last executing test programs: 6.362880163s ago: executing program 2 (id=2679): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$dlm_control(0xffffff9c, &(0x7f0000000200), 0x40800, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) connect$pppoe(0xffffffffffffffff, &(0x7f00000004c0)={0x18, 0x0, {0x3, @multicast, 'wlan0\x00'}}, 0x1e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) gettid() mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') timer_create(0x6, &(0x7f0000000240)={0x0, 0x29, 0x800000000004, @thr={&(0x7f0000000600)="2e1489f08becdc8016e9ecc994671f1b19fa9154c4c4d5e46ed7d2daafbdd3c53e0f3c7e37f0bfecf03db1bb542a4577bbe9feef61c4ce200b224a6b3fd8029dfcdb79b209949a48d524332f10e7e6372f813dd1f936a7135e7dd3f7e51811e71a80027607179d0fbb4e7c1b8f05659ab3363423f5fc931e3f4be9eb7787fe8fdb84d22f1b62a063bef15e7012fc97734286e57cacb07659eca0656fc1ba8d96b8235560a4297a6e663b9c4e767b4155e4b6849f4f7c4d822eb7ad56703933bd809b385d54c432230c99cd1d19e954bb08", &(0x7f0000000340)="4c279e0c257119881ba16a9a5202b14bc0d31afe73956482626dc975d8af43392f97491274517b250000127827314f0d6f8947538a1f8ae2dfab8d85ed25e154a05cfdad89e72b0d03e83bfecddc3c104091ee325c"}}, &(0x7f0000000040)) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = eventfd2(0x20000007, 0x1) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000900)={0x0, 0x0, 0x4, r6, 0x1}) creat(&(0x7f0000000040)='./file0\x00', 0x20) syz_genetlink_get_family_id$smc(&(0x7f0000000140), r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="bfeb010018000000000000310b0c9fc9c97e73000c000071ba000000000000000000040600001000000061616100000000009707a2"], 0x0, 0x2b, 0x0, 0x80001, 0x0, 0x0, @void, @value}, 0x28) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848120000005e0c0000000000000e000a001400000002800000121f", 0x2e}], 0x1}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000940)={{0x4, 0x0, 0x3ff, 0xa}, 'syz1\x00', 0x2001b}) 5.380546187s ago: executing program 2 (id=2687): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 4.450083255s ago: executing program 2 (id=2694): socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = socket(0x18, 0x800, 0x2) getsockname$packet(r0, 0x0, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xfff3, 0xfff2}, {0x7, 0x4}, {0x7, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000c0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) r7 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r8, 0xdf) 3.525962869s ago: executing program 2 (id=2701): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x19a4, &(0x7f0000000300)={0x0, 0x200000, 0x20000, 0x0, 0xd3}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) epoll_create(0x6) syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x2a36, 0x10100, 0x4, 0x20000002}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x401}}) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x11) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x0, @local, 'bond_slave_0\x00'}}, 0x1e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0x2, &(0x7f0000000000)={0x0, 0x29, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) gettid() openat$vimc2(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) 2.750194461s ago: executing program 0 (id=2715): request_key(&(0x7f0000000180)='id_resolver\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x2, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$netlink(0x10, 0x3, 0x15) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="040100001000"], 0x104}}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x15a) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket$kcm(0x10, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.820952299s ago: executing program 0 (id=2720): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4804) 1.820671664s ago: executing program 0 (id=2721): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000001940), 0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2711, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x15, 0x1, 0x96, 0x7, 0x908, r1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000010000", @ANYRES32, @ANYBLOB="0000000100000400000000000000a33b00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000200), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000122000/0x1000)=nil, 0x1000, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [], 0x6b}}) 1.790772902s ago: executing program 2 (id=2723): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='percpu_alloc_percpu\x00'}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r2, @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRES16=r2]) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80046601, &(0x7f0000000140)) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000001180)={0x18, 0x1, 0x0, {0xfffffffffffffffb}}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340), &(0x7f0000000280)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x10, &(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRESDEC=r1], &(0x7f0000000040)='syzkaller\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x5, 0x5, 0x0, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000240)={0x0, 0xfffffffffffffe1a, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00063f03000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) 1.580990972s ago: executing program 3 (id=2724): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000040000000082038851000300600000018000000", @ANYRES32, @ANYBLOB="00000000010300006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.574885941s ago: executing program 3 (id=2725): bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblcr\x00', 0x2d, 0x7, 0x6d}, 0x2c) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001700020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) 1.500916455s ago: executing program 3 (id=2726): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.349535811s ago: executing program 1 (id=2728): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 1.270710772s ago: executing program 1 (id=2729): ioperm(0x0, 0x82, 0x1f) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010a001800000000000080"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r1 = openat$ttyprintk(0xffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x800}, 0x1c) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) ioctl$VT_RESIZEX(r1, 0x40047101, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_emit_ethernet(0x2a4, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2}) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r5, r5, r5}, &(0x7f0000000040)=""/217, 0xd9, 0x0) 1.161056907s ago: executing program 0 (id=2730): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xfc}}, 0x8000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff0200f5ffffff00000000000000000106"], 0xffe) 1.040317941s ago: executing program 0 (id=2731): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000100010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000006540000000c0a01010000000000000000010000000900020073797a32000000002800038024000080090026400000000018000b80140001800a0001006c696d697400000004fe02800900010073797a30"], 0xd8}}, 0x0) 840.585524ms ago: executing program 0 (id=2732): syz_usb_connect(0x0, 0x2d, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) mkdir(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_ct={0x90, 0x4, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @remote}]}, {0x51, 0x6, "15524e86d9c288bc0398e2d9714834ed9ef8fed8155ec786b26aa86547d845a92be359a7a527de277b889197e083b4ecf78df18f996c80b1adcc0197ac9f00482e074445cd4dd563f6dcef918c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffe, 0x6, 0xfe, @scatter={0xa, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000540)=""/168, 0xa8}, {&(0x7f00000003c0)=""/73, 0x49}, {&(0x7f0000000280)=""/40, 0x28}, {&(0x7f0000000340)=""/54, 0x36}, {&(0x7f00000009c0)=""/72, 0x48}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000680)=""/223, 0xdf}, {&(0x7f0000000780)=""/191, 0xbf}, {&(0x7f0000000ac0)=""/136, 0x88}, {&(0x7f0000000900)=""/173, 0xad}]}, &(0x7f0000000380)="851667ee20db", 0x0, 0xfffffffb, 0x39, 0x0, 0x0}) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1022050, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r6, 0xfffffffffffffffb, 0x0) 720.810127ms ago: executing program 2 (id=2733): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x8028cf313be5dcba, 0x10, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000500)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000300)=ANY=[@ANYRESHEX], &(0x7f00000005c0)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x8, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) fsopen(&(0x7f00000004c0)='iso9660\x00', 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) keyctl$dh_compute(0x17, &(0x7f0000000200), &(0x7f0000000040)=""/217, 0xd9, &(0x7f00000001c0)={0x0}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a001000000002800000", 0x2c}, {&(0x7f0000000640)="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", 0xdc8}, {&(0x7f00000000c0)="26fc4bcf8b00c19cd0eed8a91f7c36de44eed2752c4d27ee2e10986d2b", 0x1d}, {&(0x7f0000000280)="507a820941f6d234a757b2de2fe516eb6857f51051e27bb99b33442507ee3dd395c93381abb5e6b9ff76eea128b6f395f74b64bc081efc463b192c1838538c8719738008a47502b4207297de026ed4ea30bef60af76f2b26e1a2768a7226f918253314511129725d", 0x68}, {&(0x7f0000000200)}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) openat$btrfs_control(0xffffff9c, &(0x7f0000000380), 0x2001, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0xfe}, 0x40000) socket$inet_udplite(0x2, 0x2, 0x88) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) io_setup(0x4082, &(0x7f0000000380)=0x0) syz_io_uring_setup(0x1002943, &(0x7f0000001400)={0x0, 0x0, 0x10}, &(0x7f0000001480), &(0x7f00000014c0)) io_pgetevents(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000ff0f00000000000000001811ffff", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000086000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r6, 0x0, 0xe, 0x0, &(0x7f0000000000)="0000000000000000009dc9000000", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"/268], 0x10c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 668.490206ms ago: executing program 3 (id=2734): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff0200000000000000000000003f000106"], 0xffe) 541.053674ms ago: executing program 3 (id=2735): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x40) r1 = fanotify_init(0x200, 0x0) write(r1, &(0x7f0000000680)="cc278e0b37b44102", 0x8) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0xac, 0x24, 0xd0f, 0x670bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r7, {0x0, 0xfff2}, {0xfff1, 0x1}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x6, 0x0, 0x3, 0x1, 0x101, 0x6, 0x6}}, {0x10, 0x2, [0x4, 0x40, 0x1, 0x5, 0x7, 0x6b41]}}, {{0x1c, 0x1, {0xb4, 0x8, 0x7fff, 0x6, 0x0, 0xea, 0xa8d, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x9, 0x7, 0xfff8, 0x5, 0x0, 0x25, 0xf, 0x3}}, {0xa, 0x2, [0x9, 0xd, 0x1]}}]}]}, 0xac}}, 0x44080) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r8, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) mount$pvfs2(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200008d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 240.583465ms ago: executing program 1 (id=2736): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001041fea19cd198925533597d8eb", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0xfff0}}}}]}, 0x78}}, 0x0) 240.002947ms ago: executing program 1 (id=2737): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000003c02000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 239.704665ms ago: executing program 3 (id=2738): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x14, 0x15, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b8920000000109029009"], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000180), 0x200, 0x0) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000b80)={&(0x7f00000001c0)=[{0x9, 0x2000, 0x0, 0x0}, {0x4, 0x4000, 0x0, 0x0}], 0x2}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x0, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='romfs\x00', 0x0, 0x0) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x8, 0x0) 158.155766ms ago: executing program 1 (id=2739): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x5608, 0x3) r1 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) clock_nanosleep(0xfffffff2, 0x225c17d03, &(0x7f0000000400), 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x280000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x1e, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@generic={0x6c, 0x9, 0x5, 0x1c40, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_query, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbf}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='syzkaller\x00', 0x1e, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x6, 0xf5f9, 0xd}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000400)=[0x1, 0xffffffffffffffff], &(0x7f0000000440)=[{0x5, 0x4, 0xd, 0x3}, {0x0, 0x4, 0x5, 0x9}, {0x5, 0x3, 0xa}], 0x10, 0x2, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000680)='hrtimer_start\x00', r5}, 0x18) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x7fff}, [@call={0x85, 0x0, 0x0, 0x28}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000000)="5becbc0e0d7cca6073a4f11d1b00", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$KVM_GET_MSRS(r7, 0xc048aeca, &(0x7f0000000200)) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000380)={0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r4, 0x5000940e, &(0x7f0000000800)={{r3}, "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"}) r10 = msgget$private(0x0, 0x0) msgsnd(r10, &(0x7f0000000180)={0x3}, 0x4, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)={0x40, r11, 0x1, 0xfffffffd, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14}]}]}]}, 0x40}}, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000200)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f00000002c0)={"c85cf43b6a0f263bb1cabfe0a883bb44", 0x0, r13, {0x7, 0x10000}, {0x6, 0x4}, 0xffffffff, [0x100000001, 0x408a, 0xffffffff80000001, 0x200, 0x2e497d32, 0x3, 0x0, 0x7, 0x80, 0x10001, 0x4, 0x2, 0x0, 0xb, 0x2, 0x8000000000000000]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c09425, &(0x7f0000001800)={"e22bb51ab956c3d1f0f5994c9c7c3072", 0x0, 0x0, {0x7fffffffffffffff, 0xff}, {0x8, 0x2}, 0x1ff, [0x200, 0x0, 0x0, 0xd, 0x40, 0x66, 0x8, 0x8, 0x3, 0x10000, 0xc, 0x100000000, 0x8000000000000000, 0xfffffffffffffff3, 0x1, 0x5]}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f00000018c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000780)={0x50, r9, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x8, 0x5c}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000080}, 0x4141) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x5, 0x5, 0x0, 0x0, @irqchip={0x8, 0x3}}]}) 0s ago: executing program 1 (id=2740): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x14, 0x15, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b8920000000109029009"], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000180), 0x200, 0x0) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000b80)={&(0x7f00000001c0)=[{0x9, 0x2000, 0x0, 0x0}, {0x4, 0x4000, 0x0, 0x0}], 0x2}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x0, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='romfs\x00', 0x0, 0x0) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x8, 0x0) kernel console output (not intermixed with test programs): iver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input72 [ 260.553190][ T8] dvb-usb: schedule remote query interval to 150 msecs. [ 260.555303][ T8] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 260.710382][T12004] fuse: Unknown parameter '0x000000000000000500000000000000000000' [ 260.718333][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 260.720118][ T8] dvb-usb: error while querying for an remote control event. [ 260.726231][T11980] dvb-usb: bulk message failed: -22 (2/0) [ 260.740588][T11980] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 260.743450][T11980] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 260.780479][T12006] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 260.878303][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 260.880125][ T8] dvb-usb: error while querying for an remote control event. [ 260.911573][T11980] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 260.914618][T11980] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 260.978881][T12006] /dev/sr0: Can't open blockdev [ 260.991654][T12009] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1795'. [ 261.000484][T11980] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 261.006685][T11980] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 261.033247][T12014] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1797'. [ 261.038387][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 261.040587][ T8] dvb-usb: error while querying for an remote control event. [ 261.077307][T12014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1797'. [ 261.113934][T11980] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 261.116786][T11980] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 261.205446][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 261.207450][ T8] dvb-usb: error while querying for an remote control event. [ 261.217856][T11980] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 261.222543][T11980] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 261.228729][T11980] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 261.231298][T11980] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 261.236053][T11980] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 261.238798][T11980] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 261.243179][T11980] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 261.245636][T11980] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 261.251360][T12024] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1800'. [ 261.254717][ T8] usb 6-1: USB disconnect, device number 23 [ 261.261600][ T8] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 261.438456][ T6766] usb 8-1: new full-speed USB device number 26 using dummy_hcd [ 261.599929][ T6766] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.603286][ T6766] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 261.606244][ T6766] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 261.609148][ T6766] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.613655][ T6766] usb 8-1: config 0 descriptor?? [ 261.619319][ T6766] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 261.621229][ T6766] dvb-usb: bulk message failed: -22 (3/0) [ 261.626555][ T6766] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 261.631050][ T6766] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 261.633113][ T6766] usb 8-1: media controller created [ 261.635111][ T6766] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 261.641689][ T6766] dvb-usb: bulk message failed: -22 (6/0) [ 261.643297][ T6766] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 261.646647][ T6766] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input73 [ 261.650668][ T6766] dvb-usb: schedule remote query interval to 150 msecs. [ 261.652666][ T6766] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 261.818265][ T6766] dvb-usb: bulk message failed: -22 (1/0) [ 261.820083][ T6766] dvb-usb: error while querying for an remote control event. [ 261.825411][T12018] dvb-usb: bulk message failed: -22 (2/0) [ 261.833099][T12018] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.887260][T12039] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 261.970563][T12018] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.978365][ T6766] dvb-usb: bulk message failed: -22 (1/0) [ 261.980084][ T6766] dvb-usb: error while querying for an remote control event. [ 262.071291][T12039] /dev/sr0: Can't open blockdev [ 262.075413][T12018] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.138372][ T6766] dvb-usb: bulk message failed: -22 (1/0) [ 262.140108][ T6766] dvb-usb: error while querying for an remote control event. [ 262.171848][T12018] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.246332][T12018] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.251069][T12018] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.255483][T12018] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.260097][T12018] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.296592][ T8] usb 8-1: USB disconnect, device number 26 [ 262.313101][ T8] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 263.028271][ T833] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 263.189868][ T833] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.193152][ T833] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 263.196382][ T833] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 263.199340][ T833] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.203769][ T833] usb 7-1: config 0 descriptor?? [ 263.206932][ T833] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 263.209085][ T833] dvb-usb: bulk message failed: -22 (3/0) [ 263.211775][ T833] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 263.214428][ T833] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 263.216459][ T833] usb 7-1: media controller created [ 263.218436][ T833] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 263.222164][ T833] dvb-usb: bulk message failed: -22 (6/0) [ 263.223868][ T833] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 263.228464][ T833] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input74 [ 263.232786][ T833] dvb-usb: schedule remote query interval to 150 msecs. [ 263.235153][ T833] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 263.256687][T12073] loop6: detected capacity change from 0 to 524287999 [ 263.388539][ T833] dvb-usb: bulk message failed: -22 (1/0) [ 263.390793][ T833] dvb-usb: error while querying for an remote control event. [ 263.408381][T12058] dvb-usb: bulk message failed: -22 (2/0) [ 263.463354][T12075] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 263.558452][ T833] dvb-usb: bulk message failed: -22 (1/0) [ 263.560832][ T833] dvb-usb: error while querying for an remote control event. [ 263.588950][T12075] /dev/sr0: Can't open blockdev [ 263.650289][ T833] usb 7-1: USB disconnect, device number 23 [ 263.658161][ T833] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 263.953615][T12081] __nla_validate_parse: 5 callbacks suppressed [ 263.953626][T12081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1820'. [ 263.957993][T12081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1820'. [ 264.361061][T12096] Cannot find del_set index 0 as target [ 265.017576][T12104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1827'. [ 265.791846][T12127] netlink: 'syz.2.1834': attribute type 10 has an invalid length. [ 265.878288][ T6766] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 266.042589][ T6766] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.045568][ T6766] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 266.048122][ T6766] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 266.050926][ T6766] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.054204][ T6766] usb 6-1: config 0 descriptor?? [ 266.057332][ T6766] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 266.060636][ T6766] dvb-usb: bulk message failed: -22 (3/0) [ 266.063264][ T6766] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 266.065961][ T6766] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 266.068000][ T6766] usb 6-1: media controller created [ 266.070085][ T6766] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 266.073851][ T6766] dvb-usb: bulk message failed: -22 (6/0) [ 266.075558][ T6766] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 266.078722][ T6766] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input75 [ 266.082552][ T6766] dvb-usb: schedule remote query interval to 150 msecs. [ 266.084541][ T6766] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 266.143886][T12134] fuse: Unknown parameter '0x000000000000000500000000000000000000' [ 266.238276][ T6766] dvb-usb: bulk message failed: -22 (1/0) [ 266.240495][ T6766] dvb-usb: error while querying for an remote control event. [ 266.258731][T12118] dvb-usb: bulk message failed: -22 (2/0) [ 266.262018][T12118] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 266.264938][T12118] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 266.314349][T12139] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 266.344109][T12118] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 266.347869][T12118] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 266.398289][ T6766] dvb-usb: bulk message failed: -22 (1/0) [ 266.400109][ T6766] dvb-usb: error while querying for an remote control event. [ 266.406520][T12140] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1843'. [ 266.418373][ T25] usb 8-1: new full-speed USB device number 27 using dummy_hcd [ 266.433350][T12118] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 266.438298][T12118] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 266.449825][T12139] /dev/sr0: Can't open blockdev [ 266.512133][T12118] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 266.515066][T12118] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 266.559168][ T6766] dvb-usb: bulk message failed: -22 (1/0) [ 266.560865][ T6766] dvb-usb: error while querying for an remote control event. [ 266.579731][ T25] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.582721][ T25] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 266.585247][ T25] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 266.587812][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.592275][ T25] usb 8-1: config 0 descriptor?? [ 266.595184][ T25] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 266.597201][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 266.601000][ T25] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 266.603964][ T25] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 266.606074][ T25] usb 8-1: media controller created [ 266.608082][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 266.616632][T12118] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 266.617447][ T833] kernel write not supported for file [eventfd] (pid: 833 comm: kworker/1:2) [ 266.618255][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 266.618277][ T25] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 266.619125][T12118] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 266.619431][ T25] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input76 [ 266.620688][ T25] dvb-usb: schedule remote query interval to 150 msecs. [ 266.620699][ T25] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 266.640464][T12118] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 266.642826][T12118] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 266.648612][T12118] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 266.650963][T12118] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 266.655445][T12118] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 266.657820][T12118] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 266.667234][ T25] usb 6-1: USB disconnect, device number 24 [ 266.679567][ T25] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 266.778386][ T58] dvb-usb: bulk message failed: -22 (1/0) [ 266.780148][ T58] dvb-usb: error while querying for an remote control event. [ 266.801930][T12135] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.852694][T12156] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 266.873133][T12135] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.936272][T12135] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.948402][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 266.950613][ T25] dvb-usb: error while querying for an remote control event. [ 266.969039][T12156] /dev/sr0: Can't open blockdev [ 267.051587][T12135] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.118442][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 267.120101][ T25] dvb-usb: error while querying for an remote control event. [ 267.168495][T12135] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.171896][T12135] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.175981][T12135] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.178154][T12135] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.205139][T12174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1847'. [ 267.224136][ T8] usb 8-1: USB disconnect, device number 27 [ 267.231142][ T8] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 267.250304][T12180] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1842'. [ 267.252939][T12180] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1842'. [ 267.256093][T12180] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1842'. [ 267.258845][T12180] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1842'. [ 267.261748][T12179] tipc: Enabling of bearer rejected, already enabled [ 267.440969][T12198] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1855'. [ 267.591306][T12205] 9pnet_fd: Insufficient options for proto=fd [ 267.593673][T12205] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 268.371222][T12217] netlink: 'syz.1.1868': attribute type 10 has an invalid length. [ 269.248114][T12255] __nla_validate_parse: 2 callbacks suppressed [ 269.248124][T12255] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1874'. [ 269.261145][T12255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1874'. [ 269.534656][T12267] wg1: entered promiscuous mode [ 269.545729][T12267] netlink: 'syz.1.1878': attribute type 1 has an invalid length. [ 269.937002][T12274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1881'. [ 269.943279][T12274] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1881'. [ 269.994457][T12278] fuse: Unknown parameter '0x000000000000000500000000000000000000' [ 270.005208][T12280] vivid-007: disconnect [ 270.014715][T12280] vivid-007: reconnect [ 270.153235][T12296] netlink: 'syz.0.1888': attribute type 10 has an invalid length. [ 270.159334][T12296] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 270.252517][T12302] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1883'. [ 270.484349][T12310] »»»»»» speed is unknown, defaulting to 1000 [ 270.561224][T12310] lo speed is unknown, defaulting to 1000 [ 270.597984][T12320] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1896'. [ 270.603374][T12320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1896'. [ 270.671556][T12322] netlink: 'syz.2.1897': attribute type 10 has an invalid length. [ 271.444366][T12357] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1905'. [ 271.452833][T12357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1905'. [ 272.034594][T12379] fuse: Bad value for 'user_id' [ 272.036615][T12379] fuse: Bad value for 'user_id' [ 272.135375][T12387] netlink: 'syz.1.1910': attribute type 10 has an invalid length. [ 272.165773][T12387] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1910'. [ 272.702995][ T6000] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 272.862458][ T6000] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.865355][ T6000] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 272.867880][ T6000] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 272.871770][ T6000] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.880249][ T6000] usb 7-1: config 0 descriptor?? [ 272.883381][ T6000] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 272.885415][ T6000] dvb-usb: bulk message failed: -22 (3/0) [ 272.893328][ T6000] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 272.897882][ T6000] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 272.904646][ T6000] usb 7-1: media controller created [ 272.907068][ T6000] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 272.911183][ T6000] dvb-usb: bulk message failed: -22 (6/0) [ 272.912851][ T6000] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 272.915940][ T6000] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input77 [ 272.919984][ T6000] dvb-usb: schedule remote query interval to 150 msecs. [ 272.921981][ T6000] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 273.048725][T12424] vlan2: entered promiscuous mode [ 273.048739][T12424] vlan0: entered promiscuous mode [ 273.051322][T12424] vlan0: left promiscuous mode [ 273.086217][T12392] dvb-usb: bulk message failed: -22 (2/0) [ 273.140504][T12425] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 273.147598][ T6000] dvb-usb: bulk message failed: -22 (1/0) [ 273.149368][ T6000] dvb-usb: error while querying for an remote control event. [ 273.239529][T12425] /dev/sr0: Can't open blockdev [ 273.308495][ T6000] dvb-usb: bulk message failed: -22 (1/0) [ 273.311246][ T6000] dvb-usb: error while querying for an remote control event. [ 273.478306][ T6000] dvb-usb: bulk message failed: -22 (1/0) [ 273.480501][ T6000] dvb-usb: error while querying for an remote control event. [ 273.489252][ T5929] usb 7-1: USB disconnect, device number 24 [ 273.499375][ T5929] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 273.692818][T12439] 9pnet_virtio: no channels available for device @ [ 273.773466][T12445] binder: 12444:12445 ioctl c0306201 0 returned -14 [ 273.776486][T12445] binder_alloc: 12444: binder_alloc_buf, no vma [ 273.814913][T12447] tipc: Enabling of bearer rejected, already enabled [ 273.956761][T12462] 9pnet_virtio: no channels available for device @ [ 273.961644][T12464] binder: Binderfs stats mode cannot be changed during a remount [ 274.221568][T12485] fuse: Unknown parameter '0x000000000000000500000000000000000000' [ 274.331791][T12488] __nla_validate_parse: 8 callbacks suppressed [ 274.331821][T12488] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1947'. [ 274.358435][ T35] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 274.508576][T12492] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1949'. [ 274.521191][ T35] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.547514][ T35] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.558350][ T35] usb 8-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 274.561593][ T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.580042][ T35] usb 8-1: config 0 descriptor?? [ 274.789222][ T35] usbhid 8-1:0.0: can't add hid device: -71 [ 274.791456][ T35] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 274.796690][ T35] usb 8-1: USB disconnect, device number 28 [ 275.045678][T12500] 9pnet_virtio: no channels available for device @ [ 275.418293][ T6121] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 275.590047][ T6121] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.592954][ T6121] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 275.595510][ T6121] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 275.598032][ T6121] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.619280][ T6121] usb 7-1: config 0 descriptor?? [ 275.622097][ T6121] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 275.624016][ T6121] dvb-usb: bulk message failed: -22 (3/0) [ 275.638567][ T6121] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 275.641724][ T6121] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 275.644230][ T6121] usb 7-1: media controller created [ 275.646090][ T6121] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 275.658459][ T6121] dvb-usb: bulk message failed: -22 (6/0) [ 275.660220][ T6121] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 275.662997][ T6121] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input78 [ 275.668714][ T6121] dvb-usb: schedule remote query interval to 150 msecs. [ 275.671347][ T6121] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 275.751817][T12516] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1957'. [ 275.757432][T12516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1957'. [ 275.824741][T12507] dvb-usb: bulk message failed: -22 (2/0) [ 275.879704][T12523] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 275.956341][ T6121] dvb-usb: bulk message failed: -22 (1/0) [ 275.958075][ T6121] dvb-usb: error while querying for an remote control event. [ 276.009742][T12532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1963'. [ 276.099931][T12523] /dev/sr0: Can't open blockdev [ 276.118759][ T6121] dvb-usb: bulk message failed: -22 (1/0) [ 276.167279][ T6121] dvb-usb: error while querying for an remote control event. [ 276.293740][ T35] usb 7-1: USB disconnect, device number 25 [ 276.306010][ T35] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 276.819998][T12557] netlink: 512 bytes leftover after parsing attributes in process `syz.0.1971'. [ 276.823144][T12557] openvswitch: netlink: Flow actions attr not present in new flow. [ 277.134762][T12571] netlink: 'syz.0.1975': attribute type 10 has an invalid length. [ 277.146650][T12571] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1975'. [ 277.511021][T12582] netlink: 'syz.1.1979': attribute type 11 has an invalid length. [ 277.645957][T12586] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1982'. [ 277.688693][T12590] vlan2: entered promiscuous mode [ 277.690593][T12590] vlan0: entered promiscuous mode [ 277.694124][T12590] vlan0: left promiscuous mode [ 277.780495][T12604] tipc: Enabling of bearer rejected, already enabled [ 277.813359][T12608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1990'. [ 277.816411][T12608] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1990'. [ 279.078367][T12675] netlink: 'syz.0.2010': attribute type 10 has an invalid length. [ 279.081566][T12675] netlink: 'syz.0.2010': attribute type 10 has an invalid length. [ 279.107467][T12677] fuse: Unknown parameter '0x000000000000000500000000000000000000' [ 279.371748][T12685] »»»»»» speed is unknown, defaulting to 1000 [ 279.431559][T12686] »»»»»» speed is unknown, defaulting to 1000 [ 279.432209][T12685] lo speed is unknown, defaulting to 1000 [ 279.439212][T12683] __nla_validate_parse: 5 callbacks suppressed [ 279.439227][T12683] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2015'. [ 279.505553][T12686] lo speed is unknown, defaulting to 1000 [ 280.490117][T12713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2026'. [ 280.650132][T12723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2030'. [ 281.158116][T12755] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 281.842024][T12777] netlink: 'syz.2.2048': attribute type 11 has an invalid length. [ 282.238244][T12813] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2059'. [ 282.240949][T12813] erspan0: entered promiscuous mode [ 282.429819][T12822] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2062'. [ 282.579588][T12835] FAULT_INJECTION: forcing a failure. [ 282.579588][T12835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.583358][T12835] CPU: 2 UID: 0 PID: 12835 Comm: syz.1.2068 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 282.587272][T12835] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 282.590473][T12835] Call Trace: [ 282.591455][T12835] [ 282.592342][T12835] dump_stack_lvl+0x16c/0x1f0 [ 282.594209][T12835] should_fail_ex+0x497/0x5b0 [ 282.596149][T12835] _copy_from_user+0x2e/0xd0 [ 282.597979][T12835] memdup_user+0x71/0xd0 [ 282.599208][T12835] strndup_user+0x78/0xe0 [ 282.600476][T12835] __ia32_sys_mount+0x138/0x310 [ 282.601904][T12835] ? __pfx___ia32_sys_mount+0x10/0x10 [ 282.603458][T12835] __do_fast_syscall_32+0x73/0x120 [ 282.604948][T12835] do_fast_syscall_32+0x32/0x80 [ 282.606915][T12835] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 282.609172][T12835] RIP: 0023:0xf7f9f579 [ 282.610346][T12835] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 282.616143][T12835] RSP: 002b:00000000f50f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 282.618526][T12835] RAX: ffffffffffffffda RBX: 0000000020000100 RCX: 0000000020000280 [ 282.620887][T12835] RDX: 00000000200002c0 RSI: 0000000000000000 RDI: 0000000020000300 [ 282.623135][T12835] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 282.625889][T12835] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 282.628838][T12835] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 282.631098][T12835] [ 283.031702][T12844] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2067'. [ 283.353276][T12852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2072'. [ 283.465218][T12863] netlink: 'syz.0.2077': attribute type 21 has an invalid length. [ 283.467907][T12863] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2077'. [ 283.471488][T12863] netlink: 'syz.0.2077': attribute type 4 has an invalid length. [ 283.474514][T12863] netlink: 'syz.0.2077': attribute type 3 has an invalid length. [ 283.477374][T12863] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2077'. [ 283.546652][T12867] loop7: detected capacity change from 0 to 16384 [ 283.727945][T12870] : renamed from bond0 (while UP) [ 283.744630][T12870] netlink: zone id is out of range [ 283.746221][T12870] netlink: zone id is out of range [ 283.747719][T12870] netlink: zone id is out of range [ 283.749288][T12870] netlink: zone id is out of range [ 283.750790][T12870] netlink: zone id is out of range [ 283.752285][T12870] netlink: zone id is out of range [ 283.753781][T12870] netlink: zone id is out of range [ 283.755361][T12870] netlink: zone id is out of range [ 283.756871][T12870] netlink: zone id is out of range [ 283.759356][T12870] netlink: zone id is out of range [ 284.978336][T12875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.360540][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 285.362917][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 285.365153][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 285.367367][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 285.370314][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 285.373500][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 285.375777][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 285.377951][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 285.380168][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 285.382321][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x4 [ 285.384570][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 285.386870][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 285.389137][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 285.391357][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 285.393881][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 285.396987][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 285.399177][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 285.401402][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 285.404641][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 285.407133][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 285.409349][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 285.411890][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 285.417912][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x1 [ 285.420370][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 285.422556][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 285.426364][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 285.430581][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 285.433335][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 285.436694][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 285.440342][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 285.442918][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 285.445317][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 285.447537][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 285.450599][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 285.453255][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 285.455732][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 285.457916][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 285.461698][ T25] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.00 Device [syz0] on syz1 [ 285.641330][T12907] syz.0.2089[12907] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 285.641413][T12907] syz.0.2089[12907] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 285.646060][T12907] syz.0.2089[12907] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 286.393166][T12928] vlan2: entered promiscuous mode [ 286.397896][T12928] vlan0: entered promiscuous mode [ 286.401597][T12928] vlan0: left promiscuous mode [ 286.513461][T12930] netlink: 'syz.2.2096': attribute type 11 has an invalid length. [ 287.094224][T12978] FAULT_INJECTION: forcing a failure. [ 287.094224][T12978] name failslab, interval 1, probability 0, space 0, times 0 [ 287.099460][T12978] CPU: 3 UID: 0 PID: 12978 Comm: syz.1.2112 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 287.103793][T12978] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 287.107913][T12978] Call Trace: [ 287.108905][T12978] [ 287.109828][T12978] dump_stack_lvl+0x16c/0x1f0 [ 287.111248][T12978] should_fail_ex+0x497/0x5b0 [ 287.112593][T12978] ? fs_reclaim_acquire+0xae/0x150 [ 287.114244][T12978] should_failslab+0xc2/0x120 [ 287.116126][T12978] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 287.118432][T12978] ? __alloc_skb+0x2b3/0x380 [ 287.120339][T12978] __alloc_skb+0x2b3/0x380 [ 287.122176][T12978] ? __pfx___alloc_skb+0x10/0x10 [ 287.124254][T12978] ? lock_acquire+0x2f/0xb0 [ 287.126122][T12978] netlink_alloc_large_skb+0x69/0x130 [ 287.127875][T12978] netlink_sendmsg+0x689/0xd70 [ 287.129296][T12978] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.130821][T12978] ____sys_sendmsg+0x9ae/0xb40 [ 287.132220][T12978] ? __pfx_____sys_sendmsg+0x10/0x10 [ 287.133749][T12978] ? get_compat_msghdr+0x11b/0x170 [ 287.135362][T12978] ___sys_sendmsg+0x135/0x1e0 [ 287.137014][T12978] ? __pfx____sys_sendmsg+0x10/0x10 [ 287.138577][T12978] ? __pfx_lock_release+0x10/0x10 [ 287.140122][T12978] ? trace_lock_acquire+0x14e/0x1f0 [ 287.141643][T12978] ? __fget_files+0x206/0x3a0 [ 287.143015][T12978] __sys_sendmsg+0x16e/0x220 [ 287.144426][T12978] ? __pfx___sys_sendmsg+0x10/0x10 [ 287.145958][T12978] __do_fast_syscall_32+0x73/0x120 [ 287.147465][T12978] do_fast_syscall_32+0x32/0x80 [ 287.148993][T12978] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 287.150818][T12978] RIP: 0023:0xf7f9f579 [ 287.152007][T12978] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 287.157546][T12978] RSP: 002b:00000000f50f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 287.160030][T12978] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 287.162285][T12978] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 287.164549][T12978] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 287.166896][T12978] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 287.169378][T12978] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 287.171719][T12978] [ 287.172717][ C3] vkms_vblank_simulate: vblank timer overrun [ 287.204048][T12980] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2113'. [ 287.306915][T12988] tmpfs: Bad value for 'mpol' [ 287.551073][T13005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2124'. [ 287.630689][T13009] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2120'. [ 287.819162][T13014] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 0, id = 0 [ 287.982530][T13026] fuse: Unknown parameter '0x000000000000000500000000000000000000' [ 288.233443][T13033] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2130'. [ 289.478401][ T6121] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 289.643488][ T25] net_ratelimit: 16 callbacks suppressed [ 289.643502][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.658645][ T6121] usb 6-1: Using ep0 maxpacket: 8 [ 289.661910][ T6121] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 289.668408][ T6121] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 289.671031][ T6121] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.678016][ T6121] usb 6-1: config 0 descriptor?? [ 289.708758][ T1140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.712478][ T6115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.715268][ T6766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.718066][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.883908][T13116] netlink: 'syz.1.2145': attribute type 7 has an invalid length. [ 289.944970][ T6121] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 289.955924][ T6121] usb 6-1: USB disconnect, device number 25 [ 289.957124][T13121] vlan2: entered promiscuous mode [ 289.959294][T13121] vlan0: entered promiscuous mode [ 289.964239][T13121] vlan0: left promiscuous mode [ 290.005763][T13124] nvme_fabrics: missing parameter 'transport=%s' [ 290.007756][T13124] nvme_fabrics: missing parameter 'nqn=%s' [ 290.012604][T13123] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2154'. [ 290.051415][T13129] tipc: Enabling of bearer rejected, already enabled [ 290.093392][T13131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2156'. [ 290.096724][T13131] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2156'. [ 290.558260][ T6115] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 290.719873][ T6115] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 290.722428][ T6115] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 290.724599][ T6115] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 290.727421][ T6115] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 290.732417][ T6115] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8 [ 290.735593][ T6115] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 290.741170][ T6115] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 290.746658][ T6115] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 290.749739][ T6121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.749841][ T6115] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 290.754995][ T6115] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 290.757742][ T6115] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 290.762254][ T6115] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8 [ 290.765865][ T6115] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 290.769731][ T6115] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 290.774240][ T6115] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 290.777384][ T6115] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 290.780895][ T6115] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 290.783658][ T6115] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 290.787084][ T6115] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8 [ 290.790301][ T6115] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 290.793409][ T6115] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 290.798562][ T6115] usb 5-1: string descriptor 0 read error: -22 [ 290.800411][ T6115] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 290.802988][ T6115] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.809670][ T6115] adutux 5-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 291.016294][T13150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.019268][T13150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.021737][T13150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.024719][T13150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.322196][T13182] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2175'. [ 291.325718][T13182] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2175'. [ 291.986583][ T25] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 292.102987][T13209] netlink: 'syz.1.2184': attribute type 10 has an invalid length. [ 292.184280][T13210] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2184'. [ 292.318375][ T25] usb 8-1: device descriptor read/64, error -71 [ 292.558501][ T25] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 292.688474][ T25] usb 8-1: device descriptor read/64, error -71 [ 292.798436][ T25] usb usb8-port1: attempt power cycle [ 293.078993][ T6115] usb 5-1: USB disconnect, device number 19 [ 293.159126][ T25] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 293.178755][ T25] usb 8-1: device descriptor read/8, error -71 [ 293.268995][T13228] tap0: tun_chr_ioctl cmd 1074025678 [ 293.271024][T13228] tap0: group set to 0 [ 293.418507][ T25] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 293.468780][ T25] usb 8-1: device descriptor read/8, error -71 [ 293.578713][ T25] usb usb8-port1: unable to enumerate USB device [ 294.053938][T13253] trusted_key: encrypted_key: keylen parameter is missing [ 294.159664][T13255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2200'. [ 294.706171][T13266] netlink: 'syz.3.2203': attribute type 11 has an invalid length. [ 294.917087][T13271] tipc: Enabling of bearer rejected, already enabled [ 294.918268][ T5929] net_ratelimit: 6 callbacks suppressed [ 294.918278][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.985031][T13279] vlan2: entered promiscuous mode [ 294.986703][T13279] vlan0: entered promiscuous mode [ 294.991941][T13279] vlan0: left promiscuous mode [ 295.047038][T13282] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2209'. [ 295.757942][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.948448][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.113591][T13319] overlay: Unknown parameter 'fsname' [ 296.376478][T13344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2224'. [ 296.491927][T13346] loop7: detected capacity change from 0 to 16384 [ 296.665866][T13353] Cannot find del_set index 0 as target [ 296.748520][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.904665][T13364] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2234'. [ 296.955986][T13366] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2235'. [ 296.988527][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.388462][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.030462][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.348161][ T5295] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 298.353123][ T5295] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 298.363122][ T5295] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 298.367703][ T5295] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 298.372024][ T5295] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 298.374179][ T5295] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 298.395494][T13401] »»»»»» speed is unknown, defaulting to 1000 [ 298.430118][T13401] lo speed is unknown, defaulting to 1000 [ 298.511263][T13401] chnl_net:caif_netlink_parms(): no params data found [ 298.520036][T13418] netlink: 'syz.3.2249': attribute type 11 has an invalid length. [ 298.578502][T13401] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.580666][T13401] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.582760][T13401] bridge_slave_0: entered allmulticast mode [ 298.584979][T13401] bridge_slave_0: entered promiscuous mode [ 298.587828][T13401] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.590564][T13401] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.592632][T13401] bridge_slave_1: entered allmulticast mode [ 298.594764][T13401] bridge_slave_1: entered promiscuous mode [ 298.613871][T13401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.617693][T13401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.639346][T13401] team0: Port device team_slave_0 added [ 298.642801][T13401] team0: Port device team_slave_1 added [ 298.661233][T13401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.663196][T13401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.673140][T13401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.679752][T13401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.682447][T13401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.689940][T13401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.734713][T13427] fuse: Unknown parameter '0x000000000000000500000000000000000000' [ 298.737256][T13401] hsr_slave_0: entered promiscuous mode [ 298.740659][T13401] hsr_slave_1: entered promiscuous mode [ 298.743648][T13401] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 298.750353][T13401] Cannot create hsr debugfs directory [ 298.822564][T13401] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 298.825420][T13401] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 298.892453][T13401] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 298.895378][T13401] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 298.957389][T13401] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 298.960435][T13401] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 299.011359][T13401] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 299.014584][T13401] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 299.022615][T13430] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2251'. [ 299.068408][ T6121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.161233][T13401] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 299.166615][T13401] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 299.178741][T13401] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 299.183395][T13401] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 299.199228][T13401] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.201905][T13401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.204464][T13401] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.206715][T13401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.231937][T13401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.242031][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.245821][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.261436][T13401] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.271096][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.273399][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.279733][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.281783][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.373672][T13401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.404567][T13401] veth0_vlan: entered promiscuous mode [ 299.415046][T13401] veth1_vlan: entered promiscuous mode [ 299.430905][T13401] veth0_macvtap: entered promiscuous mode [ 299.437953][T13401] veth1_macvtap: entered promiscuous mode [ 299.467964][T13401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.471039][T13401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.473826][T13401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.476588][T13440] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2253'. [ 299.476783][T13401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.477578][T13401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.487722][T13401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.496861][T13401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.501702][T13401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.504674][T13401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.511356][T13401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.516846][T13401] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.522259][T13401] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.525051][T13401] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.528024][T13401] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.543904][T13443] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2252'. [ 299.617235][T13445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.620441][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.108686][ T5929] net_ratelimit: 1 callbacks suppressed [ 300.108704][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.359942][T13447] vlan2: entered promiscuous mode [ 300.361775][T13447] vlan0: entered promiscuous mode [ 300.379549][T13447] vlan0: left promiscuous mode [ 300.421552][ T4055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.424841][ T4055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.428582][ T5954] Bluetooth: hci1: command tx timeout [ 300.455440][ T4055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.457645][ T4055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.470008][T13457] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2258'. [ 300.662344][T13476] Cannot find del_set index 0 as target [ 300.662374][T13477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2266'. [ 300.666685][T13478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2266'. [ 300.727963][T13477] tmpfs: Bad value for 'mpol' [ 300.729902][T13478] tmpfs: Bad value for 'mpol' [ 301.069975][T13500] netlink: 'syz.1.2271': attribute type 10 has an invalid length. [ 301.083070][T13500] team0: Port device netdevsim0 added [ 301.161261][T13502] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2271'. [ 301.194890][T13503] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2272'. [ 301.214086][ C0] hrtimer: interrupt took 23460 ns [ 301.311149][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.848126][T13522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2279'. [ 301.852136][T13522] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2279'. [ 302.196829][T13532] FAULT_INJECTION: forcing a failure. [ 302.196829][T13532] name failslab, interval 1, probability 0, space 0, times 0 [ 302.200540][T13532] CPU: 3 UID: 0 PID: 13532 Comm: syz.0.2283 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 302.203711][T13532] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 302.206709][T13532] Call Trace: [ 302.207668][T13532] [ 302.208515][T13532] dump_stack_lvl+0x16c/0x1f0 [ 302.209832][T13532] should_fail_ex+0x497/0x5b0 [ 302.211201][T13532] ? fs_reclaim_acquire+0xae/0x150 [ 302.212685][T13532] should_failslab+0xc2/0x120 [ 302.214023][T13532] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 302.215567][T13532] ? skb_clone+0x190/0x3f0 [ 302.216844][T13532] skb_clone+0x190/0x3f0 [ 302.218053][T13532] nfnetlink_rcv_batch+0x1d9/0x24e0 [ 302.219595][T13532] ? kasan_quarantine_put+0x10a/0x240 [ 302.221596][T13532] ? kmem_cache_free+0x152/0x4c0 [ 302.223449][T13532] ? kfree_skbmem+0x1a4/0x1f0 [ 302.225187][T13532] ? find_held_lock+0x2d/0x110 [ 302.226984][T13532] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 302.229111][T13532] ? __pfx_lock_release+0x10/0x10 [ 302.231008][T13532] ? __local_bh_enable_ip+0xa4/0x120 [ 302.233004][T13532] ? lockdep_hardirqs_on+0x7c/0x110 [ 302.234744][T13532] ? __pfx___dev_queue_xmit+0x10/0x10 [ 302.236309][T13532] ? __nla_validate_parse+0x605/0x2b10 [ 302.237828][T13532] ? __pfx_aa_get_newest_label+0x10/0x10 [ 302.239433][T13532] ? __pfx___nla_validate_parse+0x10/0x10 [ 302.241018][T13532] ? apparmor_capable+0x114/0x1d0 [ 302.242427][T13532] ? __nla_parse+0x40/0x60 [ 302.243732][T13532] nfnetlink_rcv+0x3c3/0x430 [ 302.245047][T13532] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 302.246519][T13532] netlink_unicast+0x53c/0x7f0 [ 302.247949][T13532] ? __pfx_netlink_unicast+0x10/0x10 [ 302.249531][T13532] ? __phys_addr_symbol+0x30/0x80 [ 302.251048][T13532] ? __check_object_size+0x488/0x710 [ 302.252609][T13532] netlink_sendmsg+0x8b8/0xd70 [ 302.254003][T13532] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.255526][T13532] ____sys_sendmsg+0x9ae/0xb40 [ 302.256882][T13532] ? __pfx_____sys_sendmsg+0x10/0x10 [ 302.258342][T13532] ? get_compat_msghdr+0x11b/0x170 [ 302.259816][T13532] ___sys_sendmsg+0x135/0x1e0 [ 302.261175][T13532] ? __pfx____sys_sendmsg+0x10/0x10 [ 302.262740][T13532] ? __pfx_lock_release+0x10/0x10 [ 302.264198][T13532] ? trace_lock_acquire+0x14e/0x1f0 [ 302.265701][T13532] ? __fget_files+0x206/0x3a0 [ 302.267050][T13532] __sys_sendmsg+0x16e/0x220 [ 302.268368][T13532] ? __pfx___sys_sendmsg+0x10/0x10 [ 302.269836][T13532] __do_fast_syscall_32+0x73/0x120 [ 302.271266][T13532] do_fast_syscall_32+0x32/0x80 [ 302.272667][T13532] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 302.274438][T13532] RIP: 0023:0xf706e579 [ 302.275590][T13532] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 302.281003][T13532] RSP: 002b:00000000f506055c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 302.283314][T13532] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 302.285486][T13532] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 302.287674][T13532] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 302.289850][T13532] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 302.292021][T13532] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 302.294222][T13532] [ 302.383584][T13536] netlink: 'syz.0.2284': attribute type 11 has an invalid length. [ 302.504287][ T6121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.508543][ T5954] Bluetooth: hci1: command tx timeout [ 302.604068][T13548] tipc: Started in network mode [ 302.605555][T13548] tipc: Node identity ac1414aa, cluster identity 4711 [ 302.607854][T13548] tipc: Enabled bearer , priority 10 [ 302.828514][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.095450][ T5295] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 303.100581][ T5295] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 303.112359][ T5295] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 303.114876][ T5295] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 303.117142][ T5295] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 303.120686][ T5295] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 303.144618][T13561] »»»»»» speed is unknown, defaulting to 1000 [ 303.173967][T11668] bond0: (slave syz_tun): Releasing backup interface [ 303.179887][T13561] lo speed is unknown, defaulting to 1000 [ 303.259202][T13561] chnl_net:caif_netlink_parms(): no params data found [ 303.324006][T13561] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.325974][T13561] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.327981][T13561] bridge_slave_0: entered allmulticast mode [ 303.332371][T13561] bridge_slave_0: entered promiscuous mode [ 303.336176][T13561] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.339638][T13561] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.341635][T13561] bridge_slave_1: entered allmulticast mode [ 303.343930][T13561] bridge_slave_1: entered promiscuous mode [ 303.357396][T13579] loop7: detected capacity change from 0 to 16384 [ 303.378644][T13561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.382211][T13561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.418055][T13561] team0: Port device team_slave_0 added [ 303.421597][T13561] team0: Port device team_slave_1 added [ 303.441778][T13561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.443842][T13561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.453567][T13561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.457857][T13561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.460040][T13561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.467077][T13561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.509352][T13561] hsr_slave_0: entered promiscuous mode [ 303.523248][T13561] hsr_slave_1: entered promiscuous mode [ 303.526907][T13561] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.530090][T13561] Cannot create hsr debugfs directory [ 303.558827][ T6121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.598305][ T6000] tipc: Node number set to 2886997162 [ 303.905852][T13589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2298'. [ 304.062219][T13561] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 304.066174][T13561] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 304.081118][T13561] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 304.090235][T13561] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 304.152971][T13561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.163361][T13561] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.181090][ T4055] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.183771][ T4055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.189647][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.192905][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.209456][T13561] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 304.278728][T13561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.310889][T13561] veth0_vlan: entered promiscuous mode [ 304.319569][T13561] veth1_vlan: entered promiscuous mode [ 304.333973][T13561] veth0_macvtap: entered promiscuous mode [ 304.337585][T13561] veth1_macvtap: entered promiscuous mode [ 304.344446][T13561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.347396][T13561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.350387][T13561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.353318][T13561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.356118][T13561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.360718][T13561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.366425][T13609] Cannot find add_set index 0 as target [ 304.368909][T13561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.373328][T13561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.376551][T13561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.379999][T13561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.382887][T13561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.385687][T13561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.388945][T13561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.393380][T13561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.397985][T13561] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.400976][T13561] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.404159][T13561] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.407208][T13561] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.449403][ T4055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.451650][ T4055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.460365][ T4055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.463509][ T4055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.500163][T13612] loop2: detected capacity change from 0 to 7 [ 304.505038][T13612] Dev loop2: unable to read RDB block 7 [ 304.507026][T13612] loop2: unable to read partition table [ 304.509512][T13612] loop2: partition table beyond EOD, truncated [ 304.511297][T13612] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 304.577773][T13616] dvmrp9: entered allmulticast mode [ 304.588393][ T5954] Bluetooth: hci1: command tx timeout [ 304.588779][ T833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.615083][T13618] netlink: 'syz.1.2306': attribute type 10 has an invalid length. [ 304.633662][T13618] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 304.756894][T13624] IPv6: sit1: Disabled Multicast RS [ 304.798023][T13626] __nla_validate_parse: 2 callbacks suppressed [ 304.798034][T13626] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2310'. [ 304.834343][T13628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2311'. [ 304.837696][T13628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2311'. [ 305.104755][T13634] random: crng reseeded on system resumption [ 305.135616][T13636] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20000 [ 305.159255][ T5954] Bluetooth: hci4: command tx timeout [ 305.237515][T13640] 9pnet_fd: Insufficient options for proto=fd [ 305.638616][ T6121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.868601][ T8283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.098804][T13645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2317'. [ 306.205916][T13650] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2319'. [ 306.668304][ T5954] Bluetooth: hci1: command tx timeout [ 306.680474][ T833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.989044][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.228358][ T5954] Bluetooth: hci4: command tx timeout [ 307.490281][T13677] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2328'. [ 307.517863][T13681] FAULT_INJECTION: forcing a failure. [ 307.517863][T13681] name failslab, interval 1, probability 0, space 0, times 0 [ 307.526223][T13681] CPU: 2 UID: 0 PID: 13681 Comm: syz.3.2330 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 307.531040][T13681] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 307.531063][T13681] Call Trace: [ 307.531097][T13681] [ 307.531104][T13681] dump_stack_lvl+0x16c/0x1f0 [ 307.531123][T13681] should_fail_ex+0x497/0x5b0 [ 307.531136][T13681] ? fs_reclaim_acquire+0xae/0x150 [ 307.531150][T13681] should_failslab+0xc2/0x120 [ 307.531165][T13681] __kmalloc_noprof+0xce/0x4f0 [ 307.531180][T13681] ? nft_trans_alloc_gfp+0x26/0x2e0 [ 307.531197][T13681] nft_trans_alloc_gfp+0x26/0x2e0 [ 307.531212][T13681] nf_tables_delsetelem+0xbd8/0xf30 [ 307.531231][T13681] ? __pfx_nf_tables_delsetelem+0x10/0x10 [ 307.531246][T13681] ? __pfx_nft_setelem_flush+0x10/0x10 [ 307.531260][T13681] ? net_generic+0xea/0x2a0 [ 307.531271][T13681] ? __pfx_lock_release+0x10/0x10 [ 307.531285][T13681] ? __nla_parse+0x40/0x60 [ 307.531302][T13681] nfnetlink_rcv_batch+0x1a2a/0x24e0 [ 307.531322][T13681] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 307.531334][T13681] ? __pfx_lock_release+0x10/0x10 [ 307.531346][T13681] ? __local_bh_enable_ip+0xa4/0x120 [ 307.531359][T13681] ? lockdep_hardirqs_on+0x7c/0x110 [ 307.531379][T13681] ? __pfx___dev_queue_xmit+0x10/0x10 [ 307.531404][T13681] ? __nla_parse+0x40/0x60 [ 307.531422][T13681] nfnetlink_rcv+0x3c3/0x430 [ 307.531434][T13681] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 307.531449][T13681] netlink_unicast+0x53c/0x7f0 [ 307.531463][T13681] ? __pfx_netlink_unicast+0x10/0x10 [ 307.531475][T13681] ? __phys_addr_symbol+0x30/0x80 [ 307.531489][T13681] ? __check_object_size+0x488/0x710 [ 307.531506][T13681] netlink_sendmsg+0x8b8/0xd70 [ 307.531520][T13681] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.531536][T13681] ____sys_sendmsg+0x9ae/0xb40 [ 307.531550][T13681] ? __pfx_____sys_sendmsg+0x10/0x10 [ 307.531561][T13681] ? get_compat_msghdr+0x11b/0x170 [ 307.531578][T13681] ___sys_sendmsg+0x135/0x1e0 [ 307.531594][T13681] ? __pfx____sys_sendmsg+0x10/0x10 [ 307.531614][T13681] ? __pfx_lock_release+0x10/0x10 [ 307.531623][T13681] ? trace_lock_acquire+0x14e/0x1f0 [ 307.531642][T13681] ? __fget_files+0x206/0x3a0 [ 307.531658][T13681] __sys_sendmsg+0x16e/0x220 [ 307.531673][T13681] ? __pfx___sys_sendmsg+0x10/0x10 [ 307.531697][T13681] __do_fast_syscall_32+0x73/0x120 [ 307.531711][T13681] do_fast_syscall_32+0x32/0x80 [ 307.531725][T13681] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 307.531747][T13681] RIP: 0023:0xf70ae579 [ 307.531757][T13681] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 307.531767][T13681] RSP: 002b:00000000f50a055c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 307.531779][T13681] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 307.531786][T13681] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 307.531792][T13681] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 307.531798][T13681] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 307.531805][T13681] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 307.531818][T13681] [ 307.613249][ T39] kauditd_printk_skb: 86 callbacks suppressed [ 307.613262][ T39] audit: type=1326 audit(1737297507.899:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13682 comm="syz.0.2331" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 307.613514][ T39] audit: type=1326 audit(1737297507.899:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13682 comm="syz.0.2331" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 307.613673][ T39] audit: type=1326 audit(1737297507.899:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13682 comm="syz.0.2331" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 307.613809][ T39] audit: type=1326 audit(1737297507.899:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13682 comm="syz.0.2331" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 307.614275][ T39] audit: type=1326 audit(1737297507.899:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13682 comm="syz.0.2331" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 307.614392][ T39] audit: type=1326 audit(1737297507.899:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13682 comm="syz.0.2331" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 307.614541][ T39] audit: type=1326 audit(1737297507.899:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13682 comm="syz.0.2331" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 307.620710][T13686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.645921][ T39] audit: type=1326 audit(1737297507.909:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13682 comm="syz.0.2331" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 307.649929][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.655996][ T39] audit: type=1326 audit(1737297507.909:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13682 comm="syz.0.2331" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 307.666482][T13686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.667712][ T39] audit: type=1326 audit(1737297507.909:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13682 comm="syz.0.2331" exe="/syz-executor" sig=0 arch=40000003 syscall=52 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 307.671062][T13690] fuse: Unknown parameter '0x000000000000000500000000000000000000' [ 307.677359][ T833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.718002][ T833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.724383][ T833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.829863][T13697] netlink: 'syz.3.2333': attribute type 10 has an invalid length. [ 307.903992][T13701] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2333'. [ 308.004842][T13705] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2334'. [ 308.300309][T13712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2338'. [ 308.629282][T13721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2341'. [ 309.000323][T13746] random: crng reseeded on system resumption [ 309.113444][T13746] »»»»»» speed is unknown, defaulting to 1000 [ 309.202289][T13746] lo speed is unknown, defaulting to 1000 [ 309.225465][T13741] ebtables: wrong size: *len 80, entries_size 144, replsz 144 [ 309.328334][ T5954] Bluetooth: hci4: command tx timeout [ 309.524580][T13757] Cannot find del_set index 0 as target [ 309.873881][T13769] __nla_validate_parse: 1 callbacks suppressed [ 309.873896][T13769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2358'. [ 309.896505][T13771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2359'. [ 309.911743][T13771] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2359'. [ 310.334153][T13785] rdma_rxe: rxe_newlink: failed to add lo [ 310.343651][T13785] »»»»»»: renamed from lo (while UP) [ 310.401792][T13787] loop7: detected capacity change from 0 to 16384 [ 310.922266][T13797] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2366'. [ 310.978937][T13799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2368'. [ 311.068550][ T5929] net_ratelimit: 20 callbacks suppressed [ 311.068567][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.388467][ T5954] Bluetooth: hci4: command tx timeout [ 311.471108][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.904788][T13816] FAULT_INJECTION: forcing a failure. [ 311.904788][T13816] name failslab, interval 1, probability 0, space 0, times 0 [ 311.910391][T13816] CPU: 3 UID: 0 PID: 13816 Comm: syz.2.2373 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 311.910769][T13818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.913951][T13816] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 311.913961][T13816] Call Trace: [ 311.913966][T13816] [ 311.913971][T13816] dump_stack_lvl+0x16c/0x1f0 [ 311.913989][T13816] should_fail_ex+0x497/0x5b0 [ 311.914003][T13816] ? fs_reclaim_acquire+0xae/0x150 [ 311.914017][T13816] should_failslab+0xc2/0x120 [ 311.914032][T13816] __kmalloc_noprof+0xce/0x4f0 [ 311.917532][T13818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.921134][T13816] ? nla_strdup+0xc6/0x150 [ 311.921167][T13816] nla_strdup+0xc6/0x150 [ 311.921186][T13816] nf_tables_newtable+0xe08/0x1b40 [ 311.921202][T13816] ? net_generic+0xea/0x2a0 [ 311.921214][T13816] ? __pfx_nf_tables_newtable+0x10/0x10 [ 311.921229][T13816] ? __nla_parse+0x40/0x60 [ 311.928852][T13818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.929024][T13816] nfnetlink_rcv_batch+0x1a2a/0x24e0 [ 311.930602][T13818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.932577][T13816] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 311.933980][T13818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.935047][T13816] ? __pfx_lock_release+0x10/0x10 [ 311.943635][T13818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.944378][T13816] ? __local_bh_enable_ip+0xa4/0x120 [ 311.946801][T13818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.948278][T13816] ? lockdep_hardirqs_on+0x7c/0x110 [ 311.948302][T13816] ? __pfx___dev_queue_xmit+0x10/0x10 [ 311.948326][T13816] ? __nla_parse+0x40/0x60 [ 311.948343][T13816] nfnetlink_rcv+0x3c3/0x430 [ 311.953178][T13817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.954710][T13816] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 311.954728][T13816] netlink_unicast+0x53c/0x7f0 [ 311.969246][T13816] ? __pfx_netlink_unicast+0x10/0x10 [ 311.970924][T13816] ? __phys_addr_symbol+0x30/0x80 [ 311.972457][T13816] ? __check_object_size+0x488/0x710 [ 311.973933][T13816] netlink_sendmsg+0x8b8/0xd70 [ 311.975355][T13816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.976898][T13816] ____sys_sendmsg+0x9ae/0xb40 [ 311.978325][T13816] ? __pfx_____sys_sendmsg+0x10/0x10 [ 311.979857][T13816] ? get_compat_msghdr+0x11b/0x170 [ 311.981358][T13816] ___sys_sendmsg+0x135/0x1e0 [ 311.982732][T13816] ? __pfx____sys_sendmsg+0x10/0x10 [ 311.984262][T13816] ? __pfx_lock_release+0x10/0x10 [ 311.985684][T13816] ? trace_lock_acquire+0x14e/0x1f0 [ 311.987149][T13816] ? __fget_files+0x206/0x3a0 [ 311.988467][T13816] __sys_sendmsg+0x16e/0x220 [ 311.989746][T13816] ? __pfx___sys_sendmsg+0x10/0x10 [ 311.991181][T13816] __do_fast_syscall_32+0x73/0x120 [ 311.992656][T13816] do_fast_syscall_32+0x32/0x80 [ 311.994017][T13816] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 311.995768][T13816] RIP: 0023:0xf7f94579 [ 311.996926][T13816] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 312.002210][T13816] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 312.004484][T13816] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 312.006678][T13816] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 312.008868][T13816] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 312.011102][T13816] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 312.013262][T13816] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 312.015557][T13816] [ 313.328882][T13857] can0: slcan on ttyS3. [ 314.059835][T13868] loop2: detected capacity change from 0 to 7 [ 314.061952][T13868] Dev loop2: unable to read RDB block 7 [ 314.064021][T13868] loop2: unable to read partition table [ 314.065863][T13868] loop2: partition table beyond EOD, truncated [ 314.067616][T13868] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 314.175343][T13873] netlink: 'syz.2.2392': attribute type 10 has an invalid length. [ 314.283847][T13873] bond0: (slave wlan1): Opening slave failed [ 314.359025][T13850] can0 (unregistered): slcan off ttyS3. [ 314.607182][T13887] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 314.608707][T13888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2398'. [ 314.610001][T13887] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 314.746551][T13892] loop2: detected capacity change from 0 to 7 [ 314.753763][T13892] Dev loop2: unable to read RDB block 7 [ 314.755509][T13892] loop2: unable to read partition table [ 314.757209][T13892] loop2: partition table beyond EOD, truncated [ 314.760655][T13892] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 315.770493][T13931] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2413'. [ 315.777324][T13933] ======================================================= [ 315.777324][T13933] WARNING: The mand mount option has been deprecated and [ 315.777324][T13933] and is ignored by this kernel. Remove the mand [ 315.777324][T13933] option from the mount to silence this warning. [ 315.777324][T13933] ======================================================= [ 315.889972][T13933] /dev/sr0: Can't open blockdev [ 316.114828][T13950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2421'. [ 316.592457][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.594674][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.597288][ T5986] net_ratelimit: 6 callbacks suppressed [ 316.597302][ T5986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.607364][ T5986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.710121][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.007650][ T39] kauditd_printk_skb: 43 callbacks suppressed [ 317.007663][ T39] audit: type=1326 audit(1737297517.259:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13944 comm="syz.2.2419" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7fc00000 [ 317.110483][ T39] audit: type=1326 audit(1737297517.399:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13944 comm="syz.2.2419" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f94579 code=0x7fc00000 [ 317.118034][ T39] audit: type=1326 audit(1737297517.399:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13944 comm="syz.2.2419" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7fc00000 [ 317.124716][ T39] audit: type=1326 audit(1737297517.399:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13944 comm="syz.2.2419" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7fc00000 [ 317.134630][ T39] audit: type=1326 audit(1737297517.399:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13944 comm="syz.2.2419" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7fc00000 [ 317.141996][ T39] audit: type=1326 audit(1737297517.399:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13944 comm="syz.2.2419" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7fc00000 [ 317.150060][ T39] audit: type=1326 audit(1737297517.399:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13944 comm="syz.2.2419" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7fc00000 [ 317.158332][ T39] audit: type=1326 audit(1737297517.399:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13944 comm="syz.2.2419" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7fc00000 [ 317.166910][ T39] audit: type=1326 audit(1737297517.399:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13944 comm="syz.2.2419" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7fc00000 [ 317.175726][ T39] audit: type=1326 audit(1737297517.399:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13944 comm="syz.2.2419" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7fc00000 [ 317.255914][T13981] FAULT_INJECTION: forcing a failure. [ 317.255914][T13981] name failslab, interval 1, probability 0, space 0, times 0 [ 317.260412][T13981] CPU: 0 UID: 0 PID: 13981 Comm: syz.2.2429 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 317.264669][T13981] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 317.268940][T13981] Call Trace: [ 317.270291][T13981] [ 317.271503][T13981] dump_stack_lvl+0x16c/0x1f0 [ 317.273409][T13981] should_fail_ex+0x497/0x5b0 [ 317.275314][T13981] ? fs_reclaim_acquire+0xae/0x150 [ 317.277375][T13981] should_failslab+0xc2/0x120 [ 317.279319][T13981] __kmalloc_node_noprof+0xd1/0x520 [ 317.280832][T13981] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 317.282439][T13981] __kvmalloc_node_noprof+0xad/0x1a0 [ 317.283981][T13981] bucket_table_alloc.isra.0+0x86/0x460 [ 317.285694][T13981] rhashtable_init_noprof+0x43b/0x7d0 [ 317.287303][T13981] rhltable_init_noprof+0x20/0x60 [ 317.288902][T13981] nf_tables_newtable+0xfb6/0x1b40 [ 317.290468][T13981] ? net_generic+0xea/0x2a0 [ 317.291809][T13981] ? __pfx_nf_tables_newtable+0x10/0x10 [ 317.293395][T13981] ? __nla_parse+0x40/0x60 [ 317.294701][T13981] nfnetlink_rcv_batch+0x1a2a/0x24e0 [ 317.296282][T13981] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 317.297933][T13981] ? __pfx_lock_release+0x10/0x10 [ 317.299419][T13981] ? __local_bh_enable_ip+0xa4/0x120 [ 317.300971][T13981] ? lockdep_hardirqs_on+0x7c/0x110 [ 317.302574][T13981] ? __pfx___dev_queue_xmit+0x10/0x10 [ 317.304169][T13981] ? __nla_parse+0x40/0x60 [ 317.305519][T13981] nfnetlink_rcv+0x3c3/0x430 [ 317.306883][T13981] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 317.308406][T13981] netlink_unicast+0x53c/0x7f0 [ 317.309819][T13981] ? __pfx_netlink_unicast+0x10/0x10 [ 317.311334][T13981] ? __phys_addr_symbol+0x30/0x80 [ 317.312781][T13981] ? __check_object_size+0x488/0x710 [ 317.314310][T13981] netlink_sendmsg+0x8b8/0xd70 [ 317.315915][T13981] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.317464][T13981] ____sys_sendmsg+0x9ae/0xb40 [ 317.318942][T13981] ? __pfx_____sys_sendmsg+0x10/0x10 [ 317.320566][T13981] ? get_compat_msghdr+0x11b/0x170 [ 317.322050][T13981] ___sys_sendmsg+0x135/0x1e0 [ 317.323436][T13981] ? __pfx____sys_sendmsg+0x10/0x10 [ 317.324956][T13981] ? __pfx_lock_release+0x10/0x10 [ 317.326408][T13981] ? trace_lock_acquire+0x14e/0x1f0 [ 317.327904][T13981] ? __fget_files+0x206/0x3a0 [ 317.329268][T13981] __sys_sendmsg+0x16e/0x220 [ 317.330602][T13981] ? __pfx___sys_sendmsg+0x10/0x10 [ 317.332096][T13981] __do_fast_syscall_32+0x73/0x120 [ 317.333619][T13981] do_fast_syscall_32+0x32/0x80 [ 317.335124][T13981] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 317.336965][T13981] RIP: 0023:0xf7f94579 [ 317.338214][T13981] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 317.343733][T13981] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 317.346132][T13981] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 317.348429][T13981] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 317.350733][T13981] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 317.353002][T13981] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 317.355110][T13981] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 317.357524][T13981] [ 317.402734][T13986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2431'. [ 317.427646][T13988] rdma_rxe: rxe_newlink: failed to add lo [ 317.433413][T13988] »»»»»»: renamed from lo (while UP) [ 317.439100][T13989] netlink: 'syz.2.2432': attribute type 2 has an invalid length. [ 317.494271][T13997] sp0: Synchronizing with TNC [ 317.560932][T13998] hsr_slave_0: left promiscuous mode [ 317.564927][T13998] hsr_slave_1: left promiscuous mode [ 317.701427][T14004] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2438'. [ 317.705191][T14004] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2438'. [ 317.708906][T14004] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2438'. [ 317.712133][T14004] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2438'. [ 317.738316][ T35] usb 8-1: new full-speed USB device number 33 using dummy_hcd [ 317.779639][T14011] vlan2: entered promiscuous mode [ 317.781214][T14011] vlan0: entered promiscuous mode [ 317.784818][T14011] vlan0: left promiscuous mode [ 317.798546][ T833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.869811][ T35] usb 8-1: device descriptor read/64, error -71 [ 318.044208][ T6569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.051579][ T9533] tipc: Resetting bearer [ 318.078026][ T9533] tipc: Disabling bearer [ 318.135938][ T5295] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 318.139137][ T35] usb 8-1: new full-speed USB device number 34 using dummy_hcd [ 318.146033][ T5295] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 318.152826][ T5295] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 318.157497][ T5295] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 318.160897][ T5295] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 318.163934][ T5295] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 318.194746][T14018] »»»»»» speed is unknown, defaulting to 1000 [ 318.269651][ T9533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.273523][ T9533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.278505][ T35] usb 8-1: device descriptor read/64, error -71 [ 318.300964][T14018] lo speed is unknown, defaulting to 1000 [ 318.398762][ T35] usb usb8-port1: attempt power cycle [ 318.464698][T14028] fuse: Unknown parameter '0x000000000000000500000000000000000000' [ 318.484031][ T45] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.518829][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.535040][T14018] chnl_net:caif_netlink_parms(): no params data found [ 318.617734][T14018] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.622999][T14018] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.626065][T14018] bridge_slave_0: entered allmulticast mode [ 318.629456][T14018] bridge_slave_0: entered promiscuous mode [ 318.636498][ T45] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.646895][T14018] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.650067][T14018] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.653061][T14018] bridge_slave_1: entered allmulticast mode [ 318.656444][T14018] bridge_slave_1: entered promiscuous mode [ 318.724051][T14018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.729209][T14018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.752414][ T45] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.756826][T14035] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2446'. [ 318.765908][T14018] team0: Port device team_slave_0 added [ 318.770289][T14018] team0: Port device team_slave_1 added [ 318.822261][ T45] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.827701][T14018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.832946][T14018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.840945][T14018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.876070][T14018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.878108][T14018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.886454][ T35] usb 8-1: new full-speed USB device number 35 using dummy_hcd [ 318.889530][T14018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.908630][ T35] usb 8-1: device descriptor read/8, error -71 [ 318.929863][T14018] hsr_slave_0: entered promiscuous mode [ 318.932195][T14018] hsr_slave_1: entered promiscuous mode [ 318.934364][T14018] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 318.936606][T14018] Cannot create hsr debugfs directory [ 319.042646][ T45] bridge_slave_1: left allmulticast mode [ 319.045269][ T45] bridge_slave_1: left promiscuous mode [ 319.049621][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.054560][ T45] bridge_slave_0: left allmulticast mode [ 319.056253][ T45] bridge_slave_0: left promiscuous mode [ 319.057904][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.152481][ T35] usb 8-1: new full-speed USB device number 36 using dummy_hcd [ 319.166445][T14040] loop7: detected capacity change from 0 to 16384 [ 319.168802][ T35] usb 8-1: device descriptor read/8, error -71 [ 319.282533][ T35] usb usb8-port1: unable to enumerate USB device [ 319.548435][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.780559][ T45]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.784681][ T45]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.788801][ T45]  (unregistering): (slave wlan1): Releasing backup interface [ 319.791573][ T45]  (unregistering): Released all slaves [ 319.894716][T14047] netlink: 'syz.2.2449': attribute type 10 has an invalid length. [ 319.897428][T14047] bond0: (slave wlan1): Opening slave failed [ 319.900218][ T45] tipc: Disabling bearer [ 319.916305][ T45] tipc: Disabling bearer [ 319.920026][ T45] tipc: Left network mode [ 320.188344][ T5954] Bluetooth: hci0: command tx timeout [ 320.332976][ T45] hsr_slave_0: left promiscuous mode [ 320.335261][ T45] hsr_slave_1: left promiscuous mode [ 320.337652][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.340584][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.344396][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.346527][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.383289][ T45] veth1_macvtap: left promiscuous mode [ 320.385229][ T45] veth0_macvtap: left promiscuous mode [ 320.386938][ T45] veth1_vlan: left promiscuous mode [ 320.388916][ T45] veth0_vlan: left promiscuous mode [ 321.184929][ T45] team0 (unregistering): Port device team_slave_1 removed [ 321.286301][ T45] team0 (unregistering): Port device team_slave_0 removed [ 321.303797][T14091] syz.2.2456 (14091): drop_caches: 2 [ 321.958326][ T833] usb 8-1: new full-speed USB device number 37 using dummy_hcd [ 321.974759][T14018] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 321.994792][T14018] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 321.998262][T14018] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 322.004880][T14018] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 322.052268][T14018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.060533][T14018] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.064966][ T1177] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.067033][ T1177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.073680][ T1177] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.075717][ T1177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.092960][ T833] usb 8-1: device descriptor read/64, error -71 [ 322.216726][T14018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.236061][T14018] veth0_vlan: entered promiscuous mode [ 322.241401][T14018] veth1_vlan: entered promiscuous mode [ 322.253138][T14018] veth0_macvtap: entered promiscuous mode [ 322.256238][T14018] veth1_macvtap: entered promiscuous mode [ 322.262720][T14018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.265732][T14018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.271730][T14018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.274730][T14018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.277531][T14018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.278425][ T5954] Bluetooth: hci0: command tx timeout [ 322.280591][T14018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.286023][T14018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.290617][T14018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.293652][T14018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.296432][T14018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.300151][T14018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.303020][T14018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.305985][T14018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.309647][T14018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.313680][T14018] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.317007][T14018] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.320973][T14018] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.324423][T14018] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.351741][ T45] IPVS: stop unused estimator thread 0... [ 322.359304][ T833] usb 8-1: new full-speed USB device number 38 using dummy_hcd [ 322.386860][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.389229][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.407187][ T1177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.412929][ T1177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.449782][T14115] loop2: detected capacity change from 0 to 7 [ 322.452039][T14115] Dev loop2: unable to read RDB block 7 [ 322.453753][T14115] loop2: unable to read partition table [ 322.455521][T14115] loop2: partition table beyond EOD, truncated [ 322.457552][T14115] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 322.508345][ T833] usb 8-1: device descriptor read/64, error -71 [ 322.630253][ T833] usb usb8-port1: attempt power cycle [ 322.674333][T14120] netlink: 'syz.2.2464': attribute type 10 has an invalid length. [ 322.681328][T14120] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 322.684071][T14120] team0: Failed to send options change via netlink (err -105) [ 322.686197][T14120] team0: Port device netdevsim0 added [ 323.008404][ T833] usb 8-1: new full-speed USB device number 39 using dummy_hcd [ 323.030391][ T833] usb 8-1: device descriptor read/8, error -71 [ 323.278582][ T833] usb 8-1: new full-speed USB device number 40 using dummy_hcd [ 323.299200][ T833] usb 8-1: device descriptor read/8, error -71 [ 323.408635][ T833] usb usb8-port1: unable to enumerate USB device [ 323.803311][T14136] netlink: 'syz.0.2470': attribute type 1 has an invalid length. [ 324.348468][ T5954] Bluetooth: hci0: command tx timeout [ 324.910874][T14155] netlink: 'syz.0.2474': attribute type 10 has an invalid length. [ 324.933643][T14155] team0: Port device netdevsim0 added [ 325.002243][T14155] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2474'. [ 325.263848][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 325.263859][ T39] audit: type=1326 audit(1737297525.549:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14162 comm="syz.1.2477" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f55579 code=0x0 [ 326.090712][T14184] fuse: Unknown parameter '0x000000000000000500000000000000000000' [ 326.158383][ T9] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 326.289373][ T9] usb 5-1: device descriptor read/64, error -71 [ 326.391342][T14191] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2484'. [ 326.438549][ T5295] Bluetooth: hci0: command tx timeout [ 326.528323][ T9] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 326.658417][ T9] usb 5-1: device descriptor read/64, error -71 [ 326.753326][T14193] loop2: detected capacity change from 0 to 7 [ 326.756429][T14193] Dev loop2: unable to read RDB block 7 [ 326.758776][T14193] loop2: unable to read partition table [ 326.761319][T14193] loop2: partition table beyond EOD, truncated [ 326.763678][T14193] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– () failed (rc=-5) [ 326.771624][ T9] usb usb5-port1: attempt power cycle [ 326.882352][T14201] vlan2: entered promiscuous mode [ 326.883928][T14201] vlan0: entered promiscuous mode [ 326.886420][T14201] vlan0: left promiscuous mode [ 327.108305][ T9] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 327.133344][ T9] usb 5-1: device descriptor read/8, error -71 [ 327.412229][ T9] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 327.428686][ T9] usb 5-1: device descriptor read/8, error -71 [ 327.540429][ T9] usb usb5-port1: unable to enumerate USB device [ 328.309552][T14226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2498'. [ 328.508349][ T5295] Bluetooth: hci0: command 0x0405 tx timeout [ 328.943285][T14239] fuse: Unknown parameter '0x000000000000000500000000000000000000' [ 329.228841][T14251] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2502'. [ 329.975056][T14263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2509'. [ 330.048760][ T58] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 330.134120][T14272] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2513'. [ 330.208339][ T58] usb 8-1: Using ep0 maxpacket: 16 [ 330.211154][ T58] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 103, changing to 10 [ 330.214456][ T58] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34304, setting to 1024 [ 330.217579][ T58] usb 8-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 330.220750][ T58] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.231988][ T58] usb 8-1: config 0 descriptor?? [ 330.233852][T14257] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 330.238426][ T25] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 330.378376][ T25] usb 5-1: device descriptor read/64, error -71 [ 330.628400][ T25] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 330.646465][ T58] input: HID 05ac:8241 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:05AC:8241.0007/input/input80 [ 330.729170][ T58] appleir 0003:05AC:8241.0007: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 330.758291][ T25] usb 5-1: device descriptor read/64, error -71 [ 330.868642][ T25] usb usb5-port1: attempt power cycle [ 331.218374][ T25] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 331.238706][ T25] usb 5-1: device descriptor read/8, error -71 [ 331.478396][ T25] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 331.498905][ T25] usb 5-1: device descriptor read/8, error -71 [ 331.608511][ T25] usb usb5-port1: unable to enumerate USB device [ 331.746866][T14309] : renamed from bond0 (while UP) [ 331.785993][T14309] netlink: zone id is out of range [ 331.788001][T14309] netlink: zone id is out of range [ 331.790277][T14309] netlink: zone id is out of range [ 331.792392][T14309] netlink: zone id is out of range [ 331.794509][T14309] netlink: zone id is out of range [ 331.796267][T14309] netlink: zone id is out of range [ 331.797788][T14309] netlink: zone id is out of range [ 331.799406][T14309] netlink: zone id is out of range [ 331.800904][T14309] netlink: zone id is out of range [ 331.802395][T14309] netlink: zone id is out of range [ 331.974793][T14312] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2523'. [ 332.010584][T14314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2524'. [ 332.067381][T14315] misc userio: Begin command sent, but we're already running [ 332.479929][T14336] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2533'. [ 332.484310][T14336] erspan0: entered promiscuous mode [ 332.506002][ T5929] usb 8-1: USB disconnect, device number 41 [ 333.070396][T14346] loop2: detected capacity change from 0 to 7 [ 333.072675][T14346] Dev loop2: unable to read RDB block 7 [ 333.076021][T14346] loop2: unable to read partition table [ 333.082326][T14346] loop2: partition table beyond EOD, truncated [ 333.084291][T14346] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ?) failed (rc=-5) [ 333.314954][T14357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2537'. [ 333.351655][T14359] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2546'. [ 333.354324][T14359] erspan0: entered promiscuous mode [ 333.368972][T14360] misc userio: Begin command sent, but we're already running [ 333.652139][T14368] : renamed from bond0 (while UP) [ 334.291707][T14377] vlan2: entered promiscuous mode [ 334.293299][T14377] vlan0: entered promiscuous mode [ 334.334140][T14377] vlan0: left promiscuous mode [ 334.384560][T14384] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2545'. [ 334.618394][ T6766] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 334.748441][ T6766] usb 5-1: device descriptor read/64, error -71 [ 334.853675][T14394] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 334.998287][ T6766] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 335.212930][T14398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2549'. [ 335.459987][ T6766] usb 5-1: device descriptor read/64, error -71 [ 335.578938][ T6766] usb usb5-port1: attempt power cycle [ 335.928259][ T6766] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 335.948690][ T6766] usb 5-1: device descriptor read/8, error -71 [ 336.188285][ T6766] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 336.208792][ T6766] usb 5-1: device descriptor read/8, error -71 [ 336.319132][ T6766] usb usb5-port1: unable to enumerate USB device [ 337.708507][ T5954] Bluetooth: hci0: command 0x0405 tx timeout [ 337.709069][T14409] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 338.649851][T14421] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2555'. [ 338.663140][T14425] trusted_key: encrypted_key: insufficient parameters specified [ 339.089927][T14434] : renamed from bond0 (while UP) [ 339.293875][T14432] net_ratelimit: 20 callbacks suppressed [ 339.293888][T14432] netlink: zone id is out of range [ 339.297080][T14432] netlink: zone id is out of range [ 339.298665][T14432] netlink: zone id is out of range [ 339.300188][T14432] netlink: zone id is out of range [ 339.301678][T14432] netlink: zone id is out of range [ 339.303168][T14432] netlink: zone id is out of range [ 339.304606][T14432] netlink: zone id is out of range [ 339.306051][T14432] netlink: zone id is out of range [ 339.307572][T14432] netlink: zone id is out of range [ 339.309105][T14432] netlink: zone id is out of range [ 339.445088][T14439] netlink: 'syz.0.2559': attribute type 11 has an invalid length. [ 339.454335][T14441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2560'. [ 339.485829][T14443] tipc: Enabling of bearer rejected, already enabled [ 339.758349][ T9] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 339.761653][ T6000] usb 8-1: new full-speed USB device number 42 using dummy_hcd [ 339.777471][T14464] trusted_key: encrypted_key: insufficient parameters specified [ 339.928363][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 339.932760][ T6000] usb 8-1: no configurations [ 339.934550][ T6000] usb 8-1: can't read configurations, error -22 [ 339.937801][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.942060][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.945690][ T9] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 339.949292][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.954159][ T9] usb 6-1: config 0 descriptor?? [ 340.078345][ T6000] usb 8-1: new full-speed USB device number 43 using dummy_hcd [ 340.239136][ T6000] usb 8-1: no configurations [ 340.240641][ T6000] usb 8-1: can't read configurations, error -22 [ 340.242657][ T6000] usb usb8-port1: attempt power cycle [ 340.364052][ T9] savu 0003:1E7D:2D5A.0008: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 340.578436][ T6000] usb 8-1: new full-speed USB device number 44 using dummy_hcd [ 340.599527][ T6000] usb 8-1: no configurations [ 340.601458][ T6000] usb 8-1: can't read configurations, error -22 [ 340.621048][ T6115] usb 6-1: USB disconnect, device number 26 [ 340.712176][T14468] Cannot find del_set index 0 as target [ 340.728394][ T6000] usb 8-1: new full-speed USB device number 45 using dummy_hcd [ 340.755252][ T6000] usb 8-1: no configurations [ 340.756628][ T6000] usb 8-1: can't read configurations, error -22 [ 340.758619][ T6000] usb usb8-port1: unable to enumerate USB device [ 340.759097][T14470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2572'. [ 340.906744][T14475] Bluetooth: MGMT ver 1.23 [ 341.145039][T14485] vlan2: entered promiscuous mode [ 341.147106][T14485] vlan0: entered promiscuous mode [ 341.150840][T14485] vlan0: left promiscuous mode [ 341.603849][T14497] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2588'. [ 341.611109][T14499] trusted_key: encrypted_key: insufficient parameters specified [ 341.755672][T14512] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2585'. [ 341.759505][T14512] netlink: 'syz.2.2585': attribute type 2 has an invalid length. [ 341.761939][T14512] netlink: 'syz.2.2585': attribute type 1 has an invalid length. [ 341.764614][T14512] netlink: 'syz.2.2585': attribute type 1 has an invalid length. [ 341.767805][T14513] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2585'. [ 341.794086][T14517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2586'. [ 341.797748][T14517] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2586'. [ 341.974127][T14524] sock: sock_timestamping_bind_phc: sock not bind to device [ 341.977938][T14524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2589'. [ 342.124619][T14529] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2591'. [ 342.155211][T14531] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 342.159238][T14531] overlayfs: missing 'lowerdir' [ 342.659877][T14549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2600'. [ 342.664585][ T5295] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 342.691331][T14552] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2601'. [ 342.698124][ T5295] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 342.701468][ T5295] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 342.704261][ T5295] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 342.707138][ T5295] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 342.710507][ T5295] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 342.733698][T14546] »»»»»» speed is unknown, defaulting to 1000 [ 342.770158][T14555] loop7: detected capacity change from 0 to 16384 [ 342.823635][T14546] lo speed is unknown, defaulting to 1000 [ 343.040546][T14546] chnl_net:caif_netlink_parms(): no params data found [ 343.045375][T14562] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 343.047265][T14562] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 343.055792][T14562] vhci_hcd vhci_hcd.0: Device attached [ 343.177884][T14546] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.182408][T14546] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.186390][T14546] bridge_slave_0: entered allmulticast mode [ 343.189307][T14546] bridge_slave_0: entered promiscuous mode [ 343.193112][T14546] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.195356][T14546] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.197551][T14546] bridge_slave_1: entered allmulticast mode [ 343.200398][T14546] bridge_slave_1: entered promiscuous mode [ 343.211133][T14570] vhci_hcd: connection closed [ 343.214593][ T4055] vhci_hcd: stop threads [ 343.217653][ T4055] vhci_hcd: release socket [ 343.221445][ T4055] vhci_hcd: disconnect device [ 343.228473][ T833] vhci_hcd: vhci_device speed not set [ 343.240372][T14546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.244370][T14546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.269958][T14546] team0: Port device team_slave_0 added [ 343.273468][T14546] team0: Port device team_slave_1 added [ 343.293832][T14546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.295963][T14546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.303495][T14546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.307792][T14546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.310893][T14546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.318416][T14546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.344531][T14546] hsr_slave_0: entered promiscuous mode [ 343.347386][T14546] hsr_slave_1: entered promiscuous mode [ 343.426977][T14546] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.497589][T14546] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.583035][T14546] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.622636][T14546] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.690150][T14546] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 343.693667][T14546] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 343.696824][T14546] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 343.707850][T14546] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 343.741784][T14546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.764875][T14546] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.779971][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.782711][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.800885][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.803984][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.819602][T14546] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 343.893311][T14546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.911809][T14546] veth0_vlan: entered promiscuous mode [ 343.916246][T14546] veth1_vlan: entered promiscuous mode [ 343.929472][T14546] veth0_macvtap: entered promiscuous mode [ 343.933033][T14546] veth1_macvtap: entered promiscuous mode [ 343.940517][T14546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.943669][T14546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.946629][T14546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.952682][T14546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.955967][T14546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.959172][T14546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.962069][T14546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.964999][T14546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.969914][T14546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.976077][T14546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.979402][T14546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.982039][T14546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.984912][T14546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.987669][T14546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.990783][T14546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.993555][T14546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.996455][T14546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.001533][T14546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.005410][T14546] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.007982][T14546] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.010626][T14546] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.013193][T14546] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.049538][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.053639][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.065849][ T1177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.068922][ T1177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.116026][T14587] netlink: 'syz.2.2613': attribute type 11 has an invalid length. [ 344.160530][T14589] trusted_key: encrypted_key: insufficient parameters specified [ 344.748495][ T5954] Bluetooth: hci3: command tx timeout [ 345.405539][T14623] Cannot find del_set index 0 as target [ 345.521201][T14628] netlink: 'syz.0.2621': attribute type 5 has an invalid length. [ 345.838130][T14643] vlan2: entered promiscuous mode [ 345.840042][T14643] vlan0: entered promiscuous mode [ 345.843173][T14643] vlan0: left promiscuous mode [ 345.984651][T14646] netlink: 'syz.2.2628': attribute type 10 has an invalid length. [ 345.992955][T14646] : (slave wlan1): Enslaving as an active interface with an up link [ 346.706069][T14672] __nla_validate_parse: 3 callbacks suppressed [ 346.706081][T14672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2637'. [ 346.712122][T14672] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2637'. [ 346.833115][ T5954] Bluetooth: hci3: command tx timeout [ 348.144671][ T5954] Bluetooth: hci4: unexpected event 0x2f length: 1017 > 260 [ 348.347764][T14697] »»»»»» speed is unknown, defaulting to 1000 [ 348.400304][ T6115] usb 8-1: new full-speed USB device number 46 using dummy_hcd [ 348.419263][T14697] lo speed is unknown, defaulting to 1000 [ 348.562190][ T6115] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.565031][ T6115] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 348.567567][ T6115] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 348.570220][ T6115] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.589360][ T6115] usb 8-1: config 0 descriptor?? [ 348.593361][ T6115] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 348.595271][ T6115] dvb-usb: bulk message failed: -22 (3/0) [ 348.602116][ T6115] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 348.609022][ T6115] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 348.611064][ T6115] usb 8-1: media controller created [ 348.613071][ T6115] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 348.636670][ T6115] dvb-usb: bulk message failed: -22 (6/0) [ 348.638500][ T6115] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 348.641545][ T6115] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input83 [ 348.646654][ T6115] dvb-usb: schedule remote query interval to 150 msecs. [ 348.649359][ T6115] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 348.800804][T14692] dvb-usb: bulk message failed: -22 (2/0) [ 348.812774][ T6115] dvb-usb: bulk message failed: -22 (1/0) [ 348.814659][ T6115] dvb-usb: error while querying for an remote control event. [ 348.861903][T14692] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.881056][T14708] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 348.908308][ T5954] Bluetooth: hci3: command tx timeout [ 348.938907][T14692] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.983788][T14708] /dev/sr0: Can't open blockdev [ 349.003098][ T6115] dvb-usb: bulk message failed: -22 (1/0) [ 349.004752][ T6115] dvb-usb: error while querying for an remote control event. [ 349.025142][T14692] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.128047][T14692] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.158363][ T35] dvb-usb: bulk message failed: -22 (1/0) [ 349.160117][ T35] dvb-usb: error while querying for an remote control event. [ 349.235254][T14692] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.248170][T14692] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.254238][T14692] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.261116][T14692] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.296198][ T35] usb 8-1: USB disconnect, device number 46 [ 349.310777][ T35] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 349.782812][T14754] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2653'. [ 350.444195][ T39] audit: type=1800 audit(1737297550.729:653): pid=14764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2660" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 350.909563][T14771] netlink: 'syz.2.2663': attribute type 10 has an invalid length. [ 351.024487][T14771] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2663'. [ 351.068331][ T5954] Bluetooth: hci3: command tx timeout [ 351.342596][T14780] netlink: 'syz.0.2666': attribute type 11 has an invalid length. [ 351.394677][T14782] 9pnet_fd: Insufficient options for proto=fd [ 351.600762][T14789] tipc: Enabling of bearer rejected, already enabled [ 351.971343][ T5954] Bluetooth: hci4: unexpected event 0x2f length: 1017 > 260 [ 351.980652][ T5954] Bluetooth: hci3: unexpected event 0x2f length: 1017 > 260 [ 352.351270][T14802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2675'. [ 352.894376][T14823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2680'. [ 352.919859][T14825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2683'. [ 352.924274][T14825] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2683'. [ 353.035679][T14836] netlink: 'syz.2.2679': attribute type 10 has an invalid length. [ 355.064836][T14866] »»»»»» speed is unknown, defaulting to 1000 [ 355.277763][T14866] lo speed is unknown, defaulting to 1000 [ 355.336122][T14874] fuse: Bad value for 'fd' [ 355.533872][T14881] input: syz1 as /devices/virtual/input/input85 [ 355.745719][T14895] can0: slcan on ttyS3. [ 356.181404][T14920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2710'. [ 356.484356][T14933] netlink: 'syz.1.2716': attribute type 11 has an invalid length. [ 356.585451][T14936] nvme_fabrics: missing parameter 'transport=%s' [ 356.587900][T14936] nvme_fabrics: missing parameter 'nqn=%s' [ 356.597697][T14936] netlink: 'syz.1.2717': attribute type 1 has an invalid length. [ 356.602575][T14936] netlink: 'syz.1.2717': attribute type 2 has an invalid length. [ 356.603495][T14891] can0 (unregistered): slcan off ttyS3. [ 357.435986][T14957] fuse: Unknown parameter '0x000000000000000500000000000000000000' [ 357.470704][T14936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2717'. [ 357.617309][T14964] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2725'. [ 357.620678][T14964] tipc: Invalid UDP bearer configuration [ 357.620696][T14964] tipc: Enabling of bearer rejected, failed to enable media [ 357.713783][T14968] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2723'. [ 357.816868][T14970] input: syz0 as /devices/virtual/input/input86 [ 358.171164][T14983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2731'. [ 358.608334][ T6000] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 358.690708][T14994] netlink: 'syz.2.2733': attribute type 10 has an invalid length. [ 358.711018][T14994] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2733'. [ 358.759605][ T6000] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 358.762812][ T6000] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 358.765335][ T6000] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.769781][ T6000] usb 5-1: config 0 descriptor?? [ 358.916171][T14996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2736'. [ 358.920015][T14996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2736'. [ 359.228467][ T6115] [ 359.229345][ T6115] ====================================================== [ 359.231728][ T6115] WARNING: possible circular locking dependency detected [ 359.233687][ T6115] 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 Not tainted SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 359.236552][ T6115] ------------------------------------------------------ [ 359.239740][ T6115] kworker/3:3/6115 is trying to acquire lock: [ 359.242022][ T6115] ffff8880249e4558 (&q->q_usage_counter(queue)#51){++++}-{0:0}, at: blk_mq_alloc_request+0x59b/0x950 [ 359.245723][ T6115] [ 359.245723][ T6115] but task is already holding lock: [ 359.248327][ T6115] ffff8880249e4b70 (&q->limits_lock){+.+.}-{4:4}, at: sd_revalidate_disk.isra.0+0x52c/0xa8d0 [ 359.251968][ T6115] [ 359.251968][ T6115] which lock already depends on the new lock. [ 359.251968][ T6115] [ 359.255491][ T6115] [ 359.255491][ T6115] the existing dependency chain (in reverse order) is: [ 359.258675][ T6115] [ 359.258675][ T6115] -> #5 (&q->limits_lock){+.+.}-{4:4}: [ 359.260850][ T6115] __mutex_lock+0x19b/0xa60 [ 359.262310][ T6115] __nbd_set_size+0x2c0/0x730 [ 359.263823][ T6115] nbd_start_device+0x8fd/0xd70 [ 359.265365][ T6115] nbd_ioctl+0x21a/0xfd0 [ 359.266759][ T6115] compat_blkdev_ioctl+0x2f7/0x750 [ 359.268350][ T6115] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 359.270051][ T6115] __do_fast_syscall_32+0x73/0x120 [ 359.271680][ T6115] do_fast_syscall_32+0x32/0x80 [ 359.273233][ T6115] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 359.275200][ T6115] [ 359.275200][ T6115] -> #4 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 359.277787][ T6115] blk_mq_submit_bio+0x1fb6/0x24c0 [ 359.279422][ T6115] __submit_bio+0x384/0x540 [ 359.280882][ T6115] submit_bio_noacct_nocheck+0x698/0xd70 [ 359.282703][ T6115] submit_bio_noacct+0x93a/0x1e20 [ 359.284247][ T6115] mpage_readahead+0x41d/0x590 [ 359.285727][ T6115] read_pages+0x1a8/0xdc0 [ 359.287158][ T6115] page_cache_ra_unbounded+0x3dc/0x750 [ 359.288894][ T6115] force_page_cache_ra+0x24b/0x340 [ 359.290463][ T6115] page_cache_sync_ra+0x110/0x9c0 [ 359.292053][ T6115] filemap_get_pages+0xd7b/0x1be0 [ 359.293650][ T6115] filemap_read+0x3ca/0xd70 [ 359.295074][ T6115] blkdev_read_iter+0x187/0x480 [ 359.296544][ T6115] vfs_read+0x87f/0xbe0 [ 359.297839][ T6115] ksys_read+0x12b/0x250 [ 359.299223][ T6115] do_syscall_64+0xcd/0x250 [ 359.300628][ T6115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.302423][ T6115] [ 359.302423][ T6115] -> #3 (mapping.invalidate_lock#2){++++}-{4:4}: [ 359.304847][ T6115] down_read+0x9a/0x330 [ 359.306191][ T6115] page_cache_ra_unbounded+0x173/0x750 [ 359.307903][ T6115] page_cache_ra_order+0x8f2/0xc80 [ 359.309473][ T6115] filemap_fault+0x14a5/0x2820 [ 359.310964][ T6115] __do_fault+0x10a/0x490 [ 359.312360][ T6115] do_pte_missing+0xebd/0x3e00 [ 359.313861][ T6115] __handle_mm_fault+0x103c/0x2a40 [ 359.315459][ T6115] handle_mm_fault+0x3fa/0xaa0 [ 359.316940][ T6115] __get_user_pages+0x8d9/0x3b50 [ 359.318445][ T6115] get_user_pages_unlocked+0x1c2/0x780 [ 359.320081][ T6115] hva_to_pfn+0x8be/0xc20 [ 359.321439][ T6115] kvm_follow_pfn+0x29f/0x3f0 [ 359.322900][ T6115] __kvm_faultin_pfn+0x11c/0x1a0 [ 359.324371][ T6115] kvm_mmu_faultin_pfn+0x469/0x1f30 [ 359.325945][ T6115] kvm_tdp_page_fault+0x182/0x3d0 [ 359.327485][ T6115] kvm_mmu_do_page_fault+0x58d/0x690 [ 359.329096][ T6115] kvm_mmu_page_fault+0x20f/0x1bb0 [ 359.330656][ T6115] handle_ept_violation+0x25a/0x640 [ 359.332205][ T6115] vmx_handle_exit+0x733/0x1f70 [ 359.333666][ T6115] vcpu_run+0x2aaf/0x4c00 [ 359.335026][ T6115] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 359.336704][ T6115] kvm_vcpu_ioctl+0x6ce/0x1520 [ 359.338163][ T6115] kvm_vcpu_compat_ioctl+0x210/0x3f0 [ 359.339836][ T6115] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 359.341459][ T6115] __do_fast_syscall_32+0x73/0x120 [ 359.343066][ T6115] do_fast_syscall_32+0x32/0x80 [ 359.344557][ T6115] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 359.346457][ T6115] [ 359.346457][ T6115] -> #2 (&mm->mmap_lock){++++}-{4:4}: [ 359.348559][ T6115] __might_fault+0x11b/0x190 [ 359.350071][ T6115] _copy_from_user+0x29/0xd0 [ 359.351525][ T6115] compat_blk_trace_setup+0xc9/0x200 [ 359.353173][ T6115] blk_trace_ioctl+0x24a/0x290 [ 359.354657][ T6115] compat_blkdev_ioctl+0x13c/0x750 [ 359.356331][ T6115] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 359.358022][ T6115] __do_fast_syscall_32+0x73/0x120 [ 359.359676][ T6115] do_fast_syscall_32+0x32/0x80 [ 359.361212][ T6115] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 359.363187][ T6115] [ 359.363187][ T6115] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}: [ 359.365402][ T6115] __mutex_lock+0x19b/0xa60 [ 359.366867][ T6115] blk_mq_init_sched+0x42b/0x640 [ 359.368434][ T6115] elevator_init_mq+0x2cd/0x420 [ 359.369974][ T6115] add_disk_fwnode+0x113/0x1300 [ 359.371476][ T6115] sd_probe+0xa66/0xfa0 [ 359.372797][ T6115] really_probe+0x23e/0xa90 [ 359.374220][ T6115] __driver_probe_device+0x1de/0x440 [ 359.375857][ T6115] driver_probe_device+0x4c/0x1b0 [ 359.377408][ T6115] __device_attach_driver+0x1df/0x310 [ 359.379129][ T6115] bus_for_each_drv+0x157/0x1e0 [ 359.380687][ T6115] __device_attach_async_helper+0x1d3/0x290 [ 359.382523][ T6115] async_run_entry_fn+0x9c/0x530 [ 359.384094][ T6115] process_one_work+0x958/0x1b30 [ 359.385653][ T6115] worker_thread+0x6c8/0xf00 [ 359.387116][ T6115] kthread+0x2c1/0x3a0 [ 359.388423][ T6115] ret_from_fork+0x45/0x80 [ 359.389856][ T6115] ret_from_fork_asm+0x1a/0x30 [ 359.391330][ T6115] [ 359.391330][ T6115] -> #0 (&q->q_usage_counter(queue)#51){++++}-{0:0}: [ 359.393864][ T6115] __lock_acquire+0x249e/0x3c40 [ 359.395391][ T6115] lock_acquire.part.0+0x11b/0x380 [ 359.396994][ T6115] blk_queue_enter+0x50f/0x640 [ 359.398508][ T6115] blk_mq_alloc_request+0x59b/0x950 [ 359.400144][ T6115] scsi_execute_cmd+0x20a/0xf30 [ 359.401677][ T6115] read_capacity_16+0x21a/0xe20 [ 359.403250][ T6115] sd_revalidate_disk.isra.0+0x1a06/0xa8d0 [ 359.405044][ T6115] scsi_rescan_device+0x243/0x340 [ 359.406621][ T6115] ata_scsi_dev_rescan+0x1cb/0x470 [ 359.408206][ T6115] process_one_work+0x958/0x1b30 [ 359.409791][ T6115] worker_thread+0x6c8/0xf00 [ 359.411274][ T6115] kthread+0x2c1/0x3a0 [ 359.412599][ T6115] ret_from_fork+0x45/0x80 [ 359.414022][ T6115] ret_from_fork_asm+0x1a/0x30 [ 359.415547][ T6115] [ 359.415547][ T6115] other info that might help us debug this: [ 359.415547][ T6115] [ 359.418405][ T6115] Chain exists of: [ 359.418405][ T6115] &q->q_usage_counter(queue)#51 --> &q->q_usage_counter(io)#50 --> &q->limits_lock [ 359.418405][ T6115] [ 359.422726][ T6115] Possible unsafe locking scenario: [ 359.422726][ T6115] [ 359.424772][ T6115] CPU0 CPU1 [ 359.426293][ T6115] ---- ---- [ 359.427817][ T6115] lock(&q->limits_lock); [ 359.429120][ T6115] lock(&q->q_usage_counter(io)#50); [ 359.431356][ T6115] lock(&q->limits_lock); [ 359.433322][ T6115] rlock(&q->q_usage_counter(queue)#51); [ 359.434967][ T6115] [ 359.434967][ T6115] *** DEADLOCK *** [ 359.434967][ T6115] [ 359.437286][ T6115] 5 locks held by kworker/3:3/6115: [ 359.438784][ T6115] #0: ffff88801ac88948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12cd/0x1b30 [ 359.441732][ T6115] #1: ffffc90004697d80 ((work_completion)(&(&ap->scsi_rescan_task)->work)){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 [ 359.445367][ T6115] #2: ffff888021824358 (&ap->scsi_scan_mutex){+.+.}-{4:4}, at: ata_scsi_dev_rescan+0x3e/0x470 [ 359.448330][ T6115] #3: ffff888043830378 (&dev->mutex){....}-{4:4}, at: scsi_rescan_device+0x27/0x340 [ 359.451054][ T6115] #4: ffff8880249e4b70 (&q->limits_lock){+.+.}-{4:4}, at: sd_revalidate_disk.isra.0+0x52c/0xa8d0 [ 359.454043][ T6115] [ 359.454043][ T6115] stack backtrace: [ 359.455726][ T6115] CPU: 3 UID: 0 PID: 6115 Comm: kworker/3:3 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 359.458765][ T6115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 359.461773][ T6115] Workqueue: events ata_scsi_dev_rescan [ 359.463386][ T6115] Call Trace: [ 359.464349][ T6115] [ 359.465204][ T6115] dump_stack_lvl+0x116/0x1f0 [ 359.466559][ T6115] print_circular_bug+0x41c/0x610 [ 359.468026][ T6115] check_noncircular+0x31a/0x400 [ 359.469481][ T6115] ? __pfx_check_noncircular+0x10/0x10 [ 359.471050][ T6115] ? lockdep_lock+0xc6/0x200 [ 359.472381][ T6115] ? __pfx_lockdep_lock+0x10/0x10 [ 359.473836][ T6115] __lock_acquire+0x249e/0x3c40 [ 359.475244][ T6115] ? __pfx___lock_acquire+0x10/0x10 [ 359.476735][ T6115] lock_acquire.part.0+0x11b/0x380 [ 359.478204][ T6115] ? blk_mq_alloc_request+0x59b/0x950 [ 359.479767][ T6115] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 359.481334][ T6115] ? rcu_is_watching+0x12/0xc0 [ 359.482683][ T6115] ? trace_lock_acquire+0x14e/0x1f0 [ 359.484160][ T6115] ? blk_mq_alloc_request+0x59b/0x950 [ 359.485700][ T6115] ? lock_acquire+0x2f/0xb0 [ 359.487012][ T6115] ? blk_mq_alloc_request+0x59b/0x950 [ 359.488546][ T6115] blk_queue_enter+0x50f/0x640 [ 359.489931][ T6115] ? blk_mq_alloc_request+0x59b/0x950 [ 359.491479][ T6115] ? __pfx_blk_queue_enter+0x10/0x10 [ 359.493007][ T6115] ? save_trace+0x42/0xa10 [ 359.494303][ T6115] ? add_lock_to_list+0x17d/0x390 [ 359.495764][ T6115] ? lockdep_unlock+0x11a/0x290 [ 359.497157][ T6115] blk_mq_alloc_request+0x59b/0x950 [ 359.498656][ T6115] ? __pfx_blk_mq_alloc_request+0x10/0x10 [ 359.500254][ T6115] ? __pfx___lock_acquire+0x10/0x10 [ 359.501747][ T6115] scsi_execute_cmd+0x20a/0xf30 [ 359.503165][ T6115] ? lock_acquire.part.0+0x11b/0x380 [ 359.504684][ T6115] ? __mutex_trylock_common+0xea/0x250 [ 359.506235][ T6115] ? __pfx_scsi_execute_cmd+0x10/0x10 [ 359.507778][ T6115] ? sd_revalidate_disk.isra.0+0x52c/0xa8d0 [ 359.509526][ T6115] ? rcu_is_watching+0x12/0xc0 [ 359.510908][ T6115] read_capacity_16+0x21a/0xe20 [ 359.512308][ T6115] ? __pfx_read_capacity_16+0x10/0x10 [ 359.513845][ T6115] ? __pfx___mutex_lock+0x10/0x10 [ 359.515300][ T6115] ? __pfx_scsi_execute_cmd+0x10/0x10 [ 359.516833][ T6115] sd_revalidate_disk.isra.0+0x1a06/0xa8d0 [ 359.518496][ T6115] ? find_held_lock+0x2d/0x110 [ 359.519890][ T6115] ? mark_held_locks+0x9f/0xe0 [ 359.521205][ T6115] ? __pfx_sd_revalidate_disk.isra.0+0x10/0x10 [ 359.522917][ T6115] ? kasan_save_stack+0x42/0x60 [ 359.524251][ T6115] ? kasan_save_stack+0x33/0x60 [ 359.525588][ T6115] ? kasan_save_track+0x14/0x30 [ 359.526918][ T6115] ? kasan_save_free_info+0x3b/0x60 [ 359.528370][ T6115] ? __kasan_slab_free+0x51/0x70 [ 359.529750][ T6115] ? kfree+0x14f/0x4b0 [ 359.530893][ T6115] ? scsi_attach_vpd+0x4dc/0x580 [ 359.532280][ T6115] ? scsi_rescan_device+0xf5/0x340 [ 359.533714][ T6115] ? ata_scsi_dev_rescan+0x1cb/0x470 [ 359.535179][ T6115] ? process_one_work+0x958/0x1b30 [ 359.536606][ T6115] ? worker_thread+0x6c8/0xf00 [ 359.537931][ T6115] ? hlock_class+0x4e/0x130 [ 359.539226][ T6115] ? mark_lock+0xb5/0xc60 [ 359.540442][ T6115] ? mark_held_locks+0x9f/0xe0 [ 359.541776][ T6115] ? kasan_quarantine_put+0x10a/0x240 [ 359.543284][ T6115] ? lockdep_hardirqs_on+0x7c/0x110 [ 359.544762][ T6115] ? kfree+0x14f/0x4b0 [ 359.545901][ T6115] ? lockdep_hardirqs_on+0x7c/0x110 [ 359.547357][ T6115] ? scsi_attach_vpd+0x4dc/0x580 [ 359.548790][ T6115] ? scsi_attach_vpd+0x4dc/0x580 [ 359.550181][ T6115] ? __pfx_sd_rescan+0x10/0x10 [ 359.551521][ T6115] scsi_rescan_device+0x243/0x340 [ 359.552919][ T6115] ata_scsi_dev_rescan+0x1cb/0x470 [ 359.554350][ T6115] process_one_work+0x958/0x1b30 [ 359.555695][ T6115] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 359.557216][ T6115] ? __pfx_process_one_work+0x10/0x10 [ 359.558721][ T6115] ? rcu_is_watching+0x12/0xc0 [ 359.560088][ T6115] ? assign_work+0x1a0/0x250 [ 359.561404][ T6115] worker_thread+0x6c8/0xf00 [ 359.562714][ T6115] ? __kthread_parkme+0x148/0x220 [ 359.564131][ T6115] ? __pfx_worker_thread+0x10/0x10 [ 359.565549][ T6115] kthread+0x2c1/0x3a0 [ 359.566715][ T6115] ? _raw_spin_unlock_irq+0x23/0x50 [ 359.568207][ T6115] ? __pfx_kthread+0x10/0x10 [ 359.569564][ T6115] ret_from_fork+0x45/0x80 [ 359.571005][ T6115] ? __pfx_kthread+0x10/0x10 [ 359.572360][ T6115] ret_from_fork_asm+0x1a/0x30 [ 359.573747][ T6115] [ 359.584816][ T35] usb 8-1: new full-speed USB device number 47 using dummy_hcd [ 359.758268][ T6766] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 359.839679][ T64] usb 5-1: USB disconnect, device number 32 [ 359.847651][ T1177] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.950458][ T1177] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.012582][ T1177] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.089225][ T1177] team0: Port device netdevsim0 removed [ 360.092069][ T1177] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.199320][ T1177] bridge_slave_1: left allmulticast mode [ 360.200981][ T1177] bridge_slave_1: left promiscuous mode [ 360.202646][ T1177] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.205234][ T1177] bridge_slave_0: left allmulticast mode [ 360.206867][ T1177] bridge_slave_0: left promiscuous mode [ 360.208638][ T1177] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.285806][ T1177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.289630][ T1177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.293369][ T1177] bond0 (unregistering): Released all slaves [ 360.580399][ T1177] hsr_slave_0: left promiscuous mode [ 360.582456][ T1177] hsr_slave_1: left promiscuous mode [ 360.584470][ T1177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.587333][ T1177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.592936][ T1177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.595823][ T1177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.599789][ T1177] veth1_macvtap: left promiscuous mode [ 360.601659][ T1177] veth0_macvtap: left promiscuous mode [ 360.603270][ T1177] veth1_vlan: left promiscuous mode [ 360.604851][ T1177] veth0_vlan: left promiscuous mode [ 360.833428][ T1177] team0 (unregistering): Port device team_slave_1 removed [ 360.891917][ T1177] team0 (unregistering): Port device team_slave_0 removed [ 361.334302][ T1177] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.391659][ T1177] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.450649][ T1177] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.526942][ T1177] team0: Port device netdevsim0 removed [ 361.529079][ T1177] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.617809][ T1177] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.680090][ T1177] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.736378][ T1177] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.800517][ T1177] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.879645][ T1177] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.951061][ T1177] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.011439][ T1177] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.056993][ T1177] team0: Port device netdevsim0 removed [ 362.059351][ T1177] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.119016][ T1177] bridge_slave_1: left allmulticast mode [ 362.121129][ T1177] bridge_slave_1: left promiscuous mode [ 362.123265][ T1177] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.126933][ T1177] bridge_slave_0: left allmulticast mode [ 362.129837][ T1177] bridge_slave_0: left promiscuous mode [ 362.131953][ T1177] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.139350][ T1177] bridge_slave_1: left allmulticast mode [ 362.141485][ T1177] bridge_slave_1: left promiscuous mode [ 362.143604][ T1177] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.147009][ T1177] bridge_slave_0: left allmulticast mode [ 362.149354][ T1177] bridge_slave_0: left promiscuous mode [ 362.151063][ T1177] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.154638][ T1177] bridge_slave_1: left allmulticast mode [ 362.156299][ T1177] bridge_slave_1: left promiscuous mode [ 362.157953][ T1177] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.161122][ T1177] bridge_slave_0: left allmulticast mode [ 362.162775][ T1177] bridge_slave_0: left promiscuous mode [ 362.164419][ T1177] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.232059][ T1177] dvmrp9 (unregistering): left allmulticast mode [ 362.541080][ T1177]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.544173][ T1177]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.547312][ T1177]  (unregistering): (slave wlan1): Releasing backup interface [ 362.550159][ T1177]  (unregistering): Released all slaves [ 362.558726][ T1177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.563358][ T1177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.567606][ T1177] bond0 (unregistering): Released all slaves [ 362.575497][ T1177]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.580209][ T1177]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.584518][ T1177]  (unregistering): (slave wlan1): Releasing backup interface [ 362.587910][ T1177]  (unregistering): Released all slaves [ 362.695192][ T1177] tipc: Disabling bearer [ 362.696739][ T1177] tipc: Left network mode [ 363.206150][ T1177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.208833][ T1177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.211154][ T1177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.214089][ T1177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.217899][ T1177] hsr_slave_0: left promiscuous mode [ 363.220687][ T1177] hsr_slave_1: left promiscuous mode [ 363.223855][ T1177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.226001][ T1177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.229705][ T1177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.232249][ T1177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.237324][ T1177] hsr_slave_0: left promiscuous mode [ 363.239345][ T1177] hsr_slave_1: left promiscuous mode [ 363.241199][ T1177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.244071][ T1177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.246819][ T1177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.250015][ T1177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.256433][ T1177] veth1_macvtap: left promiscuous mode [ 363.258040][ T1177] veth0_macvtap: left promiscuous mode [ 363.259889][ T1177] veth1_vlan: left promiscuous mode [ 363.261471][ T1177] veth0_vlan: left promiscuous mode [ 363.263506][ T1177] veth1_macvtap: left promiscuous mode [ 363.265086][ T1177] veth0_macvtap: left promiscuous mode [ 363.266719][ T1177] veth1_vlan: left promiscuous mode [ 363.268293][ T1177] veth0_vlan: left promiscuous mode [ 363.270392][ T1177] veth1_macvtap: left promiscuous mode [ 363.272269][ T1177] veth0_macvtap: left promiscuous mode [ 363.273944][ T1177] veth1_vlan: left promiscuous mode [ 363.275485][ T1177] veth0_vlan: left promiscuous mode [ 363.484645][ T1177] team0 (unregistering): Port device team_slave_1 removed [ 363.529084][ T1177] team0 (unregistering): Port device team_slave_0 removed [ 363.958622][ T1177] team0 (unregistering): Port device team_slave_1 removed [ 364.006053][ T1177] team0 (unregistering): Port device team_slave_0 removed [ 364.354631][ T1177] team0 (unregistering): Port device team_slave_1 removed [ 364.397268][ T1177] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 14:30:46 Registers: info registers vcpu 0 CPU#0 RAX=0000000000af3db3 RBX=0000000000000000 RCX=ffffffff8b1a9889 RDX=0000000000000000 RSI=ffffffff8b4cd300 RDI=ffffffff8bb19c00 RBP=fffffbfff1b52ef8 RSP=ffffffff8da07e20 R8 =0000000000000001 R9 =ffffed1005686fed R10=ffff88802b437f6b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8da977c0 R14=ffffffff901d2c10 R15=0000000000000000 RIP=ffffffff8b1aac6f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5125da4 CR3=000000000db7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 ZMM17=0a7a2d02dc82ef38 a49f5cb610b08916 0a7a2d02dc82ef38 a49f5cb610b08916 0a7a2d02dc82ef38 a49f5cb610b08916 0a7a2d02dc82ef38 a49f5cb610b08916 ZMM18=b26b3f7a3b505ffd 690c8288282a2cf8 b26b3f7a3b505ffd 690c8288282a2cf8 b26b3f7a3b505ffd 690c8288282a2cf8 b26b3f7a3b505ffd 690c8288282a2cf8 ZMM19=9815000000000000 0000000000000005 9815000000000000 0000000000000004 9815000000000000 0000000000000003 9815000000000000 0000000000000002 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=a49f5cb6a49f5cb6 a49f5cb6a49f5cb6 a49f5cb6a49f5cb6 a49f5cb6a49f5cb6 a49f5cb6a49f5cb6 a49f5cb6a49f5cb6 a49f5cb6a49f5cb6 a49f5cb6a49f5cb6 ZMM22=dc82ef38dc82ef38 dc82ef38dc82ef38 dc82ef38dc82ef38 dc82ef38dc82ef38 dc82ef38dc82ef38 dc82ef38dc82ef38 dc82ef38dc82ef38 dc82ef38dc82ef38 ZMM23=0a7a2d020a7a2d02 0a7a2d020a7a2d02 0a7a2d020a7a2d02 0a7a2d020a7a2d02 0a7a2d020a7a2d02 0a7a2d020a7a2d02 0a7a2d020a7a2d02 0a7a2d020a7a2d02 ZMM24=282a2cf8282a2cf8 282a2cf8282a2cf8 282a2cf8282a2cf8 282a2cf8282a2cf8 282a2cf8282a2cf8 282a2cf8282a2cf8 282a2cf8282a2cf8 282a2cf8282a2cf8 ZMM25=690c8288690c8288 690c8288690c8288 690c8288690c8288 690c8288690c8288 690c8288690c8288 690c8288690c8288 690c8288690c8288 690c8288690c8288 ZMM26=3b505ffd3b505ffd 3b505ffd3b505ffd 3b505ffd3b505ffd 3b505ffd3b505ffd 3b505ffd3b505ffd 3b505ffd3b505ffd 3b505ffd3b505ffd 3b505ffd3b505ffd ZMM27=b26b3f7ab26b3f7a b26b3f7ab26b3f7a b26b3f7ab26b3f7a b26b3f7ab26b3f7a b26b3f7ab26b3f7a b26b3f7ab26b3f7a b26b3f7ab26b3f7a b26b3f7ab26b3f7a ZMM28=000000400000003f 0000003e0000003d 0000003c0000003b 0000003a00000039 0000003800000037 0000003600000035 0000003400000033 0000003200000031 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=9715000097150000 9715000097150000 9715000097150000 9715000097150000 9715000097150000 9715000097150000 9715000097150000 9715000097150000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff8880219b2478 RCX=ffffffff818d465b RDX=ffff88801b744880 RSI=ffffffff8497cc4b RDI=ffff8880219b2478 RBP=0000000000000000 RSP=ffffc9000047fd90 R8 =0000000000000001 R9 =ffffed10056a7fe8 R10=ffff88802b53ff47 R11=0000000000000000 R12=dffffc0000000000 R13=0000000000000001 R14=ffffffff901d2c10 R15=0000000000000000 RIP=ffffffff8497cc5c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c406979 CR3=000000006271e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000000bd RBX=ffffc90007163818 RCX=ffffffff86572b60 RDX=1ffff11004165fe3 RSI=ffffffff86572b6d RDI=ffff888020b2ff2a RBP=00000000000000bd RSP=ffffc90003d66e48 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=00000000000a2001 R12=00000000ab100044 R13=dffffc0000000000 R14=ffff888043710000 R15=ffffc900001b9bc0 RIP=ffffffff86572c0f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f0fcf0d3d00 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffd34588eec CR3=000000004b6b2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=7b65066d7b65066d 7b65066d7b65066d 7b65066d7b65066d 7b65066d7b65066d 7b65066d7b65066d 7b65066d7b65066d 7b65066d7b65066d 7b65066d7b65066d ZMM22=1a954ef91a954ef9 1a954ef91a954ef9 1a954ef91a954ef9 1a954ef91a954ef9 1a954ef91a954ef9 1a954ef91a954ef9 1a954ef91a954ef9 1a954ef91a954ef9 ZMM23=ad73c8d6ad73c8d6 ad73c8d6ad73c8d6 ad73c8d6ad73c8d6 ad73c8d6ad73c8d6 ad73c8d6ad73c8d6 ad73c8d6ad73c8d6 ad73c8d6ad73c8d6 ad73c8d6ad73c8d6 ZMM24=eb6a74e2eb6a74e2 eb6a74e2eb6a74e2 eb6a74e2eb6a74e2 eb6a74e2eb6a74e2 eb6a74e2eb6a74e2 eb6a74e2eb6a74e2 eb6a74e2eb6a74e2 eb6a74e2eb6a74e2 ZMM25=aab5715caab5715c aab5715caab5715c aab5715caab5715c aab5715caab5715c aab5715caab5715c aab5715caab5715c aab5715caab5715c aab5715caab5715c ZMM26=6c12f97c6c12f97c 6c12f97c6c12f97c 6c12f97c6c12f97c 6c12f97c6c12f97c 6c12f97c6c12f97c 6c12f97c6c12f97c 6c12f97c6c12f97c 6c12f97c6c12f97c ZMM27=658c4a1e658c4a1e 658c4a1e658c4a1e 658c4a1e658c4a1e 658c4a1e658c4a1e 658c4a1e658c4a1e 658c4a1e658c4a1e 658c4a1e658c4a1e 658c4a1e658c4a1e ZMM28=000000800000007f 0000007e0000007d 0000007c0000007b 0000007a00000079 0000007800000077 0000007600000075 0000007400000073 0000007200000071 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=2b0f00002b0f0000 2b0f00002b0f0000 2b0f00002b0f0000 2b0f00002b0f0000 2b0f00002b0f0000 2b0f00002b0f0000 2b0f00002b0f0000 2b0f00002b0f0000 info registers vcpu 3 CPU#3 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85146410 RDI=ffffffff9a66e200 RBP=ffffffff9a66e1c0 RSP=ffffc90004696a08 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=0000000000000020 R14=fffffbfff34cdc92 R15=dffffc0000000000 RIP=ffffffff85146437 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f50a5510 CR3=00000000654e4000 CR4=00352ef0 DR0=0000000000000003 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 eaff0704ef7e5cff 88f6999622c40fc5 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2d6d69e205e29062 b52037e7a4b6971a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0c0e4aeed447a065 cd7645bad9ca8782 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 98d4ac17e3cc7013 83156573f5ac5804 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000005880 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000da000000da 00800100000000da ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9a9015309aad609e 9ab1f02a000000da ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 008001009a923aec 000000da00800100 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9aafcf0400800100 008001009a8dc992 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 817fb5695fde02a2 6d944ae819b685de ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ddf25bf7eba50228 03234142461929c2 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000