffffffff, 0x6, 0xa, 0xfffff8cf, 0x2, 0x800, 0x5, 0x40, 0xfffff606, 0xe, 0x5, 0x3, 0x410a, 0x5, 0xfff, 0x5, 0x800, 0x7, 0xcd, 0x9, 0x3, 0x2, 0x3, 0x0, 0x28c, 0x8, 0x4, 0x10001, 0xfffffff7, 0x3, 0x0, 0x6, 0x10001, 0x1, 0x9, 0x8, 0x7c4, 0x200, 0x3, 0x1, 0xd6, 0x8]}, 0x45c) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x7, {"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", 0xfffffedf}}, 0x1006) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x40000) unshare(0x6a040000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000020000103000000000000000002000004000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 2.898458108s ago: executing program 2 (id=9409): lseek(0xffffffffffffffff, 0x9, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'lo\x00', &(0x7f0000000640)=@ethtool_drvinfo={0x3, "59df9bafbcfdb56315f245396a297796990e82b4ae58f23aceb70576cbc23bcf", "2b536027a7994037f51fcc3a0ec483e3792474f83462ba98870aa688d1b5cdb0", "918ccf48820000000000cd231f8ff94845fe17b702610000000000429200", "34f231ce71b6afd5f9585a8787eb6a402f9c0012781f716b2a5ccab61835cc21", "bb500649861d98c16388c83d37d69c38e4bef90c3cb04c56b47c7dc408fa5f7c", "5958dd3d80c1542523c508e5", 0x882c, 0x0, 0xbc, 0x201}}) bpf$MAP_CREATE(0x0, 0x0, 0x48) getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYBLOB='\x00\x00\x00'], 0x50) 2.898316727s ago: executing program 7 (id=9410): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000000)="d67d1ede99da36c40d9a42a05884f85d7e42ed86c9eaa7f7599d6fa426cb43a85515f2001ea301cedfb2b7a587be60d657c0ddc6b04f7b") 2.812898754s ago: executing program 5 (id=9411): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffc}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 2.740317038s ago: executing program 7 (id=9412): creat(0x0, 0x16) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x5b70c6fd, 0x728a43a9, 0x1000, 0xb, 0x5, 0x5, 0x0, 0x0, 0x10, 0x5}}, 0x50) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000023000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d0000009700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000000000639100000000000000000000ff7f0000292f17cee19d0001000000000000000000cb04fcbb0ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4852f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5d053bdec75dca3772be2c9d2d29db3d36dd01797bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67d4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1b1b71b5f7ec6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc972a3fd2c46f3c1cde71a19d1a2982492aba0883783d2831210e00d2bfea3bf97ff8836d000000000000946bdb747e416b3064edb4f5aea06eba207ddab9f9baf98bc5192f23d95d33357fc55f92e5937e10995059f3348f69667b9260d504ba96446e1437af6fa875d9d32fdaaae01e6c74f192a23572ef582b7dd867c163c8cedaa2a2c5baceb37d4a40244c9bdca541cc7e65e20f5b5b735e2f33df9bd0614431d7dc5e47bb31c5b827d51733b64ddad4de1cdadce076d19d62e821b435619fb89fc07f81938200b4ebce83db57a6f5e9b1c2cf4b6ee90772d4865bf448d200e5c4e1e044d3587498128273b65670c02ff5c3c3ca633c41324fdc09e0b2621087db26bb0553612f2be27579ede2344a809e6b27d0044f2337895323357caddb54642dac82ae25deb08e111e0b9fa133c9da85dc50c3454ee0ff915331bd7f32f96fb55c7990334b1a1bc4d5d817b82f9fc278cc4858fbfa4d0f32a863c1ce050caddc5ca3b10c3e63daebba039e9f80fdef113a145ace522e8379474aa8849dcc2501df3ffcb02d29d55a1a2cbe00e836db0e6b0a7ffd680dbcf7b982a956998df3dce0e9091a4d736db69038061e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000a16) 2.041991656s ago: executing program 5 (id=9413): r0 = getpid() getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$uid(0x3, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x21, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) r4 = syz_pidfd_open(r0, 0x0) setns(r4, 0x24020000) io_setup(0x8, &(0x7f0000004200)=0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) io_submit(r5, 0x20000000000000de, &(0x7f0000000440)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff0, 0x0, 0x3, r6}]) syz_clone3(&(0x7f00000008c0)={0x116a59380, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) 1.967856777s ago: executing program 2 (id=9414): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuacct.usage\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000000c0)=0x202, 0x12) 1.079937028s ago: executing program 7 (id=9415): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x82300) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffffe, 0x0, 0x3, 0x6c4ba42, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x7cdd141a, 0x3, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x2, 0xffffffffffffffff, 0x3, 0x10, 0x4000100000001]}) 1.079749207s ago: executing program 2 (id=9416): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0x6) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x8000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route(r7, 0x0, 0x4008081) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 951.901852ms ago: executing program 7 (id=9417): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = socket(0x28, 0x801, 0x0) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 739.383431ms ago: executing program 7 (id=9418): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000007112370000000000950000000000000089e2d90aa1795cc26efb1dacf01150510936875c66d6a7d6eb12d4cdbc5c0ce0d29df91940d8ca08008e7aa5b3c9a10909d6e18b263131bf965f55746df5189a2e23905ae4dc5340e0eb74eb523d5b77a763cccb768b4453c8b1b1dd0a71983b5c2cfe11f3d30228772b0b798ebaf5abde2ce3ec34f8c6f13ee1f181ac563ba7a7edc9be94452da6d7eb67ae3243cb393245efd0dd21de9553cbd1a8516282de458c44d1ddae97af584de743d44ed18d20dd3b2c42cf1e8b27788dfc562367d46197198cd19fda89a6feca6c738b1d4b2522"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="30003300c0080000080211000001080211000000505050505050"], 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x28004800) 352.536423ms ago: executing program 6 (id=9419): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create(0x10000e9) getsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000300), &(0x7f0000000500)=0x10) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file1\x00'}, 0x6e) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 6 (id=9420): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{0x81, 0xfc, 0x7f}, {0xb1}, {0x6}]}) socket$inet6(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000400000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000020b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x8, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$netlink(0x10, 0x3, 0x9) r3 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x400}, 0xc) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbff}, 0xc) kernel console output (not intermixed with test programs): ct (1)[c::]:6789 error -101 [ 1014.510710][T27656] libceph: mon0 (1)[c::]:6789 connect error [ 1014.782433][T27656] libceph: connect (1)[c::]:6789 error -101 [ 1014.784567][T27656] libceph: mon0 (1)[c::]:6789 connect error [ 1014.855884][T29733] ceph: No mds server is up or the cluster is laggy [ 1015.534371][T27656] libceph: connect (1)[c::]:6789 error -101 [ 1015.553688][T27656] libceph: mon0 (1)[c::]:6789 connect error [ 1016.055222][ T5993] libceph: connect (1)[c::]:6789 error -101 [ 1016.058007][ T5993] libceph: mon0 (1)[c::]:6789 connect error [ 1016.309495][T29749] ceph: No mds server is up or the cluster is laggy [ 1017.281032][T29766] overlayfs: missing 'lowerdir' [ 1017.503597][T29760] overlayfs: missing 'lowerdir' [ 1018.041711][T29779] overlayfs: missing 'workdir' [ 1018.767290][ T5993] libceph: connect (1)[c::]:6789 error -101 [ 1018.769877][ T5993] libceph: mon0 (1)[c::]:6789 connect error [ 1019.048563][ T5993] libceph: connect (1)[c::]:6789 error -101 [ 1019.050879][ T5993] libceph: mon0 (1)[c::]:6789 connect error [ 1019.174001][T29793] netlink: 'syz.3.8818': attribute type 4 has an invalid length. [ 1019.212827][T29793] netlink: 'syz.3.8818': attribute type 4 has an invalid length. [ 1019.298231][T29783] ceph: No mds server is up or the cluster is laggy [ 1019.534427][T29798] overlayfs: missing 'lowerdir' [ 1021.893322][T29822] overlayfs: missing 'lowerdir' [ 1021.987807][T29821] netlink: 'syz.3.8825': attribute type 4 has an invalid length. [ 1022.066096][T29821] netlink: 'syz.3.8825': attribute type 4 has an invalid length. [ 1022.579999][T29827] overlayfs: missing 'workdir' [ 1025.765363][T29851] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1025.767593][T29855] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1026.366930][T29870] overlayfs: missing 'lowerdir' [ 1026.964611][ T5993] libceph: connect (1)[c::]:6789 error -101 [ 1026.964965][ T5993] libceph: mon0 (1)[c::]:6789 connect error [ 1027.492205][T29873] ceph: No mds server is up or the cluster is laggy [ 1027.495498][ T5993] libceph: connect (1)[c::]:6789 error -101 [ 1027.498376][ T5993] libceph: mon0 (1)[c::]:6789 connect error [ 1028.089041][ T6024] libceph: connect (1)[c::]:6789 error -101 [ 1028.091482][ T6024] libceph: mon0 (1)[c::]:6789 connect error [ 1028.375295][ T6024] libceph: connect (1)[c::]:6789 error -101 [ 1028.377404][ T6024] libceph: mon0 (1)[c::]:6789 connect error [ 1028.875725][T29880] ceph: No mds server is up or the cluster is laggy [ 1029.785408][T29893] fuse: Bad value for 'fd' [ 1030.568778][T29903] overlayfs: missing 'lowerdir' [ 1030.617840][T29904] netlink: 'syz.0.8842': attribute type 4 has an invalid length. [ 1030.651026][T29904] netlink: 'syz.0.8842': attribute type 4 has an invalid length. [ 1030.808514][T29907] overlayfs: missing 'lowerdir' [ 1031.020298][T29910] overlayfs: missing 'workdir' [ 1032.736840][ T6024] libceph: connect (1)[c::]:6789 error -101 [ 1032.739780][ T6024] libceph: mon0 (1)[c::]:6789 connect error [ 1033.016476][ T6024] libceph: connect (1)[c::]:6789 error -101 [ 1033.018819][ T6024] libceph: mon0 (1)[c::]:6789 connect error [ 1033.074486][T29942] netlink: 'syz.2.8851': attribute type 4 has an invalid length. [ 1033.376785][T29934] ceph: No mds server is up or the cluster is laggy [ 1033.648851][ T831] libceph: connect (1)[c::]:6789 error -101 [ 1033.682743][ T831] libceph: mon0 (1)[c::]:6789 connect error [ 1033.685390][ T5993] libceph: connect (1)[c::]:6789 error -101 [ 1033.687474][ T5993] libceph: mon0 (1)[c::]:6789 connect error [ 1033.755981][T29950] netlink: 'syz.2.8851': attribute type 4 has an invalid length. [ 1033.822364][T29944] ceph: No mds server is up or the cluster is laggy [ 1034.823069][ T6024] libceph: connect (1)[c::]:6789 error -101 [ 1034.843498][ T6024] libceph: mon0 (1)[c::]:6789 connect error [ 1034.852399][T29963] netlink: 'syz.2.8855': attribute type 4 has an invalid length. [ 1034.935734][T29959] ceph: No mds server is up or the cluster is laggy [ 1034.962793][T29967] overlayfs: missing 'lowerdir' [ 1034.993474][T29963] netlink: 'syz.2.8855': attribute type 4 has an invalid length. [ 1038.292994][T29986] netlink: 'syz.0.8859': attribute type 4 has an invalid length. [ 1038.486574][T29991] netlink: 'syz.0.8859': attribute type 4 has an invalid length. [ 1038.604465][T29992] netlink: 'syz.2.8862': attribute type 4 has an invalid length. [ 1038.656757][T29992] netlink: 'syz.2.8862': attribute type 4 has an invalid length. [ 1039.085054][T29998] overlayfs: missing 'lowerdir' [ 1039.140477][T30000] overlayfs: missing 'workdir' [ 1041.177821][ T6024] libceph: connect (1)[c::]:6789 error -101 [ 1041.177913][ T6024] libceph: mon0 (1)[c::]:6789 connect error [ 1041.455091][ T5993] libceph: connect (1)[c::]:6789 error -101 [ 1041.457211][ T5993] libceph: mon0 (1)[c::]:6789 connect error [ 1041.573733][T30018] ceph: No mds server is up or the cluster is laggy [ 1041.948108][T30038] fuse: Unknown parameter 'grou00000000000000000000' [ 1042.312908][T30035] ceph: No mds server is up or the cluster is laggy [ 1042.319762][T27656] libceph: connect (1)[c::]:6789 error -101 [ 1042.331950][T27656] libceph: mon0 (1)[c::]:6789 connect error [ 1042.566020][T30049] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1042.569163][T30049] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1042.670168][T30051] overlayfs: missing 'lowerdir' [ 1043.673123][T30062] overlayfs: missing 'lowerdir' [ 1044.445367][T30073] netlink: 'syz.1.8881': attribute type 4 has an invalid length. [ 1044.448332][T30074] overlayfs: missing 'workdir' [ 1044.482929][T30073] netlink: 'syz.1.8881': attribute type 4 has an invalid length. [ 1045.184833][T30087] overlayfs: missing 'lowerdir' [ 1045.530948][ T6024] libceph: connect (1)[c::]:6789 error -101 [ 1045.535276][ T6024] libceph: mon0 (1)[c::]:6789 connect error [ 1045.807906][ T6024] libceph: connect (1)[c::]:6789 error -101 [ 1045.810072][ T6024] libceph: mon0 (1)[c::]:6789 connect error [ 1046.292146][T30088] ceph: No mds server is up or the cluster is laggy [ 1046.637093][T30107] overlayfs: missing 'workdir' [ 1048.311219][T30118] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1048.314154][T30118] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1048.973596][T30129] overlayfs: missing 'lowerdir' [ 1050.723083][T29425] libceph: connect (1)[c::]:6789 error -101 [ 1050.725762][T29425] libceph: mon0 (1)[c::]:6789 connect error [ 1050.940971][T30151] netlink: 'syz.0.8897': attribute type 4 has an invalid length. [ 1051.066092][ T6024] libceph: connect (1)[c::]:6789 error -101 [ 1051.066531][ T6024] libceph: mon0 (1)[c::]:6789 connect error [ 1051.123717][T29425] libceph: connect (1)[c::]:6789 error -101 [ 1051.125728][T29425] libceph: mon0 (1)[c::]:6789 connect error [ 1051.164075][T30151] netlink: 'syz.0.8897': attribute type 4 has an invalid length. [ 1051.395400][T30142] ceph: No mds server is up or the cluster is laggy [ 1051.395943][ T5993] libceph: connect (1)[c::]:6789 error -101 [ 1051.410490][ T5993] libceph: mon0 (1)[c::]:6789 connect error [ 1051.678162][T30152] ceph: No mds server is up or the cluster is laggy [ 1052.085103][T30166] netlink: 'syz.3.8901': attribute type 4 has an invalid length. [ 1052.093663][T30169] netlink: 'syz.2.8902': attribute type 4 has an invalid length. [ 1052.130350][T30166] netlink: 'syz.3.8901': attribute type 4 has an invalid length. [ 1052.143791][T30169] netlink: 'syz.2.8902': attribute type 4 has an invalid length. [ 1052.489275][T30172] netlink: 'syz.0.8903': attribute type 4 has an invalid length. [ 1052.583973][T30172] netlink: 'syz.0.8903': attribute type 4 has an invalid length. [ 1053.409003][T30180] netlink: 'syz.3.8905': attribute type 4 has an invalid length. [ 1053.484042][T30180] netlink: 'syz.3.8905': attribute type 4 has an invalid length. [ 1053.790143][ T5993] libceph: connect (1)[c::]:6789 error -101 [ 1053.792584][ T5993] libceph: mon0 (1)[c::]:6789 connect error [ 1054.126149][ T5993] libceph: connect (1)[c::]:6789 error -101 [ 1054.139107][ T5993] libceph: mon0 (1)[c::]:6789 connect error [ 1054.914046][T30187] ceph: No mds server is up or the cluster is laggy [ 1055.455786][ T6024] libceph: connect (1)[c::]:6789 error -101 [ 1055.458186][ T6024] libceph: mon0 (1)[c::]:6789 connect error [ 1055.735146][ T5993] libceph: connect (1)[c::]:6789 error -101 [ 1055.738563][ T5993] libceph: mon0 (1)[c::]:6789 connect error [ 1056.533779][T30199] ceph: No mds server is up or the cluster is laggy [ 1056.539690][ T5993] libceph: connect (1)[c::]:6789 error -101 [ 1056.555531][T30211] netlink: 'syz.0.8910': attribute type 4 has an invalid length. [ 1056.567006][ T5993] libceph: mon0 (1)[c::]:6789 connect error [ 1056.659518][T30211] netlink: 'syz.0.8910': attribute type 4 has an invalid length. [ 1057.156287][T30225] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1057.159092][T30225] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1058.033688][T30234] overlayfs: missing 'lowerdir' [ 1058.391033][T30246] overlayfs: missing 'workdir' [ 1058.400455][ T53] libceph: connect (1)[c::]:6789 error -101 [ 1058.402461][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 1058.505878][T30248] netlink: 'syz.3.8917': attribute type 4 has an invalid length. [ 1058.545926][T30248] netlink: 'syz.3.8917': attribute type 4 has an invalid length. [ 1058.674237][ T34] libceph: connect (1)[c::]:6789 error -101 [ 1058.677521][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 1059.059204][T30241] ceph: No mds server is up or the cluster is laggy [ 1059.230502][ T34] libceph: connect (1)[c::]:6789 error -101 [ 1059.233248][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 1059.312388][T27656] libceph: connect (1)[c::]:6789 error -101 [ 1059.316807][T27656] libceph: mon0 (1)[c::]:6789 connect error [ 1059.547319][T30266] netlink: 'syz.2.8921': attribute type 4 has an invalid length. [ 1059.583257][T30266] netlink: 'syz.2.8921': attribute type 4 has an invalid length. [ 1059.595608][ T5993] libceph: connect (1)[c::]:6789 error -101 [ 1059.603846][ T5993] libceph: mon0 (1)[c::]:6789 connect error [ 1059.711469][T30252] ceph: No mds server is up or the cluster is laggy [ 1059.876347][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1059.878395][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1060.150346][ T61] libceph: connect (1)[c::]:6789 error -101 [ 1060.218234][ T61] libceph: mon0 (1)[c::]:6789 connect error [ 1060.314399][ T5993] libceph: connect (1)[c::]:6789 error -101 [ 1060.316838][ T5993] libceph: mon0 (1)[c::]:6789 connect error [ 1060.346093][T30268] ceph: No mds server is up or the cluster is laggy [ 1060.594090][ T5993] libceph: connect (1)[c::]:6789 error -101 [ 1060.597568][ T5993] libceph: mon0 (1)[c::]:6789 connect error [ 1060.658554][T30289] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1060.661505][T30289] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1060.822367][T30290] netlink: 'syz.3.8925': attribute type 4 has an invalid length. [ 1060.904705][T30276] ceph: No mds server is up or the cluster is laggy [ 1061.005737][T30290] netlink: 'syz.3.8925': attribute type 4 has an invalid length. [ 1061.212554][T30295] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1061.216390][T30295] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1061.350900][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 1061.353040][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 1061.709250][T30305] overlayfs: missing 'workdir' [ 1061.724553][T30304] overlayfs: missing 'lowerdir' [ 1062.285776][T30311] netlink: 'syz.0.8932': attribute type 4 has an invalid length. [ 1062.348275][T30312] netlink: 'syz.0.8932': attribute type 4 has an invalid length. [ 1062.631778][T30319] fuse: Unknown parameter 'grou00000000000000000000' [ 1064.207822][T29693] libceph: connect (1)[c::]:6789 error -101 [ 1064.219934][T29693] libceph: mon0 (1)[c::]:6789 connect error [ 1064.531696][T30334] ceph: No mds server is up or the cluster is laggy [ 1064.576835][ T61] libceph: connect (1)[c::]:6789 error -101 [ 1064.578961][ T61] libceph: mon0 (1)[c::]:6789 connect error [ 1065.037433][ T5993] libceph: connect (1)[c::]:6789 error -101 [ 1065.059799][ T5993] libceph: mon0 (1)[c::]:6789 connect error [ 1065.074178][ T5993] libceph: connect (1)[c::]:6789 error -101 [ 1065.076838][ T5993] libceph: mon0 (1)[c::]:6789 connect error [ 1065.216153][T30349] ceph: No mds server is up or the cluster is laggy [ 1065.305370][T30346] ceph: No mds server is up or the cluster is laggy [ 1065.367580][T30362] overlayfs: missing 'workdir' [ 1065.739228][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1065.741284][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1065.885415][T30373] netlink: 'syz.0.8942': attribute type 4 has an invalid length. [ 1065.914980][T30373] netlink: 'syz.0.8942': attribute type 4 has an invalid length. [ 1066.011120][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1066.013118][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1066.209778][T30378] overlayfs: missing 'lowerdir' [ 1066.426204][T30369] ceph: No mds server is up or the cluster is laggy [ 1066.989848][ T5993] libceph: connect (1)[c::]:6789 error -101 [ 1066.991950][ T5993] libceph: mon0 (1)[c::]:6789 connect error [ 1067.274766][ T5993] libceph: connect (1)[c::]:6789 error -101 [ 1067.277339][ T5993] libceph: mon0 (1)[c::]:6789 connect error [ 1067.380345][T30392] overlayfs: missing 'lowerdir' [ 1067.559115][T30386] ceph: No mds server is up or the cluster is laggy [ 1067.997559][T30404] netlink: 'syz.1.8948': attribute type 4 has an invalid length. [ 1068.173759][T30399] netlink: 'syz.1.8948': attribute type 4 has an invalid length. [ 1068.231010][T30408] netlink: 'syz.3.8950': attribute type 4 has an invalid length. [ 1068.284379][T30408] netlink: 'syz.3.8950': attribute type 4 has an invalid length. [ 1068.635458][T30407] netlink: 'syz.0.8951': attribute type 4 has an invalid length. [ 1068.657628][T30407] netlink: 'syz.0.8951': attribute type 4 has an invalid length. [ 1070.127526][T30431] netlink: 'syz.2.8957': attribute type 4 has an invalid length. [ 1070.172349][T30431] netlink: 'syz.2.8957': attribute type 4 has an invalid length. [ 1070.446390][T30438] fuse: Unknown parameter 'grou00000000000000000000' [ 1072.148172][T30445] netlink: 'syz.0.8960': attribute type 4 has an invalid length. [ 1072.174873][T30445] netlink: 'syz.0.8960': attribute type 4 has an invalid length. [ 1073.366991][T30458] fuse: Bad value for 'fd' [ 1073.688492][T30465] netlink: 'syz.2.8965': attribute type 4 has an invalid length. [ 1073.730202][T30465] netlink: 'syz.2.8965': attribute type 4 has an invalid length. [ 1077.595155][T30497] netlink: 'syz.2.8975': attribute type 4 has an invalid length. [ 1077.636202][T30497] netlink: 'syz.2.8975': attribute type 4 has an invalid length. [ 1078.910750][T30516] overlayfs: failed to resolve './file0': -2 [ 1078.938145][T30517] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1078.941074][T30517] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1080.248888][T30533] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1080.252832][T30533] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1080.294437][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1080.297262][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1080.578099][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1080.580293][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1080.989089][T30532] ceph: No mds server is up or the cluster is laggy [ 1081.398746][ T6024] libceph: connect (1)[c::]:6789 error -101 [ 1081.401733][ T6024] libceph: mon0 (1)[c::]:6789 connect error [ 1081.465996][T30549] overlayfs: missing 'workdir' [ 1081.679545][ T6024] libceph: connect (1)[c::]:6789 error -101 [ 1081.681766][ T6024] libceph: mon0 (1)[c::]:6789 connect error [ 1082.237351][T30542] ceph: No mds server is up or the cluster is laggy [ 1082.261070][ T6024] libceph: connect (1)[c::]:6789 error -101 [ 1082.267126][ T6024] libceph: mon0 (1)[c::]:6789 connect error [ 1082.510334][T30556] overlayfs: failed to resolve './file0': -2 [ 1087.137297][ T61] libceph: connect (1)[c::]:6789 error -101 [ 1087.141561][ T61] libceph: mon0 (1)[c::]:6789 connect error [ 1087.353677][T30596] netlink: 'syz.2.8998': attribute type 4 has an invalid length. [ 1087.424212][ T61] libceph: connect (1)[c::]:6789 error -101 [ 1087.427581][ T61] libceph: mon0 (1)[c::]:6789 connect error [ 1087.482710][T30597] netlink: 'syz.2.8998': attribute type 4 has an invalid length. [ 1087.663189][T30581] ceph: No mds server is up or the cluster is laggy [ 1088.507153][T30605] overlayfs: missing 'workdir' [ 1088.933653][T30611] fuse: Bad value for 'fd' [ 1089.828845][T30617] fuse: Bad value for 'fd' [ 1089.872174][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1089.874238][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1089.881612][T30618] netlink: 'syz.1.9003': attribute type 4 has an invalid length. [ 1090.034606][T30618] netlink: 'syz.1.9003': attribute type 4 has an invalid length. [ 1090.565849][T30616] ceph: No mds server is up or the cluster is laggy [ 1091.085327][ T9643] libceph: connect (1)[c::]:6789 error -101 [ 1091.087448][ T9643] libceph: mon0 (1)[c::]:6789 connect error [ 1092.462617][T30636] fuse: Unknown parameter 'group_id00000000000000000000' [ 1093.736124][T11716] libceph: connect (1)[c::]:6789 error -101 [ 1093.738394][T11716] libceph: mon0 (1)[c::]:6789 connect error [ 1094.380331][T30655] ceph: No mds server is up or the cluster is laggy [ 1094.680430][T11716] libceph: connect (1)[c::]:6789 error -101 [ 1094.682398][T11716] libceph: mon0 (1)[c::]:6789 connect error [ 1095.793863][T30684] fuse: Bad value for 'fd' [ 1097.163391][T30694] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1097.167823][T30694] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1097.496158][ T9643] libceph: connect (1)[c::]:6789 error -101 [ 1097.506841][ T9643] libceph: mon0 (1)[c::]:6789 connect error [ 1097.715069][T30703] fuse: Unknown parameter 'group_id00000000000000000000' [ 1097.787649][ T9643] libceph: connect (1)[c::]:6789 error -101 [ 1097.790455][ T9643] libceph: mon0 (1)[c::]:6789 connect error [ 1098.104210][T30698] ceph: No mds server is up or the cluster is laggy [ 1098.964754][T30718] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1098.972401][T30718] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1099.143465][T30717] netlink: 'syz.1.9027': attribute type 4 has an invalid length. [ 1099.154442][T30717] netlink: 'syz.1.9027': attribute type 4 has an invalid length. [ 1099.466232][ T9643] libceph: connect (1)[c::]:6789 error -101 [ 1099.477316][ T9643] libceph: mon0 (1)[c::]:6789 connect error [ 1099.754542][ T9643] libceph: connect (1)[c::]:6789 error -101 [ 1099.760774][ T9643] libceph: mon0 (1)[c::]:6789 connect error [ 1099.895539][T30733] overlayfs: missing 'lowerdir' [ 1100.167027][T30723] ceph: No mds server is up or the cluster is laggy [ 1100.394018][T30737] fuse: Bad value for 'fd' [ 1101.758573][T30747] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1101.761407][T30747] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1101.921322][T30752] netlink: 'syz.3.9033': attribute type 4 has an invalid length. [ 1101.940458][T30752] netlink: 'syz.3.9033': attribute type 4 has an invalid length. [ 1101.957826][T30753] fuse: Bad value for 'fd' [ 1103.592226][ T40] audit: type=1804 audit(2000000730.067:437): pid=30767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.9039" name="/newroot/200/bus/bus" dev="overlay" ino=1291 res=1 errno=0 [ 1103.660237][T30768] netlink: 'syz.2.9037': attribute type 4 has an invalid length. [ 1103.685757][T30769] netlink: 'syz.3.9040': attribute type 4 has an invalid length. [ 1103.723149][T30768] netlink: 'syz.2.9037': attribute type 4 has an invalid length. [ 1103.729092][T30769] netlink: 'syz.3.9040': attribute type 4 has an invalid length. [ 1104.096727][T30773] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1104.099777][T30773] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1104.639275][ T40] audit: type=1804 audit(2000000731.040:438): pid=30777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.9042" name="/newroot/201/bus/bus" dev="overlay" ino=1305 res=1 errno=0 [ 1105.227198][T30788] netlink: 'syz.3.9043': attribute type 4 has an invalid length. [ 1105.337944][T30788] netlink: 'syz.3.9043': attribute type 4 has an invalid length. [ 1106.141707][T29693] libceph: connect (1)[c::]:6789 error -101 [ 1106.144119][T29693] libceph: mon0 (1)[c::]:6789 connect error [ 1106.163016][T30800] fuse: Bad value for 'fd' [ 1106.418373][T29693] libceph: connect (1)[c::]:6789 error -101 [ 1106.421948][T29693] libceph: mon0 (1)[c::]:6789 connect error [ 1106.619870][T30792] ceph: No mds server is up or the cluster is laggy [ 1108.740694][ T5993] libceph: connect (1)[c::]:6789 error -101 [ 1108.741124][ T5993] libceph: mon0 (1)[c::]:6789 connect error [ 1108.763238][T19733] libceph: connect (1)[c::]:6789 error -101 [ 1108.763434][T19733] libceph: mon0 (1)[c::]:6789 connect error [ 1109.016607][ T5993] libceph: connect (1)[c::]:6789 error -101 [ 1109.018862][ T5993] libceph: mon0 (1)[c::]:6789 connect error [ 1109.040766][T19733] libceph: connect (1)[c::]:6789 error -101 [ 1109.043466][T19733] libceph: mon0 (1)[c::]:6789 connect error [ 1109.156877][T30809] ceph: No mds server is up or the cluster is laggy [ 1109.197592][T30816] ceph: No mds server is up or the cluster is laggy [ 1109.819399][T30837] netlink: 'syz.0.9055': attribute type 4 has an invalid length. [ 1109.836343][T30837] netlink: 'syz.0.9055': attribute type 4 has an invalid length. [ 1113.130039][T30856] netlink: 'syz.0.9061': attribute type 4 has an invalid length. [ 1113.162138][T30856] netlink: 'syz.0.9061': attribute type 4 has an invalid length. [ 1113.633125][T30860] netlink: 'syz.1.9062': attribute type 4 has an invalid length. [ 1113.661118][T30860] netlink: 'syz.1.9062': attribute type 4 has an invalid length. [ 1114.172573][T29693] libceph: connect (1)[c::]:6789 error -101 [ 1114.175006][T29693] libceph: mon0 (1)[c::]:6789 connect error [ 1114.449895][T29693] libceph: connect (1)[c::]:6789 error -101 [ 1114.452709][T29693] libceph: mon0 (1)[c::]:6789 connect error [ 1114.866102][T30885] netlink: 'syz.3.9068': attribute type 4 has an invalid length. [ 1114.893506][T30871] ceph: No mds server is up or the cluster is laggy [ 1114.903030][T30885] netlink: 'syz.3.9068': attribute type 4 has an invalid length. [ 1115.624678][ T34] libceph: connect (1)[c::]:6789 error -101 [ 1115.626845][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 1115.795723][T30899] netlink: 'syz.1.9071': attribute type 4 has an invalid length. [ 1115.855996][T30899] netlink: 'syz.1.9071': attribute type 4 has an invalid length. [ 1115.904438][ T34] libceph: connect (1)[c::]:6789 error -101 [ 1115.907206][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 1116.230303][T30895] ceph: No mds server is up or the cluster is laggy [ 1116.306432][T30905] netlink: 'syz.3.9072': attribute type 4 has an invalid length. [ 1116.326123][T30905] netlink: 'syz.3.9072': attribute type 4 has an invalid length. [ 1116.499494][ T40] audit: type=1804 audit(2000000742.138:439): pid=30912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.9075" name="/newroot/183/bus/bus" dev="overlay" ino=1176 res=1 errno=0 [ 1118.572222][ T40] audit: type=1804 audit(2000000744.064:440): pid=30924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.9078" name="/newroot/210/bus/bus" dev="overlay" ino=1368 res=1 errno=0 [ 1121.969804][ T40] audit: type=1804 audit(2000000747.206:441): pid=30952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.9084" name="/newroot/311/bus/bus" dev="overlay" ino=2090 res=1 errno=0 [ 1123.354851][ T40] audit: type=1804 audit(2000000748.543:442): pid=30971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.9088" name="/newroot/423/bus/bus" dev="overlay" ino=2865 res=1 errno=0 [ 1124.474532][T30984] validate_nla: 2 callbacks suppressed [ 1124.474567][T30984] netlink: 'syz.0.9090': attribute type 4 has an invalid length. [ 1124.519599][T30984] netlink: 'syz.0.9090': attribute type 4 has an invalid length. [ 1124.535341][ T9643] libceph: connect (1)[c::]:6789 error -101 [ 1124.537361][ T9643] libceph: mon0 (1)[c::]:6789 connect error [ 1124.813407][ T9643] libceph: connect (1)[c::]:6789 error -101 [ 1124.816079][ T9643] libceph: mon0 (1)[c::]:6789 connect error [ 1124.982599][T30993] fuse: Bad value for 'fd' [ 1125.239128][T30983] ceph: No mds server is up or the cluster is laggy [ 1125.434816][T30995] netlink: 'syz.0.9093': attribute type 4 has an invalid length. [ 1125.455409][T30995] netlink: 'syz.0.9093': attribute type 4 has an invalid length. [ 1125.755865][ T40] audit: type=1804 audit(2000000750.787:443): pid=30999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.9094" name="/newroot/314/bus/bus" dev="overlay" ino=2115 res=1 errno=0 [ 1126.235501][ T40] audit: type=1804 audit(2000000751.236:444): pid=31009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.9095" name="/newroot/425/bus/bus" dev="overlay" ino=2884 res=1 errno=0 [ 1127.060982][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 1127.063030][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 1127.430495][ T40] audit: type=1804 audit(2000000752.358:445): pid=31024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.9101" name="/newroot/190/bus/bus" dev="overlay" ino=1238 res=1 errno=0 [ 1127.659283][T19733] libceph: connect (1)[c::]:6789 error -101 [ 1127.661355][T19733] libceph: mon0 (1)[c::]:6789 connect error [ 1127.936490][T25830] libceph: connect (1)[c::]:6789 error -101 [ 1127.938595][T25830] libceph: mon0 (1)[c::]:6789 connect error [ 1128.113955][T31022] ceph: No mds server is up or the cluster is laggy [ 1128.657893][ T34] libceph: connect (1)[c::]:6789 error -101 [ 1128.660008][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 1128.674333][ T40] audit: type=1804 audit(2000000753.527:446): pid=31039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.9103" name="/newroot/316/bus/bus" dev="overlay" ino=2135 res=1 errno=0 [ 1129.348686][T31040] ceph: No mds server is up or the cluster is laggy [ 1129.401813][ T53] libceph: connect (1)[c::]:6789 error -101 [ 1129.685865][T31050] netlink: 'syz.3.9106': attribute type 4 has an invalid length. [ 1129.708992][T31050] netlink: 'syz.3.9106': attribute type 4 has an invalid length. [ 1129.818549][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 1130.097926][T31056] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1130.101678][T31056] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1130.209484][T31058] netlink: 'syz.1.9104': attribute type 4 has an invalid length. [ 1130.226731][T31058] netlink: 'syz.1.9104': attribute type 4 has an invalid length. [ 1130.280597][T25830] libceph: connect (1)[c::]:6789 error -101 [ 1130.288543][T25830] libceph: mon0 (1)[c::]:6789 connect error [ 1130.567724][T25830] libceph: connect (1)[c::]:6789 error -101 [ 1130.571731][T25830] libceph: mon0 (1)[c::]:6789 connect error [ 1130.859794][T31057] ceph: No mds server is up or the cluster is laggy [ 1130.900028][T31066] overlayfs: missing 'lowerdir' [ 1131.047282][ T40] audit: type=1804 audit(2000000755.724:447): pid=31070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.9109" name="/newroot/429/bus/bus" dev="overlay" ino=2917 res=1 errno=0 [ 1131.298313][ T40] audit: type=1804 audit(2000000755.976:448): pid=31077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.9113" name="/newroot/218/bus/bus" dev="overlay" ino=1423 res=1 errno=0 [ 1132.407158][T31071] netlink: 'syz.3.9111': attribute type 4 has an invalid length. [ 1132.416469][T31071] netlink: 'syz.3.9111': attribute type 4 has an invalid length. [ 1133.401263][ T40] audit: type=1804 audit(2000000757.743:449): pid=31088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.9117" name="/newroot/319/bus/bus" dev="overlay" ino=2159 res=1 errno=0 [ 1133.957879][ T53] libceph: connect (1)[c::]:6789 error -101 [ 1133.969097][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 1134.248612][ T53] libceph: connect (1)[c::]:6789 error -101 [ 1134.252470][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 1134.429080][T31098] ceph: No mds server is up or the cluster is laggy [ 1134.474568][T31105] netlink: 'syz.0.9116': attribute type 4 has an invalid length. [ 1134.520445][T31105] netlink: 'syz.0.9116': attribute type 4 has an invalid length. [ 1136.689835][ T40] audit: type=1804 audit(2000000761.016:450): pid=31133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.9125" name="/newroot/433/bus/bus" dev="overlay" ino=2948 res=1 errno=0 [ 1136.936031][T31136] fuse: Bad value for 'fd' [ 1138.300172][T31143] netlink: 'syz.2.9128': attribute type 4 has an invalid length. [ 1138.454016][T31149] netlink: 'syz.2.9128': attribute type 4 has an invalid length. [ 1139.181646][T31151] pimreg: entered allmulticast mode [ 1139.583122][ T831] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1139.754748][ T831] usb 6-1: Using ep0 maxpacket: 16 [ 1139.759125][ T831] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 1139.764093][ T831] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1139.771733][ T831] usb 6-1: config 0 has no interface number 0 [ 1139.787775][ T831] usb 6-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1139.791979][ T831] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.797037][ T831] usb 6-1: Product: syz [ 1139.799102][ T831] usb 6-1: Manufacturer: syz [ 1139.803465][ T831] usb 6-1: SerialNumber: syz [ 1139.811033][ T831] usb 6-1: config 0 descriptor?? [ 1140.035092][ T53] usb 6-1: USB disconnect, device number 57 [ 1140.241371][T31176] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9140'. [ 1140.663842][ T53] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1140.837474][T31212] netlink: 84 bytes leftover after parsing attributes in process `syz.2.9151'. [ 1140.846455][ T53] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1140.849234][ T53] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1140.866550][ T53] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1140.870011][ T53] usb 5-1: config 220 has no interface number 2 [ 1140.872046][ T53] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1140.950433][ T53] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1140.957470][ T53] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1140.959715][ T53] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1140.968795][ T53] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1140.971631][ T53] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.983030][ T53] usb 5-1: Product: syz [ 1140.984491][ T53] usb 5-1: Manufacturer: syz [ 1140.985979][ T53] usb 5-1: SerialNumber: syz [ 1141.059103][ T40] audit: type=1326 audit(2000000765.102:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31223 comm="syz.1.9157" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76579 code=0x7ffc0000 [ 1141.066240][ T40] audit: type=1326 audit(2000000765.102:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31223 comm="syz.1.9157" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76579 code=0x7ffc0000 [ 1141.080472][ T40] audit: type=1326 audit(2000000765.102:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31223 comm="syz.1.9157" exe="/syz-executor" sig=0 arch=40000003 syscall=374 compat=1 ip=0xf7f76579 code=0x7ffc0000 [ 1141.087805][ T40] audit: type=1326 audit(2000000765.102:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31223 comm="syz.1.9157" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76579 code=0x7ffc0000 [ 1141.097430][ T40] audit: type=1326 audit(2000000765.102:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31223 comm="syz.1.9157" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76579 code=0x7ffc0000 [ 1141.227102][ T53] usb 5-1: selecting invalid altsetting 0 [ 1141.234781][ T53] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1141.237126][ T53] uvcvideo 5-1:220.0: No valid video chain found. [ 1141.243859][ T53] usb 5-1: selecting invalid altsetting 0 [ 1141.246342][ T53] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 1141.250701][ T53] usb 5-1: USB disconnect, device number 60 [ 1141.373722][T25174] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.447195][T25174] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.554806][T25174] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.632788][T25174] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.767684][T25174] bridge_slave_1: left allmulticast mode [ 1141.770330][T25174] bridge_slave_1: left promiscuous mode [ 1141.772817][T25174] bridge0: port 2(bridge_slave_1) entered disabled state [ 1141.778225][T25174] bridge_slave_0: left allmulticast mode [ 1141.786352][T25174] bridge_slave_0: left promiscuous mode [ 1141.788311][T25174] bridge0: port 1(bridge_slave_0) entered disabled state [ 1141.904075][T31242] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1141.907996][T31242] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1141.911033][T31242] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1141.913767][T31242] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1141.916430][T31242] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1142.177952][T25174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1142.183157][T25174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1142.186878][T25174] bond0 (unregistering): Released all slaves [ 1142.342212][T31250] syz_tun: entered allmulticast mode [ 1142.372417][T31241] chnl_net:caif_netlink_parms(): no params data found [ 1142.491157][T31241] bridge0: port 1(bridge_slave_0) entered blocking state [ 1142.502873][T31241] bridge0: port 1(bridge_slave_0) entered disabled state [ 1142.505225][T31241] bridge_slave_0: entered allmulticast mode [ 1142.508056][T31241] bridge_slave_0: entered promiscuous mode [ 1142.511136][T31241] bridge0: port 2(bridge_slave_1) entered blocking state [ 1142.513606][T31241] bridge0: port 2(bridge_slave_1) entered disabled state [ 1142.515918][T31241] bridge_slave_1: entered allmulticast mode [ 1142.518522][T31241] bridge_slave_1: entered promiscuous mode [ 1142.567580][T31241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1142.583760][T31241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1142.630841][T31248] syz_tun: left allmulticast mode [ 1142.638242][T31241] team0: Port device team_slave_0 added [ 1142.641482][T31241] team0: Port device team_slave_1 added [ 1142.670637][T31241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1142.672879][T31241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1142.684719][T31241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1142.689174][T31241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1142.691342][T31241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1142.718074][T31241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1142.763284][T31241] hsr_slave_0: entered promiscuous mode [ 1142.765544][T31241] hsr_slave_1: entered promiscuous mode [ 1142.767651][T31241] debugfs: 'hsr0' already exists in 'hsr' [ 1142.769579][T31241] Cannot create hsr debugfs directory [ 1143.819172][T31241] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1143.841884][T31241] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1143.865972][T31241] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1143.870432][T31241] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1143.983628][T31345] virtio-fs: tag not found [ 1144.085943][T26607] Bluetooth: hci3: command tx timeout [ 1144.091032][T31241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1144.124744][T31241] 8021q: adding VLAN 0 to HW filter on device team0 [ 1144.133414][ T1186] bridge0: port 1(bridge_slave_0) entered blocking state [ 1144.135745][ T1186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1144.153418][ T1186] bridge0: port 2(bridge_slave_1) entered blocking state [ 1144.155750][ T1186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1144.408478][T31241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1144.474229][T31241] veth0_vlan: entered promiscuous mode [ 1144.486424][T31241] veth1_vlan: entered promiscuous mode [ 1144.522692][T31241] veth0_macvtap: entered promiscuous mode [ 1144.531337][T31241] veth1_macvtap: entered promiscuous mode [ 1144.554528][T31241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1144.565187][T31241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1144.574584][T24585] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.577784][T24585] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.580898][T24585] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.584347][T24585] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.681443][T24585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1144.686865][T24585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1144.784493][T25186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1144.788077][T25186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1145.516962][T31369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9188'. [ 1145.724493][T25174] hsr_slave_0: left promiscuous mode [ 1145.726798][T25174] hsr_slave_1: left promiscuous mode [ 1145.728967][T25174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1145.732820][T25174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1145.744514][T25174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1145.746956][T25174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1145.758327][T25174] veth1_macvtap: left promiscuous mode [ 1145.760151][T25174] veth0_macvtap: left promiscuous mode [ 1145.763210][T25174] veth1_vlan: left promiscuous mode [ 1145.767355][T25174] veth0_vlan: left promiscuous mode [ 1145.850693][T25174] pimreg (unregistering): left allmulticast mode [ 1146.010465][T31381] futex_wake_op: syz.3.9193 tries to shift op by -1; fix this program [ 1146.217779][T26607] Bluetooth: hci2: unexpected event for opcode 0x0c56 [ 1146.227334][T31384] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 1146.229541][T31384] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1146.234244][T31384] vhci_hcd vhci_hcd.0: Device attached [ 1146.240286][T31389] vhci_hcd: connection closed [ 1146.241727][ T13] vhci_hcd vhci_hcd.3: stop threads [ 1146.245004][ T13] vhci_hcd vhci_hcd.3: release socket [ 1146.247034][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 1146.319394][T26607] Bluetooth: hci3: command tx timeout [ 1146.379071][T25174] team0 (unregistering): Port device team_slave_1 removed [ 1146.498862][T25174] team0 (unregistering): Port device team_slave_0 removed [ 1146.567260][T19733] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1146.783707][T19733] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1146.787159][T19733] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1146.791638][T19733] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1146.812780][T19733] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1146.815968][T19733] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.830918][T19733] usb 5-1: config 0 descriptor?? [ 1146.957175][T31394] nfs: Unknown parameter 'X' [ 1147.302625][T31400] 9p: Could not find request transport: 0xffffffffffffffff [ 1147.359885][T19733] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1147.498694][T26607] Bluetooth: hci0: unexpected event for opcode 0x080b [ 1147.659466][T26607] Bluetooth: hci0: unexpected event for opcode 0x2002 [ 1147.871897][ T61] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1147.950361][ C3] plantronics 0003:047F:FFFF.0022: hid_field_extract() called with n (132) > 32! (swapper/3) [ 1148.010930][T25830] usb 7-1: new full-speed USB device number 50 using dummy_hcd [ 1148.053719][ T61] usb 6-1: Using ep0 maxpacket: 32 [ 1148.056728][ T61] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1148.059978][ T61] usb 6-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 1148.063008][ T61] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.066677][ T61] usb 6-1: config 0 descriptor?? [ 1148.070656][ T61] usb 6-1: bad CDC descriptors [ 1148.169905][ T53] usb 5-1: USB disconnect, device number 61 [ 1148.184012][T25830] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1148.191382][T25830] usb 7-1: not running at top speed; connect to a high speed hub [ 1148.206166][T25830] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1148.209283][T25830] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1148.214772][T25830] usb 7-1: string descriptor 0 read error: -22 [ 1148.217011][T25830] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1148.220779][T25830] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.236016][T25830] usb 7-1: 0:2 : does not exist [ 1148.286369][T19733] usb 6-1: USB disconnect, device number 58 [ 1148.535061][T26607] Bluetooth: hci3: command tx timeout [ 1148.754205][T31425] sit0: entered promiscuous mode [ 1148.758585][T31425] netlink: 'syz.0.9208': attribute type 1 has an invalid length. [ 1148.761994][T31425] netlink: 1 bytes leftover after parsing attributes in process `syz.0.9208'. [ 1148.925359][T31436] binder_alloc: 31435: binder_alloc_buf, no vma [ 1148.947199][T31438] input: syz0 as /devices/virtual/input/input40 [ 1149.123811][T25830] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1149.130703][T25830] usb 7-1: 5:0: failed to get current value for ch 1 (-22) [ 1149.170482][T25830] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1149.194615][T25830] usb 7-1: USB disconnect, device number 50 [ 1149.326435][ T9643] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 1149.499942][ T9643] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1149.502845][ T9643] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1149.519072][ T9643] usb 5-1: config 0 descriptor?? [ 1150.656635][ T9643] pegasus 5-1:0.0: probe with driver pegasus failed with error -71 [ 1150.662319][ T9643] usb 5-1: USB disconnect, device number 62 [ 1150.759527][T26607] Bluetooth: hci3: command tx timeout [ 1154.407132][T31520] Bluetooth: MGMT ver 1.23 [ 1154.499470][T31522] futex_wake_op: CljH¸ë™ªŽºürAÊ tries to shift op by 32; fix this program [ 1154.673985][ T9643] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1154.846532][ T9643] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1154.849869][ T9643] usb 7-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1154.852745][ T9643] usb 7-1: config 220 interface 0 has no altsetting 0 [ 1154.856811][ T9643] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1154.859735][ T9643] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.862223][ T9643] usb 7-1: Product: syz [ 1154.863545][ T9643] usb 7-1: Manufacturer: syz [ 1154.865022][ T9643] usb 7-1: SerialNumber: syz [ 1155.116182][ T9643] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1155.118508][ T9643] uvcvideo 7-1:220.0: No valid video chain found. [ 1155.121481][ T9643] usb 7-1: USB disconnect, device number 51 [ 1155.230187][ T40] audit: type=1326 audit(2000000778.341:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31542 comm="syz.0.9254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 1155.244758][ T40] audit: type=1326 audit(2000000778.351:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31542 comm="syz.0.9254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 1155.255607][ T40] audit: type=1326 audit(2000000778.351:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31542 comm="syz.0.9254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 1155.266453][ T40] audit: type=1326 audit(2000000778.351:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31542 comm="syz.0.9254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 1155.269476][T31545] veth0: entered promiscuous mode [ 1155.277302][ T40] audit: type=1326 audit(2000000778.351:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31542 comm="syz.0.9254" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 1155.278295][T26607] Bluetooth: hci2: unexpected event for opcode 0x0411 [ 1155.280763][T31545] veth0: left promiscuous mode [ 1155.292149][ T40] audit: type=1326 audit(2000000778.351:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31542 comm="syz.0.9254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 1155.304978][ T40] audit: type=1326 audit(2000000778.351:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31542 comm="syz.0.9254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 1155.311451][ T40] audit: type=1326 audit(2000000778.351:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31542 comm="syz.0.9254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 1155.322648][ T40] audit: type=1326 audit(2000000778.351:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31542 comm="syz.0.9254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 1155.335870][ T40] audit: type=1326 audit(2000000778.351:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31542 comm="syz.0.9254" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 1155.571029][T31554] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1155.580655][T31554] Error validating options; rc = [-22] [ 1157.262226][ T5993] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 1157.445236][ T5993] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 1157.448573][ T5993] usb 5-1: config 1 has no interface number 0 [ 1157.450547][ T5993] usb 5-1: config 1 interface 105 has no altsetting 0 [ 1157.456523][ T5993] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1157.459364][ T5993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.464842][ T5993] usb 5-1: Product: syz [ 1157.475060][ T5993] usb 5-1: Manufacturer: syz [ 1157.476694][ T5993] usb 5-1: SerialNumber: syz [ 1158.079726][T31584] af_packet: tpacket_rcv: packet too big, clamped from 54 to 4294967286. macoff=82 [ 1158.250795][T26607] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1158.374603][T26607] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1158.378025][ T5993] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1158.380781][T26607] Bluetooth: hci3: Injecting HCI hardware error event [ 1158.387363][T31242] Bluetooth: hci3: hardware error 0x00 [ 1158.392456][ T5993] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1158.396355][ T5993] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1158.403243][ T5993] aqc111 5-1:1.105 eth2: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, ec:4a:11:41:20:d7 [ 1158.429027][ T5993] usb 5-1: USB disconnect, device number 63 [ 1158.431725][ T5993] aqc111 5-1:1.105 eth2: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1158.642105][ T5993] aqc111 5-1:1.105 eth2 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1158.645079][ T5993] aqc111 5-1:1.105 eth2 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1158.648003][ T5993] aqc111 5-1:1.105 eth2 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1159.547986][T31606] netlink: 37 bytes leftover after parsing attributes in process `syz.3.9278'. [ 1160.770348][T31242] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1163.807651][ T40] kauditd_printk_skb: 43 callbacks suppressed [ 1163.807666][ T40] audit: type=1800 audit(2000000786.364:509): pid=31671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.9303" name="/" dev="fuse" ino=4 res=0 errno=0 [ 1163.914510][T31678] virtio-fs: tag not found [ 1165.305133][T26607] Bluetooth: hci2: command 0x0406 tx timeout [ 1186.207388][ T5351] udevd invoked oom-killer: gfp_mask=0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), order=0, oom_score_adj=-1000 [ 1186.211286][ T5351] CPU: 3 UID: 0 PID: 5351 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 1186.211304][ T5351] Tainted: [L]=SOFTLOCKUP [ 1186.211309][ T5351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1186.211315][ T5351] Call Trace: [ 1186.211320][ T5351] [ 1186.211325][ T5351] dump_stack_lvl+0x100/0x190 [ 1186.211343][ T5351] dump_header+0xfb/0x606 [ 1186.211355][ T5351] oom_kill_process.cold+0xd/0x321 [ 1186.211368][ T5351] out_of_memory+0x340/0x14f0 [ 1186.211385][ T5351] ? __pfx_out_of_memory+0x10/0x10 [ 1186.211403][ T5351] __alloc_frozen_pages_noprof+0x1d30/0x2410 [ 1186.211425][ T5351] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1186.211441][ T5351] ? alloc_pages_mpol+0x25a/0x550 [ 1186.211464][ T5351] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1186.211478][ T5351] ? policy_nodemask+0xed/0x4f0 [ 1186.211494][ T5351] alloc_pages_mpol+0x1fb/0x550 [ 1186.211511][ T5351] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1186.211527][ T5351] ? find_held_lock+0x2b/0x80 [ 1186.211538][ T5351] ? filemap_get_entry+0x1a7/0x3b0 [ 1186.211553][ T5351] ? filemap_get_entry+0x1a7/0x3b0 [ 1186.211569][ T5351] folio_alloc_noprof+0x22/0x330 [ 1186.211587][ T5351] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 1186.211599][ T5351] ? __pfx_filemap_get_entry+0x10/0x10 [ 1186.211615][ T5351] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 1186.211631][ T5351] __filemap_get_folio_mpol+0x6a4/0xe70 [ 1186.211651][ T5351] filemap_fault+0x8b6/0x37c0 [ 1186.211668][ T5351] ? __kasan_slab_free+0x5f/0x80 [ 1186.211683][ T5351] ? __pfx_filemap_fault+0x10/0x10 [ 1186.211701][ T5351] ? __pfx_filemap_map_pages+0x10/0x10 [ 1186.211719][ T5351] __do_fault+0x10d/0x550 [ 1186.211735][ T5351] do_fault+0xaf9/0x1990 [ 1186.211755][ T5351] __handle_mm_fault+0x1807/0x2b50 [ 1186.211770][ T5351] ? reacquire_held_locks+0xce/0x1e0 [ 1186.211785][ T5351] ? __pfx___handle_mm_fault+0x10/0x10 [ 1186.211800][ T5351] ? lock_vma_under_rcu+0x17c/0x5a0 [ 1186.211820][ T5351] handle_mm_fault+0x36d/0xa20 [ 1186.211835][ T5351] do_user_addr_fault+0x5a3/0x12f0 [ 1186.211851][ T5351] exc_page_fault+0x6f/0xd0 [ 1186.211865][ T5351] asm_exc_page_fault+0x26/0x30 [ 1186.211876][ T5351] RIP: 0033:0x7f7b57ea7420 [ 1186.211891][ T5351] Code: Unable to access opcode bytes at 0x7f7b57ea73f6. [ 1186.211896][ T5351] RSP: 002b:00007ffddaf38558 EFLAGS: 00010246 [ 1186.211906][ T5351] RAX: 00007f7b585726e8 RBX: 0000000000000bb8 RCX: 0000000000000bb8 [ 1186.211913][ T5351] RDX: 0000000000000008 RSI: 00007ffddaf38690 RDI: 000000000000000b [ 1186.211919][ T5351] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1186.211926][ T5351] R10: 00007f7b5863a000 R11: 0000000000000202 R12: 0000000000000000 [ 1186.211932][ T5351] R13: 0000561528a20100 R14: 0000000000000000 R15: 0000000000000000 [ 1186.211946][ T5351] [ 1186.211951][ T5351] Mem-Info: [ 1186.329393][ T5351] active_anon:28024 inactive_anon:27712 isolated_anon:0 [ 1186.329393][ T5351] active_file:0 inactive_file:101 isolated_file:0 [ 1186.329393][ T5351] unevictable:18142 dirty:0 writeback:0 [ 1186.329393][ T5351] slab_reclaimable:8404 slab_unreclaimable:72658 [ 1186.329393][ T5351] mapped:26224 shmem:55520 pagetables:1234 [ 1186.329393][ T5351] sec_pagetables:351 bounce:0 [ 1186.329393][ T5351] kernel_misc_reclaimable:0 [ 1186.329393][ T5351] free:15302 free_pcp:276 free_cma:0 [ 1186.363852][ T5351] Node 0 active_anon:6356kB inactive_anon:6932kB active_file:0kB inactive_file:68kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:3100kB dirty:0kB writeback:0kB shmem:16388kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8768kB pagetables:1952kB sec_pagetables:1188kB all_unreclaimable? yes Balloon:0kB [ 1186.384259][ T5351] Node 1 active_anon:109404kB inactive_anon:100252kB active_file:0kB inactive_file:396kB unevictable:69032kB isolated(anon):0kB isolated(file):0kB mapped:101796kB dirty:0kB writeback:0kB shmem:205692kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3680kB pagetables:2984kB sec_pagetables:216kB all_unreclaimable? yes Balloon:0kB [ 1186.425174][ T5351] Node 0 DMA free:1532kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:292kB inactive_anon:384kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:8kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1186.441297][ T5351] lowmem_reserve[]: 0 288 288 288 288 [ 1186.443056][ T5351] Node 0 DMA32 free:14232kB boost:24576kB min:37796kB low:41100kB high:44404kB reserved_highatomic:4096KB free_highatomic:0KB active_anon:6004kB inactive_anon:6608kB active_file:28kB inactive_file:16kB unevictable:3536kB writepending:0kB zspages:616kB present:1032196kB managed:295104kB mlocked:0kB bounce:0kB free_pcp:184kB local_pcp:0kB free_cma:0kB [ 1186.470732][ T5351] lowmem_reserve[]: 0 0 0 0 0 [ 1186.472307][ T5351] Node 1 DMA32 free:44980kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:113816kB inactive_anon:95840kB active_file:0kB inactive_file:280kB unevictable:69032kB writepending:0kB zspages:9036kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:896kB local_pcp:240kB free_cma:0kB [ 1186.488176][ T5351] lowmem_reserve[]: 0 0 0 0 0 [ 1186.489760][ T5351] Node 0 DMA: 45*4kB (U) 17*8kB (U) 12*16kB (U) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 1532kB [ 1186.502145][ T5351] Node 0 DMA32: 124*4kB (UME) 184*8kB (ME) 224*16kB (UME) 140*32kB (M) 45*64kB (ME) 10*128kB (ME) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 14192kB [ 1186.520909][ T5351] Node 1 DMA32: 107*4kB (UM) 5*8kB (M) 100*16kB (UM) 327*32kB (UME) 138*64kB (UE) 62*128kB (UE) 31*256kB (U) 15*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 44916kB [ 1186.530291][ T5351] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1186.533312][ T5351] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1186.538634][ T5351] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1186.541632][ T5351] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1186.544545][ T5351] 73258 total pagecache pages [ 1186.556398][ T5351] 1271 pages in swap cache [ 1186.557861][ T5351] Free swap = 84kB [ 1186.559149][ T5351] Total swap = 124996kB [ 1186.560513][ T5351] 524155 pages RAM [ 1186.561728][ T5351] 0 pages HighMem/MovableOnly [ 1186.563237][ T5351] 209486 pages reserved [ 1186.564612][ T5351] 0 pages cma reserved [ 1186.565922][ T5351] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz0,task=syz.0.9300,pid=31665,uid=0 [ 1186.610043][ T5351] Out of memory: Killed process 31665 (syz.0.9300) total-vm:102124kB, anon-rss:280kB, file-rss:20640kB, shmem-rss:11392kB, UID:0 pgtables:208kB oom_score_adj:1000 [ 1186.720788][T31684] syz.2.9305: page allocation failure: order:0, mode:0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1186.725482][T31684] CPU: 0 UID: 0 PID: 31684 Comm: syz.2.9305 Tainted: G L syzkaller #0 PREEMPT(full) [ 1186.725503][T31684] Tainted: [L]=SOFTLOCKUP [ 1186.725507][T31684] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1186.725514][T31684] Call Trace: [ 1186.725520][T31684] [ 1186.725525][T31684] dump_stack_lvl+0x100/0x190 [ 1186.725542][T31684] warn_alloc.cold+0x95/0x1c1 [ 1186.725561][T31684] ? __pfx_warn_alloc+0x10/0x10 [ 1186.725574][T31684] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1186.725598][T31684] __alloc_frozen_pages_noprof+0x1442/0x2410 [ 1186.725617][T31684] ? __lock_acquire+0x4a5/0x2630 [ 1186.725633][T31684] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1186.725648][T31684] ? __lock_acquire+0x4a5/0x2630 [ 1186.725667][T31684] ? find_held_lock+0x2b/0x80 [ 1186.725680][T31684] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1186.725693][T31684] ? policy_nodemask+0xed/0x4f0 [ 1186.725711][T31684] alloc_pages_mpol+0x1fb/0x550 [ 1186.725728][T31684] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1186.725745][T31684] ? __pte_offset_map_lock+0x174/0x320 [ 1186.725763][T31684] folio_alloc_mpol_noprof+0x36/0x340 [ 1186.725781][T31684] shmem_alloc_folio+0x135/0x160 [ 1186.725793][T31684] shmem_alloc_and_add_folio+0x371/0xd40 [ 1186.725811][T31684] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1186.725826][T31684] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 1186.725841][T31684] ? do_fault+0x6a4/0x1990 [ 1186.725859][T31684] shmem_get_folio_gfp+0x6ab/0x1900 [ 1186.725876][T31684] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1186.725890][T31684] ? timestamp_truncate+0x22e/0x2f0 [ 1186.725904][T31684] ? __pfx_timestamp_truncate+0x10/0x10 [ 1186.725920][T31684] shmem_write_begin+0x1a4/0x420 [ 1186.725934][T31684] ? rcu_is_watching+0x12/0xc0 [ 1186.725946][T31684] ? __pfx_shmem_write_begin+0x10/0x10 [ 1186.725960][T31684] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 1186.725982][T31684] generic_perform_write+0x292/0xa40 [ 1186.726000][T31684] ? __pfx_generic_perform_write+0x10/0x10 [ 1186.726014][T31684] ? generic_update_time+0xcf/0xf0 [ 1186.726029][T31684] ? mnt_put_write_access_file+0x4e/0x100 [ 1186.726042][T31684] ? file_update_time_flags+0x31f/0x510 [ 1186.726059][T31684] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1186.726075][T31684] shmem_file_write_iter+0x10e/0x140 [ 1186.726092][T31684] __kernel_write_iter+0x2ac/0x920 [ 1186.726106][T31684] ? __pfx___kernel_write_iter+0x10/0x10 [ 1186.726118][T31684] ? cgroup1_freezing+0x12c/0x3b0 [ 1186.726138][T31684] ? cgroup1_freezing+0x136/0x3b0 [ 1186.726155][T31684] ? freezing_slow_path+0xb5/0x1a0 [ 1186.726168][T31684] dump_user_range+0x3f9/0xb50 [ 1186.726184][T31684] ? __pfx_dump_user_range+0x10/0x10 [ 1186.726200][T31684] ? __pfx_writenote+0x10/0x10 [ 1186.726217][T31684] elf_core_dump+0x31b0/0x4250 [ 1186.726238][T31684] ? __pfx_elf_core_dump+0x10/0x10 [ 1186.726251][T31684] ? vfs_coredump+0x1f01/0x5530 [ 1186.726262][T31684] ? get_signal+0x1f2a/0x21e0 [ 1186.726274][T31684] ? arch_do_signal_or_restart+0x91/0x770 [ 1186.726293][T31684] ? irqentry_exit+0x1f8/0x670 [ 1186.726305][T31684] ? asm_exc_page_fault+0x26/0x30 [ 1186.726324][T31684] ? mas_ascend+0x53d/0xb30 [ 1186.726353][T31684] ? vfs_coredump+0x276c/0x5530 [ 1186.726364][T31684] vfs_coredump+0x276c/0x5530 [ 1186.726382][T31684] ? __pfx_vfs_coredump+0x10/0x10 [ 1186.726393][T31684] ? __lock_acquire+0x4a5/0x2630 [ 1186.726411][T31684] ? __lock_acquire+0x4a5/0x2630 [ 1186.726427][T31684] ? lock_acquire+0x17c/0x330 [ 1186.726444][T31684] ? lock_acquire+0x17c/0x330 [ 1186.726461][T31684] ? bpf_ksym_find+0x124/0x1c0 [ 1186.726475][T31684] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1186.726492][T31684] ? arch_stack_walk+0xa6/0xf0 [ 1186.726510][T31684] ? stack_trace_save+0x8e/0xc0 [ 1186.726523][T31684] ? __pfx_stack_trace_save+0x10/0x10 [ 1186.726535][T31684] ? stack_depot_save_flags+0x27/0x9c0 [ 1186.726553][T31684] ? __lock_acquire+0x4a5/0x2630 [ 1186.726592][T31684] ? proc_coredump_connector+0x2d3/0x4f0 [ 1186.726604][T31684] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1186.726619][T31684] ? rcu_is_watching+0x12/0xc0 [ 1186.726632][T31684] get_signal+0x1f2a/0x21e0 [ 1186.726650][T31684] ? __pfx_get_signal+0x10/0x10 [ 1186.726667][T31684] arch_do_signal_or_restart+0x91/0x770 [ 1186.726697][T31684] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1186.726717][T31684] ? do_user_addr_fault+0x8d6/0x12f0 [ 1186.726733][T31684] irqentry_exit+0x1f8/0x670 [ 1186.726748][T31684] asm_exc_page_fault+0x26/0x30 [ 1186.726759][T31684] RIP: 0023:0xf73bd579 [ 1186.726769][T31684] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 1186.726780][T31684] RSP: 002b:00000000fffffe70 EFLAGS: 00010282 [ 1186.726789][T31684] RAX: 0000000000000000 RBX: 0000000000008000 RCX: 00000000fffffe70 [ 1186.726796][T31684] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1186.726803][T31684] RBP: 00000000f53c55ec R08: 0000000000000000 R09: 0000000000000000 [ 1186.726809][T31684] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1186.726816][T31684] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1186.726830][T31684] [ 1186.726856][T31684] Mem-Info: [ 1186.744291][ T5652] dhcpcd invoked oom-killer: gfp_mask=0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), order=0, oom_score_adj=0 [ 1186.898661][ T5652] CPU: 3 UID: 101 PID: 5652 Comm: dhcpcd Tainted: G L syzkaller #0 PREEMPT(full) [ 1186.898680][ T5652] Tainted: [L]=SOFTLOCKUP [ 1186.898684][ T5652] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1186.898691][ T5652] Call Trace: [ 1186.898695][ T5652] [ 1186.898700][ T5652] dump_stack_lvl+0x100/0x190 [ 1186.898718][ T5652] dump_header+0xfb/0x606 [ 1186.898730][ T5652] oom_kill_process.cold+0xd/0x321 [ 1186.898743][ T5652] out_of_memory+0x1256/0x14f0 [ 1186.898760][ T5652] ? __pfx_out_of_memory+0x10/0x10 [ 1186.898778][ T5652] __alloc_frozen_pages_noprof+0x1d30/0x2410 [ 1186.898797][ T5652] ? rcu_is_watching+0x12/0xc0 [ 1186.898813][ T5652] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1186.898829][ T5652] ? alloc_pages_mpol+0x25a/0x550 [ 1186.898851][ T5652] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1186.898866][ T5652] ? policy_nodemask+0xed/0x4f0 [ 1186.898883][ T5652] alloc_pages_mpol+0x1fb/0x550 [ 1186.898900][ T5652] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1186.898917][ T5652] ? find_held_lock+0x2b/0x80 [ 1186.898928][ T5652] ? filemap_get_entry+0x1a7/0x3b0 [ 1186.898943][ T5652] ? filemap_get_entry+0x1a7/0x3b0 [ 1186.898959][ T5652] folio_alloc_noprof+0x22/0x330 [ 1186.898977][ T5652] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 1186.898989][ T5652] ? __pfx_filemap_get_entry+0x10/0x10 [ 1186.899005][ T5652] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 1186.899022][ T5652] __filemap_get_folio_mpol+0x6a4/0xe70 [ 1186.899041][ T5652] filemap_fault+0x8b6/0x37c0 [ 1186.899061][ T5652] ? __pfx_filemap_fault+0x10/0x10 [ 1186.899078][ T5652] ? __pfx_filemap_map_pages+0x10/0x10 [ 1186.899096][ T5652] __do_fault+0x10d/0x550 [ 1186.899112][ T5652] do_fault+0xaf9/0x1990 [ 1186.899132][ T5652] __handle_mm_fault+0x1807/0x2b50 [ 1186.899146][ T5652] ? mt_find+0x45e/0x8e0 [ 1186.899162][ T5652] ? __pfx___handle_mm_fault+0x10/0x10 [ 1186.899173][ T5652] ? __pfx_mt_find+0x10/0x10 [ 1186.899195][ T5652] ? find_vma+0xbf/0x140 [ 1186.899209][ T5652] ? __pfx_find_vma+0x10/0x10 [ 1186.899231][ T5652] handle_mm_fault+0x36d/0xa20 [ 1186.899246][ T5652] do_user_addr_fault+0x74c/0x12f0 [ 1186.899263][ T5652] exc_page_fault+0x6f/0xd0 [ 1186.899277][ T5652] asm_exc_page_fault+0x26/0x30 [ 1186.899288][ T5652] RIP: 0033:0x7f810ce86540 [ 1186.899301][ T5652] Code: Unable to access opcode bytes at 0x7f810ce86516. [ 1186.899307][ T5652] RSP: 002b:00007ffc0bab8e48 EFLAGS: 00010212 [ 1186.899316][ T5652] RAX: 0000000000000002 RBX: 000000000000000a RCX: 0000000030687465 [ 1186.899323][ T5652] RDX: 000000000000000a RSI: 000055a18da9d62a RDI: 00007ffc0bab957c [ 1186.899330][ T5652] RBP: 000000000000000a R08: 0000000000000073 R09: 0000000000000001 [ 1186.899336][ T5652] R10: 0000000000000000 R11: 0000000000000008 R12: 00007ffc0bab9380 [ 1186.899343][ T5652] R13: 000055a18da9d634 R14: 00000000fffffffc R15: 0000000000000000 [ 1186.899358][ T5652] [ 1186.899362][ T5652] Mem-Info: [ 1186.920013][T31684] active_anon:27488 inactive_anon:26777 isolated_anon:0 [ 1186.920013][T31684] active_file:13 inactive_file:37 isolated_file:0 [ 1186.920013][T31684] unevictable:18142 dirty:0 writeback:0 [ 1186.920013][T31684] slab_reclaimable:8404 slab_unreclaimable:72854 [ 1186.920013][T31684] mapped:23379 shmem:54083 pagetables:1182 [ 1186.920013][T31684] sec_pagetables:351 bounce:0 [ 1186.920013][T31684] kernel_misc_reclaimable:0 [ 1186.920013][T31684] free:14721 free_pcp:2230 free_cma:0 [ 1186.930750][ T5652] active_anon:27488 inactive_anon:25627 isolated_anon:0 [ 1186.930750][ T5652] active_file:13 inactive_file:37 isolated_file:0 [ 1186.930750][ T5652] unevictable:18142 dirty:0 writeback:0 [ 1186.930750][ T5652] slab_reclaimable:8404 slab_unreclaimable:72854 [ 1186.930750][ T5652] mapped:23379 shmem:52908 pagetables:1182 [ 1186.930750][ T5652] sec_pagetables:351 bounce:0 [ 1186.930750][ T5652] kernel_misc_reclaimable:0 [ 1186.930750][ T5652] free:14721 free_pcp:3408 free_cma:0 [ 1187.017016][T31684] Node 0 active_anon:4612kB inactive_anon:3148kB active_file:3984kB inactive_file:696kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:2492kB dirty:0kB writeback:0kB shmem:10900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8768kB pagetables:1936kB sec_pagetables:1188kB all_unreclaimable? no Balloon:0kB [ 1187.074684][ T5652] Node 0 active_anon:4992kB inactive_anon:2160kB active_file:5276kB inactive_file:696kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:4696kB dirty:0kB writeback:0kB shmem:10444kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8788kB pagetables:2012kB sec_pagetables:1188kB all_unreclaimable? no Balloon:0kB [ 1187.076042][T31684] Node 1 active_anon:112868kB inactive_anon:83248kB active_file:1552kB inactive_file:300kB unevictable:69032kB isolated(anon):0kB isolated(file):0kB mapped:93796kB dirty:0kB writeback:0kB shmem:192776kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3680kB pagetables:2792kB sec_pagetables:216kB all_unreclaimable? no Balloon:0kB [ 1187.091145][ T5652] Node 1 active_anon:110768kB inactive_anon:83248kB active_file:1552kB inactive_file:300kB unevictable:69032kB isolated(anon):0kB isolated(file):0kB mapped:93796kB dirty:0kB writeback:0kB shmem:190676kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3680kB pagetables:2792kB sec_pagetables:216kB all_unreclaimable? no Balloon:0kB [ 1187.107529][ T5652] Node 0 DMA free:1720kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:256kB inactive_anon:216kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:8kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1187.134010][ T5652] lowmem_reserve[]: 0 288 288 288 288 [ 1187.135816][ T5652] Node 0 DMA32 free:13344kB boost:29740kB min:42960kB low:46264kB high:49568kB reserved_highatomic:4096KB free_highatomic:0KB active_anon:4452kB inactive_anon:2744kB active_file:4708kB inactive_file:1152kB unevictable:3536kB writepending:0kB zspages:616kB present:1032196kB managed:295104kB mlocked:0kB bounce:0kB free_pcp:2216kB local_pcp:44kB free_cma:0kB [ 1187.157298][ T5652] lowmem_reserve[]: 0 0 0 0 0 [ 1187.163626][ T5652] Node 1 DMA32 free:65788kB boost:8192kB min:55336kB low:67120kB high:78904kB reserved_highatomic:0KB free_highatomic:0KB active_anon:105468kB inactive_anon:79048kB active_file:6052kB inactive_file:300kB unevictable:69032kB writepending:0kB zspages:8732kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:2808kB local_pcp:700kB free_cma:0kB [ 1187.179396][ T5652] lowmem_reserve[]: 0 0 0 0 0 [ 1187.183041][ T5652] Node 0 DMA: 68*4kB (U) 24*8kB (U) 15*16kB (U) 2*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 1792kB [ 1187.192019][ T5652] Node 0 DMA32: 30*4kB (UME) 57*8kB (UME) 140*16kB (UME) [ 1187.206489][T31684] Node 0 [ 1187.213492][ T5652] 146*32kB (M) 57*64kB (UME) 11*128kB (UME) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12544kB [ 1187.218284][ T5652] Node 1 DMA32: 38*4kB (U) 891*8kB (UM) 637*16kB (UM) 492*32kB (UME) 172*64kB (UME) 63*128kB (UME) 31*256kB (U) 15*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 67904kB [ 1187.229689][T31684] DMA free:1840kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:216kB inactive_anon:132kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:4kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1187.239490][ T5652] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1187.243638][ T5652] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1187.248292][ T5652] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1187.265078][T31684] lowmem_reserve[]: 0 288 288 288 288 [ 1187.266975][T31684] Node 0 DMA32 free:13552kB boost:29740kB min:42960kB low:46264kB high:49568kB reserved_highatomic:4096KB free_highatomic:0KB active_anon:588kB inactive_anon:5196kB active_file:944kB inactive_file:4480kB unevictable:3536kB writepending:4kB zspages:608kB present:1032196kB managed:295104kB mlocked:0kB bounce:0kB free_pcp:2260kB local_pcp:116kB free_cma:0kB [ 1187.268270][ T5652] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1187.280450][ T5652] 66544 total pagecache pages [ 1187.281964][ T5652] 989 pages in swap cache [ 1187.283381][ T5652] Free swap = 8332kB [ 1187.286147][ T5652] Total swap = 124996kB [ 1187.287494][ T5652] 524155 pages RAM [ 1187.288775][ T5652] 0 pages HighMem/MovableOnly [ 1187.290281][ T5652] 209486 pages reserved [ 1187.291615][ T5652] 0 pages cma reserved [ 1187.292920][ T5652] Unreclaimable slab info: [ 1187.294452][T31684] lowmem_reserve[]: 0 0 0 0 0 [ 1187.294667][ T5652] Name Used Total [ 1187.296435][T31684] Node 1 DMA32 free:69776kB boost:8192kB min:55336kB low:67120kB high:78904kB reserved_highatomic:0KB free_highatomic:0KB active_anon:99700kB inactive_anon:72768kB active_file:9292kB inactive_file:192kB unevictable:69032kB writepending:132kB zspages:8996kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:2464kB local_pcp:440kB free_cma:0kB [ 1187.298361][ T5652] pid_3 31KB 31KB [ 1187.329465][T31684] lowmem_reserve[]: 0 0 0 0 0 [ 1187.331038][T31684] Node 0 DMA: 71*4kB (U) 29*8kB (U) 14*16kB (U) 3*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 1860kB [ 1187.335280][T31684] Node 0 DMA32: 216*4kB (UME) 165*8kB (UME) 147*16kB (UME) 153*32kB (UM) 57*64kB (UME) 11*128kB (UME) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 14488kB [ 1187.347756][ T5652] pid_2 79KB 149KB [ 1187.349797][ T5652] bio-472 15KB 15KB [ 1187.351736][ T5652] bio-536 15KB 15KB [ 1187.353716][ T5652] bio-552 15KB 15KB [ 1187.355667][ T5652] bio-584 15KB 15KB [ 1187.357637][ T5652] zspage-zswap1 222KB 244KB [ 1187.359701][ T5652] zs_handle-zswap1 295KB 340KB [ 1187.361656][ T5652] zswap_entry 801KB 857KB [ 1187.363577][ T5652] AF_VSOCK 122KB 122KB [ 1187.365511][ T5652] batadv_tt_change_cache 16KB 16KB [ 1187.367553][ T5652] batadv_tl_cache 64KB 100KB [ 1187.369650][ T5652] ceph_osd_request 287KB 447KB [ 1187.371605][ T5652] ceph_msg 107KB 146KB [ 1187.373536][ T5652] IEEE-802.15.4-MAC 93KB 93KB [ 1187.375452][ T5652] IEEE-802.15.4-RAW 126KB 126KB [ 1187.377387][ T5652] p9_req_t 31KB 31KB [ 1187.379350][ T5652] INET_SMC 125KB 125KB [ 1187.390764][ T5652] SMC6 125KB 125KB [ 1187.410960][ T5652] SMC 93KB 93KB [ 1187.413012][ T5652] TIPC 123KB 123KB [ 1187.414951][ T5652] rds_tcp_connection 15KB 15KB [ 1187.416918][ T5652] RDS 123KB 123KB [ 1187.418859][ T5652] rds_connection 15KB 15KB [ 1187.420795][ T5652] SCTPv6 120KB 120KB [ 1187.422622][T31684] Node 1 DMA32: 2614*4kB (UME) 1825*8kB (UME) 1015*16kB (UME) 705*32kB (UME) 211*64kB (UME) 3*128kB (UME) 1*256kB (U) 1*512kB (U) 3*1024kB (U) 0*2048kB 0*4096kB = 81584kB [ 1187.428155][T31684] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1187.431187][T31684] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1187.433310][ T5652] SCTP 122KB 122KB [ 1187.436077][ T5652] sctp_chunk 93KB 132KB [ 1187.438030][ T5652] sctp_bind_bucket 16KB 16KB [ 1187.440007][ T5652] PNPIPE 30KB 30KB [ 1187.441948][ T5652] L2TP/IPv6 127KB 127KB [ 1187.443917][ T5652] L2TP/IP 126KB 126KB [ 1187.445946][ T5652] KCM 93KB 93KB [ 1187.447892][ T5652] kcm_mux 47KB 47KB [ 1187.449884][ T5652] RXRPC 128KB 128KB [ 1187.451828][ T5652] rxrpc_call_jar 286KB 414KB [ 1187.453780][ T5652] can_receiver 15KB 15KB [ 1187.465440][ T5652] net_bridge_fdb_entry 27KB 27KB [ 1187.467514][ T5652] nf-frags 79KB 118KB [ 1187.469491][ T5652] xfrm6_tunnel_spi 4KB 4KB [ 1187.471425][ T5652] MPTCPv6 125KB 125KB [ 1187.473359][ T5652] ip6-frags 23KB 23KB [ 1187.475296][ T5652] fib6_node 155KB 172KB [ 1187.477323][ T5652] ip6_dst_cache 174KB 335KB [ 1187.479292][ T5652] mfc6_cache 4KB 4KB [ 1187.481232][ T5652] PINGv6 123KB 123KB [ 1187.483157][ T5652] RAWv6 278KB 278KB [ 1187.485088][ T5652] UDPLITEv6 122KB 122KB [ 1187.497555][ T5652] UDPv6 153KB 153KB [ 1187.509387][ T5652] tw_sock_TCPv6 31KB 31KB [ 1187.511373][ T5652] request_sock_TCPv6 15KB 15KB [ 1187.513340][ T5652] TCPv6 337KB 536KB [ 1187.515265][ T5652] nf_conntrack 31KB 31KB [ 1187.517237][ T5652] wg_peer 237KB 237KB [ 1187.518927][T31684] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1187.520612][ T5652] allowedips_node 31KB 31KB [ 1187.523788][T31684] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1187.524665][ T5652] t10_alua_lu_gp_cache 7KB 7KB [ 1187.527662][T31684] 53231 total pagecache pages [ 1187.530015][ T5652] scsi_sense_cache 48KB 48KB [ 1187.533258][ T5652] virtio_scsi_cmd 16KB 16KB [ 1187.535204][ T5652] bio-136 121KB 152KB [ 1187.537158][ T5652] io_kiocb 117KB 195KB [ 1187.561786][ T5652] bio-264 7KB 7KB [ 1187.563718][ T5652] mqueue_inode_cache 121KB 121KB [ 1187.565679][ T5652] f2fs_bio_post_read_ctx 23KB 23KB [ 1187.567754][ T5652] jfs_mp 7KB 7KB [ 1187.569737][ T5652] fuse_request 31KB 31KB [ 1187.571700][ T5652] cifs_small_rq 16KB 16KB [ 1187.604880][ T5652] cifs_request 67KB 67KB [ 1187.607071][ T5652] cifs_mpx_ids 7KB 7KB [ 1187.609030][ T5652] cifs_io_subrequest 39KB 39KB [ 1187.610970][ T5652] cifs_io_request 95KB 95KB [ 1187.612909][ T5652] nfs_commit_data 15KB 15KB [ 1187.614870][ T5652] nfs_write_data 63KB 63KB [ 1187.615167][T31684] 687 pages in swap cache [ 1187.618410][T31684] Free swap = 10624kB [ 1187.619881][T31684] Total swap = 124996kB [ 1187.621288][T31684] 524155 pages RAM [ 1187.622499][T31684] 0 pages HighMem/MovableOnly [ 1187.624045][T31684] 209486 pages reserved [ 1187.625682][T31684] 0 pages cma reserved [ 1187.637689][ T5652] ecryptfs_sb_cache 7KB 7KB [ 1187.639724][ T5652] jbd2_inode 11KB 11KB [ 1187.641657][ T5652] ext4_system_zone 3KB 3KB [ 1187.651645][T31242] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1187.653742][ T5652] ext4_io_end_vec 15KB 15KB [ 1187.668811][ T5652] kioctx 127KB 127KB [ 1187.670030][T22424] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1187.670786][ T5652] aio_kiocb 31KB 31KB [ 1187.679925][T31702] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1187.683208][T31702] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1187.686636][T31702] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1187.689984][T31702] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1187.690486][T31703] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1187.694954][T31703] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1187.695114][ T5652] userfaultfd_ctx_cache 63KB 63KB [ 1187.699649][T31703] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1187.702251][ T5652] dnotify_mark 15KB 15KB [ 1187.704217][ T5652] dnotify_struct 15KB 15KB [ 1187.706360][T31702] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1187.710995][ T5652] fasync_cache 15KB 15KB [ 1187.717703][ T5652] pid_namespace 61KB 61KB [ 1187.719697][ T5652] kvm_gmem_inode_cache 31KB 31KB [ 1187.720380][T31702] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1187.722256][ T5652] kvm_vcpu 185KB 185KB [ 1187.725775][T31702] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1187.726335][ T5652] kvm_mmu_page_header 116KB 135KB [ 1187.729794][T31702] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1187.738061][T31702] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1187.744111][T31702] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1187.751659][ T5652] pte_list_desc 82KB 102KB [ 1187.753707][ T5652] x86_emulator 126KB 126KB [ 1187.764860][ T5652] rpc_buffers 31KB 31KB [ 1187.771684][ T5652] rpc_tasks 7KB 7KB [ 1187.773666][ T5652] UNIX-STREAM 275KB 275KB [ 1187.777556][ T5652] UNIX 474KB 704KB [ 1187.779753][ T5652] ip4-frags 7KB 7KB [ 1187.782736][ T5652] mfc_cache 8KB 8KB [ 1187.784706][ T5652] UDP-Lite 123KB 123KB [ 1187.786721][ T5652] MPTCP 120KB 120KB [ 1187.788909][ T5652] tcp_bind2_bucket 16KB 16KB [ 1187.790854][ T5652] tcp_bind_bucket 16KB 16KB [ 1187.792805][ T5652] inet_peer 8KB 8KB [ 1187.794913][ T5652] xfrm_dst 7KB 7KB [ 1187.796943][ T5652] xfrm_state 127KB 127KB [ 1187.798886][ T5652] ip_fib_trie 37KB 52KB [ 1187.800828][ T5652] ip_fib_alias 88KB 106KB [ 1187.802767][ T5652] rtable 91KB 132KB [ 1187.804718][ T5652] PING 94KB 94KB [ 1187.806659][ T5652] RAW 159KB 159KB [ 1187.808698][ T5652] UDP 154KB 154KB [ 1187.810634][ T5652] tw_sock_TCP 31KB 31KB [ 1187.812584][ T5652] request_sock_TCP 30KB 30KB [ 1187.814523][ T5652] TCP 497KB 640KB [ 1187.816477][ T5652] hugetlbfs_inode_cache 125KB 125KB [ 1187.818623][ T5652] netfs_subrequest 31KB 31KB [ 1187.820585][ T5652] netfs_request 95KB 95KB [ 1187.822531][ T5652] bio-280 15KB 15KB [ 1187.824478][ T5652] ep_head 16KB 16KB [ 1187.826430][ T5652] eventpoll_pwq 23KB 23KB [ 1187.828496][ T5652] eventpoll_epi 63KB 63KB [ 1187.836681][ T5652] inotify_inode_mark 31KB 31KB [ 1187.839202][ T5652] sgpool-128 29KB 29KB [ 1187.841678][ T5652] sgpool-64 31KB 31KB [ 1187.852635][ T5652] sgpool-32 351KB 598KB [ 1187.854604][ T5652] sgpool-16 250KB 328KB [ 1187.856564][ T5652] sgpool-8 156KB 218KB [ 1187.858527][ T5652] bio_crypt_ctx 7KB 7KB [ 1187.860505][ T5652] bio_integrity_data 4KB 4KB [ 1187.865388][ T5652] request_queue 247KB 247KB [ 1187.868987][T31716] netlink: 'syz.2.9315': attribute type 16 has an invalid length. [ 1187.871509][T31716] netlink: 'syz.2.9315': attribute type 17 has an invalid length. [ 1187.871841][ T5652] blkdev_ioc 15KB 15KB [ 1187.875960][ T5652] bio-200 276KB 328KB [ 1187.877892][ T5652] biovec-max 548KB 718KB [ 1187.879838][ T5652] biovec-64 487KB 696KB [ 1187.881762][ T5652] biovec-16 93KB 156KB [ 1187.883856][ T5652] mm_slot 15KB 15KB [ 1187.885777][ T5652] ksm_mm_slot 4KB 4KB [ 1187.887699][ T5652] user_namespace 124KB 124KB [ 1187.889649][ T5652] uid_cache 31KB 31KB [ 1187.891578][ T5652] iommu_iova_magazine 1083KB 1134KB [ 1187.893681][ T5652] iommu_iova 284KB 284KB [ 1187.895696][ T5652] dmaengine-unmap-256 30KB 30KB [ 1187.897679][ T5652] dmaengine-unmap-128 30KB 30KB [ 1187.899653][ T5652] dmaengine-unmap-16 4KB 4KB [ 1187.901614][ T5652] dmaengine-unmap-2 4KB 4KB [ 1187.903575][ T5652] QIPCRTR 125KB 125KB [ 1187.905679][ T5652] audit_buffer 42KB 42KB [ 1187.907959][ T5652] skbuff_ext_cache 60KB 60KB [ 1187.909912][ T5652] skbuff_small_head 1150KB 1204KB [ 1187.911838][ T5652] skbuff_fclone_cache 234KB 312KB [ 1187.913825][ T5652] skbuff_head_cache 1487KB 1554KB [ 1187.915810][ T5652] configfs_dir_cache 16KB 16KB [ 1187.917777][ T5652] file_lease_cache 31KB 31KB [ 1187.919807][ T5652] file_lock_cache 127KB 182KB [ 1187.921739][ T5652] file_lock_ctx 19KB 19KB [ 1187.923673][ T5652] fsnotify_mark_connector 15KB 15KB [ 1187.925818][ T5652] posix_timers_cache 32KB 32KB [ 1187.927771][ T5652] taskstats 216KB 278KB [ 1187.929733][ T5652] mem_cgroup_per_node 144KB 154KB [ 1187.931789][ T5652] mem_cgroup 119KB 119KB [ 1187.933725][ T5652] proc_dir_entry 742KB 750KB [ 1187.935669][ T5652] pde_opener 15KB 15KB [ 1187.937687][ T5652] seq_file 101KB 140KB [ 1187.939634][ T5652] sigqueue 74KB 94KB [ 1187.941581][ T5652] shmem_inode_cache 7777KB 8081KB [ 1187.943630][ T5652] kernfs_iattrs_cache 15KB 15KB [ 1187.947887][ T5652] kernfs_node_cache 27859KB 28113KB [ 1187.949917][ T5652] mnt_cache 142KB 165KB [ 1187.951834][ T5652] bfilp 31KB 31KB [ 1187.953786][ T5652] filp 275KB 504KB [ 1187.955819][ T5652] names_cache 1279KB 1428KB [ 1187.958353][ T5652] net_namespace 169KB 169KB [ 1187.960299][ T5652] ima_iint_cache 55KB 55KB [ 1187.962235][ T5652] lsm_inode_cache 1872KB 2138KB [ 1187.964151][ T5652] lsm_file_cache 93KB 184KB [ 1187.966123][ T5652] key_jar 31KB 31KB [ 1187.968192][ T5652] uts_namespace 62KB 62KB [ 1187.970155][ T5652] nsproxy 15KB 15KB [ 1187.972090][ T5652] vm_area_struct 707KB 1109KB [ 1187.974015][ T5652] fs_cache 47KB 84KB [ 1187.975932][ T5652] files_cache 298KB 350KB [ 1187.977866][ T5652] signal_cache 902KB 1817KB [ 1187.979930][ T5652] sighand_cache 1019KB 2044KB [ 1187.981876][ T5652] task_struct 3913KB 4437KB [ 1187.983804][ T5652] cred 144KB 300KB [ 1187.985729][ T5652] anon_vma_chain 244KB 299KB [ 1187.987643][ T5652] anon_vma 286KB 422KB [ 1187.989725][ T5652] pid 205KB 441KB [ 1187.991728][ T5652] Acpi-Operand 257KB 368KB [ 1187.993664][ T5652] Acpi-ParseExt 55KB 90KB [ 1187.995592][ T5652] Acpi-Parse 74KB 110KB [ 1187.997517][ T5652] Acpi-State 70KB 102KB [ 1187.999463][ T5652] Acpi-Namespace 56KB 56KB [ 1188.003219][ T5652] numa_policy 11KB 11KB [ 1188.005160][ T5652] perf_event 31KB 31KB [ 1188.007170][ T5652] trace_event_file 532KB 532KB [ 1188.009135][ T5652] ftrace_event_field 1004KB 1004KB [ 1188.011162][ T5652] pool_workqueue 1964KB 2192KB [ 1188.013109][ T5652] task_group 61KB 61KB [ 1188.015139][ T5652] maple_node 643KB 1400KB [ 1188.017082][ T5652] mm_struct 508KB 612KB [ 1188.019049][ T5652] vmap_area 1041KB 1192KB [ 1188.021033][ T5652] debug_objects_cache 2668KB 3026KB [ 1188.023227][ T5652] page->ptl 118KB 157KB [ 1188.025268][ T5652] kmalloc-cg-8k 1536KB 1696KB [ 1188.027330][ T5652] kmalloc-cg-4k 13376KB 15808KB [ 1188.029349][ T5652] kmalloc-cg-2k 9220KB 10880KB [ 1188.033246][ T5652] kmalloc-cg-1k 2618KB 3232KB [ 1188.037024][ T5652] kmalloc-cg-512 1640KB 1664KB [ 1188.044015][ T5652] kmalloc-cg-256 460KB 544KB [ 1188.046057][ T5652] kmalloc-cg-128 239KB 284KB [ 1188.048105][ T5652] kmalloc-cg-64 82KB 96KB [ 1188.052792][ T5652] kmalloc-cg-32 82KB 144KB [ 1188.055010][ T5652] kmalloc-cg-16 33KB 56KB [ 1188.057014][ T5652] kmalloc-cg-8 36KB 48KB [ 1188.059031][ T5652] kmalloc-cg-192 99KB 128KB [ 1188.061028][ T5652] kmalloc-cg-96 71KB 92KB [ 1188.063025][ T5652] kmalloc-8k 5616KB 5920KB [ 1188.071252][ T5652] kmalloc-4k 24360KB 26112KB [ 1188.073336][ T5652] kmalloc-2k 13580KB 14304KB [ 1188.075516][ T5652] kmalloc-1k 8686KB 9536KB [ 1188.077721][ T5652] kmalloc-512 9050KB 10132KB [ 1188.079889][ T5652] kmalloc-256 7644KB 8076KB [ 1188.082023][ T5652] kmalloc-128 1041KB 1240KB [ 1188.084099][ T5652] kmalloc-64 3154KB 3504KB [ 1188.087027][ T5652] kmalloc-32 1578KB 2224KB [ 1188.089118][ T5652] kmalloc-16 485KB 508KB [ 1188.091121][ T5652] kmalloc-8 426KB 496KB [ 1188.093145][ T5652] kmalloc-192 1859KB 2072KB [ 1188.095158][ T5652] kmalloc-96 1536KB 1748KB [ 1188.097293][ T5652] kmem_cache_node 220KB 224KB [ 1188.099297][ T5652] kmem_cache 187KB 187KB [ 1188.101338][ T5652] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=dhcpcd,pid=5652,uid=101 [ 1188.105899][ T5652] Out of memory (oom_kill_allocating_task): Killed process 5652 (dhcpcd) total-vm:4292kB, anon-rss:536kB, file-rss:152kB, shmem-rss:0kB, UID:101 pgtables:44kB oom_score_adj:0 [ 1188.246932][T31716] bridge0: port 2(bridge_slave_1) entered disabled state [ 1188.249338][T31716] bridge0: port 1(bridge_slave_0) entered disabled state [ 1188.285204][T31716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1188.290790][T31716] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1188.414251][T25186] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.429059][T25186] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.432056][T25186] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.474668][T25174] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.490628][T25186] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.607146][T25174] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.666900][T31698] chnl_net:caif_netlink_parms(): no params data found [ 1188.687128][T25174] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.768078][T25174] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.803101][T31700] chnl_net:caif_netlink_parms(): no params data found [ 1188.872464][T31698] bridge0: port 1(bridge_slave_0) entered blocking state [ 1188.875336][T31698] bridge0: port 1(bridge_slave_0) entered disabled state [ 1188.885360][T31698] bridge_slave_0: entered allmulticast mode [ 1188.890451][T31698] bridge_slave_0: entered promiscuous mode [ 1188.896472][T31698] bridge0: port 2(bridge_slave_1) entered blocking state [ 1188.902074][T31698] bridge0: port 2(bridge_slave_1) entered disabled state [ 1188.904960][T31698] bridge_slave_1: entered allmulticast mode [ 1188.908071][T31698] bridge_slave_1: entered promiscuous mode [ 1188.927679][T31698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1188.981135][T31698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1188.999236][T31698] team0: Port device team_slave_0 added [ 1189.002319][T31698] team0: Port device team_slave_1 added [ 1189.063079][T31698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1189.065295][T31698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1189.091386][T31698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1189.099459][T31698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1189.101946][T31698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1189.109929][T31698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1189.121925][T25174] bridge_slave_1: left allmulticast mode [ 1189.123883][T25174] bridge_slave_1: left promiscuous mode [ 1189.125792][T25174] bridge0: port 2(bridge_slave_1) entered disabled state [ 1189.131768][T25174] bridge_slave_0: left allmulticast mode [ 1189.133626][T25174] bridge_slave_0: left promiscuous mode [ 1189.136102][T25174] bridge0: port 1(bridge_slave_0) entered disabled state [ 1189.382986][T25174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1189.387116][T25174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1189.390803][T25174] bond0 (unregistering): Released all slaves [ 1189.412396][T31706] chnl_net:caif_netlink_parms(): no params data found [ 1189.418518][T31700] bridge0: port 1(bridge_slave_0) entered blocking state [ 1189.420864][T31700] bridge0: port 1(bridge_slave_0) entered disabled state [ 1189.423294][T31700] bridge_slave_0: entered allmulticast mode [ 1189.425925][T31700] bridge_slave_0: entered promiscuous mode [ 1189.442252][T31700] bridge0: port 2(bridge_slave_1) entered blocking state [ 1189.444617][T31700] bridge0: port 2(bridge_slave_1) entered disabled state [ 1189.446922][T31700] bridge_slave_1: entered allmulticast mode [ 1189.449588][T31700] bridge_slave_1: entered promiscuous mode [ 1189.454910][T31698] hsr_slave_0: entered promiscuous mode [ 1189.457190][T31698] hsr_slave_1: entered promiscuous mode [ 1189.465227][T31698] debugfs: 'hsr0' already exists in 'hsr' [ 1189.467169][T31698] Cannot create hsr debugfs directory [ 1189.501686][T31700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1189.523664][T31700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1189.568409][T31700] team0: Port device team_slave_0 added [ 1189.583492][T31706] bridge0: port 1(bridge_slave_0) entered blocking state [ 1189.586460][T31706] bridge0: port 1(bridge_slave_0) entered disabled state [ 1189.589203][T31706] bridge_slave_0: entered allmulticast mode [ 1189.592741][T31706] bridge_slave_0: entered promiscuous mode [ 1189.600857][T31700] team0: Port device team_slave_1 added [ 1189.609260][T31706] bridge0: port 2(bridge_slave_1) entered blocking state [ 1189.612186][T31706] bridge0: port 2(bridge_slave_1) entered disabled state [ 1189.616762][T31706] bridge_slave_1: entered allmulticast mode [ 1189.619525][T31706] bridge_slave_1: entered promiscuous mode [ 1189.682960][T31700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1189.685600][T31700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1189.697909][T31700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1189.709542][T31700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1189.712514][T31700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1189.722317][T31700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1189.728780][T31706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1189.775332][T31706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1189.797255][T31706] team0: Port device team_slave_0 added [ 1189.804782][T25174] hsr_slave_0: left promiscuous mode [ 1189.806959][T25174] hsr_slave_1: left promiscuous mode [ 1189.809435][T25174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1189.811806][T25174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1189.814515][T25174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1189.816855][T25174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1189.827441][T25174] veth1_macvtap: left promiscuous mode [ 1189.830076][T25174] veth0_macvtap: left promiscuous mode [ 1189.831888][T25174] veth1_vlan: left promiscuous mode [ 1189.833725][T25174] veth0_vlan: left promiscuous mode [ 1189.871879][T31703] Bluetooth: hci4: command tx timeout [ 1189.875616][T31702] Bluetooth: hci5: command tx timeout [ 1189.946835][T31702] Bluetooth: hci6: command tx timeout [ 1190.279000][T25174] team0 (unregistering): Port device team_slave_1 removed [ 1190.349756][T25174] team0 (unregistering): Port device team_slave_0 removed [ 1190.685144][T31706] team0: Port device team_slave_1 added [ 1190.876809][T31706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1190.887968][T31706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1190.898639][T31706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1190.904590][T31706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1190.909263][T31706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1190.919333][T31706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1190.927061][T31700] hsr_slave_0: entered promiscuous mode [ 1190.929404][T31700] hsr_slave_1: entered promiscuous mode [ 1190.931557][T31700] debugfs: 'hsr0' already exists in 'hsr' [ 1190.933360][T31700] Cannot create hsr debugfs directory [ 1190.972911][T31754] Bluetooth: MGMT ver 1.23 [ 1191.046490][T31706] hsr_slave_0: entered promiscuous mode [ 1191.059909][T31706] hsr_slave_1: entered promiscuous mode [ 1191.062521][T31706] debugfs: 'hsr0' already exists in 'hsr' [ 1191.064898][T31706] Cannot create hsr debugfs directory [ 1191.126528][T31698] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1191.165565][T31698] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1191.189256][T31698] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1191.203022][T31698] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1191.334674][T31757] fuse: Bad value for 'fd' [ 1191.467510][T31700] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1191.560788][T31698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1191.563243][T31700] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1191.608574][T31700] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1191.617661][T31700] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1191.626094][ T5993] usb 7-1: new low-speed USB device number 52 using dummy_hcd [ 1192.052362][ T5993] usb 7-1: device descriptor read/64, error -71 [ 1192.075944][T25174] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.087863][T31703] Bluetooth: hci5: command tx timeout [ 1192.087917][T31242] Bluetooth: hci4: command tx timeout [ 1192.171677][T31242] Bluetooth: hci6: command tx timeout [ 1192.236386][T25174] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.265939][T31698] 8021q: adding VLAN 0 to HW filter on device team0 [ 1192.301353][T31706] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1192.310331][ T5993] usb 7-1: new low-speed USB device number 53 using dummy_hcd [ 1192.331161][T25174] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.338292][T24585] bridge0: port 1(bridge_slave_0) entered blocking state [ 1192.340565][T24585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1192.366392][T31706] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1192.371599][T31706] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1192.397877][T25174] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.409585][T25186] bridge0: port 2(bridge_slave_1) entered blocking state [ 1192.411866][T25186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1192.418704][T31706] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1192.460089][ T5993] usb 7-1: device descriptor read/64, error -71 [ 1192.509198][T31700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1192.526914][T31698] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1192.561291][T31700] 8021q: adding VLAN 0 to HW filter on device team0 [ 1192.573737][ T1186] bridge0: port 1(bridge_slave_0) entered blocking state [ 1192.576001][ T1186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1192.577875][ T5993] usb usb7-port1: attempt power cycle [ 1192.634631][ T1186] bridge0: port 2(bridge_slave_1) entered blocking state [ 1192.636915][ T1186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1192.747785][T25174] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.765403][T31706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1192.776722][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 1192.779279][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 1192.798166][T31706] 8021q: adding VLAN 0 to HW filter on device team0 [ 1192.806839][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 1192.809133][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1192.824746][T31698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1192.828928][T24585] bridge0: port 2(bridge_slave_1) entered blocking state [ 1192.831209][T24585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1192.856748][T31758] syz.2.9323 (31758) used greatest stack depth: 17968 bytes left [ 1192.903431][T25174] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.984795][T31706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1193.005532][ T5993] usb 7-1: new low-speed USB device number 54 using dummy_hcd [ 1193.036934][T25174] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.057545][T31700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1193.059212][ T5993] usb 7-1: device descriptor read/8, error -71 [ 1193.072386][T31698] veth0_vlan: entered promiscuous mode [ 1193.077831][T31698] veth1_vlan: entered promiscuous mode [ 1193.100233][T31698] veth0_macvtap: entered promiscuous mode [ 1193.106095][T31698] veth1_macvtap: entered promiscuous mode [ 1193.114647][T31698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1193.121652][T31698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1193.131494][T25186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.159799][T25174] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.178988][T25186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.181868][T25186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.187359][T25186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.207013][T31706] veth0_vlan: entered promiscuous mode [ 1193.226969][T31706] veth1_vlan: entered promiscuous mode [ 1193.332436][T31706] veth0_macvtap: entered promiscuous mode [ 1193.348278][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1193.351598][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1193.358459][ T5993] usb 7-1: new low-speed USB device number 55 using dummy_hcd [ 1193.381579][ T5993] usb 7-1: device descriptor read/8, error -71 [ 1193.394848][T31706] veth1_macvtap: entered promiscuous mode [ 1193.408634][T24585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1193.411762][T24585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1193.420643][T31700] veth0_vlan: entered promiscuous mode [ 1193.423749][T25174] bridge_slave_1: left allmulticast mode [ 1193.425573][T25174] bridge_slave_1: left promiscuous mode [ 1193.427418][T25174] bridge0: port 2(bridge_slave_1) entered disabled state [ 1193.431634][T25174] bridge_slave_0: left allmulticast mode [ 1193.433588][T25174] bridge_slave_0: left promiscuous mode [ 1193.435446][T25174] bridge0: port 1(bridge_slave_0) entered disabled state [ 1193.440494][T25174] bridge_slave_1: left allmulticast mode [ 1193.442303][T25174] bridge_slave_1: left promiscuous mode [ 1193.444247][T25174] bridge0: port 2(bridge_slave_1) entered disabled state [ 1193.447761][T25174] bridge_slave_0: left allmulticast mode [ 1193.449569][T25174] bridge_slave_0: left promiscuous mode [ 1193.451415][T25174] bridge0: port 1(bridge_slave_0) entered disabled state [ 1193.497840][ T5993] usb usb7-port1: unable to enumerate USB device [ 1193.687561][T25174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1193.694231][T25174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1193.698979][T25174] bond0 (unregistering): Released all slaves [ 1193.927444][T25174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1193.931605][T25174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1193.935149][T25174] bond0 (unregistering): Released all slaves [ 1193.953299][T31706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1193.957761][T31706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1193.965516][T31700] veth1_vlan: entered promiscuous mode [ 1193.973023][T25186] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.975824][T25186] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.981654][T25186] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.984598][T25186] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.066068][T31700] veth0_macvtap: entered promiscuous mode [ 1194.072153][T31700] veth1_macvtap: entered promiscuous mode [ 1194.081612][T31700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1194.112481][T25186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1194.114986][T25186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1194.141991][T31700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1194.153323][T25186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1194.155754][T25186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1194.161896][ T60] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.168934][ T60] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.218521][ T60] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.221767][ T60] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.286376][T25186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1194.289262][T25186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1194.310507][T31242] Bluetooth: hci5: command tx timeout [ 1194.311265][T31702] Bluetooth: hci4: command tx timeout [ 1194.319414][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1194.325089][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1194.398634][T31702] Bluetooth: hci6: command tx timeout [ 1194.607932][T31831] sit0: entered promiscuous mode [ 1194.611536][T31831] netlink: 'syz.5.9331': attribute type 1 has an invalid length. [ 1194.614304][T31831] netlink: 1 bytes leftover after parsing attributes in process `syz.5.9331'. [ 1196.545951][T31702] Bluetooth: hci5: command tx timeout [ 1196.547750][T31702] Bluetooth: hci4: command tx timeout [ 1196.620602][T31242] Bluetooth: hci6: command tx timeout [ 1197.963373][T25174] hsr_slave_0: left promiscuous mode [ 1197.965435][T25174] hsr_slave_1: left promiscuous mode [ 1197.972744][T25174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1197.974874][T25174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1197.979147][T25174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1197.981262][T25174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1198.012006][T25174] hsr_slave_0: left promiscuous mode [ 1198.016607][T25174] hsr_slave_1: left promiscuous mode [ 1198.022162][T25174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1198.024509][T25174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1198.034666][T25174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1198.037204][T25174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1198.098225][T25174] veth1_macvtap: left promiscuous mode [ 1198.109261][T25174] veth0_macvtap: left promiscuous mode [ 1198.111698][T25174] veth1_vlan: left promiscuous mode [ 1198.113905][T25174] veth0_vlan: left promiscuous mode [ 1198.121538][T25174] veth1_macvtap: left promiscuous mode [ 1198.123312][T25174] veth0_macvtap: left promiscuous mode [ 1198.125527][T25174] veth1_vlan: left promiscuous mode [ 1198.127706][T25174] veth0_vlan: left promiscuous mode [ 1199.396373][T25174] team0 (unregistering): Port device team_slave_1 removed [ 1199.451479][T25174] team0 (unregistering): Port device team_slave_0 removed [ 1200.291300][T25174] team0 (unregistering): Port device team_slave_1 removed [ 1200.331711][T25174] team0 (unregistering): Port device team_slave_0 removed [ 1204.418568][T31882] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9346'. [ 1204.436528][T31882] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9346'. [ 1204.973871][ T40] audit: type=1326 audit(2000000824.867:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31894 comm="syz.5.9352" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf745d598 code=0x7ffc0000 [ 1204.995710][ T40] audit: type=1326 audit(2000000824.886:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31894 comm="syz.5.9352" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf745d598 code=0x7ffc0000 [ 1205.007658][ T40] audit: type=1326 audit(2000000824.895:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31894 comm="syz.5.9352" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf745d598 code=0x7ffc0000 [ 1205.027031][ T40] audit: type=1326 audit(2000000824.904:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31894 comm="syz.5.9352" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf745d598 code=0x7ffc0000 [ 1205.035012][ T40] audit: type=1326 audit(2000000824.904:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31894 comm="syz.5.9352" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 1205.059131][ T40] audit: type=1326 audit(2000000824.904:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31894 comm="syz.5.9352" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 1205.077154][ T40] audit: type=1326 audit(2000000824.904:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31894 comm="syz.5.9352" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf745d598 code=0x7ffc0000 [ 1205.084466][ T40] audit: type=1326 audit(2000000824.933:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31894 comm="syz.5.9352" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf745d598 code=0x7ffc0000 [ 1205.103914][ T40] audit: type=1326 audit(2000000824.933:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31894 comm="syz.5.9352" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 1205.125135][ T40] audit: type=1326 audit(2000000824.933:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31894 comm="syz.5.9352" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf745d598 code=0x7ffc0000 [ 1208.582991][ T5993] usb 7-1: new full-speed USB device number 56 using dummy_hcd [ 1208.685060][ T9643] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1208.761074][ T5993] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1208.764201][ T5993] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 64 [ 1208.767699][ T5993] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1208.774966][ T5993] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.792446][ T5993] usb 7-1: config 0 descriptor?? [ 1208.795057][T31926] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1208.798150][T31926] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1208.877755][ T9643] usb 10-1: Using ep0 maxpacket: 16 [ 1208.988411][ T9643] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1208.998285][ T9643] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1209.001141][ T9643] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.003696][ T9643] usb 10-1: Product: syz [ 1209.005118][ T9643] usb 10-1: Manufacturer: syz [ 1209.016294][ T9643] usb 10-1: SerialNumber: syz [ 1209.019178][ T9643] usb 10-1: config 0 descriptor?? [ 1209.020583][T31702] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1209.022192][ T9643] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 1209.026404][T31242] Bluetooth: hci1: Opcode 0x0c03 failed: -71 [ 1209.027067][ T9643] usb 10-1: Detected FT232R [ 1209.030373][T11716] usb 7-1: USB disconnect, device number 56 [ 1210.887637][T31945] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 1210.889791][T31945] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1210.909533][T31945] vhci_hcd vhci_hcd.0: Device attached [ 1210.978186][T31702] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1210.982612][T31702] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1210.986574][T31702] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1210.991235][T31702] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1210.994694][T31702] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1211.174568][ T9643] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1211.177812][ T9643] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1211.180625][ T9643] ftdi_sio 10-1:0.0: GPIO initialisation failed: -71 [ 1211.183786][ T9643] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1211.198284][ T9643] usb 10-1: USB disconnect, device number 2 [ 1211.198289][ T34] usb 11-1: new full-speed USB device number 2 using dummy_hcd [ 1211.203593][T11716] usb 50-1: SetAddress Request (2) to port 0 [ 1211.206243][T11716] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1211.210561][ T9643] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1211.215775][ T9643] ftdi_sio 10-1:0.0: device disconnected [ 1211.253176][ T46] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.309007][ T46] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.341637][T31948] chnl_net:caif_netlink_parms(): no params data found [ 1211.370954][ T34] usb 11-1: config index 0 descriptor too short (expected 65535, got 27) [ 1211.373704][ T34] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1211.376913][ T34] usb 11-1: config 0 has no interfaces? [ 1211.378726][ T34] usb 11-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1211.383410][ T34] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.393405][ T34] usb 11-1: config 0 descriptor?? [ 1211.403620][ T46] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.414239][T31948] bridge0: port 1(bridge_slave_0) entered blocking state [ 1211.416748][T31948] bridge0: port 1(bridge_slave_0) entered disabled state [ 1211.419114][T31948] bridge_slave_0: entered allmulticast mode [ 1211.421797][T31948] bridge_slave_0: entered promiscuous mode [ 1211.425272][T31948] bridge0: port 2(bridge_slave_1) entered blocking state [ 1211.427696][T31948] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.430029][T31948] bridge_slave_1: entered allmulticast mode [ 1211.433338][T31948] bridge_slave_1: entered promiscuous mode [ 1211.448083][T31948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1211.454010][T31948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1211.476123][ T46] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.482768][T31948] team0: Port device team_slave_0 added [ 1211.486119][T31948] team0: Port device team_slave_1 added [ 1211.499183][T31948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1211.501421][T31948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1211.510014][T31948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1211.514285][T31948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1211.516510][T31948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1211.524864][T31948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1211.546667][T31948] hsr_slave_0: entered promiscuous mode [ 1211.548958][T31948] hsr_slave_1: entered promiscuous mode [ 1211.551169][T31948] debugfs: 'hsr0' already exists in 'hsr' [ 1211.553442][T31948] Cannot create hsr debugfs directory [ 1211.610868][ T9643] usb 11-1: USB disconnect, device number 2 [ 1211.615861][T31946] vhci_hcd: connection reset by peer [ 1211.624638][ T60] vhci_hcd vhci_hcd.6: stop threads [ 1211.626478][ T60] vhci_hcd vhci_hcd.6: release socket [ 1211.628638][ T60] vhci_hcd vhci_hcd.6: disconnect device [ 1211.646989][ T46] bridge_slave_1: left allmulticast mode [ 1211.648984][ T46] bridge_slave_1: left promiscuous mode [ 1211.651119][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.654848][ T46] bridge_slave_0: left allmulticast mode [ 1211.656695][ T46] bridge_slave_0: left promiscuous mode [ 1211.658895][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 1211.895133][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1211.899381][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1211.903133][ T46] bond0 (unregistering): Released all slaves [ 1211.950627][T31948] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1211.955596][T31948] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1211.959980][T31948] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1211.963997][T31948] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1212.005969][T31948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1212.023362][T31948] 8021q: adding VLAN 0 to HW filter on device team0 [ 1212.031787][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 1212.034690][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1212.057339][T24585] bridge0: port 2(bridge_slave_1) entered blocking state [ 1212.059614][T24585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1212.157227][T31948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1212.201740][ T46] hsr_slave_0: left promiscuous mode [ 1212.204603][ T46] hsr_slave_1: left promiscuous mode [ 1212.206610][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1212.208955][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1212.215888][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1212.221408][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1212.257388][ T46] veth1_macvtap: left promiscuous mode [ 1212.259362][ T46] veth0_macvtap: left promiscuous mode [ 1212.267714][ T46] veth1_vlan: left promiscuous mode [ 1212.269787][ T46] veth0_vlan: left promiscuous mode [ 1212.726846][ T46] team0 (unregistering): Port device team_slave_1 removed [ 1212.756556][ T46] team0 (unregistering): Port device team_slave_0 removed [ 1213.195984][T31242] Bluetooth: hci0: unexpected cc 0x202f length: 1 < 9 [ 1213.198281][T31242] Bluetooth: hci0: unexpected event for opcode 0x202f [ 1213.240986][T31242] Bluetooth: hci1: command tx timeout [ 1213.460827][T31948] veth0_vlan: entered promiscuous mode [ 1213.484718][T31948] veth1_vlan: entered promiscuous mode [ 1213.560193][T31948] veth0_macvtap: entered promiscuous mode [ 1213.592768][T31948] veth1_macvtap: entered promiscuous mode [ 1213.642181][T31948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1213.655338][T31948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1213.676367][ T60] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.679193][ T60] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.686003][ T60] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.695222][ T60] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1214.003662][ T1186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1214.006210][ T1186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1214.065500][ T1186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1214.068970][ T1186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1214.427976][T31242] Bluetooth: hci6: command tx timeout [ 1215.219453][ T34] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 1215.395635][ T34] usb 11-1: config 220 has an invalid interface number: 76 but max is 2 [ 1215.399200][ T34] usb 11-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1215.444060][T31242] Bluetooth: hci1: command tx timeout [ 1215.519199][ T34] usb 11-1: config 220 has no interface number 2 [ 1215.522079][ T34] usb 11-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1215.539618][ T34] usb 11-1: config 220 interface 0 has no altsetting 0 [ 1215.552485][ T34] usb 11-1: config 220 interface 76 has no altsetting 0 [ 1215.561727][ T34] usb 11-1: config 220 interface 1 has no altsetting 0 [ 1215.567381][ T34] usb 11-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1215.583706][ T34] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.593767][ T34] usb 11-1: Product: syz [ 1215.595567][ T34] usb 11-1: Manufacturer: syz [ 1215.597526][ T34] usb 11-1: SerialNumber: syz [ 1216.140308][ T34] uvcvideo 11-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1216.142595][ T34] uvcvideo 11-1:220.0: No valid video chain found. [ 1216.144595][ T34] usb 11-1: selecting invalid altsetting 0 [ 1216.165912][ T34] usb 11-1: selecting invalid altsetting 0 [ 1216.173356][ T34] usbtest 11-1:220.1: probe with driver usbtest failed with error -22 [ 1216.188198][ T34] usb 11-1: USB disconnect, device number 3 [ 1216.653011][T11716] usb 50-1: device descriptor read/8, error -110 [ 1217.070303][T11716] usb usb50-port1: attempt power cycle [ 1217.434950][T32025] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1217.689522][T31242] Bluetooth: hci1: command tx timeout [ 1217.742571][T11716] usb usb50-port1: unable to enumerate USB device [ 1219.900308][T31242] Bluetooth: hci1: command tx timeout [ 1221.273008][T32065] netlink: 'syz.6.9399': attribute type 12 has an invalid length. [ 1221.275505][T32065] netlink: 'syz.6.9399': attribute type 29 has an invalid length. [ 1221.277867][T32065] netlink: 148 bytes leftover after parsing attributes in process `syz.6.9399'. [ 1221.280833][T32065] netlink: 'syz.6.9399': attribute type 1 has an invalid length. [ 1221.283407][T32065] netlink: 47 bytes leftover after parsing attributes in process `syz.6.9399'. [ 1223.052756][T32094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9408'. [ 1225.914751][T31950] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 1226.150070][T31950] usb 12-1: Using ep0 maxpacket: 8 [ 1226.155094][T31950] usb 12-1: config 179 has an invalid interface number: 65 but max is 0 [ 1226.157755][T31950] usb 12-1: config 179 has no interface number 0 [ 1226.159780][T31950] usb 12-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1226.167805][T31950] usb 12-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1226.192723][T31950] usb 12-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1226.199947][T31950] usb 12-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1226.215264][T31950] usb 12-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1226.218453][T31950] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.239102][T32126] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1226.487076][T29693] usb 12-1: USB disconnect, device number 2 [ 1226.487145][ C0] xpad 12-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1226.492297][ C0] xpad 12-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1226.495242][ C0] ================================================================== [ 1226.497763][ C0] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x23b/0x260 [ 1226.500192][ C0] Read of size 4 at addr ffff88804e73285c by task swapper/0/0 [ 1226.503718][ C0] [ 1226.505199][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1226.505217][ C0] Tainted: [L]=SOFTLOCKUP [ 1226.505221][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1226.505228][ C0] Call Trace: [ 1226.505233][ C0] [ 1226.505238][ C0] dump_stack_lvl+0x100/0x190 [ 1226.505255][ C0] print_report+0x156/0x4c9 [ 1226.505271][ C0] ? __virt_addr_valid+0x81/0x620 [ 1226.505287][ C0] ? __phys_addr+0xe8/0x180 [ 1226.505303][ C0] ? do_raw_spin_lock+0x23b/0x260 [ 1226.505319][ C0] kasan_report+0xdf/0x1a0 [ 1226.505335][ C0] ? do_raw_spin_lock+0x23b/0x260 [ 1226.505353][ C0] do_raw_spin_lock+0x23b/0x260 [ 1226.505370][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1226.505387][ C0] ? kcov_remote_stop+0x201/0x540 [ 1226.505399][ C0] ? kcov_remote_stop+0x201/0x540 [ 1226.505411][ C0] _raw_spin_lock_irqsave+0x42/0x60 [ 1226.505424][ C0] ? __wake_up+0x1c/0x60 [ 1226.505440][ C0] __wake_up+0x1c/0x60 [ 1226.505453][ C0] usb_anchor_resume_wakeups+0xc7/0xf0 [ 1226.505467][ C0] __usb_hcd_giveback_urb+0x3d6/0x610 [ 1226.505485][ C0] usb_hcd_giveback_urb+0x3ca/0x4a0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1226.505504][ C0] dummy_timer+0xd85/0x3670 [ 1226.505517][ C0] ? do_raw_spin_lock+0x128/0x260 [ 1226.505534][ C0] ? find_held_lock+0x2b/0x80 [ 1226.505544][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 1226.505559][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 1226.505574][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1226.505586][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 1226.505601][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1226.505613][ C0] ? __hrtimer_run_queues+0x433/0x990 [ 1226.505631][ C0] ? rcu_is_watching+0x12/0xc0 [ 1226.505643][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1226.505655][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1226.505665][ C0] __hrtimer_run_queues+0x516/0x990 [ 1226.505683][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1226.505700][ C0] ? ktime_get_update_offsets_now+0x2cd/0x4d0 [ 1226.505717][ C0] hrtimer_run_softirq+0x17d/0x350 [ 1226.505735][ C0] handle_softirqs+0x1ea/0x910 [ 1226.505749][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1226.505764][ C0] __irq_exit_rcu+0xef/0x150 [ 1226.505777][ C0] irq_exit_rcu+0x9/0x30 [ 1226.505790][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1226.505803][ C0] [ 1226.505807][ C0] [ 1226.505811][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1226.505823][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1226.505837][ C0] Code: a6 7a 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 63 6c 17 00 fb f4 fc 31 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1226.505848][ C0] RSP: 0000:ffffffff8e207e00 EFLAGS: 00000202 [ 1226.505858][ C0] RAX: 0000000001347cf1 RBX: ffffffff8e297ac0 RCX: ffffffff8b7414b5 [ 1226.505865][ C0] RDX: 0000000000000000 RSI: ffffffff8dc41a76 RDI: ffffffff8bfa3320 [ 1226.505872][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed100564673d [ 1226.505879][ C0] R10: ffff88802b2339eb R11: 0000000000000000 R12: fffffbfff1c52f58 [ 1226.505886][ C0] R13: 0000000000000000 R14: ffffffff90b76fd0 R15: 0000000000000000 [ 1226.505894][ C0] ? ct_kernel_exit+0x125/0x180 [ 1226.505909][ C0] default_idle+0x9/0x10 [ 1226.505923][ C0] default_idle_call+0x6c/0xb0 [ 1226.505947][ C0] do_idle+0x35b/0x4b0 [ 1226.505958][ C0] ? __pfx_do_idle+0x10/0x10 [ 1226.505970][ C0] ? do_idle+0x2bb/0x4b0 [ 1226.505981][ C0] cpu_startup_entry+0x4f/0x60 [ 1226.505992][ C0] rest_init+0x251/0x260 [ 1226.506007][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1226.506032][ C0] start_kernel+0x47a/0x480 [ 1226.506043][ C0] x86_64_start_reservations+0x24/0x30 [ 1226.506056][ C0] x86_64_start_kernel+0x122/0x130 [ 1226.506067][ C0] common_startup_64+0x13e/0x148 [ 1226.506085][ C0] [ 1226.506089][ C0] [ 1226.637475][ C0] Allocated by task 31950: [ 1226.639219][ C0] kasan_save_stack+0x30/0x50 [ 1226.641029][ C0] kasan_save_track+0x14/0x30 [ 1226.642839][ C0] __kasan_kmalloc+0xaa/0xb0 [ 1226.644609][ C0] xpad_probe+0x28e/0x1f60 [ 1226.646322][ C0] usb_probe_interface+0x303/0x8f0 [ 1226.648309][ C0] really_probe+0x241/0xa60 [ 1226.650039][ C0] __driver_probe_device+0x1de/0x400 [ 1226.652168][ C0] driver_probe_device+0x4c/0x1b0 [ 1226.654165][ C0] __device_attach_driver+0x1df/0x340 [ 1226.656189][ C0] bus_for_each_drv+0x159/0x1e0 [ 1226.658084][ C0] __device_attach+0x1e4/0x4d0 [ 1226.659928][ C0] device_initial_probe+0xaf/0xd0 [ 1226.661836][ C0] bus_probe_device+0x64/0x160 [ 1226.663657][ C0] device_add+0x11d9/0x1950 [ 1226.665384][ C0] usb_set_configuration+0xd97/0x1c60 [ 1226.667266][ C0] usb_generic_driver_probe+0xa1/0xe0 [ 1226.669253][ C0] usb_probe_device+0xef/0x400 [ 1226.671012][ C0] really_probe+0x241/0xa60 [ 1226.672665][ C0] __driver_probe_device+0x1de/0x400 [ 1226.674642][ C0] driver_probe_device+0x4c/0x1b0 [ 1226.676506][ C0] __device_attach_driver+0x1df/0x340 [ 1226.678512][ C0] bus_for_each_drv+0x159/0x1e0 [ 1226.680323][ C0] __device_attach+0x1e4/0x4d0 [ 1226.682013][ C0] device_initial_probe+0xaf/0xd0 [ 1226.683823][ C0] bus_probe_device+0x64/0x160 [ 1226.685605][ C0] device_add+0x11d9/0x1950 [ 1226.687286][ C0] usb_new_device.cold+0x685/0x115c [ 1226.689377][ C0] hub_event+0x314d/0x4af0 [ 1226.691034][ C0] process_one_work+0x9c2/0x1840 [ 1226.692901][ C0] worker_thread+0x5da/0xe40 [ 1226.694691][ C0] kthread+0x3b3/0x730 [ 1226.696268][ C0] ret_from_fork+0x754/0xaf0 [ 1226.698064][ C0] ret_from_fork_asm+0x1a/0x30 [ 1226.699925][ C0] [ 1226.701159][ C0] Freed by task 29693: [ 1226.702900][ C0] kasan_save_stack+0x30/0x50 [ 1226.704879][ C0] kasan_save_track+0x14/0x30 [ 1226.706837][ C0] kasan_save_free_info+0x3b/0x70 [ 1226.708980][ C0] __kasan_slab_free+0x5f/0x80 [ 1226.710968][ C0] kfree+0x1c7/0x690 [ 1226.712621][ C0] xpad_disconnect+0x1cf/0x530 [ 1226.714619][ C0] usb_unbind_interface+0x1dd/0x9e0 [ 1226.716582][ C0] device_remove+0x12a/0x180 [ 1226.718284][ C0] device_release_driver_internal+0x42e/0x600 [ 1226.720870][ C0] bus_remove_device+0x22f/0x440 [ 1226.722923][ C0] device_del+0x376/0x9b0 [ 1226.724592][ C0] usb_disable_device+0x367/0x810 [ 1226.726391][ C0] usb_disconnect+0x2e2/0x9a0 [ 1226.728385][ C0] hub_event+0x1d0c/0x4af0 [ 1226.730235][ C0] process_one_work+0x9c2/0x1840 [ 1226.732135][ C0] worker_thread+0x5da/0xe40 [ 1226.733809][ C0] kthread+0x3b3/0x730 [ 1226.735524][ C0] ret_from_fork+0x754/0xaf0 [ 1226.737455][ C0] ret_from_fork_asm+0x1a/0x30 [ 1226.739069][ C0] [ 1226.740092][ C0] The buggy address belongs to the object at ffff88804e732800 [ 1226.740092][ C0] which belongs to the cache kmalloc-1k of size 1024 [ 1226.745720][ C0] The buggy address is located 92 bytes inside of [ 1226.745720][ C0] freed 1024-byte region [ffff88804e732800, ffff88804e732c00) [ 1226.750882][ C0] [ 1226.751915][ C0] The buggy address belongs to the physical page: [ 1226.754544][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4e730 [ 1226.757720][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1226.761191][ C0] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 1226.763941][ C0] page_type: f5(slab) [ 1226.765748][ C0] raw: 04fff00000000040 ffff88801b842dc0 dead000000000100 dead000000000122 [ 1226.769438][ C0] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 1226.772951][ C0] head: 04fff00000000040 ffff88801b842dc0 dead000000000100 dead000000000122 [ 1226.776512][ C0] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 1226.779974][ C0] head: 04fff00000000003 ffffea000139cc01 00000000ffffffff 00000000ffffffff [ 1226.783464][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1226.786982][ C0] page dumped because: kasan: bad access detected [ 1226.789650][ C0] page_owner tracks the page as allocated [ 1226.791960][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6082, tgid 6081 (syz.3.22), ts 55927488440, free_ts 55617871509 [ 1226.799800][ C0] post_alloc_hook+0x1e1/0x250 [ 1226.801806][ C0] get_page_from_freelist+0xe3d/0x2e10 [ 1226.804060][ C0] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 1226.806480][ C0] alloc_pages_mpol+0x1fb/0x550 [ 1226.808524][ C0] new_slab+0x2c4/0x440 [ 1226.810251][ C0] ___slab_alloc+0xda3/0x1ca0 [ 1226.812205][ C0] __slab_alloc.isra.0+0x63/0x110 [ 1226.814270][ C0] __kmalloc_cache_noprof+0x531/0x810 [ 1226.816065][ C0] pty_common_install+0x10e/0xb30 [ 1226.818169][ C0] tty_init_dev.part.0+0x9e/0x470 [ 1226.820254][ C0] tty_init_dev+0x60/0x80 [ 1226.822035][ C0] ptmx_open+0x15e/0x3c0 [ 1226.823720][ C0] chrdev_open+0x234/0x6a0 [ 1226.825571][ C0] do_dentry_open+0x73e/0x1570 [ 1226.827501][ C0] vfs_open+0x82/0x3f0 [ 1226.829229][ C0] path_openat+0x21dc/0x3120 [ 1226.831146][ C0] page last free pid 5939 tgid 5939 stack trace: [ 1226.833323][ C0] __free_frozen_pages+0x822/0x1130 [ 1226.835457][ C0] __put_partials+0x127/0x160 [ 1226.837414][ C0] qlist_free_all+0x47/0xe0 [ 1226.839323][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1226.841567][ C0] __kasan_slab_alloc+0x69/0x90 [ 1226.843524][ C0] __kmalloc_noprof+0x300/0x9c0 [ 1226.845506][ C0] inotify_handle_inode_event+0x1a5/0x6a0 [ 1226.847787][ C0] fsnotify_handle_inode_event.isra.0+0x1e3/0x410 [ 1226.850023][ C0] fsnotify+0x187d/0x3550 [ 1226.851674][ C0] __fsnotify_parent+0x704/0xca0 [ 1226.853691][ C0] __fput+0x30d/0xb40 [ 1226.855321][ C0] fput_close_sync+0x118/0x250 [ 1226.857236][ C0] __ia32_sys_close+0x8b/0x120 [ 1226.859238][ C0] do_int80_emulation+0x101/0x470 [ 1226.861141][ C0] asm_int80_emulation+0x1a/0x20 [ 1226.862801][ C0] [ 1226.863611][ C0] Memory state around the buggy address: [ 1226.865522][ C0] ffff88804e732700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1226.868340][ C0] ffff88804e732780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1226.871044][ C0] >ffff88804e732800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1226.873901][ C0] ^ [ 1226.876566][ C0] ffff88804e732880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1226.879244][ C0] ffff88804e732900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1226.881764][ C0] ================================================================== [ 1226.884296][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1226.886564][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1226.889880][ C0] Tainted: [L]=SOFTLOCKUP [ 1226.891258][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1226.894438][ C0] Call Trace: [ 1226.895523][ C0] [ 1226.896469][ C0] dump_stack_lvl+0x100/0x190 [ 1226.898031][ C0] vpanic+0x20d/0x630 [ 1226.899331][ C0] panic+0xd1/0xd1 [ 1226.900544][ C0] ? __pfx_panic+0x10/0x10 [ 1226.901971][ C0] ? end_report.part.0+0x23/0x90 [ 1226.903549][ C0] ? rcu_is_watching+0x12/0xc0 [ 1226.905080][ C0] ? end_report.part.0+0x23/0x90 [ 1226.906904][ C0] ? check_panic_on_warn+0x1f/0x90 [ 1226.908746][ C0] check_panic_on_warn.cold+0x19/0x34 [ 1226.910468][ C0] end_report.part.0+0x3a/0x90 [ 1226.912030][ C0] kasan_report.cold+0xe/0x18 [ 1226.913638][ C0] ? do_raw_spin_lock+0x23b/0x260 [ 1226.915263][ C0] do_raw_spin_lock+0x23b/0x260 [ 1226.916866][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1226.918637][ C0] ? kcov_remote_stop+0x201/0x540 [ 1226.920263][ C0] ? kcov_remote_stop+0x201/0x540 [ 1226.921880][ C0] _raw_spin_lock_irqsave+0x42/0x60 [ 1226.923535][ C0] ? __wake_up+0x1c/0x60 [ 1226.924914][ C0] __wake_up+0x1c/0x60 [ 1226.926233][ C0] usb_anchor_resume_wakeups+0xc7/0xf0 [ 1226.928020][ C0] __usb_hcd_giveback_urb+0x3d6/0x610 [ 1226.929736][ C0] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 1226.931401][ C0] dummy_timer+0xd85/0x3670 [ 1226.932876][ C0] ? do_raw_spin_lock+0x128/0x260 [ 1226.934486][ C0] ? find_held_lock+0x2b/0x80 [ 1226.936008][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 1226.937753][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 1226.939567][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1226.941436][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 1226.943222][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1226.944822][ C0] ? __hrtimer_run_queues+0x433/0x990 [ 1226.946538][ C0] ? rcu_is_watching+0x12/0xc0 [ 1226.948118][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1226.949972][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1226.951554][ C0] __hrtimer_run_queues+0x516/0x990 [ 1226.953236][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1226.955054][ C0] ? ktime_get_update_offsets_now+0x2cd/0x4d0 [ 1226.956994][ C0] hrtimer_run_softirq+0x17d/0x350 [ 1226.958646][ C0] handle_softirqs+0x1ea/0x910 [ 1226.960195][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1226.961892][ C0] __irq_exit_rcu+0xef/0x150 [ 1226.963379][ C0] irq_exit_rcu+0x9/0x30 [ 1226.964756][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1226.966540][ C0] [ 1226.967520][ C0] [ 1226.968534][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1226.970443][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1226.972248][ C0] Code: a6 7a 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 63 6c 17 00 fb f4 fc 31 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1226.978275][ C0] RSP: 0000:ffffffff8e207e00 EFLAGS: 00000202 [ 1226.980189][ C0] RAX: 0000000001347cf1 RBX: ffffffff8e297ac0 RCX: ffffffff8b7414b5 [ 1226.982664][ C0] RDX: 0000000000000000 RSI: ffffffff8dc41a76 RDI: ffffffff8bfa3320 [ 1226.985158][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed100564673d [ 1226.988023][ C0] R10: ffff88802b2339eb R11: 0000000000000000 R12: fffffbfff1c52f58 [ 1226.990510][ C0] R13: 0000000000000000 R14: ffffffff90b76fd0 R15: 0000000000000000 [ 1226.993019][ C0] ? ct_kernel_exit+0x125/0x180 [ 1226.994572][ C0] default_idle+0x9/0x10 [ 1226.995948][ C0] default_idle_call+0x6c/0xb0 [ 1226.997477][ C0] do_idle+0x35b/0x4b0 [ 1226.998823][ C0] ? __pfx_do_idle+0x10/0x10 [ 1227.000322][ C0] ? do_idle+0x2bb/0x4b0 [ 1227.001929][ C0] cpu_startup_entry+0x4f/0x60 [ 1227.003635][ C0] rest_init+0x251/0x260 [ 1227.005242][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1227.007027][ C0] start_kernel+0x47a/0x480 [ 1227.008524][ C0] x86_64_start_reservations+0x24/0x30 [ 1227.010272][ C0] x86_64_start_kernel+0x122/0x130 [ 1227.011928][ C0] common_startup_64+0x13e/0x148 [ 1227.013516][ C0] [ 1227.015196][ C0] Kernel Offset: disabled [ 1227.016591][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:38:21 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000077 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85673cf5 RDI=ffffffff9b1f2260 RBP=ffffffff9b1f2220 RSP=ffffc900000074a8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000077 R14=0000000000000010 R15=ffffffff85673c90 RIP=ffffffff85673d1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880973e3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5444bac CR3=00000000725d0000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004800000000 0000000100000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004800000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff916257d2 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000001 RBP=ffffc90026956470 RSP=ffffc900269563b8 R8 =ffffffff916257d6 R9 =0000000000000007 R10=0000000000000200 R11=00000000000161cd R12=ffffc90026956478 R13=ffffc90026956428 R14=ffffc90026956ae0 R15=ffffc9002695645c RIP=ffffffff81b64bd8 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880974e3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f7b57ec10c0 CR3=000000005d116000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000040007 Opmask01=0000000000000001 Opmask02=0000000000180000 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd6c9c37bb 00007ffd6c9c37bb ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd6c9c3cc0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd6c9c3cc0 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3338322e31323231 205b3e343c002e68 74676e656c206469 6c61766e69000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3332322431323231 2051343436002462 7467646566206463 6661766463000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3332203a65756c61 76207327726f7470 6972637365642065 6361667265746e69 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20656874206d6f72 6620746e65726566 666964202c73726f 7470697263736564 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20746e696f70646e 6520322073616820 3020676e69747465 73746c6120353620 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656361667265746e 6920393731206769 666e6f63203a312d 323120627375205d ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e656d676172 66206562206c6c69 7720656361667265 746e692073696874 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000008 RCX=ffffffff84ee2797 RDX=0000000000000000 RSI=0000000000000008 RDI=ffff888079418ad8 RBP=ffff888079418ad8 RSP=ffffc900043a7188 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000025 R11=0000000000000000 R12=ffff888079418ae0 R13=00000000000005f8 R14=0000000000000200 R15=ffffc900043a73e8 RIP=ffffffff826f9df0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f6c8a86d300 ffffffff 00c00000 GS =0000 ffff8880975e3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000563ce4f47000 CR3=0000000043b98000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000003000000012 0004000000080024 0000000000280034 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000024d4 0000001c00000000 0000000000000000 0000000000000017 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffef08 0c80032e00000510 0000001600000011 0000000200000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008000208007c08 000a014de60c8002 0208000008000601 598e0e08000c8003 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0fffffffff020580 021c080000080008 014fee4080809080 8296080005880310 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0800058003060800 0008000100000008 06060107c0000800 0008000008000c08 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000100000008060a 0106dc0008000c80 02040007c4007366 677562656401ffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001ffff ffffffffffff8708 08a0030008000898 0300000000000000 ZMM25=8fd231858fd23185 8fd231858fd23185 8fd231858fd23185 8fd231858fd23185 8fd231858fd23185 8fd231858fd23185 8fd231858fd23185 8fd231858fd23185 ZMM26=1ca56fdd1ca56fdd 1ca56fdd1ca56fdd 1ca56fdd1ca56fdd 1ca56fdd1ca56fdd 1ca56fdd1ca56fdd 1ca56fdd1ca56fdd 1ca56fdd1ca56fdd 1ca56fdd1ca56fdd ZMM27=0c97d2e30c97d2e3 0c97d2e30c97d2e3 0c97d2e30c97d2e3 0c97d2e30c97d2e3 0c97d2e30c97d2e3 0c97d2e30c97d2e3 0c97d2e30c97d2e3 0c97d2e30c97d2e3 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=a9370000a9370000 a9370000a9370000 a9370000a9370000 a9370000a9370000 a9370000a9370000 a9370000a9370000 a9370000a9370000 a9370000a9370000 info registers vcpu 3 CPU#3 RAX=0000000001295deb RBX=ffff88801dea0000 RCX=ffffffff8b7414b5 RDX=0000000000000000 RSI=ffffffff8dc41a76 RDI=ffffffff8bfa3320 RBP=0000000000000003 RSP=ffffc9000048fdf0 R8 =0000000000000001 R9 =ffffed10056a673d R10=ffff88802b5339eb R11=0000000000000000 R12=ffffed1003bd4000 R13=0000000000000003 R14=ffffffff90b76fd0 R15=0000000000000000 RIP=ffffffff8b73fe1f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976e3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008001b000 CR3=000000002908b000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=00000000fffffffe Opmask02=00000000ffffffff Opmask03=0000000020400004 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000561547d24a70 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000561547d30660 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7b57ff1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffff0000000000ff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7618e15aff0aad31 7373737612270e51 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737342 7373256634a07573 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302e746567646167 2d7761722f737265 766972642f746567 6461672f7375622f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302e746567646167 2d7761722f737265 766972642f746567 6461672f7375622f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004449 0000561026871111 0000000000000021 0000000000000037 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000561547e79b10 fffffffffffffffc 00007f7b57ebfd6a 00007ffddaf300c8 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003aa4 ffffffffffff82dc 00007f7b57ebfd6a 00007ffddaf300ca ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 056bff57dfd3fff7 fffffffffffffbdc 00007f7f7ffffffb ffffffffffffffff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4442654344464670 3243353176333030 30623a7475706e69 3d5341494c41444f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000561547d100c0 0000007457003078 00004e1547414552 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000561547d10050 0000001528001919 00004e1547410052 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000