last executing test programs: 5.999495708s ago: executing program 1 (id=568): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r1, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x1d}, {@in=@rand_addr=0x64010101, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xffffffffffff0001, 0x8, 0x1, 0x7000000, 0x7fffffff, 0x80000001}, {0x4, 0x7fffffffffffffff, 0xfffffffffffffffc, 0xebe2}, {0x2}, 0x870bd2c, 0x3501, 0x2, 0x0, 0x0, 0x50}, [@offload={0xc, 0x1c, {r3, 0x3}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c54dc7cb7a"}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 5.742976078s ago: executing program 1 (id=569): epoll_create1(0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x100000000000000) 5.431181986s ago: executing program 1 (id=573): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x14, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000d00000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000316200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 5.298659464s ago: executing program 1 (id=575): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000003c0)=ANY=[@ANYRES16=r2, @ANYBLOB="05002abd7000000000002e00000008000300", @ANYRES32=r1, @ANYBLOB="0a00340001010101010100000600fb00010000000f00f900f6"], 0x74}}, 0x810) 5.212760567s ago: executing program 1 (id=576): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x80002, 0x0) sendmsg(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x40012120, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) 3.864485929s ago: executing program 3 (id=583): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x14, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000d00000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000316200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.764570861s ago: executing program 3 (id=584): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42885}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000f, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000040)={0x4, {"0dbad96fff01000008ff00200800", "3dfab043e15fad27a639f905b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x40010, 0x6}) preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r1, 0x6f2d, 0x5) 3.13033883s ago: executing program 1 (id=592): ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x100000001, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/machinecheck/machinecheck0/bank1\x00', 0x2, 0x0) write$P9_RCLUNK(r2, &(0x7f00000000c0)={0x30, 0x79, 0x1}, 0x7) 3.120783391s ago: executing program 2 (id=593): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x14, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000d00000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000316200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.985128147s ago: executing program 2 (id=594): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x300}, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x75, 0x101301) ioctl$USBDEVFS_SUBMITURB(r3, 0x802c550a, &(0x7f00000000c0)=@urb_type_control={0x2, {0x1, 0x1}, 0x1, 0x40, 0x0, 0x0, 0x3, 0x1, 0x0, 0x7ffd, 0xfffffffc, 0x0}) r4 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) read(r4, 0x0, 0x0) 2.755032895s ago: executing program 3 (id=596): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) close(0x3) r1 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x9, @loopback, 0x404}, 0x1c) recvfrom$inet6(r1, 0x0, 0x0, 0x40012040, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) 2.513833851s ago: executing program 3 (id=599): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000003480)=@newtfilter={0x24, 0x2c, 0x401, 0x0, 0x25dfdbed, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0xa}}}, 0x24}}, 0x844) 2.371285727s ago: executing program 0 (id=600): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000080)={0x0, "4d0916cb7a186d2a2e55ba48ad3f796547502777ff87f76b395c692150689bb4a628a9f3aa873e97ebd2a2089456afed727eaa0e6eaaad8669a20c12065b35a5", 0x39}, 0x48, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68fb, 0x7, 0x0, 0x6, 0x2], 0x10000, 0x202}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x4, 0x0, 0xef, 0x0, 0x0, 0x7, 0x0, 0x8, 0x6, 0x40}, {0xffffffff, 0x54000, 0xa, 0x3, 0x2, 0x0, 0x0, 0x0, 0x7, 0xfb}, {0xd000, 0x3000, 0xc, 0x0, 0x8, 0xc4, 0x0, 0x0, 0x48, 0x3, 0x0, 0xfc}, {0xeeef0000, 0x50000, 0xa, 0x0, 0x1, 0xa6, 0x9, 0xf9, 0x8, 0xfe, 0x4, 0x4}, {0x6000, 0xffff1000, 0xe, 0x0, 0x0, 0x4, 0x0, 0xfd, 0x0, 0x3c}, {0x8000000, 0x0, 0xb, 0x78, 0x5, 0x3, 0x0, 0x0, 0x3, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0xf, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8, 0x5}, {0x81a0002, 0x6000, 0xc, 0x0, 0x0, 0x5, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0x200000}, 0xddf8ffdb, 0x0, 0x0, 0x114, 0x0, 0xf801, 0x0, [0x80000005, 0x0, 0x1]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.371123693s ago: executing program 3 (id=601): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24008000}, 0x8804) 2.210572189s ago: executing program 3 (id=602): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000000540)={r0, &(0x7f00000000c0)='.^{^},\x00', 0x0, &(0x7f0000000240)={@_ha_fsid={[0x927, 0x5]}, {0x9, 0x3, 0x0, 0x2}}, 0x2, &(0x7f0000000280), &(0x7f0000000580)=0x100}) sendto$inet(r4, 0x0, 0x0, 0x20008885, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fchown(r5, 0xee01, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x1) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000004a673878015dc9a3ea00000000010000000000000000000000000000000000000015f93270a75c05a7fa676a882711a424cdb8cf0599c53bfeebdcdf03f90005b7ea235a9121764f6a8de295fbcb4ac0ffffff6a7b4cc4855a893b3e26d5ebd1e5bf23cae6043e2092a1636bd88bab1d0b23a9704908c1c813d127d3f680f40c356d320848c3457396770eeaff397492507ba8f7dec605398bfb014057c7231f64f5ac0ee1311a66c245c3ed9ff44a98adec42f6a3f16520d1d94c81af5a3750dcb73bd1a00043e2df550c808ae12aa50c82b7534c87c532927c4849"], 0x48) mmap$IORING_OFF_SQ_RING(0xf0, 0x13ab, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x560e, &(0x7f0000000000)) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r6, 0x0) syz_clone3(&(0x7f0000000480)={0x42200280, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.129670906s ago: executing program 0 (id=603): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c112233440008000000050005000000053f080008"], 0x4a) 1.895529767s ago: executing program 0 (id=604): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0x3}, {0x6, 0xffe0}, {0xfff1, 0x9}}}, 0x24}}, 0x20004041) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x20008000) 1.732500484s ago: executing program 0 (id=605): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x2c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 1.732250947s ago: executing program 2 (id=606): socket$nl_netfilter(0x10, 0x3, 0xc) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e05004b20"], 0x28) 1.560832469s ago: executing program 0 (id=607): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r2, 0x80506409, &(0x7f0000000180)={0x0, 0x1, 0x2, 0x0, 0x10, 0x200, 0x10, 0x3, 0x20, 0xffffffff, 0x20, 0x7, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) signalfd4(r3, &(0x7f00000001c0)={[0x9]}, 0x8, 0x80800) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) r6 = syz_open_procfs(0x0, 0x0) lseek(r6, 0x4, 0x2) getdents64(r6, 0xffffffffffffffff, 0x43) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000900), 0x20000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r7, 0x4004510f, &(0x7f0000000940)=0x33b4) write(r5, &(0x7f0000000180)='1', 0x1) 560.872271ms ago: executing program 2 (id=608): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100)=0xb329, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9025a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 283.16201ms ago: executing program 2 (id=609): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.id\x00') 24.615459ms ago: executing program 0 (id=610): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) signalfd4(r5, &(0x7f00000001c0)={[0x9]}, 0x8, 0x80800) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="256e01000080000000000800f91b6a67dfaa35d2b1f4363dc39caf3236cda42601d616a7403099235102261783"], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r8, 0x4, 0x2) getdents64(r8, 0xffffffffffffffff, 0x43) ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000940)=0x33b4) write(r7, &(0x7f0000000180)='1', 0x1) 0s ago: executing program 2 (id=611): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe7bd9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x4000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x49108}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x16, 0x17}}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x5c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:36248' (ED25519) to the list of known hosts. [ 62.739476][ T5727] cgroup: Unknown subsys name 'net' [ 62.869210][ T5727] cgroup: Unknown subsys name 'cpuset' [ 62.873089][ T5727] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.612708][ T5727] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.909036][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.911160][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.736512][ T5745] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.761376][ T5745] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.772604][ T5753] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.790844][ T5753] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.802505][ T5753] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.809025][ T5745] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.809228][ T5753] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.815111][ T5745] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.831888][ T5753] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.833006][ T5755] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.837680][ T5759] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.838506][ T5753] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.839042][ T5753] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.845588][ T5745] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.855834][ T5755] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.858046][ T5745] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.860267][ T5755] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.862621][ T5096] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.878085][ T5759] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.947193][ T5759] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.161533][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.165703][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.173016][ T5744] bridge_slave_0: entered allmulticast mode [ 75.178263][ T5744] bridge_slave_0: entered promiscuous mode [ 75.190537][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.194011][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.198453][ T5744] bridge_slave_1: entered allmulticast mode [ 75.204276][ T5744] bridge_slave_1: entered promiscuous mode [ 75.303925][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.330771][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.545056][ T5744] team0: Port device team_slave_0 added [ 75.559429][ T5744] team0: Port device team_slave_1 added [ 75.561929][ T5751] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.564906][ T5751] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.568100][ T5751] bridge_slave_0: entered allmulticast mode [ 75.571912][ T5751] bridge_slave_0: entered promiscuous mode [ 75.584466][ T5751] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.587643][ T5751] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.590966][ T5751] bridge_slave_1: entered allmulticast mode [ 75.594895][ T5751] bridge_slave_1: entered promiscuous mode [ 75.619767][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.622673][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.633877][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.655653][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.658072][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.668308][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.676222][ T5751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.693470][ T5751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.750474][ T5744] hsr_slave_0: entered promiscuous mode [ 75.754008][ T5744] hsr_slave_1: entered promiscuous mode [ 75.772108][ T5751] team0: Port device team_slave_0 added [ 75.790423][ T5751] team0: Port device team_slave_1 added [ 75.844439][ T5751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.847485][ T5751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.858196][ T5751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.867933][ T5751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.870985][ T5751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.881762][ T5751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.947735][ T5759] Bluetooth: hci0: command tx timeout [ 75.951171][ T5754] Bluetooth: hci1: command tx timeout [ 75.951255][ T5096] Bluetooth: hci2: command tx timeout [ 75.965667][ T5751] hsr_slave_0: entered promiscuous mode [ 75.973224][ T5751] hsr_slave_1: entered promiscuous mode [ 75.979177][ T5751] debugfs: 'hsr0' already exists in 'hsr' [ 75.981217][ T5751] Cannot create hsr debugfs directory [ 76.026028][ T5096] Bluetooth: hci3: command tx timeout [ 76.083408][ T5744] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.095184][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 76.117376][ T5744] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.125066][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.130165][ T5744] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.139856][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 76.155870][ T5744] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.164390][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.240673][ T5751] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.247149][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 76.250114][ T5751] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.257918][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.265413][ T5751] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.272974][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 76.276083][ T5751] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.282305][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.342656][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.364157][ T5744] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.374230][ T92] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.377987][ T92] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.392605][ T92] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.395624][ T92] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.419374][ T5751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.456305][ T5751] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.466841][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.469321][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.483077][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.486326][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xa8000) [ 77.017048][ T1126] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 77.019886][ T1126] ata1: failed to read log page 10h (errno=-5) [ 77.022596][ T1126] ata1.00: exception Emask 0x1 SAct 0x70e00041 SErr 0x0 action 0x0 [ 77.025823][ T1126] ata1.00: irq_stat 0x41000000 [ 77.027991][ T1126] ata1.00: failed command: WRITE FPDMA QUEUED [ 77.030516][ T1126] ata1.00: cmd 61/c8:00:1e:18:08/02:00:00:00:00/40 tag 0 ncq dma 364544 out [ 77.030516][ T1126] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 77.037731][ T1126] ata1.00: status: { DRDY } [ 77.039621][ T1126] ata1.00: failed command: READ FPDMA QUEUED [ 77.042053][ T1126] ata1.00: cmd 60/08:30:ae:e6:02/00:00:00:00:00/40 tag 6 ncq dma 4096 in [ 77.042053][ T1126] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 77.048922][ T1126] ata1.00: status: { DRDY } [ 77.050848][ T1126] ata1.00: failed command: WRITE FPDMA QUEUED [ 77.053359][ T1126] ata1.00: cmd 61/18:a8:36:f1:07/00:00:00:00:00/40 tag 21 ncq dma 12288 out [ 77.053359][ T1126] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 77.059008][ T1126] ata1.00: status: { DRDY } [ 77.060727][ T1126] ata1.00: failed command: WRITE FPDMA QUEUED [ 77.063248][ T1126] ata1.00: cmd 61/60:b0:36:01:08/05:00:00:00:00/40 tag 22 ncq dma 704512 out [ 77.063248][ T1126] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 77.069470][ T1126] ata1.00: status: { DRDY } [ 77.070995][ T1126] ata1.00: failed command: WRITE FPDMA QUEUED [ 77.072895][ T1126] ata1.00: cmd 61/c0:b8:96:06:08/02:00:00:00:00/40 tag 23 ncq dma 360448 out [ 77.072895][ T1126] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 77.078114][ T1126] ata1.00: status: { DRDY } [ 77.079560][ T1126] ata1.00: failed command: WRITE FPDMA QUEUED [ 77.082034][ T1126] ata1.00: cmd 61/b8:e0:56:09:08/05:00:00:00:00/40 tag 28 ncq dma 749568 out [ 77.082034][ T1126] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 77.089074][ T1126] ata1.00: status: { DRDY } [ 77.091041][ T1126] ata1.00: failed command: WRITE FPDMA QUEUED [ 77.093283][ T1126] ata1.00: cmd 61/d0:e8:0e:0f:08/03:00:00:00:00/40 tag 29 ncq dma 499712 out [ 77.093283][ T1126] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 77.098701][ T1126] ata1.00: status: { DRDY } [ 77.100105][ T1126] ata1.00: failed command: WRITE FPDMA QUEUED [ 77.102320][ T1126] ata1.00: cmd 61/40:f0:de:12:08/05:00:00:00:00/40 tag 30 ncq dma 688128 out [ 77.102320][ T1126] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 77.108841][ T1126] ata1.00: status: { DRDY } [ 77.114043][ T1126] ata1.00: configured for UDMA/100 [ 77.119566][ T1126] ata1: EH complete [ 77.491700][ T5743] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.494948][ T5743] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.498654][ T5743] bridge_slave_0: entered allmulticast mode [ 77.502871][ T5743] bridge_slave_0: entered promiscuous mode [ 77.561046][ T5743] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.565578][ T5743] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.569056][ T5743] bridge_slave_1: entered allmulticast mode [ 77.573887][ T5743] bridge_slave_1: entered promiscuous mode [ 77.604323][ T5743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.613078][ T5743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.668026][ T5743] team0: Port device team_slave_0 added [ 77.673722][ T5756] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.677401][ T5756] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.680974][ T5756] bridge_slave_0: entered allmulticast mode [ 77.685133][ T5756] bridge_slave_0: entered promiscuous mode [ 77.697929][ T5743] team0: Port device team_slave_1 added [ 77.701641][ T5756] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.706359][ T5756] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.709859][ T5756] bridge_slave_1: entered allmulticast mode [ 77.713901][ T5756] bridge_slave_1: entered promiscuous mode [ 77.751274][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.754406][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.764674][ T5743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.770057][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.773157][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.785006][ T5743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.839958][ T5756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.009233][ T5756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.039665][ T5096] Bluetooth: hci2: command tx timeout [ 78.046328][ T5096] Bluetooth: hci1: command tx timeout [ 78.046353][ T5754] Bluetooth: hci0: command tx timeout [ 78.146631][ T5754] Bluetooth: hci3: command tx timeout [ 78.175553][ T5743] hsr_slave_0: entered promiscuous mode [ 78.185868][ T5743] hsr_slave_1: entered promiscuous mode [ 78.191703][ T5743] debugfs: 'hsr0' already exists in 'hsr' [ 78.194742][ T5743] Cannot create hsr debugfs directory [ 78.201359][ T5756] team0: Port device team_slave_0 added [ 78.219675][ T5756] team0: Port device team_slave_1 added [ 78.297244][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.307581][ T5756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.314232][ T5756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.359196][ T5756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.367021][ T5756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.371170][ T5756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.386235][ T5756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.458446][ T5751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.566956][ T5756] hsr_slave_0: entered promiscuous mode [ 78.582475][ T5756] hsr_slave_1: entered promiscuous mode [ 78.585699][ T5756] debugfs: 'hsr0' already exists in 'hsr' [ 78.590837][ T5756] Cannot create hsr debugfs directory [ 78.665777][ T5744] veth0_vlan: entered promiscuous mode [ 78.862506][ T5744] veth1_vlan: entered promiscuous mode [ 78.873288][ T5751] veth0_vlan: entered promiscuous mode [ 78.895190][ T5751] veth1_vlan: entered promiscuous mode [ 78.904116][ T5743] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.911001][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.913952][ T5743] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.920667][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.927065][ T5743] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.932029][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.941963][ T5743] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.947391][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.010787][ T5756] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.019849][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.024773][ T5756] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.032418][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.041092][ T5756] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.048136][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.052103][ T5756] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.058051][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.071082][ T5744] veth0_macvtap: entered promiscuous mode [ 79.095686][ T5744] veth1_macvtap: entered promiscuous mode [ 79.119068][ T5751] veth0_macvtap: entered promiscuous mode [ 79.129952][ T5751] veth1_macvtap: entered promiscuous mode [ 79.151847][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.172346][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.185887][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.205377][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.286139][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.293862][ T5743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.336680][ T414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.342457][ T414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.384153][ T5756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.392910][ T5743] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.408195][ T92] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.410785][ T92] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.414538][ T414] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.417524][ T414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.432334][ T414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.435169][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.435712][ T414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.438545][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.463432][ T5756] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.481679][ T414] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.483911][ T414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.490317][ T414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.492713][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.492765][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.494884][ T414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.546963][ T5791] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.606193][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.610188][ T5830] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.613609][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.617082][ T5830] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.620332][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.623083][ T5830] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.800169][ T5743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.807359][ T5756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.852194][ T5756] veth0_vlan: entered promiscuous mode [ 79.854245][ T5743] veth0_vlan: entered promiscuous mode [ 79.863399][ T5743] veth1_vlan: entered promiscuous mode [ 79.867761][ T5756] veth1_vlan: entered promiscuous mode [ 79.895529][ T5743] veth0_macvtap: entered promiscuous mode [ 79.901883][ T5743] veth1_macvtap: entered promiscuous mode [ 79.909151][ T5756] veth0_macvtap: entered promiscuous mode [ 79.918895][ T5756] veth1_macvtap: entered promiscuous mode [ 79.930741][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.938401][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.947794][ T5756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.957401][ T5756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.004657][ T414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.006634][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.011207][ T414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.013679][ T5830] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.045153][ T414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.049625][ T414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.059670][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.062203][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.083958][ T414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.087187][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.090286][ T414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.093548][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.106797][ T5754] Bluetooth: hci0: command tx timeout [ 80.116232][ T5754] Bluetooth: hci1: command tx timeout [ 80.119574][ T5096] Bluetooth: hci2: command tx timeout [ 80.126122][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.130123][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.146211][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.150081][ T5830] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.196130][ T5754] Bluetooth: hci3: command tx timeout [ 80.667706][ T5744] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 80.688058][ T5744] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 80.698172][ T5744] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 80.710812][ T5751] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 80.741255][ T5744] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 80.963369][ T5907] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 81.155695][ T29] cfg80211: failed to load regulatory.db [ 81.326310][ T74] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 81.500031][ T74] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 81.511318][ T74] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.523307][ T5926] input: syz0 as /devices/virtual/input/input6 [ 81.528907][ T74] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.544617][ T74] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 81.556240][ T74] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.580857][ T74] usb 6-1: config 0 descriptor?? [ 81.838006][ T5878] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.847422][ T5878] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz0 [ 81.923935][ T5934] fido_id[5934]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 82.018312][ T74] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 82.025364][ T74] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 82.040393][ T74] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 82.044639][ T74] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 82.049453][ T74] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 82.056170][ T74] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 82.058846][ T74] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 82.061381][ T74] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 82.066304][ T74] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 82.077969][ T74] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 82.186199][ T5096] Bluetooth: hci0: command tx timeout [ 82.188426][ T5754] Bluetooth: hci2: command tx timeout [ 82.196099][ T5096] Bluetooth: hci1: command tx timeout [ 82.276046][ T5096] Bluetooth: hci3: command tx timeout [ 84.460000][ T5938] hub 8-0:1.0: USB hub found [ 84.463726][ T5938] hub 8-0:1.0: 1 port detected [ 84.472871][ T5865] usb 6-1: USB disconnect, device number 2 [ 84.571747][ T5954] file system registered [ 84.597388][ T5744] ffs_data_put(): freeing [ 85.912928][ T5744] ffs_data_put(): freeing [ 86.256580][ T5999] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 86.324874][ T6005] syz_tun: entered allmulticast mode [ 86.332551][ T6004] syz_tun: left allmulticast mode [ 87.835596][ T74] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 87.877222][ T74] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz1] on syz0 [ 88.360356][ T5834] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 88.547517][ T5834] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 88.558181][ T5834] usb 7-1: config 0 has no interfaces? [ 88.560443][ T5834] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.584533][ T6048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.598157][ T6048] batadv_slave_0: entered promiscuous mode [ 88.622814][ T6048] batadv_slave_0: entered allmulticast mode [ 88.628620][ T5834] usb 7-1: config 0 descriptor?? qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xa8000) [ 88.766875][ T1126] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 88.770193][ T1126] ata1: failed to read log page 10h (errno=-5) [ 88.773306][ T1126] ata1.00: exception Emask 0x1 SAct 0x40000000 SErr 0x0 action 0x0 [ 88.778371][ T1126] ata1.00: irq_stat 0x41000008 [ 88.782368][ T1126] ata1.00: failed command: READ FPDMA QUEUED [ 88.787093][ T1126] ata1.00: cmd 60/40:f0:4e:39:01/05:00:00:00:00/40 tag 30 ncq dma 688128 in [ 88.787093][ T1126] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 88.801580][ T1126] ata1.00: status: { DRDY } [ 88.804183][ T1126] ata1.00: error: { ABRT } [ 88.809727][ T1126] ata1.00: configured for UDMA/100 [ 88.813008][ T1126] sd 0:0:0:0: [sda] tag#30 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 88.819546][ T1126] sd 0:0:0:0: [sda] tag#30 Sense Key : Aborted Command [current] [ 88.835413][ T1126] sd 0:0:0:0: [sda] tag#30 Add. Sense: No additional sense information [ 88.845551][ T1126] sd 0:0:0:0: [sda] tag#30 CDB: Read(10) 28 00 00 01 39 4e 00 05 40 00 [ 88.887222][ T1126] I/O error, dev sda, sector 80206 op 0x0:(READ) flags 0x84700 phys_seg 168 prio class 2 [ 88.922208][ T1126] ata1: EH complete [ 88.960339][ T55] usb 7-1: USB disconnect, device number 2 [ 89.118805][ T6056] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 89.662273][ T6062] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 89.819596][ T6069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.61'. [ 90.274930][ T6088] binder: BINDER_SET_CONTEXT_MGR already set [ 90.278888][ T6088] binder: 6087:6088 ioctl 4018620d 80004a80 returned -16 [ 90.745748][ T6103] syzkaller0: entered promiscuous mode [ 90.750573][ T6103] syzkaller0: entered allmulticast mode [ 90.987654][ T42] audit: type=1326 audit(1786969338.903:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.2.86" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07fec code=0x7ffc0000 [ 91.009585][ T42] audit: type=1326 audit(1786969338.903:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.2.86" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07fec code=0x7ffc0000 [ 91.016447][ T42] audit: type=1326 audit(1786969338.903:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.2.86" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07fec code=0x7ffc0000 [ 91.024814][ T42] audit: type=1326 audit(1786969338.903:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.2.86" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f07fec code=0x7ffc0000 [ 91.033706][ T42] audit: type=1326 audit(1786969338.903:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.2.86" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07fec code=0x7ffc0000 [ 91.042153][ T42] audit: type=1326 audit(1786969338.903:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.2.86" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07fec code=0x7ffc0000 [ 91.051560][ T42] audit: type=1326 audit(1786969338.903:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.2.86" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07fec code=0x7ffc0000 [ 91.060029][ T42] audit: type=1326 audit(1786969338.903:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.2.86" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f07fec code=0x7ffc0000 [ 91.068276][ T42] audit: type=1326 audit(1786969338.913:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.2.86" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07fec code=0x7ffc0000 [ 91.077293][ T42] audit: type=1326 audit(1786969338.913:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.2.86" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07fec code=0x7ffc0000 [ 91.266015][ T74] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 91.473644][ T74] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 91.484194][ T74] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.489548][ T74] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.493381][ T74] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 91.502379][ T74] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.554741][ T74] usb 5-1: config 0 descriptor?? [ 91.992831][ T74] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 92.178830][ T10] usb 5-1: USB disconnect, device number 2 [ 92.386922][ T5878] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 92.413196][ T6174] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 92.543119][ T5878] usb 7-1: Using ep0 maxpacket: 16 [ 92.550863][ T5878] usb 7-1: unable to get BOS descriptor or descriptor too short [ 92.554463][ T5878] usb 7-1: New USB device found, idVendor=0408, idProduct=4035, bcdDevice=cb.2f [ 92.560306][ T5878] usb 7-1: config 127 has an invalid interface number: 196 but max is 0 [ 92.564698][ T5878] usb 7-1: config 127 has no interface number 0 [ 92.569397][ T5878] usb 7-1: config 127 interface 196 has no altsetting 0 [ 92.574634][ T5878] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.578794][ T5878] usb 7-1: Product: syz [ 92.580879][ T5878] usb 7-1: Manufacturer: syz [ 92.583613][ T5878] usb 7-1: SerialNumber: syz [ 92.740456][ T6180] binder: BINDER_SET_CONTEXT_MGR already set [ 92.743361][ T6180] binder: 6179:6180 ioctl 4018620d 80004a80 returned -16 [ 92.831571][ T5878] uvcvideo 7-1:127.196: Found UVC 0.00 device syz (0408:4035) [ 92.837914][ T5878] uvcvideo 7-1:127.196: Forcing UVC version to 1.0a [ 92.837954][ T5878] uvcvideo 7-1:127.196: No valid video chain found. [ 92.847495][ T5878] usb 7-1: USB disconnect, device number 3 [ 93.054587][ T151] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 93.226754][ T6197] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 93.236132][ T151] usb 5-1: Using ep0 maxpacket: 16 [ 93.250308][ T151] usb 5-1: unable to get BOS descriptor or descriptor too short [ 93.256217][ T151] usb 5-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 93.261647][ T151] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 53, changing to 7 [ 93.274447][ T151] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.286195][ T151] usb 5-1: Product: syz [ 93.288069][ T151] usb 5-1: Manufacturer: syz [ 93.290153][ T151] usb 5-1: SerialNumber: syz [ 93.561691][ T151] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 93.584535][ T151] usb 5-1: unit 3 not found! [ 93.586496][ T6205] futex_wake_op: syz.2.119 tries to shift op by 144; fix this program [ 93.780397][ T151] usb 5-1: USB disconnect, device number 3 [ 94.109285][ T6209] binder: BINDER_SET_CONTEXT_MGR already set [ 94.111539][ T6209] binder: 6208:6209 ioctl 4018620d 80004a80 returned -16 [ 94.356443][ T55] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 94.426078][ T5942] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 94.522607][ T55] usb 8-1: unable to get BOS descriptor or descriptor too short [ 94.525082][ T55] usb 8-1: New USB device found, idVendor=041e, idProduct=0005, bcdDevice= 0.40 [ 94.537634][ T55] usb 8-1: config index 0 descriptor too short (expected 11369, got 105) [ 94.542925][ T55] usb 8-1: config 198 has too many interfaces: 66, using maximum allowed: 32 [ 94.547890][ T55] usb 8-1: config 198 has an invalid descriptor of length 1, skipping remainder of the config [ 94.555420][ T55] usb 8-1: config 198 has 0 interfaces, different from the descriptor's value: 66 [ 94.581924][ T55] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.584450][ T55] usb 8-1: Product: syz [ 94.585688][ T55] usb 8-1: Manufacturer: syz [ 94.591816][ T55] usb 8-1: SerialNumber: syz [ 94.607687][ T5942] usb 5-1: unable to get BOS descriptor or descriptor too short [ 94.611858][ T5942] usb 5-1: New USB device found, idVendor=0590, idProduct=004c, bcdDevice= 0.40 [ 94.622024][ T5942] usb 5-1: config 1 has an invalid descriptor of length 101, skipping remainder of the config [ 94.628058][ T5942] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 94.636186][ T5942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.648393][ T5942] usb 5-1: Product: syz [ 94.649790][ T5942] usb 5-1: Manufacturer: syz [ 94.653895][ T5942] usb 5-1: SerialNumber: syz [ 94.877956][ T5942] usb 5-1: unit 115 not found! [ 94.881655][ T5942] usb 5-1: unit 255 not found! [ 94.931714][ T5942] usb 5-1: USB disconnect, device number 4 [ 94.972254][ T6165] udevd[6165]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.500539][ T6230] ptrace attach of "/syz-executor exec"[5743] was attempted by "/syz-executor exec"[6230] [ 96.344401][ T6247] warning: `syz.0.135' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.554888][ T55] usb 8-1: USB disconnect, device number 2 [ 96.820163][ T6275] Bluetooth: MGMT ver 1.23 [ 98.156278][ T6295] clocksource: Switched to clocksource acpi_pm [ 98.826570][ T5096] Bluetooth: hci0: command tx timeout [ 102.180698][ T6343] 9p: Could not find request transport: fdk [ 103.049698][ T6359] Mass Storage Function, version: 2009/09/11 [ 103.067942][ T6359] LUN: removable file: (no medium) [ 103.091053][ T42] kauditd_printk_skb: 29 callbacks suppressed [ 103.091072][ T42] audit: type=1800 audit(1786969351.017:41): pid=6359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.178" name="nofua" dev="configfs" ino=10745 res=0 errno=0 [ 103.282705][ T6364] syzkaller0: entered promiscuous mode [ 103.286382][ T6364] syzkaller0: entered allmulticast mode [ 103.600270][ T6371] capability: warning: `syz.0.183' uses deprecated v2 capabilities in a way that may be insecure [ 104.524591][ T6396] syzkaller0: entered promiscuous mode [ 104.537611][ T6396] syzkaller0: entered allmulticast mode [ 105.099697][ T151] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 105.264569][ T151] usb 6-1: unable to get BOS descriptor or descriptor too short [ 105.270741][ T151] usb 6-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 105.283179][ T151] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 105.307675][ T151] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.311396][ T151] usb 6-1: Product: syz [ 105.313321][ T151] usb 6-1: Manufacturer: syz [ 105.316230][ T151] usb 6-1: SerialNumber: syz [ 105.796339][ T5738] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 105.958818][ T5738] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 105.971422][ T5738] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.975728][ T5738] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 105.980533][ T5738] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 105.984644][ T5738] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 105.990618][ T5738] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.999300][ T6424] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 106.005355][ T6424] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 106.014017][ T5738] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 106.030462][ T5738] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 106.033787][ T5738] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 106.045312][ T5738] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 106.048930][ T151] usb 6-1: USB disconnect, device number 3 [ 106.081313][ T5738] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 106.087194][ T5738] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 106.095871][ T5738] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 106.149856][ T5915] udevd[5915]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.339079][ T151] usb 7-1: USB disconnect, device number 4 [ 106.358820][ T151] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 106.374716][ T151] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 106.380114][ T151] keyspan 7-1:1.0: device disconnected [ 106.856244][ T151] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 106.958392][ T6435] syzkaller0: entered promiscuous mode [ 106.961441][ T6435] syzkaller0: entered allmulticast mode [ 106.976272][ T5865] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 106.986783][ T6435] Zero length message leads to an empty skb [ 107.016272][ T151] usb 6-1: Using ep0 maxpacket: 32 [ 107.026458][ T151] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 107.035076][ T151] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.043714][ T151] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.051907][ T151] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.057181][ T151] usb 6-1: config 0 descriptor?? [ 107.070078][ T151] hub 6-1:0.0: USB hub found [ 107.139012][ T5865] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.150759][ T5865] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.162678][ T5865] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.179186][ T5865] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 107.196579][ T5865] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.212807][ T6439] binder: BINDER_SET_CONTEXT_MGR already set [ 107.218106][ T6439] binder: 6438:6439 ioctl 4018620d 80004a80 returned -16 [ 107.225632][ T5865] usb 8-1: config 0 descriptor?? [ 107.272050][ T151] hub 6-1:0.0: 1 port detected [ 107.890710][ T151] hub 6-1:0.0: activate --> -90 [ 108.316137][ T34] usb 6-1: USB disconnect, device number 4 [ 111.100929][ T5865] usbhid 8-1:0.0: can't add hid device: -71 [ 111.128068][ T5865] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 111.140632][ T5865] usb 8-1: USB disconnect, device number 3 [ 111.142315][ T6450] futex_wake_op: syz.1.214 tries to shift op by 32; fix this program [ 111.272354][ T6460] syzkaller0: entered promiscuous mode [ 111.274159][ T6460] syzkaller0: entered allmulticast mode [ 111.428698][ T6466] capability: warning: `syz.3.222' uses 32-bit capabilities (legacy support in use) [ 111.560232][ T6476] binder: BINDER_SET_CONTEXT_MGR already set [ 111.562153][ T6476] binder: 6475:6476 ioctl 4018620d 80004a80 returned -16 [ 112.168815][ T6494] process 'syz.2.223' launched './file2' with NULL argv: empty string added [ 113.537658][ T6518] syzkaller0: entered promiscuous mode [ 113.539538][ T6518] syzkaller0: entered allmulticast mode [ 114.646647][ T42] audit: type=1800 audit(1786969362.567:42): pid=6550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.241" name="nofua" dev="configfs" ino=13113 res=0 errno=0 [ 114.901883][ T6562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.248'. [ 115.089825][ T6566] 9p: Bad value for 'rfdno' [ 115.232533][ T6569] binder: BINDER_SET_CONTEXT_MGR already set [ 115.243201][ T6569] binder: 6568:6569 ioctl 4018620d 80004a80 returned -16 [ 117.106211][ T42] audit: type=1800 audit(1786969365.027:43): pid=6583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.253" name="nofua" dev="configfs" ino=11114 res=0 errno=0 [ 117.393170][ T6593] binder: BINDER_SET_CONTEXT_MGR already set [ 117.395775][ T6593] binder: 6592:6593 ioctl 4018620d 80004a80 returned -16 [ 117.596304][ T5865] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 117.678370][ T5738] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 117.766333][ T5865] usb 8-1: Using ep0 maxpacket: 32 [ 117.774196][ T5865] usb 8-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 117.793094][ T5865] usb 8-1: config 0 has an invalid interface number: 188 but max is 0 [ 117.802103][ T5865] usb 8-1: config 0 has no interface number 0 [ 117.804375][ T5865] usb 8-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 117.816974][ T5865] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.823310][ T5865] usb 8-1: Product: syz [ 117.824884][ T5865] usb 8-1: Manufacturer: syz [ 117.827135][ T5738] usb 6-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 117.827144][ T5865] usb 8-1: SerialNumber: syz [ 117.839865][ T5738] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.842584][ T5865] usb 8-1: config 0 descriptor?? [ 117.854035][ T5738] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.862493][ T6591] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 117.871126][ T5738] usb 6-1: config 0 interface 0 has no altsetting 0 [ 117.876473][ T5738] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.896247][ T5738] usb 6-1: config 0 descriptor?? [ 118.098437][ T6591] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 118.486122][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 118.510351][ T5865] asix 8-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 118.518166][ T5865] asix 8-1:0.188: probe with driver asix failed with error -71 [ 118.530638][ T5865] usb 8-1: USB disconnect, device number 4 [ 118.569547][ T42] audit: type=1800 audit(1786969366.497:44): pid=6605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.262" name="nofua" dev="configfs" ino=10053 res=0 errno=0 [ 119.430967][ T6621] usb usb7: usbfs: process 6621 (syz.3.267) did not claim interface 0 before use [ 119.776199][ T55] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 119.955655][ T55] usb 8-1: unable to get BOS descriptor or descriptor too short [ 119.962224][ T55] usb 8-1: New USB device found, idVendor=0590, idProduct=004c, bcdDevice= 0.40 [ 119.970937][ T55] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.981783][ T55] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 119.992189][ T55] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.999151][ T55] usb 8-1: Product: syz [ 120.000686][ T55] usb 8-1: Manufacturer: syz [ 120.006255][ T55] usb 8-1: SerialNumber: syz [ 120.256836][ T55] usb 8-1: unit 115 not found! [ 120.258973][ T55] usb 8-1: unit 255 not found! [ 120.384932][ T55] usb 8-1: USB disconnect, device number 5 [ 120.491209][ T5915] udevd[5915]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 121.765044][ T6636] usb usb9: usbfs: process 6636 (syz.3.273) did not claim interface 5 before use [ 122.906413][ T5738] usbhid 6-1:0.0: can't add hid device: -71 [ 122.908397][ T5738] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 122.922402][ T5738] usb 6-1: USB disconnect, device number 5 [ 123.516666][ T6648] netlink: 268 bytes leftover after parsing attributes in process `syz.1.279'. [ 125.734040][ T6682] Bluetooth: MGMT ver 1.23 [ 125.746819][ T6682] futex_wake_op: syz.3.289 tries to shift op by 144; fix this program [ 126.899715][ T5744] ffs_data_put(): freeing [ 129.072030][ T5751] ffs_data_put(): freeing [ 130.178319][ T5744] ffs_data_put(): freeing [ 131.073340][ T5096] Bluetooth: hci3: link tx timeout [ 131.076258][ T5096] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.134085][ T6761] syzkaller0: entered promiscuous mode [ 131.146110][ T6761] syzkaller0: entered allmulticast mode [ 131.813448][ T6765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.324'. [ 132.046724][ T5743] ffs_data_put(): freeing [ 132.143247][ T6769] netlink: 3 bytes leftover after parsing attributes in process `syz.1.326'. [ 132.352565][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.356641][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.872707][ T6781] netlink: 52 bytes leftover after parsing attributes in process `syz.3.330'. [ 132.970344][ T6783] syzkaller0: entered promiscuous mode [ 132.972857][ T6783] syzkaller0: entered allmulticast mode [ 133.157894][ T5096] Bluetooth: hci3: command 0x0406 tx timeout [ 134.749038][ T6808] netlink: 52 bytes leftover after parsing attributes in process `syz.0.340'. [ 134.830455][ T6810] syzkaller0: entered promiscuous mode [ 134.840188][ T6810] syzkaller0: entered allmulticast mode [ 135.386367][ T5878] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 135.547355][ T5878] usb 5-1: Using ep0 maxpacket: 16 [ 135.565104][ T5878] usb 5-1: New USB device found, idVendor=18d1, idProduct=5050, bcdDevice= 0.00 [ 135.576152][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.593088][ T5878] usb 5-1: config 0 descriptor?? [ 136.037375][ T5878] hid-generic 0003:18D1:5050.0006: unknown main item tag 0x7 [ 136.040408][ T5878] hid-generic 0003:18D1:5050.0006: unknown main item tag 0x0 [ 136.044893][ T5878] hid-generic 0003:18D1:5050.0006: unknown main item tag 0x1 [ 136.052610][ T5878] hid-generic 0003:18D1:5050.0006: reserved main item tag 0xd [ 136.058244][ T5878] hid-generic 0003:18D1:5050.0006: hidraw1: USB HID v0.77 Device [HID 18d1:5050] on usb-dummy_hcd.0-1/input0 [ 136.222992][ T74] usb 5-1: USB disconnect, device number 5 [ 136.923496][ T6835] netlink: 52 bytes leftover after parsing attributes in process `syz.2.350'. [ 137.001759][ T42] audit: type=1800 audit(1786969384.927:45): pid=6837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.354" name="nofua" dev="configfs" ino=10220 res=0 errno=0 [ 137.299893][ T42] audit: type=1326 audit(1786969385.227:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.0.355" exe="/syz-executor" sig=0 arch=40000003 syscall=403 compat=1 ip=0xf7f36fec code=0x7ffc0000 [ 137.316159][ T42] audit: type=1326 audit(1786969385.227:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.0.355" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fec code=0x7ffc0000 [ 137.324348][ T42] audit: type=1326 audit(1786969385.227:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.0.355" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fec code=0x7ffc0000 [ 137.333357][ T42] audit: type=1326 audit(1786969385.227:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.0.355" exe="/syz-executor" sig=0 arch=40000003 syscall=403 compat=1 ip=0xf7f36fec code=0x7ffc0000 [ 137.333392][ T42] audit: type=1326 audit(1786969385.227:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.0.355" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f36fec code=0x7ffc0000 [ 137.333428][ T42] audit: type=1326 audit(1786969385.227:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.0.355" exe="/syz-executor" sig=0 arch=40000003 syscall=403 compat=1 ip=0xf7f36fec code=0x7ffc0000 [ 137.333459][ T42] audit: type=1326 audit(1786969385.227:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.0.355" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fec code=0x7ffc0000 [ 137.333481][ T42] audit: type=1326 audit(1786969385.227:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.0.355" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fec code=0x7ffc0000 [ 139.664957][ T42] audit: type=1800 audit(1786969387.587:54): pid=6869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.364" name="nofua" dev="configfs" ino=13436 res=0 errno=0 [ 140.696387][ T6882] input: syz1 as /devices/virtual/input/input9 [ 141.351980][ T5751] ffs_data_put(): freeing [ 141.512554][ T5754] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 141.518771][ T5754] CPU: 0 UID: 0 PID: 5754 Comm: kworker/u34:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 141.518792][ T5754] Tainted: [L]=SOFTLOCKUP [ 141.518809][ T5754] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 141.518818][ T5754] Workqueue: hci2 hci_rx_work [ 141.518841][ T5754] Call Trace: [ 141.518845][ T5754] [ 141.518850][ T5754] dump_stack_lvl+0x100/0x190 [ 141.518868][ T5754] sysfs_warn_dup.cold+0x1c/0x28 [ 141.518886][ T5754] sysfs_create_dir_ns+0x24b/0x2b0 [ 141.518905][ T5754] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 141.518935][ T5754] ? find_held_lock+0x2b/0x80 [ 141.518951][ T5754] ? kobject_add_internal+0x25f/0x930 [ 141.518969][ T5754] ? kobject_add_internal+0x25f/0x930 [ 141.518987][ T5754] ? do_raw_spin_unlock+0x145/0x1e0 [ 141.519000][ T5754] kobject_add_internal+0x2c8/0x930 [ 141.519019][ T5754] kobject_add+0x16a/0x1e0 [ 141.519036][ T5754] ? __pfx_kobject_add+0x10/0x10 [ 141.519052][ T5754] ? class_to_subsys+0x10f/0x150 [ 141.519068][ T5754] ? kobject_put+0xb9/0x640 [ 141.519082][ T5754] ? _raw_spin_unlock+0x28/0x50 [ 141.519097][ T5754] device_add+0x294/0x1970 [ 141.519108][ T5754] ? __pfx_dev_set_name+0x10/0x10 [ 141.519120][ T5754] ? __pfx_device_add+0x10/0x10 [ 141.519131][ T5754] ? mgmt_send_event_skb+0x2fb/0x460 [ 141.519148][ T5754] hci_conn_add_sysfs+0x1a3/0x260 [ 141.519163][ T5754] le_conn_complete_evt+0x11eb/0x1f60 [ 141.519180][ T5754] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 141.519191][ T5754] ? hci_event_packet+0x186/0xcd0 [ 141.519206][ T5754] hci_le_conn_complete_evt+0x23c/0x3a0 [ 141.519219][ T5754] ? skb_pull_data+0x15f/0x1e0 [ 141.519234][ T5754] hci_le_meta_evt+0x34a/0x5f0 [ 141.519248][ T5754] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 141.519262][ T5754] hci_event_packet+0x51c/0xcd0 [ 141.519274][ T5754] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 141.519288][ T5754] ? __pfx_hci_event_packet+0x10/0x10 [ 141.519301][ T5754] ? kcov_remote_start+0x384/0x670 [ 141.519317][ T5754] ? lockdep_hardirqs_on+0x78/0x100 [ 141.519334][ T5754] hci_rx_work+0x451/0xfc0 [ 141.519348][ T5754] process_one_work+0xa23/0x1940 [ 141.519371][ T5754] ? __pfx_process_one_work+0x10/0x10 [ 141.519391][ T5754] ? __pfx_hci_rx_work+0x10/0x10 [ 141.519404][ T5754] worker_thread+0x5ef/0xe50 [ 141.519425][ T5754] ? kthread+0x13a/0x450 [ 141.519439][ T5754] ? __pfx_worker_thread+0x10/0x10 [ 141.519453][ T5754] kthread+0x370/0x450 [ 141.519467][ T5754] ? __pfx_kthread+0x10/0x10 [ 141.519489][ T5754] ret_from_fork+0x72b/0xd50 [ 141.519505][ T5754] ? __pfx_ret_from_fork+0x10/0x10 [ 141.519520][ T5754] ? __switch_to+0x800/0x10f0 [ 141.519531][ T5754] ? __pfx_kthread+0x10/0x10 [ 141.519547][ T5754] ret_from_fork_asm+0x1a/0x30 [ 141.519572][ T5754] [ 141.520869][ T5754] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 141.520913][ T5754] Bluetooth: hci2: failed to register connection device [ 142.354176][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 142.354193][ T42] audit: type=1800 audit(1786969390.277:56): pid=6898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.374" name="nofua" dev="configfs" ino=13485 res=0 errno=0 [ 142.378651][ T5942] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 142.534020][ T5942] usb 5-1: unable to get BOS descriptor or descriptor too short [ 142.538500][ T5942] usb 5-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 142.551725][ T5942] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 142.554992][ T5942] usb 5-1: config 63 has an invalid descriptor of length 55, skipping remainder of the config [ 142.559628][ T5942] usb 5-1: config 63 has no interface number 0 [ 142.566087][ T5942] usb 5-1: config 63 interface 66 has no altsetting 0 [ 142.572184][ T5942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.576092][ T5942] usb 5-1: Product: syz [ 142.577592][ T5942] usb 5-1: Manufacturer: syz [ 142.581144][ T5942] usb 5-1: SerialNumber: syz [ 142.853266][ T5942] uvcvideo 5-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 142.855650][ T5942] uvcvideo 5-1:63.66: No valid video chain found. [ 142.862339][ T5942] usb 5-1: USB disconnect, device number 6 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x1c0000) [ 142.936897][ T1126] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 142.939239][ T1126] ata1: failed to read log page 10h (errno=-5) [ 142.941783][ T1126] ata1.00: NCQ disabled due to excessive errors [ 142.944885][ T1126] ata1.00: exception Emask 0x1 SAct 0x4000 SErr 0x0 action 0x0 [ 142.949260][ T1126] ata1.00: irq_stat 0x41000000 [ 142.951689][ T1126] ata1.00: failed command: READ FPDMA QUEUED [ 142.954382][ T1126] ata1.00: cmd 60/00:70:6e:32:01/0e:00:00:00:00/40 tag 14 ncq dma 1835008 in [ 142.954382][ T1126] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 142.961583][ T1126] ata1.00: status: { DRDY } [ 142.963061][ T1126] ata1.00: error: { ABRT } [ 142.965632][ T1126] ata1.00: configured for UDMA/100 [ 142.968273][ T1126] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 142.971497][ T1126] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 142.974439][ T1126] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 142.977719][ T1126] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 01 32 6e 00 0e 00 00 [ 142.980626][ T1126] I/O error, dev sda, sector 78446 op 0x0:(READ) flags 0x80700 phys_seg 97 prio class 2 [ 142.983888][ T1126] ata1: EH complete [ 143.526013][ T5865] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 143.716034][ T5865] usb 6-1: Using ep0 maxpacket: 8 [ 143.736350][ T5865] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 143.747546][ T5865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 143.764288][ T5865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 143.772184][ T5865] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 143.776847][ T5865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 143.781519][ T5865] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 143.786631][ T5865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.793084][ T5865] usb 6-1: config 0 descriptor?? [ 143.853847][ T5754] Bluetooth: hci4: urb ffff888060b9b800 submission failed (90) [ 143.858475][ T42] audit: type=1800 audit(1786969391.787:57): pid=6918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.384" name="nofua" dev="configfs" ino=15489 res=0 errno=0 [ 144.014926][ T5738] usb 6-1: USB disconnect, device number 6 [ 144.018445][ T5942] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 144.094036][ T6924] binder: 6923:6924 ioctl c0306201 0 returned -14 [ 144.196076][ T5942] usb 5-1: Using ep0 maxpacket: 32 [ 144.206525][ T5942] usb 5-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 144.216615][ T5942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.219577][ T5942] usb 5-1: Product: syz [ 144.220853][ T5942] usb 5-1: Manufacturer: syz [ 144.222408][ T5942] usb 5-1: SerialNumber: syz [ 144.444259][ T5754] Bluetooth: hci2: Malformed LE Event: 0x1d [ 144.451226][ T5942] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 144.462072][ T5942] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 144.478402][ T5865] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 144.500822][ T5942] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 144.514550][ T5942] usb 5-1: USB disconnect, device number 7 [ 144.580612][ T5915] udevd[5915]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.656203][ T5865] usb 7-1: Using ep0 maxpacket: 16 [ 144.659772][ T5865] usb 7-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 144.667566][ T5865] usb 7-1: config 0 has an invalid interface number: 133 but max is 0 [ 144.672793][ T5865] usb 7-1: config 0 has no interface number 0 [ 144.678349][ T5865] usb 7-1: config 0 interface 133 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 144.696081][ T5865] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.699811][ T5865] usb 7-1: Product: syz [ 144.701807][ T5865] usb 7-1: Manufacturer: syz [ 144.703881][ T5865] usb 7-1: SerialNumber: syz [ 144.711143][ T5865] usb 7-1: config 0 descriptor?? [ 145.052322][ T5865] keyspan 7-1:0.133: Keyspan 1 port adapter converter detected [ 145.055031][ T5865] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 82 [ 145.062991][ T5865] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 81 [ 145.067353][ T5865] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 1 [ 145.070179][ T5865] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 2 [ 145.075318][ T5865] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 145.081851][ T5865] usb 7-1: USB disconnect, device number 5 [ 145.088808][ T5865] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 145.094444][ T5865] keyspan 7-1:0.133: device disconnected [ 145.927820][ T6951] binder: 6950:6951 ioctl c0306201 0 returned -14 [ 146.193277][ T6946] smpboot: CPU 1 is now offline [ 147.509933][ T6960] usb usb7: usbfs: process 6960 (syz.2.400) did not claim interface 0 before use [ 147.706284][ T5754] Bluetooth: hci2: command 0x0406 tx timeout [ 149.081739][ T6982] No source specified [ 149.498189][ T5738] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 149.661525][ T5738] usb 8-1: not running at top speed; connect to a high speed hub [ 149.666661][ T5738] usb 8-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 149.687038][ T5738] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 130, setting to 64 [ 149.701822][ T5738] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.709581][ T5738] usb 8-1: Product: syz [ 149.711534][ T5738] usb 8-1: Manufacturer: syz [ 149.713471][ T5738] usb 8-1: SerialNumber: syz [ 149.738090][ T6990] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 149.746978][ T5738] oti6858 8-1:1.0: oti6858 converter detected [ 149.777910][ T5738] usb 8-1: oti6858 converter now attached to ttyUSB0 [ 150.140647][ T5865] usb 8-1: USB disconnect, device number 6 [ 150.142661][ C3] usb 8-1: oti6858_read_int_callback(): usb_submit_urb() failed with error -19 [ 150.170868][ T5865] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 150.174729][ T5865] oti6858 8-1:1.0: device disconnected [ 151.054008][ T7014] netlink: 96 bytes leftover after parsing attributes in process `syz.1.419'. [ 151.228582][ T7017] Illegal XDP return value 4294967294 on prog (id 24) dev syz_tun, expect packet loss! [ 151.530593][ T7021] syz.0.423 (7021) used greatest stack depth: 19104 bytes left [ 152.473318][ T42] audit: type=1326 audit(1786969400.397:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7043 comm="syz.3.432" exe="/syz-executor" sig=31 arch=40000003 syscall=403 compat=1 ip=0xf7fa4fec code=0x0 [ 153.993209][ T42] audit: type=1326 audit(1786969401.917:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7060 comm="syz.1.437" exe="/syz-executor" sig=9 arch=40000003 syscall=403 compat=1 ip=0xf7f53fec code=0x0 [ 155.731709][ T7083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.446'. [ 156.913010][ T7112] netlink: 'syz.0.457': attribute type 1 has an invalid length. [ 158.014239][ T7125] netlink: 24 bytes leftover after parsing attributes in process `syz.1.462'. [ 160.247953][ T7151] netlink: 24 bytes leftover after parsing attributes in process `syz.3.472'. [ 161.031345][ T5743] ffs_data_put(): freeing [ 161.204704][ T7175] netlink: 24 bytes leftover after parsing attributes in process `syz.0.481'. [ 161.587543][ T7184] team0: No ports can be present during mode change [ 161.886963][ T7188] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 162.331255][ T7201] netlink: 48 bytes leftover after parsing attributes in process `syz.0.492'. [ 163.349011][ T7221] netlink: 20 bytes leftover after parsing attributes in process `syz.0.497'. [ 163.474540][ T7223] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 164.352992][ T5751] ffs_data_put(): freeing [ 164.804519][ T7247] netlink: 36 bytes leftover after parsing attributes in process `syz.1.507'. [ 165.561363][ T7259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.510'. [ 165.572800][ T7259] netlink: 104 bytes leftover after parsing attributes in process `syz.0.510'. [ 165.582969][ T7259] netlink: 104 bytes leftover after parsing attributes in process `syz.0.510'. [ 166.142682][ T7272] netlink: 88 bytes leftover after parsing attributes in process `syz.2.516'. [ 166.155318][ T7270] syz.3.515 uses obsolete (PF_INET,SOCK_PACKET) [ 166.436541][ T7275] usb usb7: usbfs: process 7275 (syz.0.514) did not claim interface 0 before use [ 166.452798][ T5754] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 166.636730][ T5743] ffs_data_put(): freeing [ 166.777111][ T7290] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 167.057587][ T7295] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 170.029443][ T7370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.550'. [ 170.041155][ T7370] ipvlan2: entered allmulticast mode [ 170.043031][ T7370] syz_tun: entered allmulticast mode [ 170.178793][ T7375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.554'. [ 170.205351][ T42] audit: type=1804 audit(1786969418.127:60): pid=7377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.555" name="/newroot/136/file1" dev="tmpfs" ino=736 res=1 errno=0 [ 171.445267][ T7413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.568'. [ 172.870486][ T7453] usb usb7: usbfs: process 7453 (syz.2.577) did not claim interface 0 before use [ 174.702407][ T7489] usb usb7: usbfs: process 7489 (syz.2.594) did not claim interface 0 before use [ 175.095393][ T7508] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 175.835120][ T5096] Bluetooth: hci1: unexpected cc 0x204b length: 34 > 3 [ 177.324036][ T7534] jffs2: notice: (7534) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 177.440837][ T5744] ------------[ cut here ]------------ [ 177.443560][ T5744] kernel BUG at fs/jffs2/nodelist.c:462! [ 177.468136][ T5744] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 177.470224][ T5744] CPU: 0 UID: 0 PID: 5744 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 177.473591][ T5744] Tainted: [L]=SOFTLOCKUP [ 177.474946][ T5744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 177.478129][ T5744] RIP: 0010:jffs2_del_ino_cache+0x24f/0x2c0 [ 177.480055][ T5744] Code: 4c 89 e2 49 8b 5e 18 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 75 71 49 89 1c 24 e9 42 ff ff ff e8 42 dd 8a fe 90 <0f> 0b e8 2a 70 fa fe e9 5b fe ff ff e8 f0 6f fa fe e9 59 ff ff ff [ 177.485990][ T5744] RSP: 0000:ffffc90004207a70 EFLAGS: 00010293 [ 177.487962][ T5744] RAX: 0000000000000000 RBX: ffff88804c7d6000 RCX: 0000000000000000 [ 177.490475][ T5744] RDX: ffff888021458000 RSI: ffffffff837ef29e RDI: ffff888070776ee0 [ 177.492940][ T5744] RBP: 0000000000000006 R08: 0000000000000000 R09: ffffed10098fac6c [ 177.495404][ T5744] R10: ffff88804c7d6363 R11: 0000000000000000 R12: ffff88806b493c80 [ 177.497928][ T5744] R13: dffffc0000000000 R14: ffff888070776ec0 R15: ffff88806b493d30 [ 177.500653][ T5744] FS: 0000000000000000(0000) GS:ffff888096be6000(0063) knlGS:0000000056961480 [ 177.504352][ T5744] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 177.507138][ T5744] CR2: 000000005696d1fc CR3: 00000000213f7000 CR4: 0000000000352ef0 [ 177.510472][ T5744] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 00000000000000a9 [ 177.513703][ T5744] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 177.517004][ T5744] Call Trace: [ 177.518466][ T5744] [ 177.519736][ T5744] jffs2_do_clear_inode+0x3ca/0x470 [ 177.521929][ T5744] ? __pfx_jffs2_evict_inode+0x10/0x10 [ 177.524058][ T5744] evict+0x3c2/0xad0 [ 177.525599][ T5744] ? __pfx_evict+0x10/0x10 [ 177.527389][ T5744] ? do_raw_spin_unlock+0x145/0x1e0 [ 177.529461][ T5744] dispose_list+0x117/0x1e0 [ 177.531351][ T5744] evict_inodes+0x5fa/0x6f0 [ 177.533246][ T5744] ? __pfx_evict_inodes+0x10/0x10 [ 177.535386][ T5744] ? sync_blockdev+0x51/0x70 [ 177.537354][ T5744] generic_shutdown_super+0xc8/0x360 [ 177.539567][ T5744] kill_mtd_super+0x1d/0x80 [ 177.541515][ T5744] jffs2_kill_sb+0x7c/0xb0 [ 177.543474][ T5744] deactivate_locked_super+0xc1/0x1b0 [ 177.545779][ T5744] deactivate_super+0xe7/0x110 [ 177.547787][ T5744] cleanup_mnt+0x21f/0x450 [ 177.549547][ T5744] task_work_run+0x150/0x240 [ 177.551488][ T5744] ? __pfx_task_work_run+0x10/0x10 [ 177.553245][ T5744] exit_to_user_mode_loop+0x1d8/0x700 [ 177.555042][ T5744] ? rcu_is_watching+0x12/0xc0 [ 177.556909][ T5744] __do_fast_syscall_32+0x701/0x970 [ 177.559144][ T5744] do_fast_syscall_32+0x32/0x70 [ 177.561222][ T5744] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 177.563862][ T5744] RIP: 0023:0xf7f07fec [ 177.565567][ T5744] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 177.573461][ T5744] RSP: 002b:00000000ff8c7dd8 EFLAGS: 00000292 ORIG_RAX: 0000000000000034 [ 177.576821][ T5744] RAX: 0000000000000000 RBX: 00000000ff8c7e80 RCX: 0000000000000009 [ 177.580110][ T5744] RDX: 00000000f7397ff4 RSI: 00000000f71d1656 RDI: 00000000ff8c8f14 [ 177.583415][ T5744] RBP: 00000000ff8c7e80 R08: 0000000000000000 R09: 0000000000000000 [ 177.586681][ T5744] R10: 0000000000000000 R11: 0000000000000216 R12: 0000000000000000 [ 177.589948][ T5744] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 177.593168][ T5744] [ 177.594500][ T5744] Modules linked in: [ 177.597122][ T5744] ---[ end trace 0000000000000000 ]--- [ 177.609182][ T5754] Bluetooth: hci3: command 0x0406 tx timeout [ 177.753584][ T5744] RIP: 0010:jffs2_del_ino_cache+0x24f/0x2c0 [ 177.762146][ T5744] Code: 4c 89 e2 49 8b 5e 18 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 75 71 49 89 1c 24 e9 42 ff ff ff e8 42 dd 8a fe 90 <0f> 0b e8 2a 70 fa fe e9 5b fe ff ff e8 f0 6f fa fe e9 59 ff ff ff [ 177.783686][ T5744] RSP: 0000:ffffc90004207a70 EFLAGS: 00010293 [ 177.791251][ T5744] RAX: 0000000000000000 RBX: ffff88804c7d6000 RCX: 0000000000000000 [ 177.794900][ T5744] RDX: ffff888021458000 RSI: ffffffff837ef29e RDI: ffff888070776ee0 [ 177.798130][ T5744] RBP: 0000000000000006 R08: 0000000000000000 R09: ffffed10098fac6c [ 177.801334][ T5744] R10: ffff88804c7d6363 R11: 0000000000000000 R12: ffff88806b493c80 [ 177.804357][ T5744] R13: dffffc0000000000 R14: ffff888070776ec0 R15: ffff88806b493d30 [ 177.807381][ T5744] FS: 0000000000000000(0000) GS:ffff888096ee6000(0063) knlGS:0000000056961480 [ 177.810889][ T5744] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 177.813794][ T5744] CR2: 0000000080045000 CR3: 00000000213f7000 CR4: 0000000000352ef0 [ 177.816837][ T5744] Kernel panic - not syncing: Fatal exception [ 177.819471][ T5744] Kernel Offset: disabled [ 177.820849][ T5744] Rebooting in 86400 seconds.. VM DIAGNOSIS: 12:23:45 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffc90006d57b60 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff8551b384 RDI=ffffc90006d57b60 RBP=ffffc90006d57b20 RSP=ffffc90006d57a80 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000000 R13=ffffc90006d57b60 R14=ffffc90006d57b28 R15=0000000000000000 RIP=ffffffff8551b3ad RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096be6000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000005696d1fc CR3=000000006e03d000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=00000000000000a9 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff81b53eaa RDX=ffff88801c73a540 RSI=ffffffff81b53ece RDI=ffff88801c73a540 RBP=0000000000000001 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=0000000000000000 RIP=ffffffff81b53ecf RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ce6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f71d8b50 CR3=000000000e994000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ae00000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000751c71 RBX=ffffffff90790fa0 RCX=ffffffff81f696c2 RDX=0000000000000608 RSI=ffffffff88f03d09 RDI=ffffffff90790fa0 RBP=0000000000007eac RSP=ffffc900061bf6d8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=000000293315b80c R13=dffffc0000000000 R14=ffffffff91224c84 R15=ffff88802b43b600 RIP=ffffffff88f03d10 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096de6000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055fc507fd000 CR3=000000004bef3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000003000000012 0004000000080024 0000000000280034 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000026b 0000001800000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2e01ffffffffff ffffffe308000310 0000011d00000007 0000000100000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8208000690030070 756f72676301ffff fffffffffffff108 0003000206880301 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0800068003240800 3180020100000208 0606010180d8000c a400318003000400 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0408000fffffffff 0201000000080608 024c980004000280 80840800000201c7 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 080008004c9c07fe 0800000201c70800 0601448000317a79 732f70756f726763 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1883c2e1d0080001 080006012ec60fff ffffff0206b0030f ffffffff0206a803 ZMM25=5a4ffab45a4ffab4 5a4ffab45a4ffab4 5a4ffab45a4ffab4 5a4ffab45a4ffab4 5a4ffab45a4ffab4 5a4ffab45a4ffab4 5a4ffab45a4ffab4 5a4ffab45a4ffab4 ZMM26=426ac995426ac995 426ac995426ac995 426ac995426ac995 426ac995426ac995 426ac995426ac995 426ac995426ac995 426ac995426ac995 426ac995426ac995 ZMM27=6f7132cc6f7132cc 6f7132cc6f7132cc 6f7132cc6f7132cc 6f7132cc6f7132cc 6f7132cc6f7132cc 6f7132cc6f7132cc 6f7132cc6f7132cc 6f7132cc6f7132cc ZMM28=000001700000016f 0000016e0000016d 0000016c0000016b 0000016a00000169 0000016800000167 0000016600000165 0000016400000163 0000016200000161 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0108000001080000 0108000001080000 0108000001080000 0108000001080000 0108000001080000 0108000001080000 0108000001080000 0108000001080000 info registers vcpu 3 CPU#3 RAX=000000000075280a RBX=ffffffff90790fa0 RCX=ffffffff81f6ecb7 RDX=0000000000000608 RSI=ffffffff88f03d09 RDI=ffffffff90790fa0 RBP=ffff88802b528448 RSP=ffffc900046a79d0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000007eac R13=ffff88802b5285a8 R14=ffff88802b5285a8 R15=dffffc0000000000 RIP=ffffffff88f03d10 RFL=00000012 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096ee6000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000033d14ff8 CR3=000000002448d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000