last executing test programs: 3.472784477s ago: executing program 1 (id=280): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r1 = socket$inet(0xa, 0x801, 0x84) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) connect$inet(r1, 0x0, 0x0) r2 = gettid() r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) close(0x3) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0xfffffffffffffffd, 0x2000000000000}, 0x0, &(0x7f0000000080)={0x1f, 0x3, 0x9117}, 0x0, 0x0) timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) write(r0, &(0x7f0000000000)="a5e2617ba6c7f784dfc6394f591160050d86364b3f456edbd5dac8e4a1fb10ee0d247b698c03", 0x26) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) 2.709352037s ago: executing program 2 (id=286): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 2.512146837s ago: executing program 0 (id=287): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x2, 0x20, 0x0, 0x11, 0x3}]}, {0x0, [0x61]}}, 0x0, 0x2b, 0x0, 0x2}, 0x28) 2.40877313s ago: executing program 2 (id=288): socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 2.408407483s ago: executing program 1 (id=289): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) ftruncate(0xffffffffffffffff, 0x1ff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@delqdisc={0x60, 0x25, 0x8, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x6}, {0xfff3, 0xd}, {0x0, 0xffe0}}, [@q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xa}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000084) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) munlockall() syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) add_key$user(0x0, &(0x7f00000008c0)={'syz', 0x0}, &(0x7f0000000900)='?', 0x1, r0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 2.294175974s ago: executing program 0 (id=290): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x400}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r3, r2, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) close(r4) 2.293972635s ago: executing program 3 (id=291): socket$alg(0x26, 0x5, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedreceive(r0, &(0x7f0000000100)=""/98, 0x62, 0x0, 0x0) 2.204845341s ago: executing program 2 (id=292): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmsg$nl_route(r0, 0x0, 0x8000002) syz_emit_ethernet(0x3b6, &(0x7f0000002480)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd"], 0x0) 2.072433558s ago: executing program 2 (id=293): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) listen(0xffffffffffffffff, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 1.588566467s ago: executing program 0 (id=294): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0xfffffffd) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) openat$ppp(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000180)={0x2, &(0x7f0000010080)=[{0x50, 0x1, 0x3, 0x900002}, {0x6, 0x0, 0xff, 0x8}]}) write$ppp(r0, &(0x7f0000000400)='0L', 0x2) 1.404860843s ago: executing program 1 (id=295): syz_emit_vhci(0x0, 0x17) 1.314859502s ago: executing program 1 (id=296): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 1.254645777s ago: executing program 3 (id=297): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 1.254087834s ago: executing program 1 (id=298): truncate(&(0x7f0000000100)='./file1\x00', 0x8000e) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000806000000000400aaaaaaaaaa2986dd6de7136600e911"], 0x65) 1.184943015s ago: executing program 0 (id=299): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) clock_getres(0x4, 0x0) 1.000027218s ago: executing program 3 (id=300): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x0, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x445, 0x8, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0xfc, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240446}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 754.485925ms ago: executing program 2 (id=301): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmsg$nl_route(r0, 0x0, 0x8000002) syz_emit_ethernet(0x3b6, &(0x7f0000002480)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd"], 0x0) 607.771817ms ago: executing program 1 (id=302): ioctl$XFS_IOC_FSGROWFSRT(0xffffffffffffffff, 0x40105870, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f00000017c0)={0x1, 0x0, [{0x80000008, 0x914, 0x4, 0x0, 0xfffffff7, 0x5, 0x1000aa}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) clock_getres(0x4, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x32, 0x0, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 607.289202ms ago: executing program 2 (id=303): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setfsgid(0xee00) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="180000003e00290200000000fcdbdf250a"], 0x1c}}, 0x8804) 295.686102ms ago: executing program 3 (id=304): syz_emit_vhci(&(0x7f0000000340)=ANY=[], 0x17) 295.435295ms ago: executing program 0 (id=305): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) syz_open_procfs(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 155.992771ms ago: executing program 0 (id=306): socket(0xa, 0x3, 0xff) openat$dir(0xffffffffffffff9c, 0x0, 0x4002, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000000100)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) socket(0x11, 0x3, 0x0) r1 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r1, &(0x7f0000ffd000/0x2000)=nil, 0x5000) 155.753181ms ago: executing program 3 (id=307): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 0s ago: executing program 3 (id=308): add_key$user(&(0x7f0000000200), &(0x7f0000000100), &(0x7f00000001c0)="e2", 0x1, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:9148' (ED25519) to the list of known hosts. syzkaller login: [ 80.472184][ T5711] cgroup: Unknown subsys name 'net' [ 80.644663][ T5711] cgroup: Unknown subsys name 'cpuset' [ 80.698595][ T5711] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.399677][ T5711] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.834976][ T3376] cfg80211: failed to load regulatory.db [ 97.500169][ T5766] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.510572][ T5768] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.511700][ T5768] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.523196][ T5769] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.531076][ T5769] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.531721][ T5769] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.532184][ T5769] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.588108][ T5768] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.591280][ T5768] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.596076][ T5768] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.599247][ T5768] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.600380][ T5768] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.603132][ T5760] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.604004][ T5760] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.613959][ T5760] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.614476][ T5760] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.724134][ T5768] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.778867][ T5769] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.853248][ T5769] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.855150][ T5769] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.054867][ T5763] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.054988][ T5763] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.055143][ T5763] bridge_slave_0: entered allmulticast mode [ 99.058351][ T5763] bridge_slave_0: entered promiscuous mode [ 99.132647][ T5763] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.132765][ T5763] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.132878][ T5763] bridge_slave_1: entered allmulticast mode [ 99.134327][ T5763] bridge_slave_1: entered promiscuous mode [ 99.280191][ T5763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.283119][ T5763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.414663][ T5763] team0: Port device team_slave_0 added [ 99.529067][ T5763] team0: Port device team_slave_1 added [ 99.551378][ T5098] Bluetooth: hci0: command tx timeout [ 99.615240][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.615256][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.615274][ T5763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.680001][ T5754] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.680084][ T5754] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.680197][ T5754] bridge_slave_0: entered allmulticast mode [ 99.681821][ T5754] bridge_slave_0: entered promiscuous mode [ 99.684932][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.684946][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.684965][ T5763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.721700][ T5098] Bluetooth: hci3: command tx timeout [ 99.793656][ T5098] Bluetooth: hci1: command tx timeout [ 99.825221][ T5754] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.825386][ T5754] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.825527][ T5754] bridge_slave_1: entered allmulticast mode [ 99.827471][ T5754] bridge_slave_1: entered promiscuous mode [ 99.975200][ T5098] Bluetooth: hci2: command tx timeout [ 99.999560][ T5756] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.999638][ T5756] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.999747][ T5756] bridge_slave_0: entered allmulticast mode [ 100.001157][ T5756] bridge_slave_0: entered promiscuous mode [ 100.018137][ T5754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.077502][ T5756] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.077594][ T5756] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.077706][ T5756] bridge_slave_1: entered allmulticast mode [ 100.079043][ T5756] bridge_slave_1: entered promiscuous mode [ 100.083428][ T5754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.124122][ T5763] hsr_slave_0: entered promiscuous mode [ 100.137366][ T5763] hsr_slave_1: entered promiscuous mode [ 100.179633][ T5755] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.179713][ T5755] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.179808][ T5755] bridge_slave_0: entered allmulticast mode [ 100.181366][ T5755] bridge_slave_0: entered promiscuous mode [ 100.225282][ T5755] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.225359][ T5755] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.225455][ T5755] bridge_slave_1: entered allmulticast mode [ 100.226721][ T5755] bridge_slave_1: entered promiscuous mode [ 100.265920][ T5754] team0: Port device team_slave_0 added [ 100.318056][ T5756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.319973][ T5754] team0: Port device team_slave_1 added [ 100.344932][ T5755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.351082][ T5756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.398210][ T5755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.411568][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.411586][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.411605][ T5754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.455042][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.455070][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.455089][ T5754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.494377][ T5755] team0: Port device team_slave_0 added [ 100.514666][ T5756] team0: Port device team_slave_0 added [ 100.537417][ T5755] team0: Port device team_slave_1 added [ 100.599115][ T5756] team0: Port device team_slave_1 added [ 100.679170][ T5755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.679196][ T5755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.679216][ T5755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.709248][ T5755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.709265][ T5755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.709286][ T5755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.735999][ T5754] hsr_slave_0: entered promiscuous mode [ 100.737097][ T5754] hsr_slave_1: entered promiscuous mode [ 100.737722][ T5754] debugfs: 'hsr0' already exists in 'hsr' [ 100.737789][ T5754] Cannot create hsr debugfs directory [ 100.844749][ T5756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.844764][ T5756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.844781][ T5756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.846264][ T5756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.846277][ T5756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.846295][ T5756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.037448][ T5755] hsr_slave_0: entered promiscuous mode [ 101.041107][ T5755] hsr_slave_1: entered promiscuous mode [ 101.042917][ T5755] debugfs: 'hsr0' already exists in 'hsr' [ 101.042939][ T5755] Cannot create hsr debugfs directory [ 101.051688][ T5756] hsr_slave_0: entered promiscuous mode [ 101.052979][ T5756] hsr_slave_1: entered promiscuous mode [ 101.053634][ T5756] debugfs: 'hsr0' already exists in 'hsr' [ 101.053654][ T5756] Cannot create hsr debugfs directory [ 101.282634][ T5763] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.295607][ T5763] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.297191][ T5763] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.325609][ T5763] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.409476][ T5763] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.443009][ T5763] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.492787][ T5763] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.499179][ T5763] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.642186][ T5098] Bluetooth: hci0: command tx timeout [ 101.799545][ T5754] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.808027][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.808911][ T5754] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.831096][ T5098] Bluetooth: hci3: command tx timeout [ 101.843578][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.862418][ T5098] Bluetooth: hci1: command tx timeout [ 101.871197][ T5754] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.882085][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.882824][ T5754] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.910194][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.025556][ T5098] Bluetooth: hci2: command tx timeout [ 102.113549][ T5763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.169779][ T5755] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.175182][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.177245][ T5755] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.186987][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.188029][ T5755] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 102.204255][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.228631][ T5755] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 102.233580][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.267047][ T5763] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.394560][ T750] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.395360][ T750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.475873][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.475966][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.478226][ T5756] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.488412][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.570041][ T5756] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.584343][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.617875][ T5756] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.631657][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.664045][ T5756] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.673023][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.747648][ T5754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.868004][ T5754] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.916644][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.916718][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.973453][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.973609][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.996657][ T5755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.061474][ T5755] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.122774][ T750] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.122869][ T750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.124825][ T750] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.124906][ T750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.146810][ T5754] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 103.146833][ T5754] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 103.261810][ T5755] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 103.279254][ T5756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.315230][ T5756] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.359582][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.359663][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.369348][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.369439][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.703648][ T5098] Bluetooth: hci0: command tx timeout [ 103.870331][ T5098] Bluetooth: hci3: command tx timeout [ 103.945742][ T5098] Bluetooth: hci1: command tx timeout [ 103.956022][ T5763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.102176][ T5098] Bluetooth: hci2: command tx timeout [ 104.139952][ T5763] veth0_vlan: entered promiscuous mode [ 104.157317][ T5763] veth1_vlan: entered promiscuous mode [ 104.283655][ T5754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.343910][ T5763] veth0_macvtap: entered promiscuous mode [ 104.350238][ T5755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.354228][ T5763] veth1_macvtap: entered promiscuous mode [ 104.469470][ T5756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.469681][ T5754] veth0_vlan: entered promiscuous mode [ 104.498400][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.507712][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.605596][ T5754] veth1_vlan: entered promiscuous mode [ 104.745121][ T5755] veth0_vlan: entered promiscuous mode [ 104.868026][ T5755] veth1_vlan: entered promiscuous mode [ 104.884865][ T14] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.885107][ T14] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.885163][ T14] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.885214][ T14] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.899994][ T5754] veth0_macvtap: entered promiscuous mode [ 104.913325][ T5754] veth1_macvtap: entered promiscuous mode [ 104.970603][ T5756] veth0_vlan: entered promiscuous mode [ 105.070087][ T5756] veth1_vlan: entered promiscuous mode [ 105.085146][ T5755] veth0_macvtap: entered promiscuous mode [ 105.094901][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.098834][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.116988][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.117044][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.117085][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.117125][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.124007][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.124025][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.145075][ T5755] veth1_macvtap: entered promiscuous mode [ 105.279080][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.279094][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.281039][ T5755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.347535][ T5755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.468684][ T5756] veth0_macvtap: entered promiscuous mode [ 105.546138][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.546164][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.578077][ T5756] veth1_macvtap: entered promiscuous mode [ 105.785690][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.786071][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.852475][ T5098] Bluetooth: hci0: command tx timeout [ 105.873566][ T5830] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.873620][ T5830] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.914095][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.914111][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.945442][ T5098] Bluetooth: hci3: command tx timeout [ 105.950380][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.950402][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.963702][ T5756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.016829][ T5756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.026083][ T5763] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 106.030429][ T5098] Bluetooth: hci1: command tx timeout [ 106.071269][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.071288][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.084914][ T5763] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 106.100975][ T5763] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 106.105628][ T5763] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 106.127049][ T14] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.127097][ T14] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.127126][ T14] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.127155][ T14] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.190180][ T5098] Bluetooth: hci2: command tx timeout [ 106.242174][ T5763] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 106.575525][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.575563][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.751370][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.751391][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.226876][ T5909] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 107.498288][ T5909] bridge1: entered promiscuous mode [ 107.644120][ T5918] bochs-drm 0000:00:01.0: [drm] Unknown color mode 6; guessing buffer size. [ 108.423431][ T5935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.452332][ T5933] serio: Serial port ptm0 [ 109.824172][ T5948] batman_adv: batadv0: Adding interface: syzkaller0 [ 109.824192][ T5948] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.824223][ T5948] batman_adv: batadv0: Interface activated: syzkaller0 [ 111.430204][ T5947] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 111.526537][ T5955] jffs2: notice: (5955) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 111.782655][ T5947] batman_adv: batadv0: Removing interface: syzkaller0 [ 112.005040][ T5961] ======================================================= [ 112.005040][ T5961] WARNING: The mand mount option has been deprecated and [ 112.005040][ T5961] and is ignored by this kernel. Remove the mand [ 112.005040][ T5961] option from the mount to silence this warning. [ 112.005040][ T5961] ======================================================= [ 112.010079][ T5961] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 112.169787][ T5961] syz.1.20 uses obsolete (PF_INET,SOCK_PACKET) [ 112.277349][ T5963] syz_tun: entered promiscuous mode [ 112.277600][ T5963] macvtap1: entered promiscuous mode [ 112.278016][ T5963] macvtap1: entered allmulticast mode [ 112.278036][ T5963] syz_tun: entered allmulticast mode [ 112.317481][ T5963] syz_tun: left allmulticast mode [ 112.317949][ T5963] syz_tun: left promiscuous mode [ 113.064300][ T5968] Zero length message leads to an empty skb [ 113.430892][ T5974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23'. [ 113.615441][ T5979] dummy0: entered promiscuous mode [ 113.672200][ T5979] dummy0: left promiscuous mode [ 115.221713][ T5996] netlink: 'syz.3.31': attribute type 1 has an invalid length. [ 115.340296][ T5996] bridge1: entered promiscuous mode [ 115.397205][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33'. [ 115.454157][ T5863] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 115.638475][ T5863] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 115.650701][ T5863] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 115.650736][ T5863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 115.650761][ T5863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 115.723880][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.723905][ T5863] usb 5-1: Product: syz [ 115.723916][ T5863] usb 5-1: Manufacturer: syz [ 115.723934][ T5863] usb 5-1: SerialNumber: syz [ 115.729681][ T5863] usb 5-1: config 0 descriptor?? [ 115.748776][ T5997] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 116.063799][ T5863] rc_core: IR keymap rc-streamzap not found [ 116.063820][ T5863] Registered IR keymap rc-empty [ 116.069141][ T5863] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 116.093042][ T5863] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input5 [ 116.226736][ T5863] usb 5-1: USB disconnect, device number 2 [ 119.537172][ T66] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 119.773620][ T66] usb 8-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 119.774873][ T66] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.774895][ T66] usb 8-1: config 0 has no interfaces? [ 119.774926][ T66] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.777424][ T66] usb 8-1: config 0 descriptor?? [ 119.996352][ T977] usb 8-1: USB disconnect, device number 2 [ 120.502632][ T6055] netlink: 32 bytes leftover after parsing attributes in process `syz.1.49'. [ 121.304964][ T66] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 121.462725][ T66] usb 8-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 121.463799][ T66] usb 8-1: config index 0 descriptor too short (expected 50, got 32) [ 121.463821][ T66] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.463854][ T66] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 121.463872][ T66] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.466073][ T66] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.466093][ T66] usb 8-1: Product: syz [ 121.466105][ T66] usb 8-1: Manufacturer: syz [ 121.466116][ T66] usb 8-1: SerialNumber: syz [ 121.471507][ T6067] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 121.520399][ T66] usb_debug 8-1:1.0: debug converter detected [ 121.541548][ T66] usb 8-1: debug converter now attached to ttyUSB0 [ 121.723570][ C1] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 121.759845][ T66] usb 8-1: USB disconnect, device number 3 [ 121.824184][ T66] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 121.824817][ T66] usb_debug 8-1:1.0: device disconnected [ 122.152196][ T26] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 122.404983][ T6080] IPVS: Unknown mcast interface: nr0 [ 122.472337][ T26] usb 7-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 122.479729][ T26] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.515264][ T26] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.515290][ T26] usb 7-1: Product: syz [ 122.515301][ T26] usb 7-1: Manufacturer: syz [ 122.515312][ T26] usb 7-1: SerialNumber: syz [ 122.751024][ T26] usb 7-1: Cannot retrieve CPort count: -71 [ 122.751064][ T26] usb 7-1: Cannot retrieve CPort count: -71 [ 122.751084][ T26] es2_ap_driver 7-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 122.752855][ T44] audit: type=1326 audit(1789621525.044:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6083 comm="syz.1.61" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 122.752902][ T44] audit: type=1326 audit(1789621525.044:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6083 comm="syz.1.61" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 122.752933][ T44] audit: type=1326 audit(1789621525.064:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6083 comm="syz.1.61" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 122.752961][ T44] audit: type=1326 audit(1789621525.064:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6083 comm="syz.1.61" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 122.752992][ T44] audit: type=1326 audit(1789621525.064:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6083 comm="syz.1.61" exe="/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf701efec code=0x7ffc0000 [ 122.759136][ T44] audit: type=1326 audit(1789621525.064:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6083 comm="syz.1.61" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 122.759190][ T44] audit: type=1326 audit(1789621525.064:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6083 comm="syz.1.61" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf701efec code=0x7ffc0000 [ 122.759231][ T44] audit: type=1326 audit(1789621525.064:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6083 comm="syz.1.61" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 122.759424][ T26] usb 7-1: USB disconnect, device number 2 [ 122.910555][ T44] audit: type=1326 audit(1789621525.204:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6083 comm="syz.1.61" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf701efec code=0x7ffc0000 [ 123.729257][ T6099] serio: Serial port ptm0 [ 124.452987][ T977] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 124.651980][ T977] usb 6-1: Using ep0 maxpacket: 16 [ 124.653073][ T977] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 124.654122][ T977] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.654148][ T977] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.654167][ T977] usb 6-1: config 0 interface 0 has no altsetting 0 [ 124.654192][ T977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.704774][ T977] usb 6-1: config 0 descriptor?? [ 124.763083][ T6120] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 125.211483][ T977] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 125.213734][ T977] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 125.213765][ T977] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 125.213785][ T977] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 125.213805][ T977] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 125.213824][ T977] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 125.213844][ T977] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 125.213863][ T977] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 125.213882][ T977] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 125.213902][ T977] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 125.214472][ T977] cougar 0003:060B:500A.0002: unexpected long global item [ 125.215811][ T977] cougar 0003:060B:500A.0002: parse failed [ 125.215899][ T977] cougar 0003:060B:500A.0002: probe with driver cougar failed with error -22 [ 125.324058][ T44] audit: type=1807 audit(1789621527.634:11): action=measure uid>1000 res=1 [ 125.387878][ T5902] usb 6-1: USB disconnect, device number 2 [ 126.121568][ T6127] ima: policy update completed [ 126.189482][ T6142] ubi0: attaching mtd0 [ 126.195915][ T6142] ubi0: scanning is finished [ 126.195957][ T6142] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 126.561298][ T6148] ecryptfs_verify_version: Major version number mismatch. Expected [0]; got [178] [ 126.561321][ T6148] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 126.561335][ T6148] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 126.561344][ T6148] One or more global auth toks could not properly register; rc = [-22] [ 126.561383][ T6148] Error validating options; rc = [-22] [ 126.636611][ T6142] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 126.758738][ T6151] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 127.949618][ T6175] can0: slcan on ttyS3. [ 128.485198][ T6175] can0 (unregistered): slcan off ttyS3. [ 128.898534][ T6190] ubi0: attaching mtd0 [ 128.914752][ T6190] ubi0: scanning is finished [ 128.914809][ T6190] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 129.456088][ T6190] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 129.926019][ T6220] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 130.089078][ T6224] jffs2: notice: (6224) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 130.483301][ T6228] netlink: 32 bytes leftover after parsing attributes in process `syz.1.101'. [ 131.266640][ T6236] ubi0: attaching mtd0 [ 131.283289][ T6236] ubi0: scanning is finished [ 131.283344][ T6236] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 131.940382][ T6246] lo speed is unknown, defaulting to 1000 [ 131.942750][ T6246] lo speed is unknown, defaulting to 1000 [ 131.945830][ T6246] lo speed is unknown, defaulting to 1000 [ 132.068508][ T6236] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 132.402719][ T5863] lo speed is unknown, defaulting to 1000 [ 132.402862][ T6246] infiniband sz1: set active [ 132.402877][ T6246] infiniband sz1: added lo [ 132.426023][ T6246] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 132.426059][ T6246] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 132.426095][ T6246] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 132.458071][ T6246] RDS/IB: sz1: added [ 132.458295][ T6246] smc: adding ib device sz1 with port count 1 [ 132.458358][ T6246] smc: ib device sz1 port 1 has no pnetid [ 132.462261][ T4091] lo speed is unknown, defaulting to 1000 [ 132.465749][ T6246] lo speed is unknown, defaulting to 1000 [ 132.823038][ T6246] lo speed is unknown, defaulting to 1000 [ 132.948438][ T6255] jffs2: notice: (6255) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 133.259271][ T6265] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 133.259271][ T6265] Please contact the netfilter-devel mailing list or update your nftables rules. [ 133.383457][ T6246] lo speed is unknown, defaulting to 1000 [ 133.412914][ T6266] overlayfs: overlapping lowerdir path [ 133.887374][ T6246] lo speed is unknown, defaulting to 1000 [ 134.552121][ T6277] can0: slcan on ttyS3. [ 134.640005][ T6277] can0 (unregistered): slcan off ttyS3. [ 136.030969][ T6305] serio: Serial port ptm0 [ 136.312609][ T5863] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 136.483166][ T5863] usb 5-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 136.484073][ T5863] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.484091][ T5863] usb 5-1: config 0 has no interfaces? [ 136.484114][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.486158][ T5863] usb 5-1: config 0 descriptor?? [ 136.859852][ T50] usb 5-1: USB disconnect, device number 3 [ 138.341822][ T6335] input: syz1 as /devices/virtual/input/input6 [ 138.885138][ T6341] serio: Serial port ptm0 [ 138.915196][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.628085][ T6360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.716795][ T6382] serio: Serial port ptm0 [ 142.480372][ T6395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.936886][ T6400] process 'syz.0.157' launched '/dev/fd/5' with NULL argv: empty string added [ 143.432280][ T36] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 143.684705][ T36] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 143.686079][ T36] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 143.689074][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 143.689102][ T36] usb 5-1: Product: syz [ 143.689117][ T36] usb 5-1: Manufacturer: syz [ 143.689134][ T36] usb 5-1: SerialNumber: syz [ 144.034749][ T6420] serio: Serial port ptm0 [ 144.058569][ T6422] FAULT_INJECTION: forcing a failure. [ 144.058569][ T6422] name failslab, interval 1, probability 0, space 0, times 1 [ 144.058602][ T6422] CPU: 1 UID: 0 PID: 6422 Comm: syz.2.167 Not tainted syzkaller #0 PREEMPT(full) [ 144.058626][ T6422] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 144.058638][ T6422] Call Trace: [ 144.058645][ T6422] [ 144.058654][ T6422] dump_stack_lvl+0x100/0x190 [ 144.058686][ T6422] should_fail_ex.cold+0x5/0xa [ 144.058714][ T6422] should_failslab+0xc2/0x120 [ 144.058737][ T6422] __kmalloc_cache_noprof+0x91/0x6d0 [ 144.058766][ T6422] ? bfq_cpd_alloc+0x96/0x150 [ 144.058789][ T6422] bfq_cpd_alloc+0x96/0x150 [ 144.058808][ T6422] blkcg_css_alloc+0x273/0x8c0 [ 144.058828][ T6422] ? __pfx_bfq_cpd_alloc+0x10/0x10 [ 144.058849][ T6422] cgroup_apply_control_enable+0x602/0xdd0 [ 144.058877][ T6422] ? css_populate_dir+0x233/0x590 [ 144.058909][ T6422] cgroup_mkdir+0x57f/0x1330 [ 144.058936][ T6422] ? __pfx_cgroup_mkdir+0x10/0x10 [ 144.058961][ T6422] kernfs_iop_mkdir+0x111/0x190 [ 144.058985][ T6422] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 144.059007][ T6422] vfs_mkdir+0x364/0x850 [ 144.059040][ T6422] filename_mkdirat+0x48b/0x5e0 [ 144.059066][ T6422] ? __pfx_filename_mkdirat+0x10/0x10 [ 144.059089][ T6422] ? strncpy_from_user+0x19d/0x2d0 [ 144.059116][ T6422] ? do_getname+0x191/0x390 [ 144.059182][ T6422] __ia32_sys_mkdirat+0x88/0xc0 [ 144.059206][ T6422] __do_fast_syscall_32+0x13a/0x8b0 [ 144.059239][ T6422] do_fast_syscall_32+0x32/0x70 [ 144.059269][ T6422] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 144.059292][ T6422] RIP: 0023:0xf7f17fec [ 144.059314][ T6422] Code: Unable to access opcode bytes at 0xf7f17fc2. [ 144.059323][ T6422] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000128 [ 144.059342][ T6422] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 144.059354][ T6422] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000000 [ 144.059366][ T6422] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 144.059385][ T6422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.059396][ T6422] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 144.059424][ T6422] [ 144.806229][ T6432] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 145.002226][ T6440] Could not find key with description: [syz] [ 145.002328][ T6440] process_request_key_err: No key [ 145.002340][ T6440] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 145.002353][ T6440] One or more global auth toks could not properly register; rc = [-2] [ 145.002391][ T6440] Error validating options; rc = [-2] [ 145.280250][ T6446] block nbd3: NBD_DISCONNECT [ 145.689074][ T6451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.179'. [ 146.021260][ T6450] jffs2: notice: (6450) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 146.190051][ T36] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 146.262293][ T36] usb 5-1: USB disconnect, device number 4 [ 146.287991][ T36] usblp0: removed [ 146.595152][ T6461] serio: Serial port ptm0 [ 147.384986][ T6467] bridge0: port 3(syz_tun) entered blocking state [ 147.385270][ T6467] bridge0: port 3(syz_tun) entered disabled state [ 147.385489][ T6467] syz_tun: entered allmulticast mode [ 147.387266][ T6467] syz_tun: entered promiscuous mode [ 147.395589][ T6467] bridge0: port 3(syz_tun) entered blocking state [ 147.395714][ T6467] bridge0: port 3(syz_tun) entered forwarding state [ 147.480376][ T6467] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 147.765390][ T67] Bluetooth: hci4: Frame reassembly failed (-84) [ 148.563361][ T6489] Could not find key with description: [syz] [ 148.563376][ T6489] process_request_key_err: No key [ 148.563384][ T6489] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 148.563393][ T6489] One or more global auth toks could not properly register; rc = [-2] [ 148.563422][ T6489] Error validating options; rc = [-2] [ 148.861252][ T6496] serio: Serial port ptm1 [ 149.012581][ T6499] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 149.626113][ T6508] netlink: 16 bytes leftover after parsing attributes in process `syz.3.199'. [ 149.782154][ T5769] Bluetooth: hci4: command 0x1003 tx timeout [ 149.783844][ T5098] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 150.095342][ T6516] Could not find key with description: [syz] [ 150.095358][ T6516] process_request_key_err: No key [ 150.095366][ T6516] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 150.095376][ T6516] One or more global auth toks could not properly register; rc = [-2] [ 150.095401][ T6516] Error validating options; rc = [-2] [ 150.838192][ T6519] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1.0.0), cmd(3) [ 150.890286][ T36] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 151.082742][ T36] usb 7-1: Using ep0 maxpacket: 8 [ 151.086447][ T36] usb 7-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 151.088415][ T36] usb 7-1: config 0 has an invalid interface number: 186 but max is 0 [ 151.088442][ T36] usb 7-1: config 0 has no interface number 0 [ 151.088476][ T36] usb 7-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 151.088495][ T36] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 151.088519][ T36] usb 7-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 151.088540][ T36] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 151.088558][ T36] usb 7-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 151.161166][ T36] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.161389][ T36] usb 7-1: Product: syz [ 151.179732][ T36] usb 7-1: Manufacturer: syz [ 151.179751][ T36] usb 7-1: SerialNumber: syz [ 151.222489][ T36] usb 7-1: config 0 descriptor?? [ 151.253299][ T36] iowarrior 7-1:0.186: no interrupt-in endpoint found [ 151.401457][ T6535] serio: Serial port ptm0 [ 152.743082][ T26] usb 7-1: USB disconnect, device number 3 [ 153.043179][ T44] kauditd_printk_skb: 1 callbacks suppressed [ 153.043197][ T44] audit: type=1326 audit(1789621555.354:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6540 comm="syz.0.211" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 153.048299][ T44] audit: type=1326 audit(1789621555.354:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6540 comm="syz.0.211" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 153.048508][ T44] audit: type=1326 audit(1789621555.354:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6540 comm="syz.0.211" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 153.064456][ T44] audit: type=1326 audit(1789621555.374:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6540 comm="syz.0.211" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71975ab code=0x7ffc0000 [ 153.064500][ T44] audit: type=1326 audit(1789621555.374:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6540 comm="syz.0.211" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 153.064532][ T44] audit: type=1326 audit(1789621555.374:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6540 comm="syz.0.211" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 153.065255][ T44] audit: type=1326 audit(1789621555.374:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6540 comm="syz.0.211" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 153.065460][ T44] audit: type=1326 audit(1789621555.374:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6540 comm="syz.0.211" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 153.066237][ T44] audit: type=1326 audit(1789621555.374:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6540 comm="syz.0.211" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71975ab code=0x7ffc0000 [ 153.066283][ T44] audit: type=1326 audit(1789621555.374:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6540 comm="syz.0.211" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 153.157560][ T6541] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 153.157584][ T6541] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 153.635660][ T6541] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 153.635686][ T6541] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 153.725746][ T6541] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 153.725768][ T6541] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 153.915678][ T6541] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 153.915701][ T6541] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 154.273023][ T78] Bluetooth: hci4: Frame reassembly failed (-84) [ 154.536008][ T6562] serio: Serial port ptm1 [ 155.392810][ T6581] Could not find key with description: [syz] [ 155.392830][ T6581] process_request_key_err: No key [ 155.392838][ T6581] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 155.392848][ T6581] One or more global auth toks could not properly register; rc = [-2] [ 155.392880][ T6581] Error validating options; rc = [-2] [ 156.343044][ T5769] Bluetooth: hci4: command 0x1003 tx timeout [ 156.360475][ T5098] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 157.146339][ T6603] bridge0: port 3(syz_tun) entered blocking state [ 157.146513][ T6603] bridge0: port 3(syz_tun) entered disabled state [ 157.146686][ T6603] syz_tun: entered allmulticast mode [ 157.148530][ T6603] syz_tun: entered promiscuous mode [ 157.149766][ T6603] bridge0: port 3(syz_tun) entered blocking state [ 157.149868][ T6603] bridge0: port 3(syz_tun) entered forwarding state [ 157.232373][ T6603] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 157.302511][ T4091] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 157.465726][ T6607] Could not find key with description: [syz] [ 157.465745][ T6607] process_request_key_err: No key [ 157.465754][ T6607] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 157.465765][ T6607] One or more global auth toks could not properly register; rc = [-2] [ 157.465799][ T6607] Error validating options; rc = [-2] [ 157.471387][ T4091] usb 8-1: Using ep0 maxpacket: 16 [ 157.472194][ T4091] usb 8-1: New USB device found, idVendor=046d, idProduct=c087, bcdDevice= 0.00 [ 157.473578][ T4091] usb 8-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 157.473605][ T4091] usb 8-1: config 0 interface 0 altsetting 11 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 157.473626][ T4091] usb 8-1: config 0 interface 0 has no altsetting 0 [ 157.473667][ T4091] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.475743][ T4091] usb 8-1: config 0 descriptor?? [ 157.596504][ T6608] block nbd2: NBD_DISCONNECT [ 158.068621][ T6612] veth1_to_bond: entered allmulticast mode [ 158.069197][ T6612] netlink: 28 bytes leftover after parsing attributes in process `syz.3.232'. [ 158.309939][ T6600] veth1_to_bond: left allmulticast mode [ 158.394933][ T4091] usbhid 8-1:0.0: can't add hid device: -71 [ 158.395030][ T4091] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 158.397770][ T4091] usb 8-1: USB disconnect, device number 4 [ 159.162061][ T5898] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 159.334224][ T5898] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 159.335185][ T5898] usb 5-1: Dual-Role OTG device on HNP port [ 159.335577][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.347143][ T5898] gspca_main: spca501-2.14.0 probing 0000:0000 [ 159.347559][ T5898] gspca_spca501: reg write: error -32 [ 159.347571][ T5898] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 159.347627][ T5898] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 160.726970][ T6641] lo speed is unknown, defaulting to 1000 [ 161.037644][ T5673] Process accounting resumed [ 161.222185][ T6659] tipc: Enabling of bearer rejected, failed to enable media [ 161.484677][ T44] kauditd_printk_skb: 115 callbacks suppressed [ 161.484694][ T44] audit: type=1326 audit(1789621563.794:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6661 comm="syz.2.258" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17fec code=0x7ffc0000 [ 161.484877][ T44] audit: type=1326 audit(1789621563.794:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6661 comm="syz.2.258" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17fec code=0x7ffc0000 [ 161.488106][ T44] audit: type=1326 audit(1789621563.794:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6661 comm="syz.2.258" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17fec code=0x7ffc0000 [ 161.488860][ T44] audit: type=1326 audit(1789621563.794:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6661 comm="syz.2.258" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71175ab code=0x7ffc0000 [ 161.488904][ T44] audit: type=1326 audit(1789621563.794:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6661 comm="syz.2.258" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17fec code=0x7ffc0000 [ 161.488942][ T44] audit: type=1326 audit(1789621563.794:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6661 comm="syz.2.258" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17fec code=0x7ffc0000 [ 161.489109][ T44] audit: type=1326 audit(1789621563.794:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6661 comm="syz.2.258" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17fec code=0x7ffc0000 [ 161.490268][ T44] audit: type=1326 audit(1789621563.794:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6661 comm="syz.2.258" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17fec code=0x7ffc0000 [ 161.490939][ T44] audit: type=1326 audit(1789621563.794:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6661 comm="syz.2.258" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71175ab code=0x7ffc0000 [ 161.490978][ T44] audit: type=1326 audit(1789621563.794:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6661 comm="syz.2.258" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17fec code=0x7ffc0000 [ 161.904980][ T6670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.253'. [ 161.988136][ T6672] serio: Serial port ptm0 [ 162.499486][ T6680] Could not find key with description: [syz] [ 162.499503][ T6680] process_request_key_err: No key [ 162.499511][ T6680] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 162.499520][ T6680] One or more global auth toks could not properly register; rc = [-2] [ 162.499551][ T6680] Error validating options; rc = [-2] [ 162.747744][ T6684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.748373][ T6684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.156120][ T6684] Invalid option length (1040122) for dns_resolver key [ 163.264862][ T6686] infiniband syz0: set down [ 163.269233][ T6686] infiniband syz0: added bond0 [ 163.292834][ T6686] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 163.292876][ T6686] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 163.292917][ T6686] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 163.369937][ T6686] RDS/IB: syz0: added [ 163.369990][ T6686] smc: adding ib device syz0 with port count 1 [ 163.370010][ T6686] smc: ib device syz0 port 1 has no pnetid [ 163.747567][ T3376] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 163.925757][ T3376] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 163.927367][ T3376] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 163.927396][ T3376] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 163.927416][ T3376] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 163.927462][ T3376] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 163.927489][ T3376] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 163.929209][ T3376] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 163.929238][ T3376] usb 7-1: Product: syz [ 163.929251][ T3376] usb 7-1: Manufacturer: syz [ 164.020727][ T3376] cdc_wdm 7-1:1.0: skipping garbage [ 164.020748][ T3376] cdc_wdm 7-1:1.0: skipping garbage [ 164.024669][ T3376] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 164.024688][ T3376] cdc_wdm 7-1:1.0: Unknown control protocol [ 164.131762][ T6703] Could not find key with description: [syz] [ 164.131777][ T6703] process_request_key_err: No key [ 164.131785][ T6703] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 164.131794][ T6703] One or more global auth toks could not properly register; rc = [-2] [ 164.131821][ T6703] Error validating options; rc = [-2] [ 164.593975][ T6707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.594519][ T6707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.339074][ T6717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.270'. [ 165.700754][ T6727] smbdirect: ib_dev[sz1] renamed to [s] [ 165.937333][ T6734] jffs2: notice: (6734) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 166.585072][ T5874] usb 7-1: USB disconnect, device number 4 [ 169.263367][ T67] IPVS: starting estimator thread 0... [ 169.352073][ T6804] IPVS: using max 27 ests per chain, 64800 per kthread [ 169.414740][ T6811] ================================================================== [ 169.414756][ T6811] BUG: KASAN: slab-out-of-bounds in ecryptfs_verify_auth_tok_from_key+0x3b7/0x400 [ 169.414793][ T6811] Read of size 2 at addr ffff88806de82498 by task syz.3.308/6811 [ 169.414810][ T6811] [ 169.414820][ T6811] CPU: 3 UID: 0 PID: 6811 Comm: syz.3.308 Not tainted syzkaller #0 PREEMPT(full) [ 169.414842][ T6811] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 169.414853][ T6811] Call Trace: [ 169.414860][ T6811] [ 169.414867][ T6811] dump_stack_lvl+0x100/0x190 [ 169.414893][ T6811] print_report+0x13d/0x4b0 [ 169.414921][ T6811] ? __virt_addr_valid+0x239/0x430 [ 169.414950][ T6811] ? ecryptfs_verify_auth_tok_from_key+0x3b7/0x400 [ 169.414979][ T6811] kasan_report+0xdf/0x1c0 [ 169.415007][ T6811] ? ecryptfs_verify_auth_tok_from_key+0x3b7/0x400 [ 169.415041][ T6811] ecryptfs_verify_auth_tok_from_key+0x3b7/0x400 [ 169.415072][ T6811] ecryptfs_keyring_auth_tok_for_sig+0x9e/0x1f0 [ 169.415102][ T6811] ecryptfs_get_tree+0x57b/0x15b0 [ 169.415123][ T6811] ? __pfx_ecryptfs_get_tree+0x10/0x10 [ 169.415144][ T6811] ? apparmor_capable+0x1d7/0x4d0 [ 169.415171][ T6811] ? bpf_lsm_capable+0x9/0x10 [ 169.415201][ T6811] ? security_capable+0x80/0x260 [ 169.415223][ T6811] vfs_get_tree+0x92/0x320 [ 169.415249][ T6811] path_mount+0x7d0/0x24c0 [ 169.415274][ T6811] ? __pfx_path_mount+0x10/0x10 [ 169.415298][ T6811] ? lockdep_hardirqs_on+0x7d/0x110 [ 169.415326][ T6811] ? putname+0xb1/0x110 [ 169.415348][ T6811] ? kmem_cache_free+0x127/0x6c0 [ 169.415380][ T6811] ? __ia32_sys_mount+0x292/0x310 [ 169.415405][ T6811] __ia32_sys_mount+0x292/0x310 [ 169.415431][ T6811] ? __pfx___ia32_sys_mount+0x10/0x10 [ 169.415458][ T6811] __do_fast_syscall_32+0x13a/0x8b0 [ 169.415487][ T6811] do_fast_syscall_32+0x32/0x70 [ 169.415515][ T6811] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 169.415538][ T6811] RIP: 0023:0xf7ff2fec [ 169.415557][ T6811] Code: Unable to access opcode bytes at 0xf7ff2fc2. [ 169.415565][ T6811] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 169.415590][ T6811] RAX: ffffffffffffffda RBX: 0000000080000400 RCX: 0000000080000000 [ 169.415603][ T6811] RDX: 0000000080000480 RSI: 0000000000000000 RDI: 0000000080000500 [ 169.415615][ T6811] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 169.415627][ T6811] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 169.415639][ T6811] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 169.415658][ T6811] [ 169.415667][ T6811] [ 169.415671][ T6811] Allocated by task 6811: [ 169.415681][ T6811] kasan_save_stack+0x30/0x50 [ 169.415704][ T6811] kasan_save_track+0x14/0x30 [ 169.415725][ T6811] __kasan_kmalloc+0xaa/0xb0 [ 169.415744][ T6811] __kmalloc_noprof+0x32f/0x840 [ 169.415763][ T6811] user_preparse+0x9b/0x1c0 [ 169.415789][ T6811] __key_create_or_update+0x463/0xe30 [ 169.415816][ T6811] key_create_or_update+0x42/0x60 [ 169.415841][ T6811] __do_sys_add_key+0x2e8/0x460 [ 169.415860][ T6811] __do_fast_syscall_32+0x13a/0x8b0 [ 169.415886][ T6811] do_fast_syscall_32+0x32/0x70 [ 169.415911][ T6811] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 169.415931][ T6811] [ 169.415934][ T6811] The buggy address belongs to the object at ffff88806de82480 [ 169.415934][ T6811] which belongs to the cache kmalloc-32 of size 32 [ 169.415948][ T6811] The buggy address is located 24 bytes inside of [ 169.415948][ T6811] allocated 25-byte region [ffff88806de82480, ffff88806de82499) [ 169.415964][ T6811] [ 169.415968][ T6811] The buggy address belongs to the physical page: [ 169.415975][ T6811] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6de82 [ 169.416019][ T6811] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 169.416036][ T6811] page_type: f5(slab) [ 169.416054][ T6811] raw: 04fff00000000000 ffff88801c042780 dead000000000100 dead000000000122 [ 169.416070][ T6811] raw: 0000000000000000 0000000000400040 00000000f5000000 0000000000000000 [ 169.416080][ T6811] page dumped because: kasan: bad access detected [ 169.416088][ T6811] page_owner tracks the page as allocated [ 169.416094][ T6811] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5881, tgid 5881 (modprobe), ts 103740396828 [ 169.416120][ T6811] post_alloc_hook+0xfd/0x120 [ 169.416146][ T6811] get_page_from_freelist+0x110d/0x35d0 [ 169.416161][ T6811] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 169.416180][ T6811] new_slab+0xa9/0x6e0 [ 169.416194][ T6811] refill_objects+0xe3/0x410 [ 169.416209][ T6811] __pcs_replace_empty_main+0x35e/0x650 [ 169.416235][ T6811] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 169.416261][ T6811] kmem_cache_free+0x40f/0x6c0 [ 169.416286][ T6811] tear_down_vmas+0x2a5/0x610 [ 169.416304][ T6811] exit_mmap+0x469/0xa00 [ 169.416323][ T6811] __mmput+0x12a/0x410 [ 169.416347][ T6811] mmput+0x67/0x80 [ 169.416370][ T6811] do_exit+0x8b1/0x2ae0 [ 169.416388][ T6811] do_group_exit+0xd5/0x2a0 [ 169.416404][ T6811] __x64_sys_exit_group+0x3e/0x50 [ 169.416421][ T6811] x64_sys_call+0x1567/0x1570 [ 169.416437][ T6811] page last free pid 5881 tgid 5881 ts 103739262887 stack trace: [ 169.416449][ T6811] __free_frozen_pages+0x79f/0x10f0 [ 169.416473][ T6811] tlb_finish_mmu+0x27d/0x810 [ 169.416495][ T6811] exit_mmap+0x454/0xa00 [ 169.416515][ T6811] __mmput+0x12a/0x410 [ 169.416542][ T6811] mmput+0x67/0x80 [ 169.416581][ T6811] do_exit+0x8b1/0x2ae0 [ 169.416606][ T6811] do_group_exit+0xd5/0x2a0 [ 169.416624][ T6811] __x64_sys_exit_group+0x3e/0x50 [ 169.416643][ T6811] x64_sys_call+0x1567/0x1570 [ 169.416659][ T6811] do_syscall_64+0x121/0x770 [ 169.416685][ T6811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.416705][ T6811] [ 169.416709][ T6811] Memory state around the buggy address: [ 169.416718][ T6811] ffff88806de82380: 00 00 00 00 fc fc fc fc 00 00 00 00 fc fc fc fc [ 169.416731][ T6811] ffff88806de82400: 00 00 00 00 fc fc fc fc 00 00 00 00 fc fc fc fc [ 169.416743][ T6811] >ffff88806de82480: 00 00 00 01 fc fc fc fc 00 00 00 00 fc fc fc fc [ 169.416752][ T6811] ^ [ 169.416761][ T6811] ffff88806de82500: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 169.416772][ T6811] ffff88806de82580: 00 00 00 00 fc fc fc fc fa fb fb fb fc fc fc fc [ 169.416782][ T6811] ================================================================== [ 169.416838][ T6811] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 169.939831][ T6811] CPU: 3 UID: 0 PID: 6811 Comm: syz.3.308 Not tainted syzkaller #0 PREEMPT(full) [ 169.945194][ T6811] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 169.950078][ T6811] Call Trace: [ 169.952276][ T6811] [ 169.954071][ T6811] dump_stack_lvl+0x100/0x190 [ 169.957031][ T6811] vpanic+0x553/0x970 [ 169.959748][ T6811] ? __pfx_vpanic+0x10/0x10 [ 169.962625][ T6811] ? mark_held_locks+0x40/0x70 [ 169.965297][ T6811] ? irqentry_exit+0x24d/0xa10 [ 169.968376][ T6811] ? ecryptfs_verify_auth_tok_from_key+0x3b7/0x400 [ 169.972521][ T6811] panic+0xd1/0xe0 [ 169.974360][ T6811] ? __pfx_panic+0x10/0x10 [ 169.977409][ T6811] ? ecryptfs_verify_auth_tok_from_key+0x3b7/0x400 [ 169.982891][ T6811] ? preempt_schedule_common+0x3c/0xb0 [ 169.986425][ T6811] check_panic_on_warn.cold+0x19/0x34 [ 169.989757][ T6811] end_report.part.0+0x3a/0x90 [ 169.992823][ T6811] kasan_report.cold+0xe/0x18 [ 169.995824][ T6811] ? ecryptfs_verify_auth_tok_from_key+0x3b7/0x400 [ 170.000720][ T6811] ecryptfs_verify_auth_tok_from_key+0x3b7/0x400 [ 170.004986][ T6811] ecryptfs_keyring_auth_tok_for_sig+0x9e/0x1f0 [ 170.008898][ T6811] ecryptfs_get_tree+0x57b/0x15b0 [ 170.012680][ T6811] ? __pfx_ecryptfs_get_tree+0x10/0x10 [ 170.016573][ T6811] ? apparmor_capable+0x1d7/0x4d0 [ 170.019785][ T6811] ? bpf_lsm_capable+0x9/0x10 [ 170.022764][ T6811] ? security_capable+0x80/0x260 [ 170.026071][ T6811] vfs_get_tree+0x92/0x320 [ 170.029174][ T6811] path_mount+0x7d0/0x24c0 [ 170.032333][ T6811] ? __pfx_path_mount+0x10/0x10 [ 170.035469][ T6811] ? lockdep_hardirqs_on+0x7d/0x110 [ 170.039499][ T6811] ? putname+0xb1/0x110 [ 170.043134][ T6811] ? kmem_cache_free+0x127/0x6c0 [ 170.046322][ T6811] ? __ia32_sys_mount+0x292/0x310 [ 170.049458][ T6811] __ia32_sys_mount+0x292/0x310 [ 170.052931][ T6811] ? __pfx___ia32_sys_mount+0x10/0x10 [ 170.057256][ T6811] __do_fast_syscall_32+0x13a/0x8b0 [ 170.060501][ T6811] do_fast_syscall_32+0x32/0x70 [ 170.063571][ T6811] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 170.067797][ T6811] RIP: 0023:0xf7ff2fec [ 170.070935][ T6811] Code: Unable to access opcode bytes at 0xf7ff2fc2. [ 170.075390][ T6811] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 170.080664][ T6811] RAX: ffffffffffffffda RBX: 0000000080000400 RCX: 0000000080000000 [ 170.087098][ T6811] RDX: 0000000080000480 RSI: 0000000000000000 RDI: 0000000080000500 [ 170.092285][ T6811] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 170.097883][ T6811] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 170.103952][ T6811] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 170.108820][ T6811] [ 170.121735][ T6811] Kernel Offset: disabled [ 170.124505][ T6811] Rebooting in 86400 seconds.. VM DIAGNOSIS: 05:06:12 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=ffff88804f356800 RCX=0000000000000100 RDX=0000000000000001 RSI=0000000000000002 RDI=ffff88804f356802 RBP=dffffc0000000000 RSP=ffffc900045c7680 R8 =0000000000000001 R9 =ffffed1009e6ad00 R10=ffff88804f356803 R11=0000000000000000 R12=0000000000005588 R13=ffffed1009e6ad00 R14=ffff88802b23d040 R15=0000000000000000 RIP=ffffffff8bd172e4 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f9d74398300 ffffffff 00c00000 GS =0000 ffff888096960000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f74b6288 CR3=000000004bc3b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000069cf7d94cb RBX=ffff88802b323d80 RCX=00000000000006e0 RDX=0000000000000069 RSI=ffffffff81fb0545 RDI=ffff888025942580 RBP=0000002768160c80 RSP=ffffc900005b0e90 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=1ffff920000b61dc R13=0000000000000001 R14=0000000000000001 R15=ffff88802b323dc0 RIP=ffffffff81fb0558 RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 000fffff 00000000 GS =0000 ffff888096a60000 000fffff 00000000 LDT=0000 0000000000000000 000fffff 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000034917ff8 CR3=00000000682c2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=ffffffff948d3de8 RCX=0000000000000200 RDX=1ffffffff1cd7326 RSI=ffffffff8c622c00 RDI=ffffffff8e6b9930 RBP=0000000000000002 RSP=ffffc9000052eca8 R8 =00000000d60f1571 R9 =0000000000000007 R10=0000000000000200 R11=0000000000000001 R12=ffffffff81f54d40 R13=ffffc9000052ed30 R14=0000000000000000 R15=ffff88801cf70000 RIP=ffffffff81ef30a2 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096b60000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7218c10 CR3=0000000060393000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000005f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85aeb445 RDI=ffffffff9bc571e0 RBP=ffffffff9bc571a0 RSP=ffffc90025287340 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=30333478302f3933 R12=0000000000000000 R13=000000000000005f R14=0000000000000000 R15=ffffc90025287658 RIP=ffffffff85aeb46f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096c60000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7ff3000 CR3=000000004caa7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000