last executing test programs: 1.905963424s ago: executing program 0 (id=828): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@v={0x93, 0x0, 0x90, 0x0, @generic}) 1.857997693s ago: executing program 0 (id=829): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000f7ff0000000000000a20000000000a01030000000000000000010000020900010073797a310000000034000000030a01020000000000000000010000000900030073797a310000000008000a40000000040900010073797a31000000002c000000050a01020000000000000000010020000900030073797a31000000000900010073797a31"], 0xa8}}, 0x8000) 1.85395529s ago: executing program 0 (id=831): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x81) ioctl$HIDIOCGRAWNAME(r1, 0x80404804, &(0x7f0000000080)) 1.75710261s ago: executing program 1 (id=833): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, 0x0, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(0x0, r2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r6}, 0x50) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005f80), 0x0, 0x8040) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000040)={0x2, @pix_mp={0x0, 0x2, 0x33565348, 0x5, 0x0, [{0x4, 0x7}, {0x80000001, 0xffffffff}, {0xfffffff7, 0x5}, {0x6, 0x4}, {0x10, 0x7}, {0xe2, 0xaa6}, {0xfffffffb, 0x8}, {0xffffffff, 0x400}], 0xe9, 0x3, 0x3, 0x0, 0x6}}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r4, 0x0, 0x200480d0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r7) setxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=@known='user.syz\x00', 0x0, 0x0, 0x0) getxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) removexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=@known='user.syz\x00') sendmsg$NFC_CMD_DEV_DOWN(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)={0x1c, r3, 0x515, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x2, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x10}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a310000000005000100070000003400"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 1.326032767s ago: executing program 2 (id=846): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, 0x0, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000840), r2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r6}, 0x50) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005f80), 0x0, 0x8040) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000040)={0x2, @pix_mp={0x0, 0x2, 0x33565348, 0x5, 0x0, [{0x4, 0x7}, {0x80000001, 0xffffffff}, {0xfffffff7, 0x5}, {0x6, 0x4}, {0x10, 0x7}, {0xe2, 0xaa6}, {0xfffffffb, 0x8}, {0xffffffff, 0x400}], 0xe9, 0x3, 0x3, 0x0, 0x6}}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r4, 0x0, 0x200480d0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r7) setxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=@known='user.syz\x00', 0x0, 0x0, 0x0) getxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) removexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=@known='user.syz\x00') sendmsg$NFC_CMD_DEV_DOWN(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)={0x1c, r3, 0x515, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x2, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x10}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a310000000005000100070000003400"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 1.216642343s ago: executing program 2 (id=848): mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./sys\x00', &(0x7f00000006c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/cpu/drivers/processor\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000740)='unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000000)="637075300ade", 0x6) 1.216449666s ago: executing program 2 (id=849): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3, 0x3, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 1.154944901s ago: executing program 2 (id=850): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000044}, 0x0) syz_open_dev$loop(&(0x7f0000000e40), 0x5, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000140)={0x4, 0x0, 0x1, 'queue0\x00', 0xb}) 1.097007299s ago: executing program 3 (id=851): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./tracing\x00', &(0x7f0000000540)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./tracing/events/sched/filter\x00', 0x1, 0x15d) write(r0, &(0x7f00000005c0)='common_pid > 0', 0xe) write$cgroup_subtree(r0, 0x0, 0x0) 1.036389719s ago: executing program 0 (id=852): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, 0xc}) syz_ublk_setup_io_uring(0x20, &(0x7f00000001c0)={0x0, 0x8af9, 0x80, 0x2, 0x3c2}, 0x0, 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000180)={0x18, 0x0, [{0x0, 0x4, 0x0, 0x0, @msi={0x5, 0x9, 0xffffffff, 0x1}}]}) 937.358604ms ago: executing program 0 (id=853): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800400001"], 0x50) dup3(r0, r1, 0x80000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r1, 0x0, 0x0}, 0x20) 937.249419ms ago: executing program 0 (id=854): syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x2, 0x10000, 0x0, 0x55}, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b000f000000000904000001dbcc7a000905", @ANYRES32], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0x4, 0x2) write$char_usb(r1, &(0x7f0000000200)="e2", 0x2250) 877.077787ms ago: executing program 2 (id=855): r0 = gettid() timer_create(0x0, &(0x7f00000007c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000800)) timer_settime(0x0, 0x0, &(0x7f0000000840)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$md_sysfs(0xffffff9c, &(0x7f0000000340)={'/sys/block/md', @num=0x0, '/md/', @array='raid_disks\x00'}, 0x1, 0x0) write$md_sysfs(r1, &(0x7f0000000380)=@str='2', 0x1) 876.394752ms ago: executing program 1 (id=856): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, 0x0, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000840), r2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r6}, 0x50) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005f80), 0x0, 0x8040) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000040)={0x2, @pix_mp={0x0, 0x2, 0x33565348, 0x5, 0x0, [{0x4, 0x7}, {0x80000001, 0xffffffff}, {0xfffffff7, 0x5}, {0x6, 0x4}, {0x10, 0x7}, {0xe2, 0xaa6}, {0xfffffffb, 0x8}, {0xffffffff, 0x400}], 0xe9, 0x3, 0x3, 0x0, 0x6}}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r4, 0x0, 0x200480d0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r7) setxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=@known='user.syz\x00', 0x0, 0x0, 0x0) getxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) removexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=@known='user.syz\x00') sendmsg$NFC_CMD_DEV_DOWN(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)={0x1c, r3, 0x515, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x2, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x10}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a310000000005000100070000003400"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 876.173767ms ago: executing program 3 (id=857): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/thread-self/fail-nth\x00', 0x80002, 0x41) write(r0, &(0x7f0000000340)='3', 0x4e) keyctl$join(0x1, 0x0) 807.245856ms ago: executing program 3 (id=858): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000000000ba05000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000001e000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff7f850000000600000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 737.366188ms ago: executing program 3 (id=859): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x44}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x10, 0x10}}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0x10}}]}}}]}, 0x40}}, 0x0) 736.988884ms ago: executing program 1 (id=860): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001540)={0x10c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0xda, 0x33, @mgmt_frame=@auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {}, @device_b, @device_a, @random="c6da645f1a43", {0x0, 0x7}, @value=@ver_80211n={0x0, 0x9, 0x2, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1}}, 0x0, 0x3, 0x62, @val={0x10, 0x1, 0xf3}, [{0xdd, 0x1a, "33564e7a4028d9caef9a10e2bf632e9c927a1b5dd05c1255950d"}, {0xdd, 0x93, "7a69f34c5af0f741fb55adc883a368038d56864688a63d57cbd9dec71c736b7f34f1e373fda781fc0b38a065da798074b8ebb205d77cc0467a6252ceb016fd2ff122401acfa6de8a9276291707efa0980b6b27388fc45fcf66f78a41693b160f7db87114286bd750b92c7e52fb897057123c92190f37894f70b5b99bc7086e4d8a2989dbd466b55da57455e978b5ab5edb2961"}]}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000000) 687.23507ms ago: executing program 3 (id=861): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r0, 0x0, 0x2000ff) 686.84518ms ago: executing program 1 (id=862): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r1, 0xffffffffffffffff, 0x60000000}, 0xc) 686.755984ms ago: executing program 1 (id=863): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/ttyS0\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f00000003c0)={0x9, 0x5, 0x9, 0x241d, 0x9, "2d5157854e0a1e37a2c83e0fab035d8445e39c"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000400)={0x0, 0x78, 0x9, 0xfffffff7, 0x0, "20f24b41dea3d9843a5af91f7dd59816ffa63b"}) 626.288266ms ago: executing program 1 (id=864): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, 0x0, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(0x0, r2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r6}, 0x50) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005f80), 0x0, 0x8040) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000040)={0x2, @pix_mp={0x0, 0x2, 0x33565348, 0x5, 0x0, [{0x4, 0x7}, {0x80000001, 0xffffffff}, {0xfffffff7, 0x5}, {0x6, 0x4}, {0x10, 0x7}, {0xe2, 0xaa6}, {0xfffffffb, 0x8}, {0xffffffff, 0x400}], 0xe9, 0x3, 0x3, 0x0, 0x6}}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r4, 0x0, 0x200480d0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r7) setxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=@known='user.syz\x00', 0x0, 0x0, 0x0) getxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) removexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=@known='user.syz\x00') sendmsg$NFC_CMD_DEV_DOWN(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)={0x1c, r3, 0x515, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x2, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x10}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a310000000005000100070000003400"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 503.816537ms ago: executing program 3 (id=865): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x18000000) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x14b000) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0xf) 0s ago: executing program 2 (id=866): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) sendfile(r1, r1, 0x0, 0x9) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:8310' (ED25519) to the list of known hosts. [ 31.485597][ T5705] cgroup: Unknown subsys name 'net' [ 31.611041][ T5705] cgroup: Unknown subsys name 'cpuset' [ 31.615936][ T5705] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 32.479957][ T5705] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.111759][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.116413][ T67] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 36.118775][ T67] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 36.120578][ T67] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 36.126320][ T5793] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.127653][ T5793] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 36.127957][ T5793] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 36.128485][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 36.128672][ T5793] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.129571][ T5793] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 36.130704][ T5793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 36.131502][ T5793] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 36.131647][ T5793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 36.131788][ T5793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.132245][ T5793] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 36.132911][ T5793] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.133347][ T5793] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 36.134965][ T5790] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 36.135102][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 36.136151][ T5790] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 36.356627][ T5796] rdma_rxe: Failed to create IPv4 UDP tunnel [ 36.362725][ T5795] rxe_eth0 speed is unknown, defaulting to 1000 [ 36.363374][ T5795] rxe_eth0 speed is unknown, defaulting to 1000 [ 36.364073][ T5788] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 36.365545][ T5795] rxe_eth0 speed is unknown, defaulting to 1000 [ 36.365944][ T5787] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 36.471308][ T5795] infiniband rxe0: set active [ 36.473074][ T1358] rxe_eth0 speed is unknown, defaulting to 1000 [ 36.473673][ T5795] infiniband rxe0: added rxe_eth0 [ 36.484031][ T5795] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 36.484052][ T5795] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 36.484071][ T5795] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 36.501142][ T5795] RDS/IB: rxe0: added [ 36.501259][ T5795] smc: adding ib device rxe0 with port count 1 [ 36.501292][ T5795] smc: ib device rxe0 port 1 has no pnetid [ 36.521215][ T1867] rxe_eth0 speed is unknown, defaulting to 1000 [ 36.523982][ T5795] rxe_eth0 speed is unknown, defaulting to 1000 [ 36.561798][ T1867] rxe_eth0 speed is unknown, defaulting to 1000 [ 36.576109][ T5798] rxe_eth0 speed is unknown, defaulting to 1000 [ 36.614185][ T1867] rxe_eth0 speed is unknown, defaulting to 1000 [ 36.620745][ T5795] rxe_eth0 speed is unknown, defaulting to 1000 [ 36.725798][ T5795] rxe_eth0 speed is unknown, defaulting to 1000 [ 36.759491][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.759574][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.759639][ T5787] bridge_slave_0: entered allmulticast mode [ 36.760331][ T5787] bridge_slave_0: entered promiscuous mode [ 36.762853][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.763850][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.763915][ T5788] bridge_slave_0: entered allmulticast mode [ 36.764678][ T5788] bridge_slave_0: entered promiscuous mode [ 36.773229][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.773721][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.773779][ T5787] bridge_slave_1: entered allmulticast mode [ 36.774462][ T5787] bridge_slave_1: entered promiscuous mode [ 36.775182][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.775222][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.775298][ T5788] bridge_slave_1: entered allmulticast mode [ 36.775967][ T5788] bridge_slave_1: entered promiscuous mode [ 36.783092][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.783134][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.783184][ T5796] bridge_slave_0: entered allmulticast mode [ 36.783894][ T5796] bridge_slave_0: entered promiscuous mode [ 36.803486][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.803530][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.803580][ T5796] bridge_slave_1: entered allmulticast mode [ 36.804345][ T5796] bridge_slave_1: entered promiscuous mode [ 36.813506][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.814831][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.815907][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.836122][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.847103][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.855970][ T5788] team0: Port device team_slave_0 added [ 36.859264][ T5788] team0: Port device team_slave_1 added [ 36.860318][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.866490][ T5787] team0: Port device team_slave_0 added [ 36.869043][ T5787] team0: Port device team_slave_1 added [ 36.869166][ T5795] rxe_eth0 speed is unknown, defaulting to 1000 [ 36.901213][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.901226][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.901238][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.902748][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.902757][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.902769][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.904150][ T5796] team0: Port device team_slave_0 added [ 36.908242][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.908249][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.908261][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.909678][ T5796] team0: Port device team_slave_1 added [ 36.910938][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.910948][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.910964][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.942217][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.942227][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.942239][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.945976][ T5788] hsr_slave_0: entered promiscuous mode [ 36.946487][ T5788] hsr_slave_1: entered promiscuous mode [ 36.951213][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.951222][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.951235][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.007034][ T5796] hsr_slave_0: entered promiscuous mode [ 37.007468][ T5796] hsr_slave_1: entered promiscuous mode [ 37.008076][ T5796] debugfs: 'hsr0' already exists in 'hsr' [ 37.008121][ T5796] Cannot create hsr debugfs directory [ 37.011118][ T5787] hsr_slave_0: entered promiscuous mode [ 37.011559][ T5787] hsr_slave_1: entered promiscuous mode [ 37.011875][ T5787] debugfs: 'hsr0' already exists in 'hsr' [ 37.011886][ T5787] Cannot create hsr debugfs directory [ 37.239931][ T5788] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.245118][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 37.245569][ T5788] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.252554][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 37.252987][ T5788] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.257269][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 37.262215][ T5788] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.266975][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.320409][ T5787] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.322590][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 37.325481][ T5787] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.328078][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 37.344075][ T5787] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.346765][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 37.347187][ T5787] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.350046][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.373339][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.373384][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.373438][ T5795] bridge_slave_0: entered allmulticast mode [ 37.374153][ T5795] bridge_slave_0: entered promiscuous mode [ 37.386773][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.386829][ T5788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.387267][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.387315][ T5788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.390255][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.390303][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.390362][ T5795] bridge_slave_1: entered allmulticast mode [ 37.391147][ T5795] bridge_slave_1: entered promiscuous mode [ 37.413230][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.420692][ T5796] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.424726][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 37.425979][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.426001][ T5796] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.427870][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 37.444115][ T5796] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.446349][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 37.446817][ T5796] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.449072][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.465481][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.465527][ T5787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.465651][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.465700][ T5787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.471069][ T5795] team0: Port device team_slave_0 added [ 37.472404][ T5795] team0: Port device team_slave_1 added [ 37.504882][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.504892][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.504904][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.505964][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.505972][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.505985][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.530132][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.530180][ T5796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.530285][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.530367][ T5796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.550475][ T5795] hsr_slave_0: entered promiscuous mode [ 37.550911][ T5795] hsr_slave_1: entered promiscuous mode [ 37.551246][ T5795] debugfs: 'hsr0' already exists in 'hsr' [ 37.551261][ T5795] Cannot create hsr debugfs directory [ 37.595157][ T1174] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.597182][ T1174] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.599204][ T1174] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.601116][ T1174] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.603333][ T1174] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.605530][ T1174] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.627622][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.680385][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.686537][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.711814][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.711882][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.713107][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.713153][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.728292][ T5795] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.732625][ T5795] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 37.733238][ T5795] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.735002][ T5795] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 37.737606][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.741254][ T5795] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.744649][ T5795] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 37.745026][ T5795] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.746740][ T5795] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.751274][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.760698][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.760744][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.766399][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.766448][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.792772][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.820318][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.820364][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.825775][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.825821][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.877032][ T5796] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.885640][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.900526][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.904663][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.904708][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.908353][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.908452][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.060888][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.094085][ T5788] veth0_vlan: entered promiscuous mode [ 38.098034][ T5788] veth1_vlan: entered promiscuous mode [ 38.118890][ T5788] veth0_macvtap: entered promiscuous mode [ 38.122153][ T5788] veth1_macvtap: entered promiscuous mode [ 38.134723][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.138213][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.147291][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.165080][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.200233][ T5879] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.200374][ T5879] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.200394][ T5879] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.200412][ T5879] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.210512][ T5787] veth0_vlan: entered promiscuous mode [ 38.219700][ T5801] Bluetooth: hci3: command tx timeout [ 38.219896][ T5801] Bluetooth: hci0: command tx timeout [ 38.219983][ T5801] Bluetooth: hci1: command tx timeout [ 38.220168][ T5802] Bluetooth: hci2: command tx timeout [ 38.235041][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.237340][ T5796] veth0_vlan: entered promiscuous mode [ 38.246960][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.246974][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.259904][ T5787] veth1_vlan: entered promiscuous mode [ 38.277113][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.277126][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.280963][ T5796] veth1_vlan: entered promiscuous mode [ 38.311240][ T5787] veth0_macvtap: entered promiscuous mode [ 38.313273][ T5796] veth0_macvtap: entered promiscuous mode [ 38.320591][ T5787] veth1_macvtap: entered promiscuous mode [ 38.323422][ T5795] veth0_vlan: entered promiscuous mode [ 38.324847][ T5796] veth1_macvtap: entered promiscuous mode [ 38.337059][ T5795] veth1_vlan: entered promiscuous mode [ 38.340277][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.341549][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.344073][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.350831][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.357804][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.372990][ T5788] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.380031][ T5788] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 38.390013][ T5788] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 38.390892][ T5788] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 38.392689][ T5795] veth0_macvtap: entered promiscuous mode [ 38.410586][ T5788] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 38.410626][ T5795] veth1_macvtap: entered promiscuous mode [ 38.437496][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.437510][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.449904][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.457589][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.457599][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.464712][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.464724][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.467890][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.479719][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.479731][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.488842][ T5879] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.509840][ T5879] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.510028][ T5879] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.510165][ T5879] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.510188][ T5879] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.510209][ T5879] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.510232][ T5879] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.529295][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.529309][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.538668][ T5837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.538691][ T5837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.538707][ T5837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.538723][ T5837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.557947][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.557960][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.667829][ T5966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 38.976951][ T29] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 39.071642][ T5977] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 39.071917][ T5977] block device autoloading is deprecated and will be removed. [ 39.133807][ T5976] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 39.229750][ T29] usb 5-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=7.03 [ 39.231858][ T29] usb 5-1: Dual-Role OTG device on HNP port [ 39.232248][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.272427][ T29] gspca_main: spca501-2.14.0 probing 0000:0000 [ 39.273109][ T29] gspca_spca501: reg write: error -32 [ 39.273118][ T29] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 39.273152][ T29] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 39.852702][ T64] IPVS: starting estimator thread 0... [ 39.902821][ T5989] netlink: 88 bytes leftover after parsing attributes in process `syz.0.14'. [ 39.948571][ T5990] IPVS: using max 44 ests per chain, 105600 per kthread [ 40.076503][ T5988] file system registered [ 40.381164][ T5802] Bluetooth: hci2: command tx timeout [ 40.381188][ T5802] Bluetooth: hci1: command tx timeout [ 40.381200][ T5802] Bluetooth: hci0: command tx timeout [ 40.381211][ T5802] Bluetooth: hci3: command tx timeout [ 41.043598][ T5788] svc: failed to register nfsdv3 RPC service (errno 5). [ 41.043612][ T5788] failed to unregister tcp with rpcbind [ 41.364489][ T6000] lo speed is unknown, defaulting to 1000 [ 41.364652][ T6000] lo speed is unknown, defaulting to 1000 [ 41.371509][ T6000] lo speed is unknown, defaulting to 1000 [ 41.375770][ T6000] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 41.375815][ T6000] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 41.375924][ T6000] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 41.583408][ T6000] lo speed is unknown, defaulting to 1000 [ 41.589596][ T6000] lo speed is unknown, defaulting to 1000 [ 41.597026][ T6000] lo speed is unknown, defaulting to 1000 [ 41.599256][ T6000] lo speed is unknown, defaulting to 1000 [ 41.702028][ T6003] ======================================================= [ 41.702028][ T6003] WARNING: The mand mount option has been deprecated and [ 41.702028][ T6003] and is ignored by this kernel. Remove the mand [ 41.702028][ T6003] option from the mount to silence this warning. [ 41.702028][ T6003] ======================================================= [ 42.351447][ T5790] Bluetooth: hci2: Invalid connection link type handle 0x00c8 [ 42.393095][ T6011] Console: switching to colour dummy device 80x25 [ 42.468556][ T5802] Bluetooth: hci0: command tx timeout [ 42.468577][ T5802] Bluetooth: hci1: command tx timeout [ 42.468590][ T5802] Bluetooth: hci2: command tx timeout [ 42.469045][ T5790] Bluetooth: hci3: command tx timeout [ 44.538562][ T5790] Bluetooth: hci2: command tx timeout [ 44.538736][ T5802] Bluetooth: hci0: command tx timeout [ 44.540280][ T5801] Bluetooth: hci1: command tx timeout [ 44.855601][ T36] IPVS: starting estimator thread 0... [ 44.947478][ T6035] IPVS: using max 44 ests per chain, 105600 per kthread [ 44.998375][ T6028] netlink: 88 bytes leftover after parsing attributes in process `syz.2.18'. [ 45.186458][ T5787] svc: failed to register nfsdv3 RPC service (errno 5). [ 45.186474][ T5787] failed to unregister tcp with rpcbind [ 45.244398][ T6041] netlink: 32 bytes leftover after parsing attributes in process `syz.1.20'. [ 45.637272][ T6058] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 45.637381][ T6058] CIFS: Attempting to mount //127.0.0.1/test [ 45.639551][ T6058] CIFS: VFS: Error connecting to socket. Aborting operation. [ 45.639592][ T6058] CIFS: VFS: cifs_mount failed w/return code = -111 [ 45.977738][ T6063] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 45.978000][ T6063] Cannot find add_set index 0 as target [ 46.351572][ T5801] Bluetooth: hci0: unexpected event 0x01 length: 16 > 1 [ 47.052919][ T6076] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 47.053037][ T6076] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 47.053047][ T6076] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 47.053054][ T6076] UDF-fs: Scanning with blocksize 512 failed [ 47.056164][ T6076] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 47.056238][ T6076] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 47.056247][ T6076] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 47.056254][ T6076] UDF-fs: Scanning with blocksize 1024 failed [ 47.056708][ T6076] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 47.056757][ T6076] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 47.056766][ T6076] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 47.056772][ T6076] UDF-fs: Scanning with blocksize 2048 failed [ 47.057308][ T6076] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 47.057353][ T6076] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 47.057362][ T6076] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 47.057368][ T6076] UDF-fs: Scanning with blocksize 4096 failed [ 47.057373][ T6076] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 47.072076][ T6078] virtio-fs: tag not found [ 47.110279][ T6083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.33'. [ 47.608121][ T42] audit: type=1326 audit(1793423493.700:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6095 comm="syz.0.34" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741efbc code=0x7ffc0000 [ 47.612134][ T42] audit: type=1326 audit(1793423493.700:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6095 comm="syz.0.34" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741efbc code=0x7ffc0000 [ 47.612879][ T42] audit: type=1326 audit(1793423493.700:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6095 comm="syz.0.34" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741efbc code=0x7ffc0000 [ 47.643325][ T42] audit: type=1326 audit(1793423493.730:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6095 comm="syz.0.34" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741efbc code=0x7ffc0000 [ 47.643546][ T42] audit: type=1326 audit(1793423493.730:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6095 comm="syz.0.34" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741efbc code=0x7ffc0000 [ 47.643851][ T42] audit: type=1326 audit(1793423493.730:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6095 comm="syz.0.34" exe="/syz-executor" sig=0 arch=40000003 syscall=135 compat=1 ip=0xf741efbc code=0x7ffc0000 [ 47.644038][ T42] audit: type=1326 audit(1793423493.730:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6095 comm="syz.0.34" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741efbc code=0x7ffc0000 [ 47.644222][ T42] audit: type=1326 audit(1793423493.730:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6095 comm="syz.0.34" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741efbc code=0x7ffc0000 [ 47.644243][ T42] audit: type=1326 audit(1793423493.730:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6095 comm="syz.0.34" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741efbc code=0x7ffc0000 [ 47.644287][ T42] audit: type=1326 audit(1793423493.730:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6095 comm="syz.0.34" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf741efbc code=0x7ffc0000 [ 47.847431][ T5146] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.353501][ T5796] svc: failed to register nfsdv3 RPC service (errno 5). [ 48.353515][ T5796] failed to unregister tcp with rpcbind [ 48.524783][ T6108] process 'syz.0.34' launched '/dev/fd/5' with NULL argv: empty string added [ 48.792483][ T6121] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 48.792586][ T6121] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 48.792596][ T6121] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 48.792602][ T6121] UDF-fs: Scanning with blocksize 512 failed [ 48.793090][ T6121] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 48.793155][ T6121] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 48.793165][ T6121] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 48.793170][ T6121] UDF-fs: Scanning with blocksize 1024 failed [ 48.793462][ T6121] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 48.793511][ T6121] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 48.793520][ T6121] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 48.793525][ T6121] UDF-fs: Scanning with blocksize 2048 failed [ 48.793764][ T6121] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 48.793807][ T6121] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 48.793816][ T6121] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 48.793822][ T6121] UDF-fs: Scanning with blocksize 4096 failed [ 48.793826][ T6121] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 50.265788][ T6148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.265993][ T6148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.338692][ T5796] svc: failed to register nfsdv3 RPC service (errno 5). [ 51.338709][ T5796] failed to unregister tcp with rpcbind [ 54.212047][ T6223] netlink: 'syz.3.82': attribute type 6 has an invalid length. [ 54.290017][ T5787] svc: failed to register nfsdv3 RPC service (errno 5). [ 54.290031][ T5787] failed to unregister tcp with rpcbind [ 54.847148][ T6260] netlink: zone id is out of range [ 55.858235][ T6279] netlink: 'syz.0.109': attribute type 11 has an invalid length. [ 55.858256][ T6279] netlink: 132 bytes leftover after parsing attributes in process `syz.0.109'. [ 57.265751][ T6310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.120'. [ 57.553581][ T6321] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 58.585681][ T6346] Illegal XDP return value 4294967274 on prog (id 14) dev N/A, expect packet loss! [ 58.652457][ T6357] Mount JFS Failure: -22 [ 58.652469][ T6357] jfs_mount failed w/return code = -22 [ 58.758238][ T6378] devtmpfs: Unknown parameter 'acl' [ 58.775337][ T6384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.153'. [ 58.835612][ T6396] program syz.1.159 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.186304][ T6490] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 59.276833][ T6514] usb usb8: usbfs: process 6514 (syz.0.215) did not claim interface 0 before use [ 59.285842][ T6516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.216'. [ 59.382760][ T6541] warning: `syz.3.228' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 59.413965][ T6546] lo: entered allmulticast mode [ 59.414348][ T6546] tunl0: entered allmulticast mode [ 59.414573][ T6546] gre0: entered allmulticast mode [ 59.414742][ T6546] gretap0: entered allmulticast mode [ 59.414915][ T6546] erspan0: entered allmulticast mode [ 59.415116][ T6546] ip_vti0: entered allmulticast mode [ 59.415399][ T6546] ip6_vti0: entered allmulticast mode [ 59.415577][ T6546] sit0: entered allmulticast mode [ 59.415741][ T6546] ip6tnl0: entered allmulticast mode [ 59.415902][ T6546] ip6gre0: entered allmulticast mode [ 59.416058][ T6546] syz_tun: entered allmulticast mode [ 59.416252][ T6546] ip6gretap0: entered allmulticast mode [ 59.416620][ T6546] bridge0: entered allmulticast mode [ 59.416844][ T6546] bond0: entered allmulticast mode [ 59.416852][ T6546] bond_slave_0: entered allmulticast mode [ 59.416861][ T6546] bond_slave_1: entered allmulticast mode [ 59.417125][ T6546] team0: entered allmulticast mode [ 59.417134][ T6546] team_slave_0: entered allmulticast mode [ 59.417141][ T6546] team_slave_1: entered allmulticast mode [ 59.417528][ T6546] dummy0: entered allmulticast mode [ 59.417748][ T6546] nlmon0: entered allmulticast mode [ 59.417934][ T6546] batadv0: entered allmulticast mode [ 59.418176][ T6546] vxcan0: entered allmulticast mode [ 59.418357][ T6546] vxcan1: entered allmulticast mode [ 59.419057][ T6546] veth0: entered allmulticast mode [ 59.419273][ T6546] veth1: entered allmulticast mode [ 59.419471][ T6546] wg0: entered allmulticast mode [ 59.419666][ T6546] wg1: entered allmulticast mode [ 59.419846][ T6546] wg2: entered allmulticast mode [ 59.420033][ T6546] veth0_to_bridge: entered allmulticast mode [ 59.420542][ T6546] veth1_to_bridge: entered allmulticast mode [ 59.420997][ T6546] veth0_to_bond: entered allmulticast mode [ 59.421467][ T6546] veth1_to_bond: entered allmulticast mode [ 59.421842][ T6546] veth0_to_team: entered allmulticast mode [ 59.422255][ T6546] veth1_to_team: entered allmulticast mode [ 59.422665][ T6546] veth0_to_batadv: entered allmulticast mode [ 59.422853][ T6546] batadv_slave_0: entered allmulticast mode [ 59.423068][ T6546] veth1_to_batadv: entered allmulticast mode [ 59.423256][ T6546] batadv_slave_1: entered allmulticast mode [ 59.423485][ T6546] xfrm0: entered allmulticast mode [ 59.423685][ T6546] veth0_to_hsr: entered allmulticast mode [ 59.423890][ T6546] hsr_slave_0: entered allmulticast mode [ 59.424074][ T6546] veth1_to_hsr: entered allmulticast mode [ 59.424275][ T6546] hsr_slave_1: entered allmulticast mode [ 59.424469][ T6546] hsr0: entered allmulticast mode [ 59.424687][ T6546] veth1_virt_wifi: entered allmulticast mode [ 59.424877][ T6546] veth0_virt_wifi: entered allmulticast mode [ 59.425073][ T6546] virt_wifi0: entered allmulticast mode [ 59.425137][ T6546] veth1_vlan: entered allmulticast mode [ 59.425337][ T6546] veth0_vlan: entered allmulticast mode [ 59.425593][ T6546] vlan0: entered allmulticast mode [ 59.425811][ T6546] vlan1: entered allmulticast mode [ 59.426014][ T6546] macvlan0: entered allmulticast mode [ 59.426231][ T6546] macvlan1: entered allmulticast mode [ 59.426460][ T6546] ipvlan0: entered allmulticast mode [ 59.426531][ T6546] ipvlan1: entered allmulticast mode [ 59.426607][ T6546] veth1_macvtap: entered allmulticast mode [ 59.426792][ T6546] veth0_macvtap: entered allmulticast mode [ 59.427015][ T6546] macvtap0: entered allmulticast mode [ 59.427227][ T6546] macsec0: entered allmulticast mode [ 59.427397][ T6546] geneve0: entered allmulticast mode [ 59.427594][ T6546] geneve1: entered allmulticast mode [ 59.427796][ T6546] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 59.428035][ T6546] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 59.428264][ T6546] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 59.428912][ T6546] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 59.429158][ T6546] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 59.429354][ T6546] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 59.429566][ T6546] bridge1: entered allmulticast mode [ 59.584492][ T6573] comedi comedi0: Minor 3 could not be opened [ 60.697629][ T6610] capability: warning: `syz.2.262' uses deprecated v2 capabilities in a way that may be insecure [ 60.867597][ T6638] Bluetooth: MGMT ver 1.23 [ 60.899964][ T50] wacom 0003:056A:0043.0002: Unknown device_type for 'syz0'. Assuming pen. [ 60.904316][ T50] wacom 0003:056A:0043.0002: hidraw1: USB HID v0.00 Gamepad [syz0] on syz0 [ 60.905285][ T50] input: Wacom Intuos2 9x12 Pen as /devices/virtual/misc/uhid/0003:056A:0043.0002/input/input7 [ 61.054852][ T6666] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 61.094719][ T6678] kAFS: No cell specified [ 61.151996][ T6688] netlink: 256 bytes leftover after parsing attributes in process `syz.1.298'. [ 61.152010][ T6688] netlink: 24 bytes leftover after parsing attributes in process `syz.1.298'. [ 61.271988][ T6703] netlink: 72 bytes leftover after parsing attributes in process `syz.1.305'. [ 61.303611][ T6707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.307'. [ 61.514701][ T6730] device-mapper: table: 248:0: snapshot-merge: Snapshot exception store does not support snapshot-merge. (-EINVAL) [ 61.514718][ T6730] device-mapper: ioctl: error adding target to table [ 61.809785][ T6757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.810062][ T6757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.921665][ T6761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.333'. [ 62.016382][ T6771] Zero length message leads to an empty skb [ 62.429386][ T6821] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 62.446881][ T42] kauditd_printk_skb: 139 callbacks suppressed [ 62.446893][ T42] audit: type=1800 audit(1793423508.540:151): pid=6829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.365" name="bus" dev="tmpfs" ino=459 res=0 errno=-22 [ 62.598746][ T6855] Bluetooth: hci0: too big key_count value 62977 [ 62.728642][ T24] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 62.766372][ T6884] bond1: entered promiscuous mode [ 62.770985][ T6884] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.908506][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 62.909508][ T24] usb 8-1: New USB device found: idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 62.910368][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.911481][ T24] usb 8-1: config 0 descriptor?? [ 62.930525][ T24] as10x_usb: device has been detected [ 62.930891][ T24] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 62.946502][ T24] usb 8-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 62.962852][ T24] as10x_usb: error during firmware upload part1 [ 62.963248][ T24] Registered device nBox DVB-T Dongle [ 63.002170][ T6934] Bluetooth: MGMT ver 1.23 [ 63.060626][ T6947] device-mapper: table: table load rejected: including non-request-stackable devices [ 63.060636][ T6947] device-mapper: table: unable to determine table type [ 63.094799][ T6954] jffs2: notice: (6954) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 63.127457][ T41] usb 8-1: USB disconnect, device number 2 [ 63.145720][ T41] Unregistered device nBox DVB-T Dongle [ 63.150068][ T41] as10x_usb: device has been disconnected [ 64.124713][ T7000] netlink: 16142 bytes leftover after parsing attributes in process `syz.3.437'. [ 64.219111][ T5802] Bluetooth: hci0: command tx timeout [ 64.360628][ T7024] netlink: 12 bytes leftover after parsing attributes in process `syz.2.447'. [ 64.522079][ T7042] unloading [ 64.539524][ T5801] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 65.204149][ T7082] loop5: detected capacity change from 0 to 7 [ 65.214122][ T7082] Dev loop5: unable to read RDB block 7 [ 65.214142][ T7082] loop5: unable to read partition table [ 65.214234][ T7082] loop5: partition table beyond EOD, truncated [ 65.214260][ T7082] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 65.221803][ T7084] block nbd0: server does not support multiple connections per device. [ 65.222570][ T7084] block nbd0: shutting down sockets [ 65.261039][ T7082] loop5: detected capacity change from 7 to 8 [ 65.498958][ T5801] Bluetooth: hci1: unexpected event 0x01 length: 16 > 1 [ 65.527010][ T7123] tipc: Failed to obtain node identity [ 65.527046][ T7123] tipc: Enabling of bearer rejected, failed to enable media [ 65.554262][ T7125] CIFS: Attempting to mount //1#7.0.0.1/Ë7Ì/Ðä…¯»—yshare [ 65.558339][ T7125] CIFS: VFS: Error connecting to socket. Aborting operation. [ 65.558362][ T7125] CIFS: VFS: cifs_mount failed w/return code = -111 [ 66.018695][ T5801] Bluetooth: hci3: unexpected event 0x01 length: 16 > 1 [ 66.285972][ T7163] input: syz0 as /devices/virtual/input/input10 [ 66.308549][ T5801] Bluetooth: hci0: command 0x0c24 tx timeout [ 66.479936][ T7174] file system registered [ 67.414404][ T7186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.518'. [ 67.551941][ T7211] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 68.259840][ T5837] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.337419][ T5837] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.374541][ T5802] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.376110][ T5802] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.377048][ T5802] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.378025][ T5802] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.379020][ T5802] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.408752][ T7213] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 68.412034][ T5837] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.496496][ T5837] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.627243][ T5837] bridge_slave_1: left allmulticast mode [ 68.627266][ T5837] bridge_slave_1: left promiscuous mode [ 68.627909][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.643440][ T5837] bridge_slave_0: left allmulticast mode [ 68.643457][ T5837] bridge_slave_0: left promiscuous mode [ 68.644129][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.762357][ T5837] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.765084][ T5837] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.766159][ T5837] bond0 (unregistering): Released all slaves [ 68.795343][ T5506] 8021q: adding VLAN 0 to HW filter on device eth2 [ 68.797460][ T7251] rxe_eth0 speed is unknown, defaulting to 1000 [ 68.916781][ T7251] lo speed is unknown, defaulting to 1000 [ 68.972023][ T5802] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 69.036994][ T5506] 8021q: adding VLAN 0 to HW filter on device eth3 [ 69.155389][ T5837] hsr_slave_0: left promiscuous mode [ 69.156691][ T5837] hsr_slave_1: left promiscuous mode [ 69.157109][ T5837] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.157125][ T5837] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.157938][ T5837] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.157947][ T5837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.165379][ T5837] veth1_macvtap: left promiscuous mode [ 69.165778][ T5837] veth0_macvtap: left promiscuous mode [ 69.165864][ T5837] veth1_vlan: left promiscuous mode [ 69.165941][ T5837] veth0_vlan: left promiscuous mode [ 69.320537][ T5837] team0 (unregistering): Port device team_slave_1 removed [ 69.333810][ T5837] team0 (unregistering): Port device team_slave_0 removed [ 69.398241][ T5506] 8021q: adding VLAN 0 to HW filter on device eth4 [ 69.424084][ T7251] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.424140][ T7251] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.424193][ T7251] bridge_slave_0: entered allmulticast mode [ 69.424841][ T7251] bridge_slave_0: entered promiscuous mode [ 69.429525][ T7251] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.429573][ T7251] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.429639][ T7251] bridge_slave_1: entered allmulticast mode [ 69.430430][ T7251] bridge_slave_1: entered promiscuous mode [ 69.450381][ T7251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.451880][ T7251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.465448][ T7251] team0: Port device team_slave_0 added [ 69.467580][ T7251] team0: Port device team_slave_1 added [ 69.485488][ T7251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.485500][ T7251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.485512][ T7251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.486388][ T7251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.486395][ T7251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.486407][ T7251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.537088][ T7251] hsr_slave_0: entered promiscuous mode [ 69.537522][ T7251] hsr_slave_1: entered promiscuous mode [ 69.537803][ T7251] debugfs: 'hsr0' already exists in 'hsr' [ 69.537813][ T7251] Cannot create hsr debugfs directory [ 69.579022][ T5802] Bluetooth: hci0: command 0x0c24 tx timeout [ 69.592735][ T7343] device-mapper: raid: Choosing default region size of 4MiB [ 69.593077][ T7343] device-mapper: raid: Device 0 specified for rebuild; clearing superblock [ 69.644191][ T7343] md/raid10:mdX: unsupported raid10 layout: 0x 0 [ 69.644205][ T7343] md: pers->run() failed ... [ 69.644792][ T7343] device-mapper: table: 248:2: raid: Failed to run raid array (-EINVAL) [ 69.644805][ T7343] device-mapper: ioctl: error adding target to table [ 69.648528][ T5837] IPVS: stop unused estimator thread 0... [ 69.823340][ T7375] capability: warning: `syz.3.580' uses 32-bit capabilities (legacy support in use) [ 69.824815][ T7375] program syz.3.580 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.857514][ T7377] program syz.0.581 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.054300][ T7251] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.063246][ T7251] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.063790][ T7251] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.065660][ T7251] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.066201][ T7251] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.075637][ T7251] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.076173][ T7251] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.081285][ T7251] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.089090][ T7399] device-mapper: ioctl: Target message sector outside device. [ 70.152909][ T7251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.161408][ T7251] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.164502][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.164547][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.168361][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.168448][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.458587][ T5802] Bluetooth: hci3: command tx timeout [ 70.464583][ T7251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.488292][ T7251] veth0_vlan: entered promiscuous mode [ 70.492075][ T7251] veth1_vlan: entered promiscuous mode [ 70.507506][ T7251] veth0_macvtap: entered promiscuous mode [ 70.510542][ T7251] veth1_macvtap: entered promiscuous mode [ 70.517007][ T7251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.520151][ T7251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.566916][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.566926][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.570654][ T5890] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.580522][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.580534][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.598763][ T5890] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.598964][ T5890] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.598982][ T5890] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.722307][ T7471] kAFS: bad VL server IP address [ 70.840417][ T7488] ptrace attach of "/syz-executor exec"[5788] was attempted by "/syz-executor exec"[7488] [ 70.943478][ T859] cfg80211: failed to load regulatory.db [ 70.950960][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.950997][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.158537][ T5146] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 71.178574][ T1867] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 71.309105][ T5146] usb 8-1: New USB device found: idVendor=12ab, idProduct=0004, bcdDevice=0.00 [ 71.310071][ T5146] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 71.310085][ T5146] usb 8-1: config 179 has no interface number 0 [ 71.310106][ T5146] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 8 [ 71.310118][ T5146] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 65535, setting to 8 [ 71.310130][ T5146] usb 8-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 71.310143][ T5146] usb 8-1: config 179 interface 65 has no altsetting 0 [ 71.310157][ T5146] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.313117][ T7507] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 71.313212][ T7507] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 71.339014][ T1867] usb 6-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 71.339993][ T1867] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 71.340005][ T1867] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 71.340021][ T1867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.368704][ T5146] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:179.65/input/input11 [ 71.420271][ T5187] input input11: unable to receive magic message: -110 [ 71.426334][ T5187] input input11: unable to receive magic message: -32 [ 71.432876][ T5187] input input11: unable to receive magic message: -32 [ 71.437391][ T5187] input input11: unable to receive magic message: -32 [ 71.440984][ T6888] input input11: unable to receive magic message: -32 [ 71.451977][ T5187] input input11: unable to receive magic message: -32 [ 71.453208][ T5187] input input11: unable to receive magic message: -32 [ 71.533280][ T7507] input input11: unable to receive magic message: -32 [ 71.537042][ T41] usb 8-1: USB disconnect, device number 3 [ 71.537945][ C2] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 71.549018][ T5889] usb 6-1: USB disconnect, device number 2 [ 71.965096][ T7532] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 71.982009][ T7532] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 71.982125][ T7532] pci 0000:00:01.0: BAR 2 [mem 0xfeaf6000-0xfeaf6fff] [ 71.982330][ T7532] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 71.983392][ T7532] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 71.994242][ T7532] pci 0000:00:01.0: Adding to iommu group 1 [ 71.997421][ T7532] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 71.997437][ T7532] pci 0000:00:01.0: vgaarb: bridge control possible [ 71.997452][ T7532] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 72.002185][ T7532] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 72.007973][ T7532] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 72.013869][ T7532] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 72.025522][ T7532] [drm] Found bochs VGA, ID 0xb0c5. [ 72.025539][ T7532] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 72.036043][ T7532] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 72.088483][ T7520] comedi comedi1: reset error (fatal) [ 72.117687][ T7532] Console: switching to colour frame buffer device 160x50 [ 72.147896][ T7532] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 72.538574][ T5802] Bluetooth: hci3: command tx timeout [ 72.704188][ T7558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.645'. [ 72.782542][ T7562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.782772][ T7562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.945443][ T7589] input: syz0 as /devices/virtual/input/input13 [ 74.628565][ T5802] Bluetooth: hci3: command tx timeout [ 74.978861][ T7611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.979087][ T7611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.051514][ T42] audit: type=1400 audit(1793423521.150:152): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="foo" pid=7620 comm="syz.1.670" name="foo" offset=55 [ 75.458570][ T7638] syz.3.676: vmalloc error: size 2147479553, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 75.458686][ T7638] CPU: 3 UID: 0 PID: 7638 Comm: syz.3.676 Not tainted syzkaller #0 PREEMPT(full) [ 75.458699][ T7638] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.458706][ T7638] Call Trace: [ 75.458710][ T7638] [ 75.458715][ T7638] dump_stack_lvl+0x100/0x190 [ 75.458735][ T7638] warn_alloc.cold+0x9e/0xb2 [ 75.458749][ T7638] ? __pfx_warn_alloc+0x10/0x10 [ 75.458780][ T7638] ? process_measurement+0x4c8/0x2350 [ 75.458833][ T7638] __vmalloc_node_range_noprof+0x11f2/0x1440 [ 75.458847][ T7638] ? rcu_is_watching+0x13/0xc0 [ 75.458870][ T7638] ? trace_hrtimer_start+0x77/0x220 [ 75.458923][ T7638] ? lru_gen_seq_write+0x136/0x1580 [ 75.458966][ T7638] ? find_held_lock+0x2b/0x80 [ 75.458990][ T7638] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 75.459008][ T7638] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 75.459024][ T7638] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 75.459044][ T7638] ? rcu_is_watching+0x13/0xc0 [ 75.459061][ T7638] ? rcu_is_watching+0x13/0xc0 [ 75.459078][ T7638] __kvmalloc_node_noprof+0x3da/0x9b0 [ 75.459096][ T7638] ? lru_gen_seq_write+0x136/0x1580 [ 75.459112][ T7638] ? lru_gen_seq_write+0x136/0x1580 [ 75.459130][ T7638] lru_gen_seq_write+0x136/0x1580 [ 75.459151][ T7638] ? __pfx_lru_gen_seq_write+0x10/0x10 [ 75.459167][ T7638] ? find_held_lock+0x2b/0x80 [ 75.459180][ T7638] ? aa_file_perm+0x7e4/0x14d0 [ 75.459204][ T7638] ? aa_file_perm+0x7e4/0x14d0 [ 75.459223][ T7638] ? aa_file_perm+0x7f3/0x14d0 [ 75.459239][ T7638] ? __pfx___futex_wait+0x10/0x10 [ 75.459253][ T7638] ? __lock_acquire+0x5c0/0x1f40 [ 75.459271][ T7638] ? irqentry_exit+0x202/0xab0 [ 75.459346][ T7638] ? __debugfs_file_get+0x1fc/0x860 [ 75.459375][ T7638] ? __pfx___debugfs_file_get+0x10/0x10 [ 75.459390][ T7638] ? lock_acquire+0x1d1/0x380 [ 75.459401][ T7638] ? ksys_write+0x12a/0x250 [ 75.459428][ T7638] ? full_proxy_write+0x135/0x1a0 [ 75.459441][ T7638] full_proxy_write+0x135/0x1a0 [ 75.459457][ T7638] vfs_write+0x2aa/0x1050 [ 75.459469][ T7638] ? __pfx_full_proxy_write+0x10/0x10 [ 75.459483][ T7638] ? lock_acquire+0x1d1/0x380 [ 75.459493][ T7638] ? __fget_files+0x34/0x3d0 [ 75.459513][ T7638] ? __pfx_vfs_write+0x10/0x10 [ 75.459522][ T7638] ? find_held_lock+0x2b/0x80 [ 75.459536][ T7638] ? __fget_files+0x215/0x3d0 [ 75.459549][ T7638] ? __fget_files+0x21f/0x3d0 [ 75.459564][ T7638] ksys_write+0x12a/0x250 [ 75.459574][ T7638] ? __pfx_ksys_write+0x10/0x10 [ 75.459594][ T7638] __do_fast_syscall_32+0x14b/0x8c0 [ 75.459611][ T7638] do_fast_syscall_32+0x32/0x70 [ 75.459624][ T7638] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 75.459638][ T7638] RIP: 0023:0xf73aefbc [ 75.459647][ T7638] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 75.459657][ T7638] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 75.459667][ T7638] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 75.459673][ T7638] RDX: 00000000fffffcdc RSI: 0000000000000000 RDI: 0000000000000000 [ 75.459679][ T7638] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 75.459684][ T7638] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 75.459690][ T7638] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 75.459704][ T7638] [ 75.459708][ T7638] Mem-Info: [ 75.459714][ T7638] active_anon:7973 inactive_anon:334 isolated_anon:0 [ 75.459714][ T7638] active_file:38 inactive_file:54520 isolated_file:0 [ 75.459714][ T7638] unevictable:1000 dirty:662 writeback:0 [ 75.459714][ T7638] slab_reclaimable:10164 slab_unreclaimable:56719 [ 75.459714][ T7638] mapped:27624 shmem:4345 pagetables:1213 [ 75.459714][ T7638] sec_pagetables:298 bounce:0 [ 75.459714][ T7638] kernel_misc_reclaimable:0 [ 75.459714][ T7638] free:29648 free_pcp:11235 free_cma:0 [ 75.459738][ T7638] Node 0 active_anon:72kB inactive_anon:88kB active_file:152kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:16kB writeback:0kB shmem:4kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8960kB pagetables:1744kB sec_pagetables:1128kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 75.459763][ T7638] Node 1 active_anon:31820kB inactive_anon:1248kB active_file:0kB inactive_file:218076kB unevictable:4000kB isolated(anon):0kB isolated(file):0kB mapped:110472kB dirty:2632kB writeback:0kB shmem:17376kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4784kB pagetables:3108kB sec_pagetables:64kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 75.459790][ T7638] Node 0 DMA free:1948kB boost:0kB min:744kB low:928kB high:1112kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:4kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:196kB local_pcp:32kB free_cma:0kB [ 75.459818][ T7638] lowmem_reserve[]: 0 256 256 256 256 [ 75.459838][ T7638] Node 0 DMA32 free:14340kB boost:0kB min:12724kB low:15904kB high:19084kB reserved_highatomic:0kB free_highatomic:0kB active_anon:72kB inactive_anon:88kB active_file:140kB inactive_file:4kB unevictable:0kB writepending:12kB zspages:0kB present:1032196kB managed:262460kB mlocked:0kB bounce:0kB free_pcp:6332kB local_pcp:2256kB free_cma:0kB [ 75.459868][ T7638] lowmem_reserve[]: 0 0 0 0 0 [ 75.459885][ T7638] Node 1 DMA32 free:102304kB boost:0kB min:45980kB low:57472kB high:68964kB reserved_highatomic:0kB free_highatomic:0kB active_anon:31820kB inactive_anon:1248kB active_file:0kB inactive_file:218076kB unevictable:4000kB writepending:2632kB zspages:3216kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:38412kB local_pcp:11600kB free_cma:0kB [ 75.459912][ T7638] lowmem_reserve[]: 0 0 0 0 0 [ 75.459928][ T7638] Node 0 DMA: 58*4kB (U) 18*8kB (U) 16*16kB (U) 5*32kB (U) 6*64kB (U) 0*128kB 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 1944kB [ 75.460042][ T7638] Node 0 DMA32: 68*4kB (UM) 54*8kB (UME) 24*16kB (UME) 38*32kB (UME) 24*64kB (UE) 10*128kB (UME) 8*256kB (UM) 8*512kB (M) 1*1024kB (M) 1*2048kB (M) 0*4096kB = 14336kB [ 75.460138][ T7638] Node 1 DMA32: 1*4kB (M) 106*8kB (U) 1*16kB (M) 55*32kB (UE) 62*64kB (UME) 15*128kB (UME) 4*256kB (UE) 5*512kB (UM) 14*1024kB (UM) 9*2048kB (UM) 14*4096kB (UM) = 102212kB [ 75.460224][ T7638] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 75.460233][ T7638] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 75.460241][ T7638] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 75.460249][ T7638] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 75.460257][ T7638] 59441 total pagecache pages [ 75.460261][ T7638] 542 pages in swap cache [ 75.460265][ T7638] Free swap = 116896kB [ 75.460268][ T7638] Total swap = 124996kB [ 75.460272][ T7638] 524155 pages RAM [ 75.460275][ T7638] 0 pages HighMem/MovableOnly [ 75.460278][ T7638] 217648 pages reserved [ 75.460281][ T7638] 0 pages cma reserved [ 75.554211][ T7642] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 76.698507][ T5802] Bluetooth: hci3: command tx timeout [ 79.123337][ T5889] lo speed is unknown, defaulting to 1000 [ 79.578642][ T7784] netlink: 24 bytes leftover after parsing attributes in process `syz.3.736'. [ 79.578689][ T7784] netlink: 24 bytes leftover after parsing attributes in process `syz.3.736'. [ 79.950057][ T7807] netlink: 60 bytes leftover after parsing attributes in process `syz.3.749'. [ 79.950080][ T7807] netlink: 60 bytes leftover after parsing attributes in process `syz.3.749'. [ 80.134703][ T50] wiimote 0005:057E:0306.0003: hidraw1: BLUETOOTH HID v0.00 Gamepad [syz0] on syz0 [ 80.182662][ T50] wiimote 0005:057E:0306.0003: New device registered (Wiimote 1) [ 80.938739][ T7818] wiimote 0005:057E:0306.0003: Device removed [ 81.259489][ T5889] wiimote 0005:057E:0306.0003: detected device: Nintendo Wii Remote (Gen 1) (1) [ 81.276487][ T5889] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0003/input/input15 [ 81.288363][ T5889] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0003/input/input16 [ 81.294871][ T5889] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0003/input/input14 [ 81.568151][ T7871] input: syz0 as /devices/virtual/input/input17 [ 83.864555][ T7916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.864913][ T7916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.698577][ T1867] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 84.849736][ T1867] usb 7-1: New USB device found: idVendor=0c2e, idProduct=0720, bcdDevice=1.00 [ 84.863049][ T1867] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.863075][ T1867] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.962416][ T1867] metro_usb 7-1:1.0: Metrologic USB to Serial converter detected [ 85.014068][ T1867] usb 7-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 85.028974][ T7947] loop5: detected capacity change from 0 to 7 [ 85.030709][ T7947] Dev loop5: unable to read RDB block 7 [ 85.030737][ T7947] loop5: unable to read partition table [ 85.030928][ T7947] loop5: partition table beyond EOD, truncated [ 85.030955][ T7947] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 85.211830][ T1867] usb 7-1: USB disconnect, device number 2 [ 85.259911][ T1867] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 85.262419][ T1867] metro_usb 7-1:1.0: device disconnected [ 86.614740][ T42] audit: type=1326 audit(1793423532.710:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7948 comm="syz.2.810" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 86.614790][ T42] audit: type=1326 audit(1793423532.710:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7948 comm="syz.2.810" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 86.615818][ T42] audit: type=1326 audit(1793423532.710:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7948 comm="syz.2.810" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 86.615923][ T42] audit: type=1326 audit(1793423532.710:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7948 comm="syz.2.810" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 86.616018][ T42] audit: type=1326 audit(1793423532.710:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7948 comm="syz.2.810" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 86.616160][ T42] audit: type=1326 audit(1793423532.710:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7948 comm="syz.2.810" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 86.616197][ T42] audit: type=1326 audit(1793423532.710:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7948 comm="syz.2.810" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 86.616450][ T42] audit: type=1326 audit(1793423532.710:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7948 comm="syz.2.810" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 86.616491][ T42] audit: type=1326 audit(1793423532.710:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7948 comm="syz.2.810" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 86.616598][ T42] audit: type=1326 audit(1793423532.710:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7948 comm="syz.2.810" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 86.769371][ T7963] support for cryptoloop has been removed. Use dm-crypt instead. [ 86.982861][ T7979] bonding: no command found in bonding_masters - use +ifname or -ifname [ 87.082267][ T7982] ipvlan0: left allmulticast mode [ 87.665996][ T41] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 87.668037][ T41] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz1] on syz0 [ 87.787463][ T58] usb 5-1: USB disconnect, device number 2 [ 88.608939][ T8058] FAULT_INJECTION: forcing a failure. [ 88.608939][ T8058] name failslab, interval 1, probability 0, space 0, times 1 [ 88.608958][ T8058] CPU: 1 UID: 0 PID: 8058 Comm: syz.3.857 Not tainted syzkaller #0 PREEMPT(full) [ 88.608970][ T8058] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.608976][ T8058] Call Trace: [ 88.608980][ T8058] [ 88.608984][ T8058] dump_stack_lvl+0x100/0x190 [ 88.609004][ T8058] should_fail_ex.cold+0x5/0xa [ 88.609021][ T8058] should_failslab+0xc2/0x120 [ 88.609049][ T8058] kmem_cache_alloc_noprof+0x92/0x6a0 [ 88.609068][ T8058] ? prepare_creds+0x2c/0x950 [ 88.609094][ T8058] prepare_creds+0x2c/0x950 [ 88.609111][ T8058] join_session_keyring+0x17/0x350 [ 88.609128][ T8058] keyctl_join_session_keyring+0x95/0xd0 [ 88.609140][ T8058] __ia32_compat_sys_keyctl+0x406/0x550 [ 88.609157][ T8058] __do_fast_syscall_32+0x14b/0x8c0 [ 88.609173][ T8058] do_fast_syscall_32+0x32/0x70 [ 88.609188][ T8058] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 88.609202][ T8058] RIP: 0023:0xf73aefbc [ 88.609212][ T8058] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 88.609221][ T8058] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000120 [ 88.609232][ T8058] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000000 [ 88.609238][ T8058] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 88.609243][ T8058] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 88.609248][ T8058] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 88.609254][ T8058] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 88.609267][ T8058] [ 88.746443][ T8063] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.747349][ T8063] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.749419][ T8063] bridge0: left allmulticast mode [ 88.808690][ T5889] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 88.968552][ T5889] usb 5-1: Using ep0 maxpacket: 8 [ 88.969409][ T5889] usb 5-1: New USB device found: idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 88.971716][ T5889] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 88.971738][ T5889] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 88.971751][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 88.971762][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 89.057944][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.057961][ T5889] usb 5-1: Product: syz [ 89.057968][ T5889] usb 5-1: Manufacturer: syz [ 89.057975][ T5889] usb 5-1: SerialNumber: syz [ 89.234039][ T5889] usb 5-1: config 0 descriptor?? [ 89.456583][ T8052] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 89.701005][ T5889] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 89.701191][ C3] ================================================================== [ 89.701198][ C3] BUG: KASAN: slab-use-after-free in find_endpoint+0x2a3/0x2c0 [ 89.701218][ C3] Read of size 1 at addr ffff88804b0ca0e8 by task kworker/3:3/5889 [ 89.701226][ C3] [ 89.701232][ C3] CPU: 3 UID: 0 PID: 5889 Comm: kworker/3:3 Not tainted syzkaller #0 PREEMPT(full) [ 89.701244][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.701251][ C3] Workqueue: usb_hub_wq hub_event [ 89.701267][ C3] Call Trace: [ 89.701271][ C3] [ 89.701275][ C3] dump_stack_lvl+0x100/0x190 [ 89.701292][ C3] print_report+0x13d/0x4b0 [ 89.701306][ C3] ? __virt_addr_valid+0x239/0x430 [ 89.701319][ C3] ? find_endpoint+0x2a3/0x2c0 [ 89.701332][ C3] kasan_report+0xdf/0x1c0 [ 89.701345][ C3] ? find_endpoint+0x2a3/0x2c0 [ 89.701366][ C3] find_endpoint+0x2a3/0x2c0 [ 89.701381][ C3] dummy_timer+0x506/0x3840 [ 89.701393][ C3] ? do_raw_spin_lock+0x128/0x260 [ 89.701406][ C3] ? find_held_lock+0x2b/0x80 [ 89.701419][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 89.701441][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 89.701451][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 89.701463][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 89.701473][ C3] ? __pfx_debug_object_deactivate+0x10/0x10 [ 89.701483][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 89.701494][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 89.701504][ C3] ? mark_held_locks+0x40/0x70 [ 89.701513][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 89.701524][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 89.701534][ C3] __hrtimer_run_queues+0x448/0x9a0 [ 89.701551][ C3] hrtimer_run_softirq+0x1ca/0x360 [ 89.701567][ C3] handle_softirqs+0x216/0xa20 [ 89.701578][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 89.701587][ C3] ? _raw_spin_unlock+0x28/0x50 [ 89.701596][ C3] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 89.701606][ C3] __irq_exit_rcu+0x178/0x220 [ 89.701616][ C3] irq_exit_rcu+0x9/0x30 [ 89.701624][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 89.701635][ C3] [ 89.701639][ C3] [ 89.701643][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 89.701655][ C3] RIP: 0010:lock_release+0x19e/0x310 [ 89.701665][ C3] Code: ff 65 0f c1 05 1b 5c d1 13 83 f8 01 0f 85 27 01 00 00 9c 58 f6 c4 02 0f 85 12 01 00 00 41 f7 c6 00 02 00 00 0f 85 c8 00 00 00 <48> 8b 44 24 10 65 48 2b 05 5d 12 d1 13 0f 85 4d 01 00 00 48 83 c4 [ 89.701675][ C3] RSP: 0018:ffffc900061d65e8 EFLAGS: 00000206 [ 89.701683][ C3] RAX: 0000000000000046 RBX: ffffffff8ffeb120 RCX: ffffc900061d65f4 [ 89.701690][ C3] RDX: 0000000000000000 RSI: ffffffff8e5fcf73 RDI: ffffffff8c835980 [ 89.701696][ C3] RBP: ffffffff81baed7e R08: 0000000000000001 R09: 0000000000000007 [ 89.701702][ C3] R10: 0000000000000200 R11: 000000000006a2d7 R12: ffff888025440000 [ 89.701708][ C3] R13: ffffc900061d66a0 R14: 0000000000000202 R15: 0000000000000006 [ 89.701715][ C3] ? unwind_next_frame+0x3be/0x2090 [ 89.701733][ C3] unwind_next_frame+0x3c3/0x2090 [ 89.701747][ C3] ? usb_probe_interface+0x386/0x980 [ 89.701763][ C3] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 89.701775][ C3] arch_stack_walk+0x94/0xf0 [ 89.701788][ C3] ? __pfx_usb_probe_interface+0x10/0x10 [ 89.701803][ C3] ? really_probe+0x241/0xa60 [ 89.701825][ C3] stack_trace_save+0x8e/0xc0 [ 89.701835][ C3] ? __pfx_stack_trace_save+0x10/0x10 [ 89.701845][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 89.701855][ C3] ? stack_depot_save_flags+0x49a/0xa10 [ 89.701872][ C3] kasan_save_stack+0x30/0x50 [ 89.701882][ C3] ? kasan_save_stack+0x30/0x50 [ 89.701891][ C3] ? kasan_save_track+0x14/0x30 [ 89.701900][ C3] ? __kasan_slab_alloc+0x89/0x90 [ 89.701910][ C3] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 89.701925][ C3] ? __kernfs_new_node+0xd2/0xa10 [ 89.701971][ C3] ? kernfs_new_node+0x194/0x200 [ 89.701984][ C3] ? __kernfs_create_file+0x53/0x350 [ 89.701994][ C3] ? sysfs_add_file_mode_ns+0x207/0x3c0 [ 89.702005][ C3] ? sysfs_create_file_ns+0x145/0x1e0 [ 89.702017][ C3] ? device_create_file+0xf2/0x1d0 [ 89.702027][ C3] ? device_add+0x2cb/0x1970 [ 89.702041][ C3] ? input_register_device+0x888/0xe60 [ 89.702055][ C3] ? powermate_probe+0xcd6/0x1370 [ 89.702067][ C3] ? usb_probe_interface+0x386/0x980 [ 89.702090][ C3] kasan_save_track+0x14/0x30 [ 89.702100][ C3] __kasan_slab_alloc+0x89/0x90 [ 89.702111][ C3] kmem_cache_alloc_noprof+0x269/0x6a0 [ 89.702127][ C3] ? __kernfs_new_node+0xd2/0xa10 [ 89.702142][ C3] __kernfs_new_node+0xd2/0xa10 [ 89.702157][ C3] ? lock_acquire+0x1d1/0x380 [ 89.702167][ C3] ? kernfs_root+0x23/0x2a0 [ 89.702180][ C3] ? __pfx___kernfs_new_node+0x10/0x10 [ 89.702195][ C3] ? lock_acquire+0x1d1/0x380 [ 89.702206][ C3] ? kernfs_root+0x23/0x2a0 [ 89.702218][ C3] ? find_held_lock+0x2b/0x80 [ 89.702232][ C3] ? kernfs_root+0xee/0x2a0 [ 89.702244][ C3] ? kernfs_root+0xee/0x2a0 [ 89.702258][ C3] kernfs_new_node+0x194/0x200 [ 89.702273][ C3] ? __pfx_kernfs_new_node+0x10/0x10 [ 89.702289][ C3] ? sysfs_create_dir_ns+0x14c/0x2b0 [ 89.702301][ C3] ? sysfs_create_dir_ns+0x18a/0x2b0 [ 89.702315][ C3] __kernfs_create_file+0x53/0x350 [ 89.702327][ C3] sysfs_add_file_mode_ns+0x207/0x3c0 [ 89.702341][ C3] sysfs_create_file_ns+0x145/0x1e0 [ 89.702353][ C3] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 89.702369][ C3] ? acpi_device_notify+0x3ae/0x510 [ 89.702389][ C3] ? acpi_device_notify+0x3ae/0x510 [ 89.702402][ C3] device_create_file+0xf2/0x1d0 [ 89.702412][ C3] device_add+0x2cb/0x1970 [ 89.702428][ C3] ? __pfx_device_add+0x10/0x10 [ 89.702443][ C3] ? input_register_device+0x9a0/0xe60 [ 89.702457][ C3] ? input_register_device+0xa5f/0xe60 [ 89.702471][ C3] ? kfree+0x22b/0x6d0 [ 89.702482][ C3] ? mark_held_locks+0x40/0x70 [ 89.702493][ C3] input_register_device+0x888/0xe60 [ 89.702508][ C3] powermate_probe+0xcd6/0x1370 [ 89.702520][ C3] usb_probe_interface+0x386/0x980 [ 89.702536][ C3] ? __pfx_usb_probe_interface+0x10/0x10 [ 89.702550][ C3] ? kernfs_put+0x3f/0x60 [ 89.702563][ C3] ? sysfs_create_link+0x68/0xc0 [ 89.702576][ C3] ? __pfx_usb_probe_interface+0x10/0x10 [ 89.702592][ C3] really_probe+0x241/0xa60 [ 89.702606][ C3] __driver_probe_device+0x210/0x460 [ 89.702619][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 89.702629][ C3] driver_probe_device+0x4a/0x140 [ 89.702643][ C3] __device_attach_driver+0x1df/0x320 [ 89.702657][ C3] ? __pfx___device_attach_driver+0x10/0x10 [ 89.702670][ C3] bus_for_each_drv+0x159/0x1e0 [ 89.702681][ C3] ? __pfx_bus_for_each_drv+0x10/0x10 [ 89.702692][ C3] ? lockdep_hardirqs_on+0x7d/0x110 [ 89.702703][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 89.702714][ C3] __device_attach+0x1e4/0x4c0 [ 89.702727][ C3] ? __pfx___device_attach+0x10/0x10 [ 89.702741][ C3] ? do_raw_spin_unlock+0x145/0x1e0 [ 89.702754][ C3] device_initial_probe+0xaf/0xf0 [ 89.702768][ C3] __bus_probe_device+0x60/0x160 [ 89.702780][ C3] device_add+0x121d/0x1970 [ 89.702795][ C3] ? __pfx_device_add+0x10/0x10 [ 89.702829][ C3] ? mark_held_locks+0x40/0x70 [ 89.702840][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 89.702851][ C3] usb_set_configuration+0xd97/0x1dc0 [ 89.702869][ C3] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 89.702880][ C3] usb_generic_driver_probe+0xa1/0xe0 [ 89.702892][ C3] usb_probe_device+0xef/0x400 [ 89.702918][ C3] ? __pfx_usb_probe_device+0x10/0x10 [ 89.702932][ C3] really_probe+0x241/0xa60 [ 89.702946][ C3] __driver_probe_device+0x210/0x460 [ 89.702959][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 89.702969][ C3] driver_probe_device+0x4a/0x140 [ 89.702982][ C3] __device_attach_driver+0x1df/0x320 [ 89.702996][ C3] ? __pfx___device_attach_driver+0x10/0x10 [ 89.703009][ C3] bus_for_each_drv+0x159/0x1e0 [ 89.703020][ C3] ? __pfx_bus_for_each_drv+0x10/0x10 [ 89.703031][ C3] ? lockdep_hardirqs_on+0x7d/0x110 [ 89.703042][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 89.703052][ C3] __device_attach+0x1e4/0x4c0 [ 89.703066][ C3] ? __pfx___device_attach+0x10/0x10 [ 89.703079][ C3] ? do_raw_spin_unlock+0x145/0x1e0 [ 89.703093][ C3] device_initial_probe+0xaf/0xf0 [ 89.703107][ C3] __bus_probe_device+0x60/0x160 [ 89.703118][ C3] device_add+0x121d/0x1970 [ 89.703133][ C3] ? __pfx_device_add+0x10/0x10 [ 89.703147][ C3] ? add_device_randomness+0xc9/0x110 [ 89.703171][ C3] usb_new_device.part.0+0xcc2/0x1686 [ 89.703182][ C3] ? do_raw_spin_lock+0x128/0x260 [ 89.703194][ C3] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 89.703204][ C3] ? mark_held_locks+0x40/0x70 [ 89.703215][ C3] hub_event.cold+0x1e3/0xe90 [ 89.703230][ C3] ? __pfx_hub_event+0x10/0x10 [ 89.703243][ C3] ? down_read_non_owner+0x230/0x510 [ 89.703256][ C3] ? lock_acquire+0x1d1/0x380 [ 89.703265][ C3] ? process_one_work+0xa2c/0x1b10 [ 89.703280][ C3] ? process_one_work+0x906/0x1b10 [ 89.703294][ C3] ? process_one_work+0x906/0x1b10 [ 89.703309][ C3] process_one_work+0xac7/0x1b10 [ 89.703325][ C3] ? __pfx_process_one_work+0x10/0x10 [ 89.703340][ C3] ? lock_acquire+0x1d1/0x380 [ 89.703351][ C3] ? __pfx_hub_event+0x10/0x10 [ 89.703368][ C3] worker_thread+0x5ef/0xe50 [ 89.703383][ C3] ? __pfx_worker_thread+0x10/0x10 [ 89.703397][ C3] ? kthread+0x13a/0x450 [ 89.703410][ C3] ? __pfx_worker_thread+0x10/0x10 [ 89.703423][ C3] kthread+0x373/0x450 [ 89.703435][ C3] ? __pfx_kthread+0x10/0x10 [ 89.703448][ C3] ret_from_fork+0x730/0xd60 [ 89.703459][ C3] ? __pfx_ret_from_fork+0x10/0x10 [ 89.703471][ C3] ? __switch_to+0x800/0x10e0 [ 89.703485][ C3] ? __pfx_kthread+0x10/0x10 [ 89.703498][ C3] ret_from_fork_asm+0x1a/0x30 [ 89.703513][ C3] [ 89.703516][ C3] [ 89.703519][ C3] Allocated by task 5964: [ 89.703524][ C3] kasan_save_stack+0x30/0x50 [ 89.703533][ C3] kasan_save_track+0x14/0x30 [ 89.703542][ C3] __kasan_kmalloc+0xaa/0xb0 [ 89.703550][ C3] __kmalloc_noprof+0x32f/0x840 [ 89.703563][ C3] usb_copy_descriptors+0xcd/0x320 [ 89.703576][ C3] f_midi2_bind+0x1dad/0x2770 [ 89.703588][ C3] usb_add_function+0x219/0x890 [ 89.703601][ C3] configfs_composite_bind+0xd83/0x1960 [ 89.703615][ C3] gadget_bind_driver+0x28c/0xbf0 [ 89.703625][ C3] really_probe+0x241/0xa60 [ 89.703636][ C3] __driver_probe_device+0x210/0x460 [ 89.703648][ C3] driver_probe_device+0x4a/0x140 [ 89.703660][ C3] __driver_attach+0x231/0x5b0 [ 89.703672][ C3] bus_for_each_dev+0x13e/0x1d0 [ 89.703681][ C3] bus_add_driver+0x4bf/0x620 [ 89.703691][ C3] driver_register+0x1e2/0x360 [ 89.703704][ C3] usb_gadget_register_driver_owner+0x132/0x210 [ 89.703715][ C3] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 89.703727][ C3] configfs_write_iter+0x302/0x4e0 [ 89.703740][ C3] vfs_write+0x6af/0x1050 [ 89.703749][ C3] ksys_write+0x12a/0x250 [ 89.703757][ C3] __do_fast_syscall_32+0x14b/0x8c0 [ 89.703768][ C3] do_fast_syscall_32+0x32/0x70 [ 89.703778][ C3] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 89.703790][ C3] [ 89.703792][ C3] Freed by task 8016: [ 89.703796][ C3] kasan_save_stack+0x30/0x50 [ 89.703804][ C3] kasan_save_track+0x14/0x30 [ 89.703813][ C3] kasan_save_free_info+0x3b/0x70 [ 89.703825][ C3] __kasan_slab_free+0x5f/0x80 [ 89.703834][ C3] kfree+0x22b/0x6d0 [ 89.703844][ C3] usb_free_all_descriptors+0x81/0x1a0 [ 89.703858][ C3] purge_configs_funcs+0x285/0x510 [ 89.703870][ C3] configfs_composite_unbind+0xae/0x210 [ 89.703882][ C3] gadget_unbind_driver+0x20c/0x4f0 [ 89.703892][ C3] device_remove+0xcb/0x180 [ 89.703903][ C3] device_release_driver_internal+0x441/0x610 [ 89.703917][ C3] driver_detach+0xd8/0x1b0 [ 89.703929][ C3] bus_remove_driver+0x13b/0x2e0 [ 89.703940][ C3] driver_unregister+0x76/0xb0 [ 89.703953][ C3] usb_gadget_unregister_driver+0x49/0x70 [ 89.703963][ C3] gadget_dev_desc_UDC_store+0x170/0x2e0 [ 89.703975][ C3] configfs_write_iter+0x302/0x4e0 [ 89.703987][ C3] vfs_write+0x6af/0x1050 [ 89.703995][ C3] ksys_write+0x12a/0x250 [ 89.704003][ C3] __do_fast_syscall_32+0x14b/0x8c0 [ 89.704013][ C3] do_fast_syscall_32+0x32/0x70 [ 89.704024][ C3] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 89.704035][ C3] [ 89.704037][ C3] The buggy address belongs to the object at ffff88804b0ca000 [ 89.704037][ C3] which belongs to the cache kmalloc-512 of size 512 [ 89.704045][ C3] The buggy address is located 232 bytes inside of [ 89.704045][ C3] freed 512-byte region [ffff88804b0ca000, ffff88804b0ca200) [ 89.704054][ C3] [ 89.704056][ C3] The buggy address belongs to the physical page: [ 89.704061][ C3] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4b0c8 [ 89.704070][ C3] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 89.704078][ C3] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 89.704088][ C3] page_type: f5(slab) [ 89.704096][ C3] raw: 04fff00000000040 ffff88801d442c80 dead000000000100 dead000000000122 [ 89.704105][ C3] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 89.704113][ C3] head: 04fff00000000040 ffff88801d442c80 dead000000000100 dead000000000122 [ 89.704121][ C3] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 89.704130][ C3] head: 04fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 89.704137][ C3] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 89.704142][ C3] page dumped because: kasan: bad access detected [ 89.704153][ C3] page_owner tracks the page as allocated [ 89.704157][ C3] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5964, tgid 5962 (syz.0.1), ts 38707308710 [ 89.704173][ C3] post_alloc_hook+0xfd/0x120 [ 89.704185][ C3] get_page_from_freelist+0x1113/0x35e0 [ 89.704198][ C3] __alloc_frozen_pages_noprof+0x2bd/0x3280 [ 89.704210][ C3] new_slab+0xb1/0x6d0 [ 89.704222][ C3] refill_objects+0xe3/0x410 [ 89.704234][ C3] __pcs_replace_empty_main+0x35e/0x650 [ 89.704246][ C3] __kmalloc_cache_noprof+0x4ef/0x6d0 [ 89.704257][ C3] snd_mixer_oss_build_test+0x7a/0x380 [ 89.704286][ C3] snd_mixer_oss_build_test_all+0x54c/0x6e0 [ 89.704302][ C3] snd_mixer_oss_build_input+0x139/0xd50 [ 89.704311][ C3] snd_mixer_oss_notify_handler+0x4e5/0xa10 [ 89.704321][ C3] snd_card_register+0x2bd/0x780 [ 89.704333][ C3] f_midi2_bind+0x1198/0x2770 [ 89.704344][ C3] usb_add_function+0x219/0x890 [ 89.704361][ C3] configfs_composite_bind+0xd83/0x1960 [ 89.704375][ C3] gadget_bind_driver+0x28c/0xbf0 [ 89.704385][ C3] page last free pid 5787 tgid 5787 ts 36838360987 stack trace: [ 89.704392][ C3] __free_frozen_pages+0x7b4/0x1110 [ 89.704403][ C3] qlist_free_all+0x47/0xf0 [ 89.704417][ C3] kasan_quarantine_reduce+0x1a0/0x1f0 [ 89.704431][ C3] __kasan_slab_alloc+0x69/0x90 [ 89.704441][ C3] __kmalloc_cache_noprof+0x278/0x6d0 [ 89.704453][ C3] ref_tracker_alloc+0x18b/0x600 [ 89.704463][ C3] netdev_queue_update_kobjects+0x2e1/0x6f0 [ 89.704488][ C3] netdev_register_kobject+0x2e9/0x410 [ 89.704498][ C3] register_netdevice+0x1313/0x26b0 [ 89.704512][ C3] veth_newlink+0x2b7/0xd00 [ 89.704531][ C3] rtnl_newlink+0x1697/0x2620 [ 89.704545][ C3] rtnetlink_rcv_msg+0x95e/0xe90 [ 89.704558][ C3] netlink_rcv_skb+0x159/0x420 [ 89.704572][ C3] netlink_unicast+0x668/0x950 [ 89.704583][ C3] netlink_sendmsg+0x9ac/0x10c0 [ 89.704594][ C3] __sys_sendto+0x492/0x4e0 [ 89.704605][ C3] [ 89.704607][ C3] Memory state around the buggy address: [ 89.704612][ C3] ffff88804b0c9f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 89.704618][ C3] ffff88804b0ca000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.704624][ C3] >ffff88804b0ca080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.704629][ C3] ^ [ 89.704634][ C3] ffff88804b0ca100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.704640][ C3] ffff88804b0ca180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.704645][ C3] ================================================================== [ 89.704651][ C3] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 90.232863][ C3] CPU: 3 UID: 0 PID: 5889 Comm: kworker/3:3 Not tainted syzkaller #0 PREEMPT(full) [ 90.235758][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 90.238877][ C3] Workqueue: usb_hub_wq hub_event [ 90.240789][ C3] Call Trace: [ 90.242113][ C3] [ 90.243248][ C3] dump_stack_lvl+0x100/0x190 [ 90.244767][ C3] vpanic+0x2dc/0x6f8 [ 90.246028][ C3] panic+0xd1/0xe0 [ 90.247268][ C3] ? __pfx_panic+0x10/0x10 [ 90.248685][ C3] ? end_report.part.0+0x23/0x90 [ 90.250252][ C3] ? rcu_is_watching+0x13/0xc0 [ 90.251777][ C3] ? end_report.part.0+0x23/0x90 [ 90.253354][ C3] check_panic_on_warn.cold+0x19/0x34 [ 90.255055][ C3] end_report.part.0+0x3a/0x90 [ 90.256581][ C3] kasan_report.cold+0xe/0x18 [ 90.258068][ C3] ? find_endpoint+0x2a3/0x2c0 [ 90.259584][ C3] find_endpoint+0x2a3/0x2c0 [ 90.261063][ C3] dummy_timer+0x506/0x3840 [ 90.262506][ C3] ? do_raw_spin_lock+0x128/0x260 [ 90.264105][ C3] ? find_held_lock+0x2b/0x80 [ 90.265597][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 90.267377][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 90.269128][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 90.271008][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 90.273062][ C3] ? __pfx_debug_object_deactivate+0x10/0x10 [ 90.275402][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 90.277351][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 90.279285][ C3] ? mark_held_locks+0x40/0x70 [ 90.281157][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 90.283100][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 90.284681][ C3] __hrtimer_run_queues+0x448/0x9a0 [ 90.286340][ C3] hrtimer_run_softirq+0x1ca/0x360 [ 90.287960][ C3] handle_softirqs+0x216/0xa20 [ 90.289468][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 90.291125][ C3] ? _raw_spin_unlock+0x28/0x50 [ 90.292642][ C3] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 90.294405][ C3] __irq_exit_rcu+0x178/0x220 [ 90.295886][ C3] irq_exit_rcu+0x9/0x30 [ 90.297218][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 90.298982][ C3] [ 90.299932][ C3] [ 90.300871][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 90.302743][ C3] RIP: 0010:lock_release+0x19e/0x310 [ 90.304405][ C3] Code: ff 65 0f c1 05 1b 5c d1 13 83 f8 01 0f 85 27 01 00 00 9c 58 f6 c4 02 0f 85 12 01 00 00 41 f7 c6 00 02 00 00 0f 85 c8 00 00 00 <48> 8b 44 24 10 65 48 2b 05 5d 12 d1 13 0f 85 4d 01 00 00 48 83 c4 [ 90.310309][ C3] RSP: 0018:ffffc900061d65e8 EFLAGS: 00000206 [ 90.312201][ C3] RAX: 0000000000000046 RBX: ffffffff8ffeb120 RCX: ffffc900061d65f4 [ 90.314953][ C3] RDX: 0000000000000000 RSI: ffffffff8e5fcf73 RDI: ffffffff8c835980 [ 90.317597][ C3] RBP: ffffffff81baed7e R08: 0000000000000001 R09: 0000000000000007 [ 90.320043][ C3] R10: 0000000000000200 R11: 000000000006a2d7 R12: ffff888025440000 [ 90.322610][ C3] R13: ffffc900061d66a0 R14: 0000000000000202 R15: 0000000000000006 [ 90.325693][ C3] ? unwind_next_frame+0x3be/0x2090 [ 90.327771][ C3] unwind_next_frame+0x3c3/0x2090 [ 90.329748][ C3] ? usb_probe_interface+0x386/0x980 [ 90.331719][ C3] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 90.333641][ C3] arch_stack_walk+0x94/0xf0 [ 90.335158][ C3] ? __pfx_usb_probe_interface+0x10/0x10 [ 90.336931][ C3] ? really_probe+0x241/0xa60 [ 90.338424][ C3] stack_trace_save+0x8e/0xc0 [ 90.339924][ C3] ? __pfx_stack_trace_save+0x10/0x10 [ 90.341613][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 90.343447][ C3] ? stack_depot_save_flags+0x49a/0xa10 [ 90.345175][ C3] kasan_save_stack+0x30/0x50 [ 90.346661][ C3] ? kasan_save_stack+0x30/0x50 [ 90.348194][ C3] ? kasan_save_track+0x14/0x30 [ 90.349734][ C3] ? __kasan_slab_alloc+0x89/0x90 [ 90.351320][ C3] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 90.353064][ C3] ? __kernfs_new_node+0xd2/0xa10 [ 90.354884][ C3] ? kernfs_new_node+0x194/0x200 [ 90.356733][ C3] ? __kernfs_create_file+0x53/0x350 [ 90.358371][ C3] ? sysfs_add_file_mode_ns+0x207/0x3c0 [ 90.360088][ C3] ? sysfs_create_file_ns+0x145/0x1e0 [ 90.361768][ C3] ? device_create_file+0xf2/0x1d0 [ 90.363580][ C3] ? device_add+0x2cb/0x1970 [ 90.365025][ C3] ? input_register_device+0x888/0xe60 [ 90.366730][ C3] ? powermate_probe+0xcd6/0x1370 [ 90.368447][ C3] ? usb_probe_interface+0x386/0x980 [ 90.370530][ C3] kasan_save_track+0x14/0x30 [ 90.372162][ C3] __kasan_slab_alloc+0x89/0x90 [ 90.373718][ C3] kmem_cache_alloc_noprof+0x269/0x6a0 [ 90.375458][ C3] ? __kernfs_new_node+0xd2/0xa10 [ 90.377043][ C3] __kernfs_new_node+0xd2/0xa10 [ 90.378567][ C3] ? lock_acquire+0x1d1/0x380 [ 90.380041][ C3] ? kernfs_root+0x23/0x2a0 [ 90.381471][ C3] ? __pfx___kernfs_new_node+0x10/0x10 [ 90.383176][ C3] ? lock_acquire+0x1d1/0x380 [ 90.384647][ C3] ? kernfs_root+0x23/0x2a0 [ 90.386076][ C3] ? find_held_lock+0x2b/0x80 [ 90.387561][ C3] ? kernfs_root+0xee/0x2a0 [ 90.388986][ C3] ? kernfs_root+0xee/0x2a0 [ 90.390414][ C3] kernfs_new_node+0x194/0x200 [ 90.391918][ C3] ? __pfx_kernfs_new_node+0x10/0x10 [ 90.393561][ C3] ? sysfs_create_dir_ns+0x14c/0x2b0 [ 90.395258][ C3] ? sysfs_create_dir_ns+0x18a/0x2b0 [ 90.396934][ C3] __kernfs_create_file+0x53/0x350 [ 90.398538][ C3] sysfs_add_file_mode_ns+0x207/0x3c0 [ 90.400221][ C3] sysfs_create_file_ns+0x145/0x1e0 [ 90.401841][ C3] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 90.403623][ C3] ? acpi_device_notify+0x3ae/0x510 [ 90.405256][ C3] ? acpi_device_notify+0x3ae/0x510 [ 90.406896][ C3] device_create_file+0xf2/0x1d0 [ 90.408445][ C3] device_add+0x2cb/0x1970 [ 90.409853][ C3] ? __pfx_device_add+0x10/0x10 [ 90.411387][ C3] ? input_register_device+0x9a0/0xe60 [ 90.413145][ C3] ? input_register_device+0xa5f/0xe60 [ 90.415055][ C3] ? kfree+0x22b/0x6d0 [ 90.416347][ C3] ? mark_held_locks+0x40/0x70 [ 90.417852][ C3] input_register_device+0x888/0xe60 [ 90.419516][ C3] powermate_probe+0xcd6/0x1370 [ 90.421041][ C3] usb_probe_interface+0x386/0x980 [ 90.422641][ C3] ? __pfx_usb_probe_interface+0x10/0x10 [ 90.424399][ C3] ? kernfs_put+0x3f/0x60 [ 90.425751][ C3] ? sysfs_create_link+0x68/0xc0 [ 90.427317][ C3] ? __pfx_usb_probe_interface+0x10/0x10 [ 90.429171][ C3] really_probe+0x241/0xa60 [ 90.430621][ C3] __driver_probe_device+0x210/0x460 [ 90.432293][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 90.434120][ C3] driver_probe_device+0x4a/0x140 [ 90.435729][ C3] __device_attach_driver+0x1df/0x320 [ 90.437449][ C3] ? __pfx___device_attach_driver+0x10/0x10 [ 90.439291][ C3] bus_for_each_drv+0x159/0x1e0 [ 90.440846][ C3] ? __pfx_bus_for_each_drv+0x10/0x10 [ 90.442528][ C3] ? lockdep_hardirqs_on+0x7d/0x110 [ 90.444168][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 90.445998][ C3] __device_attach+0x1e4/0x4c0 [ 90.447537][ C3] ? __pfx___device_attach+0x10/0x10 [ 90.449193][ C3] ? do_raw_spin_unlock+0x145/0x1e0 [ 90.450826][ C3] device_initial_probe+0xaf/0xf0 [ 90.452408][ C3] __bus_probe_device+0x60/0x160 [ 90.453969][ C3] device_add+0x121d/0x1970 [ 90.455423][ C3] ? __pfx_device_add+0x10/0x10 [ 90.456987][ C3] ? mark_held_locks+0x40/0x70 [ 90.458495][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 90.460318][ C3] usb_set_configuration+0xd97/0x1dc0 [ 90.461998][ C3] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 90.463898][ C3] usb_generic_driver_probe+0xa1/0xe0 [ 90.465582][ C3] usb_probe_device+0xef/0x400 [ 90.467474][ C3] ? __pfx_usb_probe_device+0x10/0x10 [ 90.469575][ C3] really_probe+0x241/0xa60 [ 90.471357][ C3] __driver_probe_device+0x210/0x460 [ 90.473419][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 90.475732][ C3] driver_probe_device+0x4a/0x140 [ 90.477543][ C3] __device_attach_driver+0x1df/0x320 [ 90.479241][ C3] ? __pfx___device_attach_driver+0x10/0x10 [ 90.481095][ C3] bus_for_each_drv+0x159/0x1e0 [ 90.482623][ C3] ? __pfx_bus_for_each_drv+0x10/0x10 [ 90.484319][ C3] ? lockdep_hardirqs_on+0x7d/0x110 [ 90.485957][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 90.487801][ C3] __device_attach+0x1e4/0x4c0 [ 90.489297][ C3] ? __pfx___device_attach+0x10/0x10 [ 90.490950][ C3] ? do_raw_spin_unlock+0x145/0x1e0 [ 90.492575][ C3] device_initial_probe+0xaf/0xf0 [ 90.494160][ C3] __bus_probe_device+0x60/0x160 [ 90.495745][ C3] device_add+0x121d/0x1970 [ 90.497174][ C3] ? __pfx_device_add+0x10/0x10 [ 90.498715][ C3] ? add_device_randomness+0xc9/0x110 [ 90.500683][ C3] usb_new_device.part.0+0xcc2/0x1686 [ 90.502387][ C3] ? do_raw_spin_lock+0x128/0x260 [ 90.503964][ C3] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 90.505789][ C3] ? mark_held_locks+0x40/0x70 [ 90.507335][ C3] hub_event.cold+0x1e3/0xe90 [ 90.508824][ C3] ? __pfx_hub_event+0x10/0x10 [ 90.510327][ C3] ? down_read_non_owner+0x230/0x510 [ 90.512245][ C3] ? lock_acquire+0x1d1/0x380 [ 90.513741][ C3] ? process_one_work+0xa2c/0x1b10 [ 90.515372][ C3] ? process_one_work+0x906/0x1b10 [ 90.516990][ C3] ? process_one_work+0x906/0x1b10 [ 90.518590][ C3] process_one_work+0xac7/0x1b10 [ 90.520289][ C3] ? __pfx_process_one_work+0x10/0x10 [ 90.522385][ C3] ? lock_acquire+0x1d1/0x380 [ 90.524239][ C3] ? __pfx_hub_event+0x10/0x10 [ 90.526127][ C3] worker_thread+0x5ef/0xe50 [ 90.527666][ C3] ? __pfx_worker_thread+0x10/0x10 [ 90.529256][ C3] ? kthread+0x13a/0x450 [ 90.530640][ C3] ? __pfx_worker_thread+0x10/0x10 [ 90.532265][ C3] kthread+0x373/0x450 [ 90.533561][ C3] ? __pfx_kthread+0x10/0x10 [ 90.535048][ C3] ret_from_fork+0x730/0xd60 [ 90.536524][ C3] ? __pfx_ret_from_fork+0x10/0x10 [ 90.538120][ C3] ? __switch_to+0x800/0x10e0 [ 90.539613][ C3] ? __pfx_kthread+0x10/0x10 [ 90.541066][ C3] ret_from_fork_asm+0x1a/0x30 [ 90.542569][ C3] [ 91.614623][ C3] Shutting down cpus with NMI [ 91.616681][ C3] Kernel Offset: disabled [ 91.618038][ C3] Rebooting in 86400 seconds.. VM DIAGNOSIS: 05:12:15 Registers: info registers vcpu 0 CPU#0 RAX=0000000095ea8895 RBX=0000000000000001 RCX=000000006a15776a RDX=000000000000000d RSI=ffffc90005f87808 RDI=0000000000000008 RBP=0000000000000c40 RSP=ffffc90005f87768 R8 =0000000030c562a3 R9 =000000006d5e9efd R10=0000000000000200 R11=0000000000000001 R12=ffffc90005f877c0 R13=000000000000000d R14=ffff88806b2de000 R15=0000000000001000 RIP=ffffffff856e5cd3 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888095283000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f71b4530 CR3=000000005e234000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=000000000000000c RCX=0000000000000001 RDX=ffff888025924b00 RSI=ffffffff8292fb28 RDI=0000000000000006 RBP=ffff88807ffc2000 RSP=ffffc900051073f0 R8 =0000000000001000 R9 =0000000000000000 R10=0000000000000200 R11=0000000000000001 R12=0000000000000000 R13=0000000000000001 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff820db12b RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888095383000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000000c29581b CR3=000000000fd96000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000158ef5 RBX=ffff88801e31cb00 RCX=ffffffff8beb6325 RDX=0000000000000001 RSI=ffffffff8e623fa7 RDI=ffffffff8c835980 RBP=ffffed1003c63960 RSP=ffffc9000047fe00 R8 =0000000000000001 R9 =ffffed1005606825 R10=ffff88802b03412b R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008ffc4 R15=dffffc0000000000 RIP=ffffffff8beb47bf RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888095483000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7f3a190 CR3=0000000046ea1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85c04ff5 RDI=ffffffff9cf36f60 RBP=ffffffff9cf36f20 RSP=ffffc900005e8438 R8 =000000000000001f R9 =0000000000000000 R10=0000000000000003 R11=3430383838666666 R12=0000000000000000 R13=0000000000000032 R14=000000000000000b R15=ffffc900005e8750 RIP=ffffffff85c0501f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888095583000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000008000a0d3 CR3=000000002a802000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000c0fcfc Opmask01=0000000000000000 Opmask02=00000000ffff7fdf Opmask03=0000000000004104 Opmask04=00000000ffffff7f Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ef9d95d8e0 000055ef8a0b2040 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ef9d95d8e0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ef9d954d20 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ef9d97c750 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff94b1f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff94b152c80 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 737365636f727020 756c6c2520716573 006e6f6974697472 6170006b636f6c62 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312d352f35627375 2f302e6463685f79 6d6d75642f6d726f 6674616c702f7365 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 87b68716e9867264 000055eac36f5fe4 0000000000000241 000000000000302e ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 87b68716e9867264 000055eac36fe33c 00000000000000f1 00000000307a0030 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312c3061722c3332 322c3232322c3132 322c3032322c4533 312c4433312c4333 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312c4233312c4133 312c3733312c3633 312c3433312c3333 312c3133312c3033 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 316b2c35312c332c 312c30652d303030 3065343030307042 4132317633303030 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000