last executing test programs: 10.761494669s ago: executing program 3 (id=2717): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000300)=""/120) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f00000006c0), 0x3}, 0x38) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) sendmsg$NFT_BATCH(r4, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40081100}, 0xc, &(0x7f0000000a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000010009e98000000000000140000001100010000000e00000000000300000a000000000000ffe301be35ffe6d6dea16cc43ac110e660543b45b810252e06c6abd6856b928def87e10e7bfddbe4a1ece55b79cb2e475f65945365817614201acf2eea1bf9d61971f669378249d058cad33d81cac141aae1a19dfe20f7e8ecca4c9d093f6bb70cfe5e6ee2965df384e705b6bfa10b5863b8fc5a2bae17f024b090e37de42a0c"], 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x1) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup(r5) sendmmsg$inet(r6, &(0x7f0000000c40)=[{{&(0x7f0000000b00)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000d00)="7e76176fcf47376044afaf35ae5147372320f8eef5cbc12d9a4a35b918551e961bd72b1d6610ef53902510583d12360b1646e1f294743e82a9bbd52b9eca6e3e9011b6b4256651df3385118139dcb01c9d88ffb142b38bb8ab470b9cfa6489f410d5302c1397e41f926ca933bfdd294f2e57428c2fcb939476a6f7258074ba11a968ec9002106d7c1b17460adc843292a690c817ef30b7651cb9f91d92e3", 0x9e}, {&(0x7f0000000b40)="cd8f8c13ed8b68c8774b0c57fd6b7d6e23a69f6c04291ce20ecfcbae227ee46b9e2708fadcf06b23f6667e820598fb63ed7bceb7badc4be299", 0x39}], 0x2}}], 0x1, 0x8010) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e25, 0xa, @mcast1, 0x7}], 0x1c) sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000006c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) 8.629363957s ago: executing program 3 (id=2718): syz_open_procfs(0x0, &(0x7f0000000240)='net/dev_mcast\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r3, &(0x7f0000001740)=[{{0x0, 0xc4, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) 8.598674124s ago: executing program 0 (id=2723): pipe(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f00000001c0)=0x4, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x20, 0x8e7b0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) recvfrom(r0, 0x0, 0x0, 0x99bcb88de02507f2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000040)='hpfs\x00', 0x800, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00007bf000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000ee266c2f800000c00f3266bac0000f300f0f5901b48ed0660f38806f008ee0", 0x30}], 0x1, 0x28, 0x0, 0x0) mq_open(0x0, 0x1, 0x89, &(0x7f0000000180)={0x2, 0x3}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0xac00, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpid() futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.598400948s ago: executing program 3 (id=2724): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8010) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000080)=0x5, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="310002393e0029020000f11a20f33792b715a60004000000"], 0x18}}, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe3d08660d3cd4684, 0x1}) r1 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044000}, 0x26004885) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000009b80)=""/102392, 0x18ff8) iopl(0x3) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) io_submit(0x0, 0x0, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) syz_usb_connect(0x3, 0x3d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b", @ANYRESHEX], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) 8.206970691s ago: executing program 1 (id=2727): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/dev_mcast\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) syz_usb_connect$cdc_ecm(0x5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001740)=[{{0x0, 0xc4, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xd000}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$kcm(0x10, 0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000800)={0x2020}, 0x2020) 7.468761628s ago: executing program 0 (id=2730): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x0, 0x73, 0x0, 0x5, 0x0, "5ee691000200000017e0054200", 0x1000, 0x4}) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0xa, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') rmdir(&(0x7f0000000080)='./file2\x00') sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000801}, 0x40000c0) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x320000) r5 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r5, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x4000001, @mcast2}, 0x1c) sendto$inet6(r5, 0x0, 0x30, 0x40000, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) setxattr$security_capability(&(0x7f0000000080)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3) 5.457905895s ago: executing program 3 (id=2734): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x76, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x30204}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x1bc, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x184, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x840}, 0x40804) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000080)={{0x3, 0x1, 0x0, 0x0, 0x6}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a40)=@newlink={0x10c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xdc, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xcc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xa}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_INGRESS_QOS={0x70, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0x9}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8}, @IFLA_PROMISCUITY={0x8}]}, 0x10c}, 0x1, 0xba01}, 0x0) openat$cachefiles(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000c67a98bf93a48197000000000f0266800000015f5f00"], 0x0, 0x29}, 0x28) close(0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x35, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f00000006c0)="3b000000010006", 0x7) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r8 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18) utimensat(r8, 0x0, &(0x7f0000000880)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x0, @val=@netkit={@void, @value=r0}}, 0x1c) writev(r7, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 5.397989387s ago: executing program 0 (id=2735): openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="02000000040000060000000001000000800000003799f6982b00d1deb74a95baae91ee009f4dbc4f4c1a87f90398721595714be057c1be8b96b2a9a22e6acff1af303d5c43dde5c179d1832aba805763e6304cbb1825c35bd081aae1d23590af4a27facf965e366548e4b71714695fe543e7c4648b49bcd39fe9ceb78ff6af9fd4a6aad41c1a", @ANYRES32=0x0, @ANYBLOB='\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f00000006c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x6, 0xad, &(0x7f0000000140)=""/173, 0x41000, 0x1b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000000000, 0x1b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x54f, &(0x7f0000000140)={0x0, 0x84d9, 0x400, 0xffffffff, 0x204}, &(0x7f00000001c0)=0x0, &(0x7f0000000440)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r4, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000040)) pipe(&(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xb) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') syz_fuse_handle_req(r6, &(0x7f00000047c0)="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", 0x2000, &(0x7f0000006d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000e8cd7a1abb798265000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) 4.706598349s ago: executing program 2 (id=2736): openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="02000000040000060000000001000000800000003799f6982b00d1deb74a95baae91ee009f4dbc4f4c1a87f90398721595714be057c1be8b96b2a9a22e6acff1af303d5c43dde5c179d1832aba805763e6304cbb1825c35bd081aae1d23590af4a27facf965e366548e4b71714695fe543e7c4648b49bcd39fe9ceb78ff6af9fd4a6aad41c1a", @ANYRES32=0x0, @ANYBLOB='\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f00000006c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x6, 0xad, &(0x7f0000000140)=""/173, 0x41000, 0x1b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000000000, 0x1b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x54f, &(0x7f0000000140)={0x0, 0x84d9, 0x400, 0xffffffff, 0x204}, &(0x7f00000001c0)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x1, 0x0, 0x0, 0xf67, 0xa, 0x0, {0x0, 0x0, r0}}) io_uring_enter(r4, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) 4.647984379s ago: executing program 2 (id=2737): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x0, 0x73, 0x0, 0x5, 0x0, "5ee691000200000017e0054200", 0x1000, 0x4}) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0xa, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') rmdir(&(0x7f0000000080)='./file2\x00') openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x320000) r5 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r5, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x4000001, @mcast2}, 0x1c) sendto$inet6(r5, 0x0, 0x30, 0x40000, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) setxattr$security_capability(&(0x7f0000000080)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3) 4.537243085s ago: executing program 3 (id=2738): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x2000) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r1, 0x1) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) tkill(r6, 0xb) syz_emit_ethernet(0x56, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0380c2000000080047780048006800000d0690780a010100ac1414bb0044045d030000000000000000000000000000000000004e210000000100000001ffff00010000000600000000"], 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x85, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000041}, 0x55fdb4595c3d8036) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) fsopen(&(0x7f0000000180)='omfs\x00', 0x1) 4.167333661s ago: executing program 0 (id=2739): r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) setxattr$trusted_overlay_opaque(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) listxattr(&(0x7f0000001cc0)='./bus\x00', &(0x7f0000001d00)=""/4096, 0x1000) semctl$GETALL(0x0, 0x0, 0xd, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={r3, 0x20, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f00000006c0)=""/150, 0x96}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000340)) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000840)='net/packet\x00') ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r4, 0x8949, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 2.53760005s ago: executing program 1 (id=2740): r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) listxattr(&(0x7f0000001cc0)='./bus\x00', 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={r3, 0x20, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f00000006c0)=""/150, 0x96}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000340)) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000840)='net/packet\x00') ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r4, 0x8949, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 2.527735489s ago: executing program 2 (id=2741): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x2000) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r1, 0x1) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) tkill(r6, 0xb) syz_emit_ethernet(0x56, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0380c2000000080047780048006800000d0690780a010100ac1414bb0044045d030000000000000000000000000000000000004e210000000100000001ffff00010000000600000000"], 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x85, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000041}, 0x55fdb4595c3d8036) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) fsopen(&(0x7f0000000180)='omfs\x00', 0x1) 2.512915491s ago: executing program 3 (id=2742): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8010) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000080)=0x5, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="310002393e0029020000f11a20f33792b715a60004000000"], 0x18}}, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe3d08660d3cd4684, 0x1}) r1 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044000}, 0x26004885) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000009b80)=""/102392, 0x18ff8) iopl(0x3) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) io_submit(0x0, 0x0, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) syz_usb_connect(0x3, 0x3d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b", @ANYRESHEX], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) 2.496134586s ago: executing program 0 (id=2743): syz_open_procfs(0x0, &(0x7f0000000240)='net/dev_mcast\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r3, &(0x7f0000001740)=[{{0x0, 0xc4, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) 2.494875597s ago: executing program 1 (id=2744): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000020", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.494726417s ago: executing program 1 (id=2745): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r3, &(0x7f0000001740)=[{{0x0, 0xc4, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xd000}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$kcm(0x10, 0x2, 0x4) 2.49194967s ago: executing program 2 (id=2746): openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="02000000040000060000000001000000800000003799f6982b00d1deb74a95baae91ee009f4dbc4f4c1a87f90398721595714be057c1be8b96b2a9a22e6acff1af303d5c43dde5c179d1832aba805763e6304cbb1825c35bd081aae1d23590af4a27facf965e366548e4b71714695fe543e7c4648b49bcd39fe9ceb78ff6af9fd4a6aad41c1a", @ANYRES32=0x0, @ANYBLOB='\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f00000006c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x6, 0xad, &(0x7f0000000140)=""/173, 0x41000, 0x1b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000000000, 0x1b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x54f, &(0x7f0000000140)={0x0, 0x84d9, 0x400, 0xffffffff, 0x204}, &(0x7f00000001c0)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x1, 0x0, 0x0, 0xf67, 0xa, 0x0, {0x0, 0x0, r0}}) io_uring_enter(r4, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) 2.391592619s ago: executing program 2 (id=2747): openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="02000000040000060000000001000000800000003799f6982b00d1deb74a95baae91ee009f4dbc4f4c1a87f90398721595714be057c1be8b96b2a9a22e6acff1af303d5c43dde5c179d1832aba805763e6304cbb1825c35bd081aae1d23590af4a27facf965e366548e4b71714695fe543e7c4648b49bcd39fe9ceb78ff6af9fd4a6aad41c1a", @ANYRES32=0x0, @ANYBLOB='\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f00000006c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x6, 0xad, &(0x7f0000000140)=""/173, 0x41000, 0x1b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000000000, 0x1b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x54f, &(0x7f0000000140)={0x0, 0x84d9, 0x400, 0xffffffff, 0x204}, &(0x7f00000001c0)=0x0, &(0x7f0000000440)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r4, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000040)) pipe(&(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xb) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') syz_fuse_handle_req(r6, &(0x7f00000047c0)="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", 0x2000, &(0x7f0000006d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000e8cd7a1abb798265000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) 1.913396906s ago: executing program 1 (id=2748): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x0, 0x73, 0x0, 0x5, 0x0, "5ee691000200000017e0054200", 0x1000, 0x4}) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0xa, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000801}, 0x40000c0) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x320000) r5 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r5, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x4000001, @mcast2}, 0x1c) sendto$inet6(r5, 0x0, 0x30, 0x40000, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) setxattr$security_capability(&(0x7f0000000080)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3) 1.500545695s ago: executing program 2 (id=2749): openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="02000000040000060000000001000000800000003799f6982b00d1deb74a95baae91ee009f4dbc4f4c1a87f90398721595714be057c1be8b96b2a9a22e6acff1af303d5c43dde5c179d1832aba805763e6304cbb1825c35bd081aae1d23590af4a27facf965e366548e4b71714695fe543e7c4648b49bcd39fe9ceb78ff6af9fd4a6aad41c1a", @ANYRES32=0x0, @ANYBLOB='\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f00000006c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x6, 0xad, &(0x7f0000000140)=""/173, 0x41000, 0x1b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000000000, 0x1b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x54f, &(0x7f0000000140)={0x0, 0x84d9, 0x400, 0xffffffff, 0x204}, &(0x7f00000001c0)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x1, 0x0, 0x0, 0xf67, 0xa, 0x0, {0x0, 0x0, r0}}) io_uring_enter(r4, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000040)) pipe(&(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xb) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') syz_fuse_handle_req(r7, &(0x7f00000047c0)="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", 0x2000, &(0x7f0000006d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000e8cd7a1abb798265000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) 1.323890929s ago: executing program 0 (id=2750): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43d, 0x80, 0x3, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) 0s ago: executing program 1 (id=2751): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43d, 0x80, 0x3, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) kernel console output (not intermixed with test programs): 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1082.815620][ T6333] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.823374][ T6333] usb 5-1: config 0 descriptor?? [ 1084.686708][ T6333] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1084.693763][ T6333] usb 5-1: USB disconnect, device number 50 [ 1084.874589][ T5946] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1084.935267][ T29] libceph: connect (1)[c::]:6789 error -22 [ 1084.938657][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 1085.104610][T16820] ceph: No mds server is up or the cluster is laggy [ 1085.193987][ T830] libceph: connect (1)[c::]:6789 error -22 [ 1085.194079][ T830] libceph: mon0 (1)[c::]:6789 connect error [ 1085.350261][T16837] hpfs: Bad magic ... probably not HPFS [ 1086.162908][T11004] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1086.306918][T16850] bridge_slave_0: left allmulticast mode [ 1086.309576][T16850] bridge_slave_0: left promiscuous mode [ 1086.323154][T16850] bridge0: port 1(bridge_slave_0) entered disabled state [ 1086.359985][T11004] usb 7-1: Using ep0 maxpacket: 8 [ 1086.365623][T11004] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1086.368821][T11004] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1086.371650][T11004] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.378002][T11004] usb 7-1: config 0 descriptor?? [ 1086.389699][T11004] iowarrior 7-1:0.0: no interrupt-in endpoint found [ 1086.412655][T16850] bridge_slave_1: left allmulticast mode [ 1086.414797][T16850] bridge_slave_1: left promiscuous mode [ 1086.418068][T16850] bridge0: port 2(bridge_slave_1) entered disabled state [ 1086.496137][T16850] bond0: (slave bond_slave_0): Releasing backup interface [ 1086.554505][T16850] bond0: (slave bond_slave_1): Releasing backup interface [ 1086.645103][T16850] team0: Port device team_slave_0 removed [ 1086.684938][T16850] team0: Port device team_slave_1 removed [ 1086.687706][T16850] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1086.690218][T16850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1086.745115][T16850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1086.747620][T16850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1086.804127][T16850] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1088.899922][ T24] usb 7-1: USB disconnect, device number 71 [ 1092.049616][T16893] ceph: No mds server is up or the cluster is laggy [ 1092.058088][T14324] libceph: connect (1)[c::]:6789 error -101 [ 1092.064511][T14324] libceph: mon0 (1)[c::]:6789 connect error [ 1093.944925][T16912] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 1093.947024][T16912] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1093.949751][T16912] vhci_hcd vhci_hcd.0: Device attached [ 1094.122901][T10973] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 1094.212945][ T6304] usb 38-1: SetAddress Request (30) to port 0 [ 1094.215036][ T6304] usb 38-1: new SuperSpeed USB device number 30 using vhci_hcd [ 1094.273080][T10973] usb 8-1: Using ep0 maxpacket: 8 [ 1094.276110][T10973] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1094.279482][T10973] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1094.283973][T10973] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1094.286941][T10973] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.338181][T10973] usb 8-1: config 0 descriptor?? [ 1094.345954][T10973] iowarrior 8-1:0.0: no interrupt-in endpoint found [ 1094.456235][T16913] vhci_hcd: connection reset by peer [ 1094.458503][ T8163] vhci_hcd vhci_hcd.0: stop threads [ 1094.461018][ T8163] vhci_hcd vhci_hcd.0: release socket [ 1094.463531][ T8163] vhci_hcd vhci_hcd.0: disconnect device [ 1095.985178][T10973] libceph: connect (1)[c::]:6789 error -101 [ 1095.987976][T10973] libceph: mon0 (1)[c::]:6789 connect error [ 1095.990761][T16938] ceph: No mds server is up or the cluster is laggy [ 1096.895731][ T24] usb 8-1: USB disconnect, device number 47 [ 1099.058800][T16977] ceph: No mds server is up or the cluster is laggy [ 1099.061105][ T830] libceph: connect (1)[c::]:6789 error -101 [ 1099.063095][ T830] libceph: mon0 (1)[c::]:6789 connect error [ 1099.313189][ T6304] usb 38-1: device descriptor read/8, error -110 [ 1099.723762][ T6304] usb usb38-port1: attempt power cycle [ 1099.816831][ T5946] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1100.490471][ T6127] libceph: connect (1)[c::]:6789 error -22 [ 1100.493478][ T6127] libceph: mon0 (1)[c::]:6789 connect error [ 1100.496712][T16999] ceph: No mds server is up or the cluster is laggy [ 1100.671548][ T6304] usb usb38-port1: unable to enumerate USB device [ 1101.212953][ T39] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1101.362970][ T39] usb 6-1: Using ep0 maxpacket: 8 [ 1101.366928][ T39] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1101.371613][ T39] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1101.377388][ T39] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1101.381228][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.387903][ T39] usb 6-1: config 0 descriptor?? [ 1101.392744][ T39] iowarrior 6-1:0.0: no interrupt-in endpoint found [ 1103.276877][T17012] fuse: Invalid rootmode [ 1103.279172][T17012] netlink: 'syz.2.2081': attribute type 1 has an invalid length. [ 1103.349780][T17012] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 1103.404792][T17012] macvlan2: entered promiscuous mode [ 1103.407786][T17012] macvlan2: entered allmulticast mode [ 1103.411158][T17012] bond2: entered promiscuous mode [ 1103.413393][T17012] gretap1: entered promiscuous mode [ 1103.415510][T17012] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1103.494481][T17012] bond2: left promiscuous mode [ 1103.496199][T17012] gretap1: left promiscuous mode [ 1104.138368][T14324] usb 6-1: USB disconnect, device number 37 [ 1104.543124][ T6127] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 1104.673162][ T6127] usb 8-1: device descriptor read/64, error -71 [ 1104.922979][ T6127] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 1105.085989][ T6127] usb 8-1: device descriptor read/64, error -71 [ 1105.193029][ T6127] usb usb8-port1: attempt power cycle [ 1105.489664][T17032] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2086'. [ 1105.542970][ T6127] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 1105.643799][ T6127] usb 8-1: device descriptor read/8, error -71 [ 1105.740338][ T39] libceph: connect (1)[c::]:6789 error -101 [ 1105.743143][ T39] libceph: mon0 (1)[c::]:6789 connect error [ 1105.793022][T17036] ceph: No mds server is up or the cluster is laggy [ 1105.932981][ T6127] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 1105.963746][ T6127] usb 8-1: device descriptor read/8, error -71 [ 1106.083061][ T6127] usb usb8-port1: unable to enumerate USB device [ 1106.202087][ T40] kauditd_printk_skb: 318 callbacks suppressed [ 1106.202102][ T40] audit: type=1326 audit(1770715974.112:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17025 comm="syz.0.2085" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 1106.216313][ T40] audit: type=1326 audit(1770715974.132:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17025 comm="syz.0.2085" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 1106.226967][ T40] audit: type=1326 audit(1770715974.132:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17025 comm="syz.0.2085" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f365a7 code=0x7ffc0000 [ 1106.238404][ T40] audit: type=1326 audit(1770715974.132:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17025 comm="syz.0.2085" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 1106.247740][ T40] audit: type=1326 audit(1770715974.132:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17025 comm="syz.0.2085" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f365a7 code=0x7ffc0000 [ 1106.256939][ T40] audit: type=1326 audit(1770715974.132:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17025 comm="syz.0.2085" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 1106.264674][ T40] audit: type=1326 audit(1770715974.132:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17025 comm="syz.0.2085" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 1106.272267][ T40] audit: type=1326 audit(1770715974.132:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17025 comm="syz.0.2085" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f365a7 code=0x7ffc0000 [ 1106.280478][ T40] audit: type=1326 audit(1770715974.132:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17025 comm="syz.0.2085" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 1106.289447][ T40] audit: type=1326 audit(1770715974.132:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17025 comm="syz.0.2085" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 1107.462972][ T39] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1107.623009][ T39] usb 6-1: Using ep0 maxpacket: 8 [ 1107.634430][ T39] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1107.638680][ T39] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1107.644117][ T39] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1107.647919][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.663649][ T39] usb 6-1: config 0 descriptor?? [ 1107.668737][ T39] iowarrior 6-1:0.0: no interrupt-in endpoint found [ 1110.264388][ T6127] usb 6-1: USB disconnect, device number 38 [ 1110.516196][T17084] FAULT_INJECTION: forcing a failure. [ 1110.516196][T17084] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1110.521515][T17084] CPU: 0 UID: 0 PID: 17084 Comm: syz.1.2096 Not tainted syzkaller #0 PREEMPT(full) [ 1110.521531][T17084] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1110.521537][T17084] Call Trace: [ 1110.521542][T17084] [ 1110.521547][T17084] dump_stack_lvl+0x100/0x190 [ 1110.521576][T17084] should_fail_ex.cold+0x5/0xa [ 1110.521592][T17084] ? prepare_alloc_pages+0x16d/0x5f0 [ 1110.521610][T17084] should_fail_alloc_page+0xeb/0x140 [ 1110.521625][T17084] prepare_alloc_pages+0x1f0/0x5f0 [ 1110.521643][T17084] __alloc_frozen_pages_noprof+0x193/0x2410 [ 1110.521658][T17084] ? rcu_is_watching+0x12/0xc0 [ 1110.521668][T17084] ? trace_mm_page_alloc+0x10e/0x160 [ 1110.521684][T17084] ? __alloc_frozen_pages_noprof+0x2a0/0x2410 [ 1110.521697][T17084] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1110.521710][T17084] ? kvm_sched_clock_read+0x11/0x20 [ 1110.521723][T17084] ? sched_clock+0x38/0x60 [ 1110.521738][T17084] ? sched_clock_cpu+0x6c/0x570 [ 1110.521754][T17084] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1110.521768][T17084] ? find_held_lock+0x2b/0x80 [ 1110.521778][T17084] ? __schedule+0x2f0b/0x5fa0 [ 1110.521795][T17084] alloc_pages_bulk_noprof+0x777/0x1500 [ 1110.521807][T17084] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1110.521822][T17084] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1110.521840][T17084] ? alloc_pages_noprof+0x233/0x390 [ 1110.521856][T17084] __kasan_populate_vmalloc+0xf0/0x210 [ 1110.521871][T17084] alloc_vmap_area+0x935/0x2a00 [ 1110.521891][T17084] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1110.521936][T17084] __get_vm_area_node+0x1ca/0x330 [ 1110.521957][T17084] __vmalloc_node_range_noprof+0x213/0x1530 [ 1110.521975][T17084] ? bpf_prog_alloc_no_stats+0x58/0x5f0 [ 1110.521993][T17084] ? __pfx___schedule+0x10/0x10 [ 1110.522006][T17084] ? bpf_prog_alloc_no_stats+0x58/0x5f0 [ 1110.522022][T17084] ? rcu_is_watching+0x12/0xc0 [ 1110.522031][T17084] ? irqentry_exit+0x180/0x670 [ 1110.522046][T17084] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1110.522064][T17084] ? bpf_prog_alloc_no_stats+0x58/0x5f0 [ 1110.522081][T17084] ? bpf_prog_alloc_no_stats+0x58/0x5f0 [ 1110.522097][T17084] ? bpf_prog_alloc_no_stats+0x58/0x5f0 [ 1110.522111][T17084] __vmalloc_node_noprof+0xad/0xf0 [ 1110.522127][T17084] ? bpf_prog_alloc_no_stats+0x58/0x5f0 [ 1110.522144][T17084] __vmalloc_noprof+0xa3/0x120 [ 1110.522160][T17084] ? __pfx___vmalloc_noprof+0x10/0x10 [ 1110.522178][T17084] ? apparmor_capable+0x1d7/0x4e0 [ 1110.522190][T17084] bpf_prog_alloc_no_stats+0x58/0x5f0 [ 1110.522204][T17084] ? security_capable+0x80/0x260 [ 1110.522227][T17084] bpf_prog_alloc+0x3b/0x200 [ 1110.522240][T17084] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1110.522252][T17084] bpf_prog_load+0x494/0x2bd0 [ 1110.522266][T17084] ? __pfx_bpf_prog_load+0x10/0x10 [ 1110.522276][T17084] ? __lock_acquire+0x4a5/0x2630 [ 1110.522305][T17084] __sys_bpf+0x118f/0x5050 [ 1110.522316][T17084] ? find_held_lock+0x2b/0x80 [ 1110.522326][T17084] ? __schedule+0x2f0b/0x5fa0 [ 1110.522339][T17084] ? __pfx___sys_bpf+0x10/0x10 [ 1110.522350][T17084] ? rcu_is_watching+0x12/0xc0 [ 1110.522359][T17084] ? trace_sched_exit_tp+0xcd/0x100 [ 1110.522373][T17084] ? __schedule+0xff8/0x5fa0 [ 1110.522400][T17084] ? irqentry_exit+0x180/0x670 [ 1110.522419][T17084] __ia32_sys_bpf+0x79/0xf0 [ 1110.522430][T17084] ? lockdep_hardirqs_on+0x78/0x100 [ 1110.522444][T17084] __do_fast_syscall_32+0xde/0x660 [ 1110.522460][T17084] do_fast_syscall_32+0x32/0x70 [ 1110.522476][T17084] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1110.522488][T17084] RIP: 0023:0xf73dd579 [ 1110.522497][T17084] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 1110.522507][T17084] RSP: 002b:00000000f53e550c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 1110.522518][T17084] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000840 [ 1110.522525][T17084] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 1110.522531][T17084] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1110.522536][T17084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1110.522542][T17084] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1110.522556][T17084] [ 1110.672082][T17084] syz.1.2096: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1110.689101][T17084] CPU: 0 UID: 0 PID: 17084 Comm: syz.1.2096 Not tainted syzkaller #0 PREEMPT(full) [ 1110.689151][T17084] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1110.689162][T17084] Call Trace: [ 1110.689169][T17084] [ 1110.689174][T17084] dump_stack_lvl+0x100/0x190 [ 1110.689209][T17084] warn_alloc.cold+0x95/0x1c1 [ 1110.689238][T17084] ? __pfx_warn_alloc+0x10/0x10 [ 1110.689256][T17084] ? kfree+0x1c7/0x690 [ 1110.689272][T17084] ? __get_vm_area_node+0x2c5/0x330 [ 1110.689301][T17084] ? __get_vm_area_node+0x2c5/0x330 [ 1110.689323][T17084] ? __get_vm_area_node+0x1dc/0x330 [ 1110.689346][T17084] ? __get_vm_area_node+0x208/0x330 [ 1110.689373][T17084] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 1110.689405][T17084] ? __pfx___schedule+0x10/0x10 [ 1110.689427][T17084] ? bpf_prog_alloc_no_stats+0x58/0x5f0 [ 1110.689454][T17084] ? rcu_is_watching+0x12/0xc0 [ 1110.689469][T17084] ? irqentry_exit+0x180/0x670 [ 1110.689494][T17084] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1110.689522][T17084] ? bpf_prog_alloc_no_stats+0x58/0x5f0 [ 1110.689550][T17084] ? bpf_prog_alloc_no_stats+0x58/0x5f0 [ 1110.689576][T17084] ? bpf_prog_alloc_no_stats+0x58/0x5f0 [ 1110.689600][T17084] __vmalloc_node_noprof+0xad/0xf0 [ 1110.689625][T17084] ? bpf_prog_alloc_no_stats+0x58/0x5f0 [ 1110.689651][T17084] __vmalloc_noprof+0xa3/0x120 [ 1110.689676][T17084] ? __pfx___vmalloc_noprof+0x10/0x10 [ 1110.689706][T17084] ? apparmor_capable+0x1d7/0x4e0 [ 1110.689726][T17084] bpf_prog_alloc_no_stats+0x58/0x5f0 [ 1110.689749][T17084] ? security_capable+0x80/0x260 [ 1110.689776][T17084] bpf_prog_alloc+0x3b/0x200 [ 1110.689798][T17084] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1110.689817][T17084] bpf_prog_load+0x494/0x2bd0 [ 1110.689841][T17084] ? __pfx_bpf_prog_load+0x10/0x10 [ 1110.689858][T17084] ? __lock_acquire+0x4a5/0x2630 [ 1110.689933][T17084] __sys_bpf+0x118f/0x5050 [ 1110.689952][T17084] ? find_held_lock+0x2b/0x80 [ 1110.689968][T17084] ? __schedule+0x2f0b/0x5fa0 [ 1110.689989][T17084] ? __pfx___sys_bpf+0x10/0x10 [ 1110.690007][T17084] ? rcu_is_watching+0x12/0xc0 [ 1110.690022][T17084] ? trace_sched_exit_tp+0xcd/0x100 [ 1110.690044][T17084] ? __schedule+0xff8/0x5fa0 [ 1110.690087][T17084] ? irqentry_exit+0x180/0x670 [ 1110.690118][T17084] __ia32_sys_bpf+0x79/0xf0 [ 1110.690137][T17084] ? lockdep_hardirqs_on+0x78/0x100 [ 1110.690159][T17084] __do_fast_syscall_32+0xde/0x660 [ 1110.690191][T17084] do_fast_syscall_32+0x32/0x70 [ 1110.690214][T17084] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1110.690235][T17084] RIP: 0023:0xf73dd579 [ 1110.690249][T17084] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 1110.690265][T17084] RSP: 002b:00000000f53e550c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 1110.690281][T17084] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000840 [ 1110.690292][T17084] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 1110.690302][T17084] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1110.690311][T17084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1110.690321][T17084] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1110.690342][T17084] [ 1110.690433][T17084] Mem-Info: [ 1110.816308][T17084] active_anon:10184 inactive_anon:19 isolated_anon:0 [ 1110.816308][T17084] active_file:7057 inactive_file:36019 isolated_file:0 [ 1110.816308][T17084] unevictable:1768 dirty:314 writeback:0 [ 1110.816308][T17084] slab_reclaimable:7367 slab_unreclaimable:58143 [ 1110.816308][T17084] mapped:30238 shmem:7841 pagetables:1151 [ 1110.816308][T17084] sec_pagetables:319 bounce:0 [ 1110.816308][T17084] kernel_misc_reclaimable:0 [ 1110.816308][T17084] free:38005 free_pcp:18296 free_cma:0 [ 1110.835234][T17084] Node 0 active_anon:0kB inactive_anon:56kB active_file:0kB inactive_file:216kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:16kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8768kB pagetables:2104kB sec_pagetables:1136kB all_unreclaimable? yes Balloon:0kB [ 1110.845253][T17084] Node 1 active_anon:40736kB inactive_anon:20kB active_file:28228kB inactive_file:143860kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:120936kB dirty:1256kB writeback:0kB shmem:27828kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3856kB pagetables:2500kB sec_pagetables:140kB all_unreclaimable? no Balloon:0kB [ 1110.856072][T17084] Node 0 DMA free:1892kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:636kB local_pcp:48kB free_cma:0kB [ 1110.865571][T17084] lowmem_reserve[]: 0 285 285 285 285 [ 1110.870620][T17084] Node 0 DMA32 free:16476kB boost:2048kB min:15152kB low:18428kB high:21704kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:56kB active_file:0kB inactive_file:216kB unevictable:3536kB writepending:0kB zspages:0kB present:1032196kB managed:292584kB mlocked:0kB bounce:0kB free_pcp:15256kB local_pcp:4016kB free_cma:0kB [ 1110.881579][T17084] lowmem_reserve[]: 0 0 0 0 0 [ 1110.883523][T17084] Node 1 DMA32 free:133524kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40756kB inactive_anon:20kB active_file:28228kB inactive_file:143860kB unevictable:3536kB writepending:1256kB zspages:2900kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:57632kB local_pcp:11568kB free_cma:0kB [ 1110.894830][T17084] lowmem_reserve[]: 0 0 0 0 0 [ 1110.896494][T17084] Node 0 DMA: 15*4kB (UE) 13*8kB (E) 4*16kB (E) 2*32kB (E) 5*64kB (U) 0*128kB 1*256kB (E) 0*512kB 1*1024kB (E) 0*2048kB 0*4096kB = 1892kB [ 1110.901153][T17084] Node 0 DMA32: 455*4kB (UME) 134*8kB (UME) 109*16kB (UME) 84*32kB (UME) 45*64kB (UME) 19*128kB (UME) 7*256kB (M) 2*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 16476kB [ 1110.907135][T17084] Node 1 DMA32: 624*4kB (U) 698*8kB (UME) 1889*16kB (UM) 263*32kB (UME) 144*64kB (ME) 15*128kB (UME) 30*256kB (ME) 44*512kB (UM) 26*1024kB (M) 9*2048kB (M) 0*4096kB = 133120kB [ 1110.913286][T17084] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1110.916349][T17084] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1110.926637][T17084] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1110.926649][T17084] Node 1 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 1110.926722][T17084] 52079 total pagecache pages [ 1110.926728][T17084] 1165 pages in swap cache [ 1110.926732][T17084] Free swap = 112524kB [ 1110.926736][T17084] Total swap = 124996kB [ 1110.926741][T17084] 524155 pages RAM [ 1110.926804][T17084] 0 pages HighMem/MovableOnly [ 1110.926810][T17084] 210116 pages reserved [ 1110.926875][T17084] 0 pages cma reserved [ 1111.071548][T17093] ceph: No mds server is up or the cluster is laggy [ 1111.076213][ T830] libceph: connect (1)[c::]:6789 error -101 [ 1111.079688][ T830] libceph: mon0 (1)[c::]:6789 connect error [ 1111.915949][T17103] cgroup: fork rejected by pids controller in /syz1 [ 1111.999139][T17106] hpfs: Bad magic ... probably not HPFS [ 1114.310806][ T5946] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1117.078533][T18059] ceph: No mds server is up or the cluster is laggy [ 1117.364896][ T29] libceph: connect (1)[c::]:6789 error -101 [ 1118.274708][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 1120.448824][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 1120.451591][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 1120.463067][ T39] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1120.465324][ T5946] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1120.742967][ T39] usb 7-1: Using ep0 maxpacket: 8 [ 1120.749734][ T39] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1120.754172][ T39] usb 7-1: config 0 has no interfaces? [ 1120.756075][ T39] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1120.758996][ T39] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.775178][ T39] usb 7-1: config 0 descriptor?? [ 1122.707034][T18124] fuse: Invalid rootmode [ 1122.709339][T18124] netlink: 'syz.0.2126': attribute type 1 has an invalid length. [ 1122.739307][T18124] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 1123.218436][ T39] usb 7-1: USB disconnect, device number 72 [ 1123.248272][T18138] FAULT_INJECTION: forcing a failure. [ 1123.248272][T18138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1123.255867][T14324] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1123.262949][T14324] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1123.271079][T18138] CPU: 1 UID: 0 PID: 18138 Comm: syz.2.2131 Not tainted syzkaller #0 PREEMPT(full) [ 1123.271104][T18138] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1123.271114][T18138] Call Trace: [ 1123.271120][T18138] [ 1123.271135][T18138] dump_stack_lvl+0x100/0x190 [ 1123.271164][T18138] should_fail_ex.cold+0x5/0xa [ 1123.271194][T18138] _copy_to_user+0x32/0xd0 [ 1123.271214][T18138] simple_read_from_buffer+0xcb/0x170 [ 1123.271235][T18138] proc_fail_nth_read+0x1af/0x230 [ 1123.271256][T18138] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1123.271279][T18138] ? rw_verify_area+0xce/0x6d0 [ 1123.271296][T18138] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1123.271315][T18138] vfs_read+0x1e4/0xb30 [ 1123.271338][T18138] ? __pfx_vfs_read+0x10/0x10 [ 1123.271354][T18138] ? find_held_lock+0x2b/0x80 [ 1123.271375][T18138] ? __fget_files+0x215/0x3d0 [ 1123.271436][T18138] ? __fget_files+0x21f/0x3d0 [ 1123.271464][T18138] ksys_read+0x12a/0x250 [ 1123.271483][T18138] ? __pfx_ksys_read+0x10/0x10 [ 1123.271509][T18138] do_int80_emulation+0x101/0x470 [ 1123.271538][T18138] asm_int80_emulation+0x1a/0x20 [ 1123.271555][T18138] RIP: 0023:0xf711572b [ 1123.271569][T18138] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1123.271585][T18138] RSP: 002b:00000000f53d64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1123.271604][T18138] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53d65d0 [ 1123.271615][T18138] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1123.271624][T18138] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1123.271635][T18138] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1123.271644][T18138] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1123.271668][T18138] [ 1123.390431][T18139] fido_id[18139]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1124.041861][T18157] fuse: Invalid rootmode [ 1124.045228][T18157] netlink: 'syz.1.2137': attribute type 1 has an invalid length. [ 1124.067323][T18157] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 1124.513299][ T39] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1124.542976][T16757] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 1124.662966][ T39] usb 5-1: Using ep0 maxpacket: 8 [ 1124.665937][ T39] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1124.668902][ T39] usb 5-1: config 0 has no interfaces? [ 1124.670504][ T39] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1124.673254][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.676638][ T39] usb 5-1: config 0 descriptor?? [ 1124.704467][T16757] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1124.707386][T16757] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1124.710729][T16757] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1124.714039][T16757] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1124.717839][T16757] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1124.722235][T16757] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1124.725560][T16757] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1124.728383][T16757] usb 8-1: Product: syz [ 1124.729805][T16757] usb 8-1: Manufacturer: syz [ 1124.735956][T16757] cdc_wdm 8-1:1.0: skipping garbage [ 1124.738148][T16757] cdc_wdm 8-1:1.0: skipping garbage [ 1124.741198][T16757] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 1124.743440][T16757] cdc_wdm 8-1:1.0: Unknown control protocol [ 1124.998290][T18161] cdc_wdm 8-1:1.0: Error submitting int urb - -90 [ 1125.006494][T16757] usb 8-1: USB disconnect, device number 52 [ 1126.066107][ T29] libceph: connect (1)[c::]:6789 error -22 [ 1126.068096][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 1126.076460][T18194] fuse: Invalid rootmode [ 1126.079064][T18194] netlink: 'syz.1.2146': attribute type 1 has an invalid length. [ 1126.101035][T18194] macvlan2: entered promiscuous mode [ 1126.102876][T18194] macvlan2: entered allmulticast mode [ 1126.105072][T18194] bond2: entered promiscuous mode [ 1126.106959][T18194] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1126.118001][T18189] ceph: No mds server is up or the cluster is laggy [ 1126.208180][T18194] bond2: left promiscuous mode [ 1127.085272][T18208] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2149'. [ 1127.088396][T18208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2149'. [ 1127.163017][T11004] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1127.301475][ T39] usb 5-1: USB disconnect, device number 51 [ 1127.314826][T11004] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1127.319462][T11004] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1127.323084][T11004] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1127.325939][T11004] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1127.329369][T11004] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1127.333681][T11004] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1127.336733][T11004] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1127.339436][T11004] usb 6-1: Product: syz [ 1127.341087][T11004] usb 6-1: Manufacturer: syz [ 1127.349507][T11004] cdc_wdm 6-1:1.0: skipping garbage [ 1127.351213][T11004] cdc_wdm 6-1:1.0: skipping garbage [ 1127.359365][T11004] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1127.361267][T11004] cdc_wdm 6-1:1.0: Unknown control protocol [ 1127.554308][T18201] cdc_wdm 6-1:1.0: Error submitting int urb - -90 [ 1127.557660][T11004] usb 6-1: USB disconnect, device number 39 [ 1127.865989][T18216] netlink: 'syz.0.2152': attribute type 1 has an invalid length. [ 1128.083176][ T29] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 1128.294274][ T29] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1128.297242][ T29] usb 8-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1128.301635][ T29] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1128.304526][ T29] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 1128.308025][ T29] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 1128.312786][ T29] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1128.315741][ T29] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1128.318569][ T29] usb 8-1: Product: syz [ 1128.320141][ T29] usb 8-1: Manufacturer: syz [ 1128.325120][ T29] cdc_wdm 8-1:1.0: skipping garbage [ 1128.326991][ T29] cdc_wdm 8-1:1.0: skipping garbage [ 1128.328761][ T29] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1128.534695][ T39] usb 8-1: USB disconnect, device number 53 [ 1129.338687][ T29] libceph: connect (1)[c::]:6789 error -101 [ 1129.341154][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 1129.360741][T18243] ceph: No mds server is up or the cluster is laggy [ 1129.823305][ T39] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1129.976416][ T39] usb 5-1: Using ep0 maxpacket: 8 [ 1129.994726][ T39] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1130.021708][ T39] usb 5-1: config 0 has no interfaces? [ 1130.024380][ T39] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1130.028213][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.034905][ T39] usb 5-1: config 0 descriptor?? [ 1130.248199][ T40] kauditd_printk_skb: 1614 callbacks suppressed [ 1130.248212][ T40] audit: type=1326 audit(1770715997.982:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18250 comm="syz.2.2159" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 1130.260976][ T40] audit: type=1326 audit(1770715997.982:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18250 comm="syz.2.2159" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 1130.269702][ T40] audit: type=1326 audit(1770715997.982:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18250 comm="syz.2.2159" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 1130.278627][ T40] audit: type=1326 audit(1770715997.982:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18250 comm="syz.2.2159" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 1130.288284][ T40] audit: type=1326 audit(1770715997.982:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18250 comm="syz.2.2159" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 1130.297147][ T40] audit: type=1326 audit(1770715997.992:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18250 comm="syz.2.2159" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 1130.310767][ T40] audit: type=1326 audit(1770715998.212:2499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18250 comm="syz.2.2159" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 1130.320176][ T40] audit: type=1326 audit(1770715998.212:2500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18250 comm="syz.2.2159" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 1131.434595][T18276] ceph: No mds server is up or the cluster is laggy [ 1131.437139][ T29] libceph: connect (1)[c::]:6789 error -101 [ 1131.439314][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 1132.500771][ T6267] usb 5-1: USB disconnect, device number 52 [ 1132.545682][T18297] ceph: No mds server is up or the cluster is laggy [ 1132.563178][ T29] libceph: connect (1)[c::]:6789 error -101 [ 1132.563266][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 1132.660369][ T6000] e1000 0000:00:06.0 eth0: Reset adapter [ 1133.854723][T18345] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2174'. [ 1133.858705][T18345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2174'. [ 1133.930160][T18350] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1133.975134][ T6304] libceph: connect (1)[c::]:6789 error -101 [ 1133.977937][ T6304] libceph: mon0 (1)[c::]:6789 connect error [ 1134.233397][ T6304] libceph: connect (1)[c::]:6789 error -101 [ 1134.236256][ T6304] libceph: mon0 (1)[c::]:6789 connect error [ 1134.544824][T18344] ceph: No mds server is up or the cluster is laggy [ 1134.994377][ T6000] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 1141.267370][T18367] fuse: Invalid rootmode [ 1141.269727][T18367] netlink: 'syz.1.2179': attribute type 1 has an invalid length. [ 1141.764293][ T29] libceph: connect (1)[c::]:6789 error -22 [ 1141.766592][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 1141.786770][T18384] ceph: No mds server is up or the cluster is laggy [ 1143.544001][T18408] FAULT_INJECTION: forcing a failure. [ 1143.544001][T18408] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1143.548250][T18408] CPU: 2 UID: 0 PID: 18408 Comm: syz.0.2188 Not tainted syzkaller #0 PREEMPT(full) [ 1143.548266][T18408] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1143.548273][T18408] Call Trace: [ 1143.548277][T18408] [ 1143.548282][T18408] dump_stack_lvl+0x100/0x190 [ 1143.548300][T18408] should_fail_ex.cold+0x5/0xa [ 1143.548319][T18408] _copy_from_user+0x2e/0xd0 [ 1143.548331][T18408] binder_thread_write+0xeeb/0x4d70 [ 1143.548347][T18408] ? security_file_ioctl_compat+0xd3/0x230 [ 1143.548362][T18408] ? __lock_acquire+0x4a5/0x2630 [ 1143.548377][T18408] ? __pfx_binder_thread_write+0x10/0x10 [ 1143.548391][T18408] ? binder_debug+0xe0/0x190 [ 1143.548403][T18408] ? __pfx_binder_debug+0x10/0x10 [ 1143.548418][T18408] ? __might_fault+0xc5/0x140 [ 1143.548435][T18408] ? __pfx_binder_ioctl+0x10/0x10 [ 1143.548448][T18408] binder_ioctl+0x28b8/0x7450 [ 1143.548463][T18408] ? tomoyo_path_number_perm+0x28f/0x580 [ 1143.548475][T18408] ? tomoyo_path_number_perm+0x28f/0x580 [ 1143.548489][T18408] ? tomoyo_path_number_perm+0x188/0x580 [ 1143.548501][T18408] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1143.548512][T18408] ? __pfx_binder_ioctl+0x10/0x10 [ 1143.548529][T18408] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1143.548541][T18408] ? do_vfs_ioctl+0x226/0x13e0 [ 1143.548558][T18408] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1143.548578][T18408] ? find_held_lock+0x2b/0x80 [ 1143.548588][T18408] ? hook_file_ioctl_common+0x146/0x410 [ 1143.548607][T18408] ? __fget_files+0x21f/0x3d0 [ 1143.548621][T18408] ? __pfx_binder_ioctl+0x10/0x10 [ 1143.548634][T18408] compat_ptr_ioctl+0x6e/0xa0 [ 1143.548649][T18408] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 1143.548665][T18408] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1143.548683][T18408] __do_fast_syscall_32+0xde/0x660 [ 1143.548700][T18408] do_fast_syscall_32+0x32/0x70 [ 1143.548716][T18408] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1143.548730][T18408] RIP: 0023:0xf7f36579 [ 1143.548738][T18408] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 1143.548749][T18408] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1143.548760][T18408] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c0306201 [ 1143.548766][T18408] RDX: 0000000080004a40 RSI: 0000000000000000 RDI: 0000000000000000 [ 1143.548773][T18408] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1143.548779][T18408] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1143.548785][T18408] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1143.548799][T18408] [ 1143.548804][T18408] binder: 18407:18408 ioctl c0306201 80004a40 returned -14 [ 1144.212230][T18412] fuse: Invalid rootmode [ 1144.214180][T18412] netlink: 'syz.3.2190': attribute type 1 has an invalid length. [ 1144.506059][T18424] fuse: Invalid rootmode [ 1144.512252][T18424] netlink: 'syz.2.2192': attribute type 1 has an invalid length. [ 1144.608934][T18424] macvlan2: entered promiscuous mode [ 1144.611763][T18424] macvlan2: entered allmulticast mode [ 1144.616322][T18424] bond3: entered promiscuous mode [ 1144.621431][T18424] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1144.733234][T18424] bond3: left promiscuous mode [ 1144.912189][ T830] libceph: connect (1)[c::]:6789 error -101 [ 1144.914394][ T830] libceph: mon0 (1)[c::]:6789 connect error [ 1144.960818][T18431] ceph: No mds server is up or the cluster is laggy [ 1145.072759][ T5946] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 1145.899543][T18450] fuse: Invalid rootmode [ 1145.902294][T18450] netlink: 'syz.0.2198': attribute type 1 has an invalid length. [ 1145.944621][T18450] macvlan2: entered promiscuous mode [ 1145.946520][T18450] macvlan2: entered allmulticast mode [ 1145.948853][T18450] bond2: entered promiscuous mode [ 1145.951481][T18450] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1146.073346][T18450] bond2: left promiscuous mode [ 1146.124506][T18453] fuse: Invalid rootmode [ 1146.126324][T18453] netlink: 'syz.3.2200': attribute type 1 has an invalid length. [ 1147.786478][ T830] libceph: connect (1)[c::]:6789 error -101 [ 1147.788527][ T830] libceph: mon0 (1)[c::]:6789 connect error [ 1147.854337][T18746] ceph: No mds server is up or the cluster is laggy [ 1148.156887][ T29] libceph: connect (1)[c::]:6789 error -101 [ 1148.158942][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 1148.208602][T18762] ceph: No mds server is up or the cluster is laggy [ 1148.483073][T18768] fuse: Invalid rootmode [ 1148.484939][T18768] netlink: 'syz.2.2211': attribute type 1 has an invalid length. [ 1148.640888][T18775] FAULT_INJECTION: forcing a failure. [ 1148.640888][T18775] name failslab, interval 1, probability 0, space 0, times 0 [ 1148.645412][T18775] CPU: 2 UID: 0 PID: 18775 Comm: syz.0.2213 Not tainted syzkaller #0 PREEMPT(full) [ 1148.645427][T18775] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1148.645434][T18775] Call Trace: [ 1148.645439][T18775] [ 1148.645444][T18775] dump_stack_lvl+0x100/0x190 [ 1148.645473][T18775] should_fail_ex.cold+0x5/0xa [ 1148.645494][T18775] should_failslab+0xc2/0x120 [ 1148.645509][T18775] kmem_cache_alloc_noprof+0x83/0x780 [ 1148.645523][T18775] ? ptlock_alloc+0x1f/0x70 [ 1148.645536][T18775] ? ptlock_alloc+0x1f/0x70 [ 1148.645546][T18775] ptlock_alloc+0x1f/0x70 [ 1148.645575][T18775] pte_alloc_one+0x84/0x3e0 [ 1148.645596][T18775] __pte_alloc+0x6d/0x3f0 [ 1148.645611][T18775] ? __pfx___pte_alloc+0x10/0x10 [ 1148.645624][T18775] ? __lock_acquire+0x4a5/0x2630 [ 1148.645644][T18775] do_anonymous_page+0x13a2/0x1f40 [ 1148.645655][T18775] ? pgd_none+0x9f/0xe0 [ 1148.645670][T18775] __handle_mm_fault+0x1d3a/0x2b50 [ 1148.645683][T18775] ? mt_find+0x45e/0x8e0 [ 1148.645700][T18775] ? __pfx___handle_mm_fault+0x10/0x10 [ 1148.645711][T18775] ? __pfx_mt_find+0x10/0x10 [ 1148.645734][T18775] ? find_vma+0xbf/0x140 [ 1148.645747][T18775] ? __pfx_find_vma+0x10/0x10 [ 1148.645762][T18775] handle_mm_fault+0x36d/0xa20 [ 1148.645776][T18775] do_user_addr_fault+0x74c/0x12f0 [ 1148.645793][T18775] exc_page_fault+0x6f/0xd0 [ 1148.645808][T18775] asm_exc_page_fault+0x26/0x30 [ 1148.645818][T18775] RIP: 0010:_copy_to_user+0x9f/0xd0 [ 1148.645829][T18775] Code: 89 ee 48 89 ef e8 01 e4 1d fd 4d 85 ff 75 26 e8 d7 e9 1d fd 89 de 4c 89 e7 e8 7d 4d 87 fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 a4 0f 1f 00 0f 01 ca 48 89 cb e8 b1 e9 1d fd 48 89 d8 5b 5d 41 [ 1148.645840][T18775] RSP: 0018:ffffc90002e0fcf0 EFLAGS: 00050297 [ 1148.645849][T18775] RAX: 0000000000000001 RBX: 0000000000000004 RCX: 0000000000000004 [ 1148.645856][T18775] RDX: 0000000000000001 RSI: ffffc90002e0fda8 RDI: 0000000080bbdffc [ 1148.645862][T18775] RBP: 0000000080bbdffc R08: 0000000000000000 R09: fffff520005c1fb5 [ 1148.645869][T18775] R10: 0000000000000003 R11: 0000000000000000 R12: ffffc90002e0fda8 [ 1148.645875][T18775] R13: 0000000080bbe000 R14: 00007ffffffff000 R15: 0000000000000000 [ 1148.645896][T18775] do_timer_create+0x6d9/0x14b0 [ 1148.645915][T18775] ? __pfx_do_timer_create+0x10/0x10 [ 1148.645931][T18775] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1148.645947][T18775] ? __asan_memset+0x23/0x50 [ 1148.645959][T18775] __ia32_compat_sys_timer_create+0x17c/0x1c0 [ 1148.645976][T18775] ? __pfx___ia32_compat_sys_timer_create+0x10/0x10 [ 1148.645995][T18775] ? __pfx_ksys_write+0x10/0x10 [ 1148.646010][T18775] __do_fast_syscall_32+0xde/0x660 [ 1148.646027][T18775] do_fast_syscall_32+0x32/0x70 [ 1148.646043][T18775] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1148.646055][T18775] RIP: 0023:0xf7f36579 [ 1148.646064][T18775] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 1148.646073][T18775] RSP: 002b:00000000f53d550c EFLAGS: 00000292 ORIG_RAX: 0000000000000103 [ 1148.646082][T18775] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000080533fa0 [ 1148.646089][T18775] RDX: 0000000080bbdffc RSI: 0000000000000000 RDI: 0000000000000000 [ 1148.646095][T18775] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1148.646101][T18775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1148.646107][T18775] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1148.646121][T18775] [ 1149.393029][ T39] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 1149.581948][ T5946] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1150.743938][ T29] libceph: connect (1)[c::]:6789 error -101 [ 1150.746321][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 1150.784790][T18808] ceph: No mds server is up or the cluster is laggy [ 1152.688464][T18823] blktrace: Concurrent blktraces are not allowed on sg0 [ 1153.287787][ T5946] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 1153.675985][T18839] cgroup: fork rejected by pids controller in /syz3 [ 1154.810821][T19009] ceph: No mds server is up or the cluster is laggy [ 1154.814113][ T830] libceph: connect (1)[c::]:6789 error -101 [ 1154.816565][ T830] libceph: mon0 (1)[c::]:6789 connect error [ 1155.420708][T19181] hpfs: Bad magic ... probably not HPFS [ 1156.880087][ T5946] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 1158.506554][T19225] ceph: No mds server is up or the cluster is laggy [ 1158.509597][ T29] libceph: connect (1)[c::]:6789 error -22 [ 1158.511732][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 1158.622154][T19234] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1158.624294][T19234] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1158.627156][T19234] vhci_hcd vhci_hcd.0: Device attached [ 1158.631843][T19235] vhci_hcd: unknown pdu 2 [ 1158.633526][T16303] vhci_hcd vhci_hcd.2: stop threads [ 1158.635242][T16303] vhci_hcd vhci_hcd.2: release socket [ 1158.636958][T16303] vhci_hcd vhci_hcd.2: disconnect device [ 1159.979479][T19245] hpfs: Bad magic ... probably not HPFS [ 1160.004629][ T5946] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1160.528297][T19273] FAULT_INJECTION: forcing a failure. [ 1160.528297][T19273] name failslab, interval 1, probability 0, space 0, times 0 [ 1160.537686][T19273] CPU: 2 UID: 0 PID: 19273 Comm: syz.3.2255 Not tainted syzkaller #0 PREEMPT(full) [ 1160.537721][T19273] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1160.537733][T19273] Call Trace: [ 1160.537740][T19273] [ 1160.537747][T19273] dump_stack_lvl+0x100/0x190 [ 1160.537777][T19273] should_fail_ex.cold+0x5/0xa [ 1160.537811][T19273] should_failslab+0xc2/0x120 [ 1160.537837][T19273] ? input_ff_create+0x84/0x310 [ 1160.537854][T19273] __kmalloc_noprof+0xf6/0x9c0 [ 1160.537881][T19273] ? input_ff_create+0x84/0x310 [ 1160.537901][T19273] input_ff_create+0x84/0x310 [ 1160.537925][T19273] uinput_ioctl_handler.isra.0+0x70c/0x1d10 [ 1160.537948][T19273] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1160.537978][T19273] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 1160.538007][T19273] ? find_held_lock+0x2b/0x80 [ 1160.538027][T19273] ? hook_file_ioctl_common+0x146/0x410 [ 1160.538058][T19273] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1160.538083][T19273] ? __pfx_uinput_compat_ioctl+0x10/0x10 [ 1160.538103][T19273] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1160.538136][T19273] __do_fast_syscall_32+0xde/0x660 [ 1160.538166][T19273] do_fast_syscall_32+0x32/0x70 [ 1160.538194][T19273] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1160.538217][T19273] RIP: 0023:0xf73cd579 [ 1160.538234][T19273] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 1160.538250][T19273] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1160.538271][T19273] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005501 [ 1160.538282][T19273] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1160.538295][T19273] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1160.538305][T19273] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1160.538315][T19273] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1160.538338][T19273] [ 1161.753143][ T29] libceph: connect (1)[c::]:6789 error -101 [ 1161.755460][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 1161.804405][T19295] ceph: No mds server is up or the cluster is laggy [ 1162.653196][T19312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1162.712379][T19312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1162.716475][T19312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1162.986379][ T5946] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1163.301130][T19339] hpfs: Bad magic ... probably not HPFS [ 1164.828209][T19460] tipc: Enabled bearer , priority 0 [ 1164.832069][T19460] syzkaller0: entered promiscuous mode [ 1164.837879][T19460] syzkaller0: entered allmulticast mode [ 1164.953693][T19465] syzkaller0: mtu less than device minimum [ 1164.993178][T19459] tipc: Resetting bearer [ 1165.104055][T19459] tipc: Disabling bearer [ 1165.132945][ T6127] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 1165.139305][T19467] cgroup: fork rejected by pids controller in /syz0 [ 1165.303136][ T6127] usb 8-1: Using ep0 maxpacket: 8 [ 1165.309223][ T6127] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1165.312429][ T6127] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1165.320685][ T6127] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1165.330889][ T6127] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.335749][ T6127] usb 8-1: config 0 descriptor?? [ 1165.338713][ T6127] iowarrior 8-1:0.0: no interrupt-in endpoint found [ 1165.962146][T21257] hpfs: Bad magic ... probably not HPFS [ 1167.879227][ T24] usb 8-1: USB disconnect, device number 55 [ 1168.114879][T21319] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2293'. [ 1168.118996][T21319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2293'. [ 1169.515808][T21319] syz.3.2293 (21319): drop_caches: 1 [ 1170.673026][ T5946] Bluetooth: hci0: command 0x0c1a tx timeout [ 1170.675321][T21322] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1170.905197][T21322] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1170.986254][T21322] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1170.988353][T21322] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1171.054017][T21322] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1171.057936][T21322] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1171.124540][T21322] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1171.127779][T21322] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1171.281197][T21322] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1171.493007][ T6304] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 1171.662953][ T6304] usb 7-1: Using ep0 maxpacket: 8 [ 1171.669067][ T6304] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1171.673607][ T6304] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1171.677570][ T6304] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.683788][ T6304] usb 7-1: config 0 descriptor?? [ 1171.688535][ T6304] iowarrior 7-1:0.0: no interrupt-in endpoint found [ 1172.753102][ T5946] Bluetooth: hci0: command 0x0c1a tx timeout [ 1172.994020][ T5946] Bluetooth: hci1: command 0x0406 tx timeout [ 1173.073023][ T5946] Bluetooth: hci2: command 0x0406 tx timeout [ 1173.099448][ T5946] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1173.162954][ T5946] Bluetooth: hci3: command 0x0406 tx timeout [ 1174.219929][T21502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2308'. [ 1174.244391][ T6304] usb 7-1: USB disconnect, device number 73 [ 1174.807176][ T830] libceph: connect (1)[c::]:6789 error -101 [ 1174.809524][ T830] libceph: mon0 (1)[c::]:6789 connect error [ 1174.823115][T21710] ceph: No mds server is up or the cluster is laggy [ 1174.833104][ T5946] Bluetooth: hci0: command 0x0c1a tx timeout [ 1175.073011][ T5946] Bluetooth: hci1: command 0x0406 tx timeout [ 1175.152943][ T5946] Bluetooth: hci2: command 0x0406 tx timeout [ 1175.233130][ T5946] Bluetooth: hci3: command 0x0406 tx timeout [ 1175.494511][ T29] libceph: connect (1)[c::]:6789 error -22 [ 1175.496729][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 1175.543368][T21721] ceph: No mds server is up or the cluster is laggy [ 1175.635917][T21726] fuse: Invalid rootmode [ 1175.638283][T21726] netlink: 'syz.3.2315': attribute type 1 has an invalid length. [ 1175.975150][T21727] macvlan2: entered promiscuous mode [ 1175.977080][T21727] macvlan2: entered allmulticast mode [ 1175.979673][T21727] bond3: entered promiscuous mode [ 1175.981648][T21727] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1176.003768][ T5946] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1176.183740][T21727] bond3: left promiscuous mode [ 1176.682940][ T6304] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1176.842950][ T6304] usb 7-1: Using ep0 maxpacket: 8 [ 1176.855177][ T6304] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1176.859331][ T6304] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1176.863429][ T6304] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.873419][ T6304] usb 7-1: config 0 descriptor?? [ 1176.880531][ T6304] iowarrior 7-1:0.0: no interrupt-in endpoint found [ 1178.655840][T21762] hpfs: Bad magic ... probably not HPFS [ 1179.463883][ T29] usb 7-1: USB disconnect, device number 74 [ 1179.714270][ T29] libceph: connect (1)[c::]:6789 error -101 [ 1179.716663][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 1179.767444][T21772] ceph: No mds server is up or the cluster is laggy [ 1180.197393][ T5946] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1181.885101][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 1181.887858][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.668367][T16094] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1182.677141][T16094] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1182.681109][T16094] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1182.687971][T16094] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1182.697887][T16094] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1183.452949][ T24] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1183.622929][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 1183.634410][ T24] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1183.637115][ T24] usb 6-1: config 0 has no interface number 0 [ 1183.639192][ T24] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1183.642673][ T24] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1183.672912][ T24] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 102, changing to 10 [ 1183.676571][ T24] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 24624, setting to 1024 [ 1183.680165][ T24] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1183.684674][ T24] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1183.688475][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.697576][T11323] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.703553][ T24] usb 6-1: config 0 descriptor?? [ 1183.718006][ T24] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1183.874863][T11323] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.937512][T22309] chnl_net:caif_netlink_parms(): no params data found [ 1184.025063][T11323] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.113862][T11323] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.172050][T22309] bridge0: port 1(bridge_slave_0) entered blocking state [ 1184.175198][T22309] bridge0: port 1(bridge_slave_0) entered disabled state [ 1184.177942][T22309] bridge_slave_0: entered allmulticast mode [ 1184.181700][T22309] bridge_slave_0: entered promiscuous mode [ 1184.186727][T22309] bridge0: port 2(bridge_slave_1) entered blocking state [ 1184.189843][T22309] bridge0: port 2(bridge_slave_1) entered disabled state [ 1184.192627][T22309] bridge_slave_1: entered allmulticast mode [ 1184.196422][T22309] bridge_slave_1: entered promiscuous mode [ 1184.219952][T22309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1184.226605][T22309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1184.249916][T22309] team0: Port device team_slave_0 added [ 1184.255262][T22309] team0: Port device team_slave_1 added [ 1184.276316][T22309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1184.279362][T22309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1184.289458][T22309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1184.296608][T22309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1184.300280][T22309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1184.310972][T22309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1184.342329][T22309] hsr_slave_0: entered promiscuous mode [ 1184.345572][T22309] hsr_slave_1: entered promiscuous mode [ 1184.348483][T22309] debugfs: 'hsr0' already exists in 'hsr' [ 1184.350541][T22309] Cannot create hsr debugfs directory [ 1184.684658][T11323] bridge_slave_1: left allmulticast mode [ 1184.693159][T11323] bridge_slave_1: left promiscuous mode [ 1184.697312][T11323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1184.765567][T11323] bridge_slave_0: left allmulticast mode [ 1184.769845][T11323] bridge_slave_0: left promiscuous mode [ 1184.776570][T11323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1184.832976][T16094] Bluetooth: hci4: command tx timeout [ 1185.165107][T16094] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1186.912897][T16094] Bluetooth: hci4: command tx timeout [ 1187.594507][ T29] usb 6-1: USB disconnect, device number 40 [ 1187.600573][ T29] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1188.783347][T11323] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 1188.993190][T16094] Bluetooth: hci4: command tx timeout [ 1189.734129][T11323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1189.776927][T16094] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 1190.101219][ T29] libceph: connect (1)[c::]:6789 error -22 [ 1190.105666][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 1190.138763][T22375] ceph: No mds server is up or the cluster is laggy [ 1190.227048][T11323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1190.253839][T11323] bond0 (unregistering): Released all slaves [ 1190.259029][T11323] bond1 (unregistering): Released all slaves [ 1190.267691][T11323] bond2 (unregistering): Released all slaves [ 1190.438827][T11323] tipc: Left network mode [ 1190.813881][ T6127] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 1191.072921][T16094] Bluetooth: hci4: command tx timeout [ 1191.083093][ T6127] usb 7-1: device descriptor read/64, error -71 [ 1191.332921][ T6127] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 1191.463035][ T6127] usb 7-1: device descriptor read/64, error -71 [ 1191.583203][ T6127] usb usb7-port1: attempt power cycle [ 1191.942977][ T6127] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 1191.973563][ T6127] usb 7-1: device descriptor read/8, error -71 [ 1192.063212][T11323] hsr_slave_0: left promiscuous mode [ 1192.153001][T11323] hsr_slave_1: left promiscuous mode [ 1192.167251][T11323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1192.170406][T11323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1192.193952][T11323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1192.196472][T11323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1192.344249][T11323] veth1_macvtap: left promiscuous mode [ 1192.347779][T11323] veth0_macvtap: left promiscuous mode [ 1192.350475][T11323] veth1_vlan: left promiscuous mode [ 1192.352486][T11323] veth0_vlan: left promiscuous mode [ 1192.590904][ T6127] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 1192.613388][ T6127] usb 7-1: device descriptor read/8, error -71 [ 1192.723300][ T6127] usb usb7-port1: unable to enumerate USB device [ 1192.915010][T11323] team0 (unregistering): Port device batadv1 removed [ 1194.964371][T22677] ceph: No mds server is up or the cluster is laggy [ 1195.008064][ T830] libceph: connect (1)[c::]:6789 error -22 [ 1195.010855][ T830] libceph: mon0 (1)[c::]:6789 connect error [ 1195.531895][T11323] team0 (unregistering): Port device team_slave_1 removed [ 1195.625001][T22695] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2365'. [ 1195.628719][T22695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2365'. [ 1195.664907][T22687] cgroup: fork rejected by pids controller in /syz2 [ 1196.050248][T22695] syz.1.2365 (22695): drop_caches: 1 [ 1196.076063][T11323] team0 (unregistering): Port device team_slave_0 removed [ 1196.692991][ T830] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 1196.844316][ T830] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1196.848008][ T830] usb 8-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 1196.852117][ T830] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1196.855412][ T830] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1196.860738][ T830] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1196.864113][ T830] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1196.866995][ T830] usb 8-1: Product: syz [ 1196.868469][ T830] usb 8-1: Manufacturer: syz [ 1196.873815][ T830] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1197.084141][ T830] usb 8-1: USB disconnect, device number 56 [ 1197.806043][T16094] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 1198.680233][T22309] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1198.733890][T22309] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1198.778156][T22309] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1198.821841][T22309] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1198.942709][T22309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1198.955301][T22309] 8021q: adding VLAN 0 to HW filter on device team0 [ 1198.965036][T11336] bridge0: port 1(bridge_slave_0) entered blocking state [ 1198.967388][T11336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1198.973167][T11336] bridge0: port 2(bridge_slave_1) entered blocking state [ 1198.975406][T11336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1199.083936][T23312] ceph: No mds server is up or the cluster is laggy [ 1199.123805][ T830] libceph: connect (1)[c::]:6789 error -101 [ 1199.126420][ T830] libceph: mon0 (1)[c::]:6789 connect error [ 1199.200881][T22309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1199.292491][T22309] veth0_vlan: entered promiscuous mode [ 1199.314143][T22309] veth1_vlan: entered promiscuous mode [ 1199.338424][T22309] veth0_macvtap: entered promiscuous mode [ 1199.349020][T22309] veth1_macvtap: entered promiscuous mode [ 1199.370611][T22309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1199.382161][T22309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1199.393999][T11333] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.397808][T11333] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.446319][T11333] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.506105][T11333] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.581725][T16054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1199.585255][T16054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1199.603600][T16054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1199.606081][T16054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1199.697001][T11323] IPVS: stop unused estimator thread 0... [ 1200.847407][ T5946] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1200.863219][ T5946] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1200.874610][ T5946] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1200.885461][ T5946] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1200.899224][ T5946] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1201.706414][ T5946] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1202.547610][ T1142] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1202.708245][T23385] chnl_net:caif_netlink_parms(): no params data found [ 1202.852428][T23385] bridge0: port 1(bridge_slave_0) entered blocking state [ 1202.856028][T23385] bridge0: port 1(bridge_slave_0) entered disabled state [ 1202.859427][T23385] bridge_slave_0: entered allmulticast mode [ 1202.863626][T23385] bridge_slave_0: entered promiscuous mode [ 1202.914448][ T1142] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1202.963536][T23385] bridge0: port 2(bridge_slave_1) entered blocking state [ 1202.966899][T23385] bridge0: port 2(bridge_slave_1) entered disabled state [ 1202.970376][T23385] bridge_slave_1: entered allmulticast mode [ 1202.974942][T23385] bridge_slave_1: entered promiscuous mode [ 1203.011615][T23385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1203.019304][T23385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1203.050420][T23385] team0: Port device team_slave_0 added [ 1203.055655][T23385] team0: Port device team_slave_1 added [ 1203.080668][T23385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1203.084521][ T5946] Bluetooth: hci1: command tx timeout [ 1203.088899][T23385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1203.109303][T23385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1203.116168][T23385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1203.119267][T23385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1203.130749][T23385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1203.362411][ T1142] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.446687][T23385] hsr_slave_0: entered promiscuous mode [ 1203.453703][T23385] hsr_slave_1: entered promiscuous mode [ 1203.459249][T23385] debugfs: 'hsr0' already exists in 'hsr' [ 1203.461914][T23385] Cannot create hsr debugfs directory [ 1203.587414][ T1142] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.894452][ T1142] bridge_slave_1: left allmulticast mode [ 1203.896945][ T1142] bridge_slave_1: left promiscuous mode [ 1203.899577][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 1204.044766][ T1142] bridge_slave_0: left allmulticast mode [ 1204.046697][ T1142] bridge_slave_0: left promiscuous mode [ 1204.048694][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 1204.369370][T24186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2384'. [ 1204.541813][T24188] could not allocate digest TFM handle sha256-neon [ 1205.153355][ T5946] Bluetooth: hci1: command tx timeout [ 1205.613279][ T1142] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 1206.591112][ T5946] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1206.693555][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1206.783423][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1206.823874][ T1142] bond0 (unregistering): Released all slaves [ 1206.829509][ T1142] bond1 (unregistering): Released all slaves [ 1206.836796][ T1142] bond2 (unregistering): Released all slaves [ 1206.843530][ T1142] bond3 (unregistering): Released all slaves [ 1206.854547][ T1142] bond4 (unregistering): Released all slaves [ 1207.098820][ T1142] tipc: Left network mode [ 1207.159349][T24528] netlink: 'syz.1.2390': attribute type 1 has an invalid length. [ 1207.270686][T24609] macvlan2: entered promiscuous mode [ 1207.279393][T24609] macvlan2: entered allmulticast mode [ 1207.289253][T24609] bond4: entered promiscuous mode [ 1207.291748][T24609] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1207.304035][ T5946] Bluetooth: hci1: command tx timeout [ 1207.393348][T24609] bond4: left promiscuous mode [ 1208.008207][T25222] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2394'. [ 1208.012155][T25222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2394'. [ 1208.153514][T25222] syz.3.2394 (25222): drop_caches: 1 [ 1208.192075][T25222] syz.3.2394 (25222): drop_caches: 1 [ 1209.322990][ T5946] Bluetooth: hci1: command tx timeout [ 1209.653036][ T1142] hsr_slave_0: left promiscuous mode [ 1209.723061][ T1142] hsr_slave_1: left promiscuous mode [ 1209.727634][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1209.733070][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1209.773800][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1209.776288][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1209.894188][ T1142] veth1_macvtap: left promiscuous mode [ 1209.896776][ T1142] veth0_macvtap: left promiscuous mode [ 1209.899276][ T1142] veth1_vlan: left promiscuous mode [ 1209.902376][ T1142] veth0_vlan: left promiscuous mode [ 1210.293266][ T1142] team0 (unregistering): Port device batadv1 removed [ 1211.014981][T25248] could not allocate digest TFM handle sha256-neon [ 1211.052965][ T5946] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1212.135793][T25263] netlink: 'syz.3.2400': attribute type 1 has an invalid length. [ 1213.283245][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 1213.463411][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 1215.584254][T25263] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1215.723325][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1215.740795][T23385] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1215.784975][T23385] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1215.814310][T25277] syz.3.2405 (25277): drop_caches: 1 [ 1215.819146][T23385] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1215.855778][T23385] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1215.863781][T25277] syz.3.2405 (25277): drop_caches: 1 [ 1216.291396][T23385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1216.316734][T23385] 8021q: adding VLAN 0 to HW filter on device team0 [ 1216.326603][T11333] bridge0: port 1(bridge_slave_0) entered blocking state [ 1216.329820][T11333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1216.347972][T11333] bridge0: port 2(bridge_slave_1) entered blocking state [ 1216.350311][T11333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1216.625266][T23385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1216.665017][T23385] veth0_vlan: entered promiscuous mode [ 1216.673291][T23385] veth1_vlan: entered promiscuous mode [ 1216.699897][T23385] veth0_macvtap: entered promiscuous mode [ 1216.785320][T23385] veth1_macvtap: entered promiscuous mode [ 1216.799180][T23385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1217.025762][T23385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1217.041544][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.061775][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.069342][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.073490][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.079064][ T1142] IPVS: stop unused estimator thread 0... [ 1217.238258][T16303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1217.243210][T16303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1217.268659][T11323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1217.271950][T11323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1217.282041][T25306] netlink: 'syz.1.2409': attribute type 1 has an invalid length. [ 1217.367666][T25304] overlay: ./file0 is not a directory [ 1217.838057][T25317] ceph: No mds server is up or the cluster is laggy [ 1217.842640][ T6011] libceph: connect (1)[c::]:6789 error -22 [ 1217.845225][ T6011] libceph: mon0 (1)[c::]:6789 connect error [ 1218.633504][ T6000] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1220.022953][ T6267] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 1220.172938][ T6267] usb 7-1: Using ep0 maxpacket: 8 [ 1220.176235][ T6267] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1220.178806][ T6267] usb 7-1: config 0 has no interface number 0 [ 1220.180722][ T6267] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1220.191514][ T6267] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1220.195755][ T6267] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 102, changing to 10 [ 1220.199412][ T6267] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 24624, setting to 1024 [ 1220.203220][ T6267] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1220.207473][ T6267] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1220.210421][ T6267] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.218578][ T6267] usb 7-1: config 0 descriptor?? [ 1220.230981][ T6267] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1222.426743][T16094] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1222.431060][T16094] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1222.445619][T16094] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1222.465236][T16094] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1222.469243][T16094] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1222.837418][T26003] chnl_net:caif_netlink_parms(): no params data found [ 1222.932621][T26003] bridge0: port 1(bridge_slave_0) entered blocking state [ 1222.935308][T26003] bridge0: port 1(bridge_slave_0) entered disabled state [ 1222.937898][T26003] bridge_slave_0: entered allmulticast mode [ 1222.944210][T26003] bridge_slave_0: entered promiscuous mode [ 1223.383104][T26003] bridge0: port 2(bridge_slave_1) entered blocking state [ 1223.384079][T10973] usb 7-1: USB disconnect, device number 79 [ 1223.385549][T26003] bridge0: port 2(bridge_slave_1) entered disabled state [ 1223.389709][T26003] bridge_slave_1: entered allmulticast mode [ 1223.392268][T26003] bridge_slave_1: entered promiscuous mode [ 1223.392520][T10973] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 1223.431184][T26003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1223.444954][T16094] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1223.454956][T26003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1223.689263][T26021] syz.2.2428 (26021): drop_caches: 1 [ 1223.826955][T26021] syz.2.2428 (26021): drop_caches: 1 [ 1223.864977][T26023] netlink: 'syz.2.2429': attribute type 1 has an invalid length. [ 1224.147207][ T13] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.277643][T26003] team0: Port device team_slave_0 added [ 1224.281860][T26003] team0: Port device team_slave_1 added [ 1224.314416][ T13] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.393163][T26003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1224.396077][T26003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1224.407308][T26003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1224.413986][T26003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1224.416854][T26003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1224.428066][T26003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1224.504310][ T13] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.513108][T16094] Bluetooth: hci2: command tx timeout [ 1224.558838][T26003] hsr_slave_0: entered promiscuous mode [ 1224.561941][T26003] hsr_slave_1: entered promiscuous mode [ 1224.565193][T26003] debugfs: 'hsr0' already exists in 'hsr' [ 1224.567560][T26003] Cannot create hsr debugfs directory [ 1224.637689][ T13] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.837134][T26490] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2436'. [ 1225.844671][T26490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2436'. [ 1225.957974][T26490] syz.3.2436 (26490): drop_caches: 1 [ 1226.093326][ T13] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 1226.593000][T16094] Bluetooth: hci2: command tx timeout [ 1226.703887][ T13] bond0 (unregistering): Released all slaves [ 1226.708814][ T13] bond1 (unregistering): Released all slaves [ 1226.715463][ T13] bond2 (unregistering): Released all slaves [ 1226.722309][ T13] bond3 (unregistering): Released all slaves [ 1226.730385][ T13] bond4 (unregistering): Released all slaves [ 1226.738251][ T13] bond5 (unregistering): Released all slaves [ 1227.004555][ T13] tipc: Left network mode [ 1228.453233][ T13] hsr_slave_0: left promiscuous mode [ 1228.513017][ T13] hsr_slave_1: left promiscuous mode [ 1228.565438][ T13] veth1_macvtap: left promiscuous mode [ 1228.567291][ T13] veth0_macvtap: left promiscuous mode [ 1228.569116][ T13] veth1_vlan: left promiscuous mode [ 1228.570814][ T13] veth0_vlan: left promiscuous mode [ 1228.576303][T26515] netlink: 'syz.2.2440': attribute type 1 has an invalid length. [ 1228.683010][T16094] Bluetooth: hci2: command tx timeout [ 1229.650557][T26528] hpfs: Bad magic ... probably not HPFS [ 1230.762939][T16094] Bluetooth: hci2: command tx timeout [ 1233.262014][T26559] could not allocate digest TFM handle sha256-neon [ 1234.214930][T26003] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1234.221489][T26568] hpfs: Bad magic ... probably not HPFS [ 1234.256563][T26003] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1234.384683][T26003] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1234.433996][T26003] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1234.593546][T26003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1234.601637][T26003] 8021q: adding VLAN 0 to HW filter on device team0 [ 1234.618474][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 1234.621460][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1234.625608][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 1234.628302][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1234.768957][T26003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1234.795521][T26003] veth0_vlan: entered promiscuous mode [ 1234.801530][T26003] veth1_vlan: entered promiscuous mode [ 1234.821555][T26003] veth0_macvtap: entered promiscuous mode [ 1234.830762][T26003] veth1_macvtap: entered promiscuous mode [ 1234.843438][T26003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1234.855134][T26003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1234.864260][ T1142] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.870432][ T1142] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.639929][T11333] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.799504][T11333] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.896675][T11323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1235.900363][T11323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1235.987275][T25250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1235.990850][T25250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1236.943154][ T6267] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 1237.112943][ T6267] usb 8-1: Using ep0 maxpacket: 8 [ 1237.122385][ T6267] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 1237.125216][ T6267] usb 8-1: config 0 has no interface number 0 [ 1237.127201][ T6267] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1237.135492][ T6267] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1237.139217][ T6267] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 102, changing to 10 [ 1237.156041][ T6267] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 24624, setting to 1024 [ 1237.160200][ T6267] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1237.183016][ T6267] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1237.186943][ T6267] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.205198][ T6267] usb 8-1: config 0 descriptor?? [ 1237.218005][ T6267] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1237.461900][T26610] macvlan2: entered promiscuous mode [ 1237.468815][T26610] macvlan2: entered allmulticast mode [ 1237.780916][T26612] could not allocate digest TFM handle sha256-neon [ 1238.175933][T16094] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1239.756196][ T6011] usb 8-1: USB disconnect, device number 57 [ 1239.760083][ T6011] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 1239.979295][ T5946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1239.982892][ T5946] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1239.985538][ T5946] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1239.990231][ T5946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1240.003457][ T5946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1240.503142][T26633] chnl_net:caif_netlink_parms(): no params data found [ 1241.107545][T16303] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.214322][T26633] bridge0: port 1(bridge_slave_0) entered blocking state [ 1241.217052][T26633] bridge0: port 1(bridge_slave_0) entered disabled state [ 1241.220866][T26633] bridge_slave_0: entered allmulticast mode [ 1241.223648][T26633] bridge_slave_0: entered promiscuous mode [ 1241.227964][T26633] bridge0: port 2(bridge_slave_1) entered blocking state [ 1241.230736][T26633] bridge0: port 2(bridge_slave_1) entered disabled state [ 1241.233173][T26633] bridge_slave_1: entered allmulticast mode [ 1241.236058][T26633] bridge_slave_1: entered promiscuous mode [ 1241.255565][T26633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1241.311708][T26633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1241.409648][T16303] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.530209][T26633] team0: Port device team_slave_0 added [ 1241.538032][T26633] team0: Port device team_slave_1 added [ 1241.625263][T16303] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.638283][T26949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2473'. [ 1241.681067][T26633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1241.683575][T26633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1241.692155][T26633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1241.697505][T26633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1241.699698][T26633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1241.708631][T26633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1241.726695][T26949] could not allocate digest TFM handle sha256-neon [ 1241.743720][T26633] hsr_slave_0: entered promiscuous mode [ 1241.746153][T26633] hsr_slave_1: entered promiscuous mode [ 1241.748306][T26633] debugfs: 'hsr0' already exists in 'hsr' [ 1241.750129][T26633] Cannot create hsr debugfs directory [ 1241.793162][T16094] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 1241.834385][T16303] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.032997][ T5946] Bluetooth: hci0: command tx timeout [ 1242.451339][T26972] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2476'. [ 1242.457018][T26972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2476'. [ 1242.605163][T26972] syz.2.2476 (26972): drop_caches: 1 [ 1242.797489][T26972] syz.2.2476 (26972): drop_caches: 1 [ 1242.811269][T26977] hpfs: Bad magic ... probably not HPFS [ 1243.323714][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 1243.326447][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.112962][T16094] Bluetooth: hci0: command tx timeout [ 1244.278044][T16303] bond0 (unregistering): Released all slaves [ 1244.285882][T16303] bond1 (unregistering): Released all slaves [ 1244.294055][T16303] bond2 (unregistering): Released all slaves [ 1244.305416][T16303] bond3 (unregistering): Released all slaves [ 1244.423234][T16303] tipc: Left network mode [ 1245.295211][T26974] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1245.298551][T26974] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1245.904194][T26974] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1246.193750][T16094] Bluetooth: hci0: command tx timeout [ 1246.214590][T26974] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1246.216757][T26974] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1246.363457][T26974] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1246.493686][T26974] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1246.497279][T26974] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1246.513532][T16094] Bluetooth: hci4: command 0x0c1a tx timeout [ 1246.604475][T26974] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1246.694956][T26633] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1246.699843][T26974] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1246.702497][T26974] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1246.726413][T26633] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1246.793939][T26974] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1246.846219][T26633] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1246.885113][T26633] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1247.125687][T16094] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 1247.133385][T16303] hsr_slave_0: left promiscuous mode [ 1247.373206][T16303] hsr_slave_1: left promiscuous mode [ 1247.517999][T16303] veth1_macvtap: left promiscuous mode [ 1247.521058][T16303] veth0_macvtap: left promiscuous mode [ 1247.526078][T16303] veth1_vlan: left promiscuous mode [ 1247.529241][T16303] veth0_vlan: left promiscuous mode [ 1248.113449][T16303] team0 (unregistering): Port device batadv1 removed [ 1248.273019][T16094] Bluetooth: hci1: command 0x0c1a tx timeout [ 1248.522971][T16094] Bluetooth: hci2: command 0x0c1a tx timeout [ 1248.592931][T16094] Bluetooth: hci4: command 0x0c1a tx timeout [ 1248.752946][T16094] Bluetooth: hci0: command 0x0c1a tx timeout [ 1249.008487][T27044] netlink: 'syz.1.2488': attribute type 1 has an invalid length. [ 1250.353255][T16094] Bluetooth: hci1: command 0x0c1a tx timeout [ 1250.593022][T16094] Bluetooth: hci2: command 0x0c1a tx timeout [ 1250.682992][T16094] Bluetooth: hci4: command 0x0c1a tx timeout [ 1250.833013][T16094] Bluetooth: hci0: command 0x0c1a tx timeout [ 1252.433000][T16094] Bluetooth: hci1: command 0x0c1a tx timeout [ 1252.672983][T16094] Bluetooth: hci2: command 0x0c1a tx timeout [ 1252.890735][T27044] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1252.903605][T13383] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1252.913775][T16094] Bluetooth: hci0: command 0x0c1a tx timeout [ 1252.970515][T26633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1252.979569][T26633] 8021q: adding VLAN 0 to HW filter on device team0 [ 1252.985016][T11333] bridge0: port 1(bridge_slave_0) entered blocking state [ 1252.987334][T11333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1252.993665][T11323] bridge0: port 2(bridge_slave_1) entered blocking state [ 1252.996714][T11323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1253.012369][T26633] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1253.017070][T26633] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1253.192635][T27068] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2490'. [ 1253.199916][T27068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2490'. [ 1253.263821][T26633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1253.413810][T26633] veth0_vlan: entered promiscuous mode [ 1253.423344][T26633] veth1_vlan: entered promiscuous mode [ 1253.434256][T27068] syz.1.2490 (27068): drop_caches: 1 [ 1253.852907][ T6267] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 1253.947386][T26633] veth0_macvtap: entered promiscuous mode [ 1253.954956][T26633] veth1_macvtap: entered promiscuous mode [ 1253.994046][T26633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1254.006117][ T6267] usb 7-1: Using ep0 maxpacket: 8 [ 1254.024655][T26633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1254.051673][ T1142] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.059157][ T6267] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1254.063779][ T1142] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.067773][ T6267] usb 7-1: config 0 has no interface number 0 [ 1254.070510][ T6267] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1254.076279][ T6267] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1254.081580][ T6267] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 102, changing to 10 [ 1254.088684][ T6267] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 24624, setting to 1024 [ 1254.094719][ T6267] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1254.100097][ T6267] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1254.114825][ T1142] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.118721][ T1142] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.122535][ T6267] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.134807][ T6267] usb 7-1: config 0 descriptor?? [ 1254.168484][ T6267] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1254.375323][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1254.378041][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1254.411565][T25250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1254.422950][T25250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1256.088581][ T6127] usb 7-1: USB disconnect, device number 80 [ 1256.093691][ T6127] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 1256.543001][ T6011] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1256.694516][ T6011] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1256.698240][ T6011] usb 6-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 1256.702517][ T6011] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1256.706933][ T6011] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1256.715183][ T6011] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1256.719215][ T6011] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1256.722701][ T6011] usb 6-1: Product: syz [ 1256.725166][ T6011] usb 6-1: Manufacturer: syz [ 1256.732225][ T6011] cdc_wdm 6-1:1.0: skipping garbage [ 1256.735085][ T6011] cdc_wdm 6-1:1.0: skipping garbage [ 1256.737404][ T6011] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1256.933958][ T6011] usb 6-1: USB disconnect, device number 41 [ 1257.734502][T27119] overlayfs: missing 'lowerdir' [ 1257.993546][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1259.415335][T27144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2503'. [ 1259.600037][T27144] could not allocate digest TFM handle sha256-neon [ 1266.410543][T27479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2513'. [ 1266.495330][T27479] could not allocate digest TFM handle sha256-neon [ 1266.603449][T27488] overlayfs: missing 'lowerdir' [ 1266.863305][ T39] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1268.556595][ T29] libceph: connect (1)[c::]:6789 error -101 [ 1268.559367][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 1268.593881][T27507] ceph: No mds server is up or the cluster is laggy [ 1271.312914][ T39] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1271.484127][ T39] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1271.486967][ T39] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 1271.489309][ T39] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1271.492210][ T39] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1271.497847][ T39] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1271.500776][ T39] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1271.503646][ T39] usb 5-1: Product: syz [ 1271.505020][ T39] usb 5-1: Manufacturer: syz [ 1271.514650][ T39] cdc_wdm 5-1:1.0: skipping garbage [ 1271.516339][ T39] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1271.726019][T15106] usb 5-1: USB disconnect, device number 53 [ 1275.747718][T27622] overlay: ./file0 is not a directory [ 1275.782316][T27637] hpfs: Bad magic ... probably not HPFS [ 1276.427233][T16094] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1279.353274][T13383] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 1279.822909][T13383] usb 7-1: Using ep0 maxpacket: 8 [ 1279.826134][T13383] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1279.828785][T13383] usb 7-1: config 0 has no interface number 0 [ 1279.830749][T13383] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1279.836795][T13383] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1279.840442][T13383] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 102, changing to 10 [ 1279.845281][T13383] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 24624, setting to 1024 [ 1279.848862][T13383] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1279.854617][T13383] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1279.858059][T13383] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.863082][T13383] usb 7-1: config 0 descriptor?? [ 1279.868498][T13383] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1279.935305][T27693] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2545'. [ 1279.938814][T27693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2545'. [ 1280.256067][T27693] syz.3.2545 (27693): drop_caches: 1 [ 1280.956762][T27711] hpfs: Bad magic ... probably not HPFS [ 1281.284531][T27141] usb 7-1: USB disconnect, device number 81 [ 1281.288272][T27141] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 1284.214812][T29291] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2555'. [ 1284.224097][T29291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2555'. [ 1284.708560][T29299] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2557'. [ 1284.712684][T29299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2557'. [ 1285.515150][T29299] syz.3.2557 (29299): drop_caches: 1 [ 1287.256196][ T6011] libceph: connect (1)[c::]:6789 error -101 [ 1287.258897][ T6011] libceph: mon0 (1)[c::]:6789 connect error [ 1287.301511][T29314] ceph: No mds server is up or the cluster is laggy [ 1287.829656][ T39] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1289.491984][T29441] netlink: 'syz.2.2565': attribute type 1 has an invalid length. [ 1290.203276][T13383] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1290.713064][T13383] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 1290.738808][T27141] libceph: connect (1)[c::]:6789 error -101 [ 1290.740915][T27141] libceph: mon0 (1)[c::]:6789 connect error [ 1290.767779][T29717] ceph: No mds server is up or the cluster is laggy [ 1290.874154][T13383] usb 8-1: Using ep0 maxpacket: 8 [ 1290.885158][T13383] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 1290.888447][T13383] usb 8-1: config 0 has no interface number 0 [ 1290.890921][T13383] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1290.903143][T13383] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1290.906937][T13383] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 102, changing to 10 [ 1290.910533][T13383] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 24624, setting to 1024 [ 1290.915927][T13383] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1290.920927][T13383] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1290.924821][T13383] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.932509][T13383] usb 8-1: config 0 descriptor?? [ 1291.007302][T13383] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1291.284360][T29732] overlay: ./file0 is not a directory [ 1291.896804][T27141] libceph: connect (1)[c::]:6789 error -101 [ 1291.898765][T27141] libceph: mon0 (1)[c::]:6789 connect error [ 1291.918700][T29815] ceph: No mds server is up or the cluster is laggy [ 1292.516149][T30386] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2573'. [ 1292.519896][T30386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2573'. [ 1292.668314][T30386] syz.0.2573 (30386): drop_caches: 1 [ 1292.748595][T30386] syz.0.2573 (30386): drop_caches: 1 [ 1293.262940][ T6304] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1293.331240][T30395] netlink: 'syz.2.2576': attribute type 1 has an invalid length. [ 1293.422921][ T6304] usb 6-1: Using ep0 maxpacket: 8 [ 1293.427397][ T6304] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1293.430833][ T6304] usb 6-1: config 0 has no interface number 0 [ 1293.433721][ T6304] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1293.438124][ T6304] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1293.443257][ T6304] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 102, changing to 10 [ 1293.447861][ T6304] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 24624, setting to 1024 [ 1293.452212][ T6304] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1293.458102][ T6304] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1293.461907][ T6304] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.467554][ T6304] usb 6-1: config 0 descriptor?? [ 1293.476020][ T6304] ldusb 6-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 1293.682623][ T6333] usb 8-1: USB disconnect, device number 58 [ 1293.686079][ T6333] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 1295.027591][T30412] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2579'. [ 1295.031467][T30412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2579'. [ 1295.178308][T30412] syz.2.2579 (30412): drop_caches: 1 [ 1295.311413][T30412] syz.2.2579 (30412): drop_caches: 1 [ 1295.708014][T30421] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2581'. [ 1295.712588][T30421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2581'. [ 1296.574759][ T6011] usb 6-1: USB disconnect, device number 42 [ 1296.579795][ T6011] ldusb 6-1:0.55: LD USB Device #1 now disconnected [ 1296.713169][T30421] syz.0.2581 (30421): drop_caches: 1 [ 1296.876597][T30430] ceph: No mds server is up or the cluster is laggy [ 1297.020883][ T6011] libceph: connect (1)[c::]:6789 error -101 [ 1297.023021][ T6011] libceph: mon0 (1)[c::]:6789 connect error [ 1299.158714][T30448] could not allocate digest TFM handle sha256-neon [ 1301.118716][T13383] libceph: connect (1)[c::]:6789 error -101 [ 1301.121916][T13383] libceph: mon0 (1)[c::]:6789 connect error [ 1301.213031][T30792] ceph: No mds server is up or the cluster is laggy [ 1301.284393][T13383] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1301.452889][T13383] usb 6-1: Using ep0 maxpacket: 8 [ 1301.456447][T13383] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1301.459021][T13383] usb 6-1: config 0 has no interface number 0 [ 1301.460967][T13383] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1301.464849][T13383] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1301.468504][T13383] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 102, changing to 10 [ 1301.471960][T13383] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 24624, setting to 1024 [ 1301.475996][T13383] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1301.480059][T13383] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1301.482787][T13383] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.489870][T13383] usb 6-1: config 0 descriptor?? [ 1301.499269][T13383] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1302.135902][T31383] overlay: ./file0 is not a directory [ 1302.770809][T31390] could not allocate digest TFM handle sha256-neon [ 1303.157022][T31405] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2598'. [ 1303.174553][T31405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2598'. [ 1303.770767][T31408] netlink: 'syz.2.2601': attribute type 1 has an invalid length. [ 1304.153210][ C2] ldusb 6-1:0.55: usb_submit_urb failed (-1) [ 1304.156037][ T6011] usb 6-1: USB disconnect, device number 43 [ 1304.208344][T15106] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1304.208485][ T6011] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1304.755040][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 1304.757518][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 1304.768114][ T6011] libceph: connect (1)[c::]:6789 error -101 [ 1304.770306][ T6011] libceph: mon0 (1)[c::]:6789 connect error [ 1304.809722][T31423] ceph: No mds server is up or the cluster is laggy [ 1305.393014][T16094] Bluetooth: hci4: command 0x0c1a tx timeout [ 1305.395567][T31405] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1305.941573][T31405] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1305.943814][T31405] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1305.947707][T31405] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1306.233713][T32487] could not allocate digest TFM handle sha256-neon [ 1306.311378][T32496] netlink: 'syz.2.2610': attribute type 1 has an invalid length. [ 1306.554507][T32502] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2611'. [ 1306.559623][T32502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2611'. [ 1306.843411][T32502] syz.2.2611 (32502): drop_caches: 1 [ 1307.055012][T32511] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2612'. [ 1307.060034][T32511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2612'. [ 1307.282056][T32511] syz.0.2612 (32511): drop_caches: 1 [ 1307.332352][T32517] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2614'. [ 1307.337201][T32517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2614'. [ 1307.400988][T32517] syz.3.2614 (32517): drop_caches: 1 [ 1307.442975][T32517] syz.3.2614 (32517): drop_caches: 1 [ 1307.472962][T16094] Bluetooth: hci1: command 0x0c1a tx timeout [ 1307.952914][T16094] Bluetooth: hci0: command 0x0c1a tx timeout [ 1307.952943][ T5946] Bluetooth: hci2: command 0x0c1a tx timeout [ 1308.922951][ T5946] Bluetooth: hci4: command 0x0c1a tx timeout [ 1308.925739][T32504] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1309.368508][T32504] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1309.372014][T32504] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1309.374408][T32504] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1310.454376][ T426] could not allocate digest TFM handle sha256-neon [ 1310.533504][ T721] netlink: 'syz.3.2619': attribute type 1 has an invalid length. [ 1311.054069][ T5946] Bluetooth: hci1: command 0x0c1a tx timeout [ 1311.154415][ T731] overlay: ./file0 is not a directory [ 1311.393166][ T5946] Bluetooth: hci0: command 0x0c1a tx timeout [ 1311.395882][ T5946] Bluetooth: hci2: command 0x0c1a tx timeout [ 1312.112937][T16757] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 1312.264404][T16757] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1312.271164][T16757] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1312.274373][T16757] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1312.282418][T16757] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1312.286226][T16757] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1312.294037][T16757] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1312.300307][T16757] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1312.306318][T16757] usb 7-1: Product: syz [ 1312.307677][T16757] usb 7-1: Manufacturer: syz [ 1312.318913][T16757] cdc_wdm 7-1:1.0: skipping garbage [ 1312.322876][T16757] cdc_wdm 7-1:1.0: skipping garbage [ 1312.326598][T16757] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1312.328514][T16757] cdc_wdm 7-1:1.0: Unknown control protocol [ 1312.509226][ T752] could not allocate digest TFM handle sha256-neon [ 1312.520920][T13383] usb 7-1: USB disconnect, device number 82 [ 1312.655183][ T759] overlayfs: missing 'lowerdir' [ 1312.699930][ T762] netlink: 'syz.3.2630': attribute type 1 has an invalid length. [ 1312.923293][T13383] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1313.702907][ T39] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 1313.756433][ T793] could not allocate digest TFM handle sha256-neon [ 1313.863990][ T39] usb 7-1: Using ep0 maxpacket: 8 [ 1313.868780][ T39] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1313.872449][ T39] usb 7-1: config 0 has no interface number 0 [ 1313.874864][ T39] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1313.878391][ T39] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1313.882783][ T39] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 102, changing to 10 [ 1313.887702][ T39] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 24624, setting to 1024 [ 1313.891305][ T39] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1313.898610][ T39] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1313.949783][ T39] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1313.956976][ T39] usb 7-1: config 0 descriptor?? [ 1313.966924][ T39] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1314.377127][ T818] netlink: 'syz.0.2639': attribute type 1 has an invalid length. [ 1316.229482][ T831] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2640'. [ 1316.236033][ T831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2640'. [ 1316.343639][T11004] usb 7-1: USB disconnect, device number 83 [ 1316.348103][T11004] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 1316.454302][ T831] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1316.456178][ T831] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1316.458176][ T831] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1316.459995][ T831] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1316.596360][ T836] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1316.703062][ T830] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1316.909856][ T830] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1316.912752][ T830] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1316.919281][ T830] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1316.953511][ T830] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1316.957644][ T830] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1316.964778][ T830] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1316.967793][ T830] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1316.970380][ T830] usb 6-1: Product: syz [ 1316.971750][ T830] usb 6-1: Manufacturer: syz [ 1317.114709][ T830] cdc_wdm 6-1:1.0: skipping garbage [ 1317.116566][ T830] cdc_wdm 6-1:1.0: skipping garbage [ 1317.121771][ T830] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1317.123815][ T830] cdc_wdm 6-1:1.0: Unknown control protocol [ 1317.342902][ T830] usb 6-1: USB disconnect, device number 44 [ 1318.154340][ T862] could not allocate digest TFM handle sha256-neon [ 1318.214583][ T868] netlink: 'syz.1.2649': attribute type 1 has an invalid length. [ 1318.363381][ T836] Bluetooth: hci4: command 0x0c1a tx timeout [ 1318.512923][ T836] Bluetooth: hci1: command 0x0c1a tx timeout [ 1318.514900][ T836] Bluetooth: hci0: command 0x0c1a tx timeout [ 1318.516856][ T836] Bluetooth: hci2: command 0x0c1a tx timeout [ 1318.599983][ T876] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2650'. [ 1318.604924][ T876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2650'. [ 1319.912549][ T830] libceph: connect (1)[c::]:6789 error -101 [ 1319.915194][ T830] libceph: mon0 (1)[c::]:6789 connect error [ 1319.920767][ T1148] ceph: No mds server is up or the cluster is laggy [ 1320.285189][ T1165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2657'. [ 1320.362609][ T1165] could not allocate digest TFM handle sha256-neon [ 1320.392483][ T1169] netlink: 'syz.0.2658': attribute type 1 has an invalid length. [ 1320.864550][ T1174] overlay: ./file0 is not a directory [ 1322.671054][ T1194] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2665'. [ 1322.676487][ T1194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2665'. [ 1322.688701][ T1195] hpfs: Bad magic ... probably not HPFS [ 1322.968742][ T1201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2666'. [ 1323.083940][ T1202] overlay: ./file0 is not a directory [ 1323.095003][ T1203] could not allocate digest TFM handle sha256-neon [ 1325.082899][ T1197] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1325.082964][T11007] Bluetooth: hci4: command 0x0c1a tx timeout [ 1325.456141][ T1197] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1325.458462][ T1197] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1325.460669][ T1197] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1325.780404][ T1225] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2670'. [ 1325.784580][ T1225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2670'. [ 1325.902475][ T1225] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1325.905477][ T1225] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1325.907985][ T1225] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1325.910100][ T1225] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1326.215719][ T6011] libceph: connect (1)[c::]:6789 error -101 [ 1326.217910][ T6011] libceph: mon0 (1)[c::]:6789 connect error [ 1326.293402][ T1238] ceph: No mds server is up or the cluster is laggy [ 1326.484001][ T6011] libceph: connect (1)[c::]:6789 error -101 [ 1326.484480][ T6011] libceph: mon0 (1)[c::]:6789 connect error [ 1327.067052][ T1245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2675'. [ 1327.158814][ T1245] could not allocate digest TFM handle sha256-neon [ 1327.873004][ T836] Bluetooth: hci4: command 0x0c1a tx timeout [ 1327.876468][ T1261] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2678'. [ 1327.880441][ T1261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2678'. [ 1327.952961][ T836] Bluetooth: hci0: command 0x0c1a tx timeout [ 1327.953006][T11007] Bluetooth: hci1: command 0x0c1a tx timeout [ 1327.954984][ T836] Bluetooth: hci2: command 0x0c1a tx timeout [ 1328.680758][ T1272] hpfs: Bad magic ... probably not HPFS [ 1331.334506][T13383] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1331.921773][ T1618] 9pnet_virtio: no channels available for device syz [ 1332.113456][ T1626] hpfs: Bad magic ... probably not HPFS [ 1332.120265][ T1611] overlay: ./file0 is not a directory [ 1332.324789][ T1636] 9pnet_virtio: no channels available for device syz [ 1333.103134][ T6011] libceph: connect (1)[c::]:6789 error -101 [ 1333.105136][ T6011] libceph: mon0 (1)[c::]:6789 connect error [ 1333.156097][ T1643] ceph: No mds server is up or the cluster is laggy [ 1340.783818][ T1672] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2700'. [ 1340.788276][ T1672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2700'. [ 1340.926660][ T1672] syz.2.2700 (1672): drop_caches: 1 [ 1340.960951][ T1681] overlay: ./file0 is not a directory [ 1342.912974][ T836] Bluetooth: hci4: command 0x0c1a tx timeout [ 1342.915970][ T1679] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1343.193463][ T39] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1343.474136][ T1679] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1343.476194][ T1679] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1343.478310][ T1679] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1343.772943][ T6127] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1343.865151][ T1719] hpfs: Bad magic ... probably not HPFS [ 1343.924250][ T6127] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1343.928826][ T6127] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1343.934877][ T6127] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1343.939576][ T6127] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1343.945979][ T6127] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1343.953412][ T6127] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1343.958111][ T6127] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1343.962312][ T6127] usb 5-1: Product: syz [ 1343.964782][ T6127] usb 5-1: Manufacturer: syz [ 1343.970940][ T6127] cdc_wdm 5-1:1.0: skipping garbage [ 1343.974198][ T6127] cdc_wdm 5-1:1.0: skipping garbage [ 1343.978157][ T6127] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1343.981455][ T6127] cdc_wdm 5-1:1.0: Unknown control protocol [ 1344.175762][ T1694] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2703'. [ 1344.185308][ T6127] usb 5-1: USB disconnect, device number 54 [ 1344.763309][ T39] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1344.993644][ T836] Bluetooth: hci1: command 0x0c1a tx timeout [ 1345.239188][ T1753] overlay: ./file0 is not a directory [ 1345.412986][ T39] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1345.552975][T16094] Bluetooth: hci2: command 0x0c1a tx timeout [ 1345.554920][ T836] Bluetooth: hci0: command 0x0c1a tx timeout [ 1345.574159][ T39] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1345.576913][ T39] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1345.580219][ T39] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1345.583229][ T39] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1345.586632][ T39] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1345.591570][ T39] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1345.594492][ T39] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1345.597016][ T39] usb 6-1: Product: syz [ 1345.598343][ T39] usb 6-1: Manufacturer: syz [ 1345.607608][ T39] cdc_wdm 6-1:1.0: skipping garbage [ 1345.609326][ T39] cdc_wdm 6-1:1.0: skipping garbage [ 1345.615271][ T39] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1345.617257][ T39] cdc_wdm 6-1:1.0: Unknown control protocol [ 1345.820390][ T1747] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2712'. [ 1345.829043][ T39] usb 6-1: USB disconnect, device number 45 [ 1347.093369][T15106] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1347.413627][T27141] libceph: connect (1)[c::]:6789 error -101 [ 1347.415651][T27141] libceph: mon0 (1)[c::]:6789 connect error [ 1347.419554][T27141] libceph: connect (1)[c::]:6789 error -101 [ 1347.421905][T27141] libceph: mon0 (1)[c::]:6789 connect error [ 1347.453517][ T1799] ceph: No mds server is up or the cluster is laggy [ 1347.478914][ T1805] overlayfs: missing 'lowerdir' [ 1347.909324][ T39] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1348.252889][ T6127] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1348.404289][ T6127] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1348.407139][ T6127] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1348.410377][ T6127] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1348.413558][ T6127] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1348.417060][ T6127] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1348.421830][ T6127] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1348.426778][ T6127] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1348.429346][ T6127] usb 6-1: Product: syz [ 1348.430710][ T6127] usb 6-1: Manufacturer: syz [ 1348.436498][ T6127] cdc_wdm 6-1:1.0: skipping garbage [ 1348.439254][ T6127] cdc_wdm 6-1:1.0: skipping garbage [ 1348.441949][ T6127] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1348.443953][ T6127] cdc_wdm 6-1:1.0: Unknown control protocol [ 1348.471536][ T1819] Bluetooth: MGMT ver 1.23 [ 1348.636680][ T1811] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2720'. [ 1348.641057][T27141] usb 6-1: USB disconnect, device number 46 [ 1348.748357][ T1822] hpfs: Bad magic ... probably not HPFS [ 1349.162980][T15106] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 1349.307634][ T1842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2726'. [ 1349.332983][T15106] usb 8-1: Using ep0 maxpacket: 8 [ 1349.336873][T15106] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 1349.339659][T15106] usb 8-1: config 0 has no interface number 0 [ 1349.341691][T15106] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1349.345238][T15106] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1349.348830][T15106] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 102, changing to 10 [ 1349.352710][T15106] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 24624, setting to 1024 [ 1349.356733][T15106] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1349.360910][T15106] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1349.364320][T15106] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.368460][T15106] usb 8-1: config 0 descriptor?? [ 1349.373076][T15106] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1349.396421][ T1842] could not allocate digest TFM handle sha256-neon [ 1349.955410][T15106] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1351.389448][ T1882] overlay: ./file0 is not a directory [ 1351.903266][T27141] usb 8-1: USB disconnect, device number 59 [ 1351.926119][T27141] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 1353.158644][ T1914] overlay: ./file0 is not a directory [ 1353.581083][ T29] libceph: connect (1)[c::]:6789 error -101 [ 1353.587786][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 1353.595117][ T29] libceph: connect (1)[c::]:6789 error -101 [ 1353.602987][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 1353.610614][ T1921] ceph: No mds server is up or the cluster is laggy [ 1353.643864][T15106] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1354.073210][T15106] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1354.321893][T27141] libceph: connect (1)[c::]:6789 error -101 [ 1354.324053][T27141] libceph: mon0 (1)[c::]:6789 connect error [ 1354.372339][ T1937] ceph: No mds server is up or the cluster is laggy [ 1354.623373][ T34] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 1354.772982][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 1354.784411][ T34] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 1354.787861][ T34] usb 8-1: config 0 has no interface number 0 [ 1354.790459][ T34] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1354.802879][ T34] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1354.806586][ T34] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 102, changing to 10 [ 1354.810068][ T34] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 24624, setting to 1024 [ 1354.813609][ T34] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1354.817663][ T34] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1354.820548][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.827382][ T34] usb 8-1: config 0 descriptor?? [ 1354.834161][ T34] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1355.860835][ T1962] overlay: ./file0 is not a directory [ 1357.599553][ T1970] ================================================================== [ 1357.602133][ T1970] BUG: KASAN: slab-out-of-bounds in __schedule+0x3ca9/0x5fa0 [ 1357.604496][ T1970] Write of size 8 at addr ffff88801b8b79d0 by task syz.2.2749/1970 [ 1357.608127][ T1970] [ 1357.609193][ T1970] CPU: 1 UID: 0 PID: 1970 Comm: syz.2.2749 Tainted: G L syzkaller #0 PREEMPT(full) [ 1357.609209][ T1970] Tainted: [L]=SOFTLOCKUP [ 1357.609213][ T1970] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1357.609220][ T1970] Call Trace: [ 1357.609224][ T1970] [ 1357.609229][ T1970] dump_stack_lvl+0x100/0x190 [ 1357.609244][ T1970] print_report+0x156/0x4c9 [ 1357.609259][ T1970] ? __virt_addr_valid+0x81/0x620 [ 1357.609274][ T1970] ? __phys_addr+0xe8/0x180 [ 1357.609290][ T1970] ? __schedule+0x3ca9/0x5fa0 [ 1357.609302][ T1970] kasan_report+0xdf/0x1a0 [ 1357.609316][ T1970] ? __schedule+0x3ca9/0x5fa0 [ 1357.609330][ T1970] kasan_check_range+0x10f/0x1e0 [ 1357.609346][ T1970] __schedule+0x3ca9/0x5fa0 [ 1357.609358][ T1970] ? __pfx_css_rstat_updated+0x10/0x10 [ 1357.609370][ T1970] ? __lock_acquire+0x4a5/0x2630 [ 1357.609388][ T1970] ? __pfx___schedule+0x10/0x10 [ 1357.609400][ T1970] ? __resched_curr+0x316/0x3b0 [ 1357.609411][ T1970] ? __pfx___resched_curr+0x10/0x10 [ 1357.609422][ T1970] ? preempt_schedule_thunk+0x16/0x30 [ 1357.609433][ T1970] preempt_schedule_common+0x42/0xc0 [ 1357.609446][ T1970] preempt_schedule_thunk+0x16/0x30 [ 1357.609458][ T1970] try_to_wake_up+0x644/0x1a60 [ 1357.609471][ T1970] ? __pfx_try_to_wake_up+0x10/0x10 [ 1357.609483][ T1970] ? create_worker_cont+0x370/0x420 [ 1357.609495][ T1970] ? create_worker_cont+0x35e/0x420 [ 1357.609507][ T1970] io_acct_activate_free_worker+0x1e5/0x2d0 [ 1357.609519][ T1970] ? __pfx_io_acct_activate_free_worker+0x10/0x10 [ 1357.609533][ T1970] create_worker_cb+0xbf/0x380 [ 1357.609545][ T1970] task_work_run+0x150/0x240 [ 1357.609555][ T1970] ? __pfx_task_work_run+0x10/0x10 [ 1357.609565][ T1970] ? wake_up_q+0xae/0x130 [ 1357.609577][ T1970] get_signal+0x1bd/0x21e0 [ 1357.609592][ T1970] ? __pfx_get_signal+0x10/0x10 [ 1357.609605][ T1970] ? fput+0x79/0x100 [ 1357.609619][ T1970] arch_do_signal_or_restart+0x91/0x770 [ 1357.609635][ T1970] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1357.609651][ T1970] ? xfd_validate_state+0x129/0x190 [ 1357.609660][ T1970] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 1357.609683][ T1970] exit_to_user_mode_loop+0x86/0x4b0 [ 1357.609697][ T1970] ? rcu_is_watching+0x12/0xc0 [ 1357.609706][ T1970] __do_fast_syscall_32+0x4b6/0x660 [ 1357.609722][ T1970] do_fast_syscall_32+0x32/0x70 [ 1357.609737][ T1970] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1357.609751][ T1970] RIP: 0023:0xf7fc2579 [ 1357.609760][ T1970] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 1357.609770][ T1970] RSP: 002b:00000000f544450c EFLAGS: 00000292 ORIG_RAX: 00000000000001aa [ 1357.609781][ T1970] RAX: 0000000000000800 RBX: 0000000000000007 RCX: 0000000000003516 [ 1357.609788][ T1970] RDX: 000000000000addf RSI: 0000000000000002 RDI: 0000000000000000 [ 1357.609795][ T1970] RBP: 000000000001517f R08: 0000000000000000 R09: 0000000000000000 [ 1357.609801][ T1970] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1357.609808][ T1970] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1357.609817][ T1970] [ 1357.609821][ T1970] [ 1357.706248][ T1970] Allocated by task 0: [ 1357.707545][ T1970] kasan_save_stack+0x30/0x50 [ 1357.709051][ T1970] kasan_save_track+0x14/0x30 [ 1357.710543][ T1970] __kasan_kmalloc+0xaa/0xb0 [ 1357.712024][ T1970] perf_pmu_register+0x318/0xc90 [ 1357.713590][ T1970] perf_event_init+0x149/0x670 [ 1357.715115][ T1970] start_kernel+0x2b2/0x480 [ 1357.716598][ T1970] x86_64_start_reservations+0x24/0x30 [ 1357.718325][ T1970] x86_64_start_kernel+0x122/0x130 [ 1357.719948][ T1970] common_startup_64+0x13e/0x148 [ 1357.721513][ T1970] [ 1357.722285][ T1970] The buggy address belongs to the object at ffff88801b8b7800 [ 1357.722285][ T1970] which belongs to the cache kmalloc-512 of size 512 [ 1357.726612][ T1970] The buggy address is located 168 bytes to the right of [ 1357.726612][ T1970] allocated 296-byte region [ffff88801b8b7800, ffff88801b8b7928) [ 1357.731124][ T1970] [ 1357.731920][ T1970] The buggy address belongs to the physical page: [ 1357.733929][ T1970] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1b8b4 [ 1357.736697][ T1970] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1357.739320][ T1970] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1357.741807][ T1970] page_type: f5(slab) [ 1357.743079][ T1970] raw: 00fff00000000040 ffff88801b842c80 0000000000000000 dead000000000001 [ 1357.745764][ T1970] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1357.748444][ T1970] head: 00fff00000000040 ffff88801b842c80 0000000000000000 dead000000000001 [ 1357.751142][ T1970] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1357.753852][ T1970] head: 00fff00000000002 ffffea00006e2d01 00000000ffffffff 00000000ffffffff [ 1357.756586][ T1970] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 1357.759283][ T1970] page dumped because: kasan: bad access detected [ 1357.761287][ T1970] page_owner tracks the page as allocated [ 1357.763077][ T1970] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52000(__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 0, tgid 0 (swapper/0), ts 953495319, free_ts 0 [ 1357.768139][ T1970] post_alloc_hook+0x1e1/0x250 [ 1357.769654][ T1970] get_page_from_freelist+0xe3d/0x2e10 [ 1357.771369][ T1970] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 1357.773247][ T1970] alloc_pages_mpol+0x1fb/0x550 [ 1357.774707][ T1970] new_slab+0x2c4/0x440 [ 1357.776067][ T1970] ___slab_alloc+0xda3/0x1ca0 [ 1357.777552][ T1970] __slab_alloc.isra.0+0x63/0x110 [ 1357.779141][ T1970] __kmalloc_noprof+0x618/0x9c0 [ 1357.780691][ T1970] __alloc_workqueue+0xd62/0x1880 [ 1357.782280][ T1970] alloc_workqueue_noprof+0xd2/0x200 [ 1357.783954][ T1970] workqueue_init_early+0xb21/0xc70 [ 1357.785600][ T1970] start_kernel+0x227/0x480 [ 1357.787066][ T1970] x86_64_start_reservations+0x24/0x30 [ 1357.788794][ T1970] x86_64_start_kernel+0x122/0x130 [ 1357.790410][ T1970] common_startup_64+0x13e/0x148 [ 1357.791997][ T1970] page_owner free stack trace missing [ 1357.793676][ T1970] [ 1357.794441][ T1970] Memory state around the buggy address: [ 1357.796219][ T1970] ffff88801b8b7880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1357.798713][ T1970] ffff88801b8b7900: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 1357.801222][ T1970] >ffff88801b8b7980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1357.803724][ T1970] ^ [ 1357.805834][ T1970] ffff88801b8b7a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1357.808341][ T1970] ffff88801b8b7a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1357.810837][ T1970] ================================================================== [ 1357.813341][ T1970] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1357.815587][ T1970] CPU: 1 UID: 0 PID: 1970 Comm: syz.2.2749 Tainted: G L syzkaller #0 PREEMPT(full) [ 1357.818948][ T1970] Tainted: [L]=SOFTLOCKUP [ 1357.820322][ T1970] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1357.823447][ T1970] Call Trace: [ 1357.824526][ T1970] [ 1357.825479][ T1970] dump_stack_lvl+0x100/0x190 [ 1357.827010][ T1970] vpanic+0x20d/0x630 [ 1357.828288][ T1970] panic+0xd1/0xd1 [ 1357.829484][ T1970] ? __pfx_panic+0x10/0x10 [ 1357.830902][ T1970] ? end_report.part.0+0x23/0x90 [ 1357.832489][ T1970] ? rcu_is_watching+0x12/0xc0 [ 1357.834009][ T1970] ? end_report.part.0+0x23/0x90 [ 1357.835578][ T1970] ? check_panic_on_warn+0x1f/0x90 [ 1357.837214][ T1970] check_panic_on_warn.cold+0x19/0x34 [ 1357.838910][ T1970] end_report.part.0+0x3a/0x90 [ 1357.840436][ T1970] kasan_report.cold+0xe/0x18 [ 1357.841931][ T1970] ? __schedule+0x3ca9/0x5fa0 [ 1357.843419][ T1970] kasan_check_range+0x10f/0x1e0 [ 1357.844991][ T1970] __schedule+0x3ca9/0x5fa0 [ 1357.846461][ T1970] ? __pfx_css_rstat_updated+0x10/0x10 [ 1357.848190][ T1970] ? __lock_acquire+0x4a5/0x2630 [ 1357.849764][ T1970] ? __pfx___schedule+0x10/0x10 [ 1357.851300][ T1970] ? __resched_curr+0x316/0x3b0 [ 1357.852819][ T1970] ? __pfx___resched_curr+0x10/0x10 [ 1357.854461][ T1970] ? preempt_schedule_thunk+0x16/0x30 [ 1357.856188][ T1970] preempt_schedule_common+0x42/0xc0 [ 1357.857861][ T1970] preempt_schedule_thunk+0x16/0x30 [ 1357.859502][ T1970] try_to_wake_up+0x644/0x1a60 [ 1357.861029][ T1970] ? __pfx_try_to_wake_up+0x10/0x10 [ 1357.862677][ T1970] ? create_worker_cont+0x370/0x420 [ 1357.864335][ T1970] ? create_worker_cont+0x35e/0x420 [ 1357.865992][ T1970] io_acct_activate_free_worker+0x1e5/0x2d0 [ 1357.867861][ T1970] ? __pfx_io_acct_activate_free_worker+0x10/0x10 [ 1357.869873][ T1970] create_worker_cb+0xbf/0x380 [ 1357.871388][ T1970] task_work_run+0x150/0x240 [ 1357.872873][ T1970] ? __pfx_task_work_run+0x10/0x10 [ 1357.874481][ T1970] ? wake_up_q+0xae/0x130 [ 1357.875896][ T1970] get_signal+0x1bd/0x21e0 [ 1357.877320][ T1970] ? __pfx_get_signal+0x10/0x10 [ 1357.878862][ T1970] ? fput+0x79/0x100 [ 1357.880124][ T1970] arch_do_signal_or_restart+0x91/0x770 [ 1357.881878][ T1970] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1357.883827][ T1970] ? xfd_validate_state+0x129/0x190 [ 1357.885458][ T1970] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 1357.887365][ T1970] exit_to_user_mode_loop+0x86/0x4b0 [ 1357.889039][ T1970] ? rcu_is_watching+0x12/0xc0 [ 1357.890547][ T1970] __do_fast_syscall_32+0x4b6/0x660 [ 1357.892204][ T1970] do_fast_syscall_32+0x32/0x70 [ 1357.893745][ T1970] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1357.895778][ T1970] RIP: 0023:0xf7fc2579 [ 1357.897068][ T1970] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 1357.903039][ T1970] RSP: 002b:00000000f544450c EFLAGS: 00000292 ORIG_RAX: 00000000000001aa [ 1357.905641][ T1970] RAX: 0000000000000800 RBX: 0000000000000007 RCX: 0000000000003516 [ 1357.908124][ T1970] RDX: 000000000000addf RSI: 0000000000000002 RDI: 0000000000000000 [ 1357.910591][ T1970] RBP: 000000000001517f R08: 0000000000000000 R09: 0000000000000000 [ 1357.913071][ T1970] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1357.915536][ T1970] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1357.918091][ T1970] [ 1358.990014][ T1970] Shutting down cpus with NMI [ 1358.992160][ T1970] Kernel Offset: disabled [ 1358.993540][ T1970] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:37:05 Registers: info registers vcpu 0 CPU#0 RAX=0000000080010004 RBX=0000000000000003 RCX=ffffffff81b59db3 RDX=ffff888026740000 RSI=ffffffff81b5d06c RDI=ffff888026740000 RBP=ffff88802b23ae00 RSP=ffffc90000007b70 R8 =0000000000000000 R9 =0000000000000003 R10=0000000000000003 R11=0000000000000001 R12=0000000000000003 R13=0000000000000003 R14=ffff88802b23bd40 R15=0000000000000000 RIP=ffffffff81b5d06d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880973c4000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f31b2194 CR3=0000000067cf5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000007a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff856aa0f5 RDI=ffffffff9b2114a0 RBP=ffffffff9b211460 RSP=ffffc9000306f270 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3038383866666666 R12=0000000000000000 R13=000000000000007a R14=0000000000000010 R15=ffffffff856aa090 RIP=ffffffff856aa11f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880974c4000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002f204ff8 CR3=0000000067cf5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 488cb93cf38ec076 e04c56db3ed76fd1 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f8e892e28dc2288 0382b0f0ad8812d4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 24453b5768e46fbd ad9654447e9f6d23 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 58e8657d065cf2d7 856aea20ee2fa435 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000005a00 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000337 0002fe4306d17d8a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000033700000000 0000033700000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000006cef76c 0000fe2306c9dedc ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000498b706d3d1fa 0000033700029f27 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9d2866bb7f2ba3a3 7838de4e8152c765 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cf3e29ecba60b132 8976ec219fb12b35 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000040000 RBX=ffff888028798b30 RCX=0000000000000001 RDX=000000008346d42b RSI=0000000055a7e9f7 RDI=0000000003c9a277 RBP=ffff888028798000 RSP=ffffc9000321f5d0 R8 =00000000ae21b880 R9 =0000000000000631 R10=0000000000000001 R11=0000000000000000 R12=0000000000000000 R13=0000000000000631 R14=0000000000000001 R15=f45f27f58346d42b RIP=ffffffff81e2996c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880975c4000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080eeb018 CR3=000000004b1a7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000015097c7 RBX=ffff88801da90000 RCX=ffffffff8b7774b5 RDX=0000000000000000 RSI=ffffffff8dc4ab49 RDI=ffffffff8bfa8820 RBP=0000000000000003 RSP=ffffc9000048fdf0 R8 =0000000000000001 R9 =ffffed10056a6745 R10=ffff88802b533a2b R11=0000000000000000 R12=ffffed1003b52000 R13=0000000000000003 R14=ffffffff90b836d0 R15=0000000000000000 RIP=ffffffff8b775e1f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976c4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000ffedfe3c CR3=0000000029583000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000388039f4f00c9 8b93b788fa34bca5 c3cee8e0cf4fa587 c1bc93cba73675a8 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5c96408280800800 04b00300080004a8 0300080004a00302 0800049803018808 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0003180800060800 200800060172b240 a083a80800048002 0100000a08060601 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 080c4b8c00736e6f 697469747261702f 636f72702f01ffff ffffffffffffdd08 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000108f608 0001828002010000 0c08060100000e08 06080159ee740800 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0182800300040002 080004800201c708 00080e4bfc007365 686361635f706f72 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 642f6d762f737973 2f636f72702f01ff ffffffffffffffcd 0804800300040000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0800000201c70800 080c4b8c00736e6f 697469747261702f 636f72702f01ffff ZMM25=695817f3695817f3 695817f3695817f3 695817f3695817f3 695817f3695817f3 695817f3695817f3 695817f3695817f3 695817f3695817f3 695817f3695817f3 ZMM26=9e83ea989e83ea98 9e83ea989e83ea98 9e83ea989e83ea98 9e83ea989e83ea98 9e83ea989e83ea98 9e83ea989e83ea98 9e83ea989e83ea98 9e83ea989e83ea98 ZMM27=290e6939290e6939 290e6939290e6939 290e6939290e6939 290e6939290e6939 290e6939290e6939 290e6939290e6939 290e6939290e6939 290e6939290e6939 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=1d1800001d180000 1d1800001d180000 1d1800001d180000 1d1800001d180000 1d1800001d180000 1d1800001d180000 1d1800001d180000 1d1800001d180000