last executing test programs: 5m1.809474138s ago: executing program 1 (id=64): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x5, 0x8, 0xffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x80, 0x2, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x9, 0x9, 0x6c}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x43b, 0x7fff, 0x2}) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x5, 0x8, 0x971}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000003c0)={0xea, 0x8, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 5m1.70409665s ago: executing program 1 (id=65): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x191}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="c40000000102010300000000000000000a000002b00001801400018008000100ac1e00010800020000000000140001800800010064010101370002000a0101000c0002800500010011000000140001800800010064010100080002007f0000012c00018014000300fc01000000000000000000000000000114000400ff0100000000000000000000000000012c00018014000300ff02000000000000000000000000000114000400"], 0xc4}}, 0x40000) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10003}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newqdisc={0x124, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@TCA_STAB={0xa4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x87, 0xc9, 0xc, 0x6, 0x1, 0x5, 0xd, 0x5}}, {0xe, 0x2, [0x629, 0x0, 0x7, 0x1000, 0xfff]}}, {{0x1c, 0x1, {0x20, 0xe, 0x2, 0xd8f, 0x2, 0x80, 0x6, 0x4}}, {0xc, 0x2, [0x6, 0x262f, 0xfffa, 0x6]}}, {{0x1c, 0x1, {0xff, 0xd, 0xa97a, 0x2, 0x2, 0x10, 0xd3, 0x1}}, {0x6, 0x2, [0x7]}}, {{0x1c, 0x1, {0x7e, 0x4, 0x9, 0x3, 0x0, 0x4, 0x7, 0x3}}, {0xa, 0x2, [0x400, 0x9, 0x1000]}}]}, @qdisc_kind_options=@q_drr={0x8}, @qdisc_kind_options=@q_htb={{0x8}, {0x4c, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x5b2}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xfffffff9}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x67}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0x2}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x2}}]}}]}, 0x124}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x38, 0x2, [@TCA_FLOW_EMATCHES={0x34, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x3}, {0x5, 0xe1d, 0x7, 0x2, 0x1, 0x2, 0x2}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x8}, {{0x2, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1}}}}]}]}]}}]}, 0x68}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x100) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5m1.56308724s ago: executing program 1 (id=68): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000100)={0x10, 0x0, 0x3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f}}, 0x20) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @local, 0x0, 0x7fffffff, 'lc\x00'}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r3, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback, 0x3ff}, @ib={0x1b, 0xffff, 0x0, {"0e080000000000000000000004000001"}}}}, 0x118) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000001f00)) sendmmsg(r5, &(0x7f0000001cc0), 0x400000000000026, 0x0) 5m1.517961315s ago: executing program 1 (id=70): syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x40, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$afs(0x0, &(0x7f0000000380)='./file0/file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) mount$afs(0x0, &(0x7f0000000380)='./file0/file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) epoll_create1(0x80000) syz_usb_disconnect(r0) socket$xdp(0x2c, 0x3, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x2040, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 5m0.119119902s ago: executing program 1 (id=78): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x27) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfb, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0xc1}, 0x10) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x30, 0x0, 0x0}) 4m59.90737025s ago: executing program 1 (id=81): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x80000001, 0xfffffc00, 0x9, 0x400, 0x10001, 0x200}}}}]}, 0x4c}}, 0x44080) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd28, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xfff2, 0xa}, {0x2, 0xf}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000855}, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x101, 0x80, 0x0, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x404}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r8, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) 4m59.799254716s ago: executing program 32 (id=81): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x80000001, 0xfffffc00, 0x9, 0x400, 0x10001, 0x200}}}}]}, 0x4c}}, 0x44080) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd28, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xfff2, 0xa}, {0x2, 0xf}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000855}, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x101, 0x80, 0x0, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x404}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r8, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) 3m17.003189763s ago: executing program 4 (id=689): bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000200000095000000000000000000000000000000000056e784466031bc42d4586856fea8a5422128758d88b5f43ee3b332a35c3b4f0f8ff47260ea62853d6c32da7ab47bd1882e8a755a611da46443841e0d79fe0330b57fbc5ac7d4ca19fff93c4d5651a0958d43b5782b0bac604610ae8b8587de0151eef894e87e816a4b21292a45b6ae42e8a2cc14c86d55cc25128451a748b818fd7d61002a64fc5e409a039fb38e7c1f92f56cc64d2f369d13cef9ad3bbf28295ba05a3227962e62894b8df6c8ef88fd93e0ecb5885352079234fa71f990c5e9c52e0b3f856ca4c1bf7d6e649e9d96"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4004, 0x3, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000180)=0x6) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) 3m13.851863014s ago: executing program 4 (id=703): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2}}) io_uring_enter(r2, 0x47f9, 0x0, 0x0, 0x0, 0x0) 3m13.570375431s ago: executing program 4 (id=705): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = io_uring_setup(0x6281, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000001c0)={0x60, 0x1, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0}) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) 3m13.0692629s ago: executing program 4 (id=706): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000e009000000000000000000000000215da229417c00"/33], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) eventfd2(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x80805, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3m13.019308064s ago: executing program 4 (id=707): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x5, 0x0) getdents(r0, 0x0, 0x58) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(r1, &(0x7f00000001c0)='./bus\x00', 0x34) unlinkat(r1, &(0x7f0000000280)='./file0\x00', 0x200) 3m12.929014351s ago: executing program 4 (id=708): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000940)=ANY=[@ANYBLOB="01000000000000008b"]) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r4) tkill(r4, 0x11) ptrace(0x4208, r4) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) set_mempolicy(0x2, &(0x7f0000000000)=0x1, 0x4) io_uring_setup(0x4372, &(0x7f0000000440)={0x0, 0xd55d, 0x2, 0xfffffffe, 0x26b}) 2m57.935448035s ago: executing program 33 (id=708): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000940)=ANY=[@ANYBLOB="01000000000000008b"]) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r4) tkill(r4, 0x11) ptrace(0x4208, r4) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) set_mempolicy(0x2, &(0x7f0000000000)=0x1, 0x4) io_uring_setup(0x4372, &(0x7f0000000440)={0x0, 0xd55d, 0x2, 0xfffffffe, 0x26b}) 14.721890128s ago: executing program 0 (id=1350): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = userfaultfd(0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) pselect6(0x40, &(0x7f0000000040)={0x9, 0x8, 0xffff, 0x9, 0x7, 0x80000001, 0x8, 0x86}, 0x0, 0x0, 0x0, 0x0) 3.320836934s ago: executing program 0 (id=1359): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) syz_emit_ethernet(0x7e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60fb6809001b2f00fc020000000000000000000000000000ff020000000000000000000000000001242088a88dff00000006000000000800000086dd88a888be080000"], 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x2000, @ipv4={'\x00', '\xff\xff', @remote}, 0xffffffff}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x4000300) 3.294842372s ago: executing program 0 (id=1363): ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = io_uring_setup(0x6281, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) pipe(&(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCGDEV(r3, 0x540e, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.294715167s ago: executing program 5 (id=1364): socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000121000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, &(0x7f0000000340)={0x230, 0x7d, 0x40, {{0x500, 0xef, 0x0, 0xb000000, {0x0, 0x2, 0x7}, 0x0, 0x0, 0x0, 0x5, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1h\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\b\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x230) 3.293208333s ago: executing program 3 (id=1366): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) ftruncate(r1, 0xfff) ioctl$TCSBRKP(r1, 0x5425, 0x6) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0xc2) inotify_init1(0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000900)=0x15) writev(r3, &(0x7f0000000b00)=[{&(0x7f0000000940)='\r', 0xfdef}], 0x2) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 2.794504596s ago: executing program 2 (id=1368): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x2}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg$unix(r5, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 2.712167765s ago: executing program 3 (id=1369): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {0x104}, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000005f40)=ANY=[@ANYBLOB="f6"]) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) 2.381623313s ago: executing program 5 (id=1370): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000010000048008000200010000000800ada1df7662fb"], 0x3c}}, 0x0) r3 = gettid() r4 = socket(0x1e, 0x5, 0x0) listen(r4, 0x0) accept4$inet6(r4, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2.286320697s ago: executing program 0 (id=1371): socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0xa4ff, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 1.885268879s ago: executing program 2 (id=1372): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000200000000000000000000850000002700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000026000100000000000000000008000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x24}], 0x1}, 0x0) 1.81039145s ago: executing program 2 (id=1373): capget(0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000440)={'#! ', '', [], 0xa, "eeb107152dae8e4763a403b16a05bd3ead1e0104000075bfa8a15ec92a2971d14f1280b75002ea2f995be1beb94d161650d1ef5a9f2b3cb089d122715f51cdee51e564e320150c6ece7555f064c0e5f5fcb2ad89d839d404ab4484554100000000000000220c54e885214a32b3195f9b568a071a1d63ebd9a701000000e54e"}, 0x83) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x100010, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000280)='./file1\x00', &(0x7f0000000340), 0x0, 0x0, 0x0) listxattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140)=""/64, 0x40) mprotect(&(0x7f000060a000/0x2000)=nil, 0x2000, 0x8) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x0, 0x4e1ee79f, 0x0, 0xf0}) r3 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc3}, &(0x7f0000000140)={0x0, "b3e664306edb905ec1639ec706b8091ae159d92c33f880613ecbe5599113fc0ebd459ac24a4d6e7a27ca574f078d9329ac0de7fe860fd5e12eb9923209b12bf4", 0x3d}, 0x48, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r3) 1.772552696s ago: executing program 2 (id=1374): bpf$MAP_CREATE(0x0, 0x0, 0x48) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) epoll_create(0x47f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x304}, "967cdef875f8738a", "902295394fc6d0b5aa39eb14eac2d9a2", "cabd27f3", "393bedfa875e7d07"}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) socket(0x10, 0x803, 0x0) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.761800908s ago: executing program 3 (id=1375): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffffd, 0x0, 0x0, {0x0, 0x0, 0x106, 0x3, 0xfffe, 0x1, 0x0, 0x1, 0x85, 0x1, 0x7, 0x0, 0x9, 0x0, "fe1d0e003d00000000214000000000000000005affffffff00001600"}}) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$l2tp(0x2, 0x2, 0x73) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000280)='./file0\x00', 0xe) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff}, 0x80) r4 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0xffffffff) 1.313737343s ago: executing program 0 (id=1376): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000380)={0x201, 0x1, &(0x7f0000000440)=[r5], &(0x7f0000000200), 0x0, &(0x7f0000000340)}) 877.779396ms ago: executing program 5 (id=1377): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000002c0)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/42, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 877.615999ms ago: executing program 3 (id=1378): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x2) userfaultfd(0x180801) 858.89559ms ago: executing program 2 (id=1379): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e22, 0x7fff, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xce}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) r2 = io_uring_setup(0x1aec, &(0x7f0000000140)={0x0, 0x1acc, 0x0, 0x0, 0x182}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x100006, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r4, 0x0, 0x80, 0x5, 0x9, 0x0, {0xa, 0xd6, 0x1c, 0x7, 0xfe, 0x401, 0xfff5, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x5, "cb630dab3a0338057401a192419598961f50dc45c87d55b42a28b8f01c0e0e7a"}}) close_range(r2, 0xffffffffffffffff, 0x0) 843.060933ms ago: executing program 3 (id=1380): r0 = socket(0x40000000015, 0x5, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5}, 0x0) ioprio_get$uid(0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xf}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000200), 0x3) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x304, 0x38}, "faffffff0000003c", "82d7773879241628cb2d7129d5a01853", "fb00eeff", "00aa04009700"}, 0x28) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000200)) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000100)=0x7, 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=""/127, 0x7f}}], 0x1, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 722.646281ms ago: executing program 3 (id=1381): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xb}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)) syz_usbip_server_init(0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) unshare(0x20020680) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40440, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 461.384679ms ago: executing program 5 (id=1382): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000b, 0x8012, r0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) rseq(&(0x7f0000000280), 0xa1f3ac5c292cc015, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) memfd_create(&(0x7f0000000080)='\xdb`\x10\x98[\x00\x00\xa5\xbe\x00\x00\x00\x00\x00\x00\x00\x00?\x90IA\x9e\xfe \x86?\x05y,\xb8\xa0og\xc3\x87\xe1\xc2\xd0\x0eo\f\\\xd1\x973\"\x96l|v7\xf7\x97\x06\xba\xa5\"k\xdd\x8a\xb4\x1c\x05D\xbe:\x9d7W!\x89\xe9\xefW`c\x0fJ{E\xe0\xabHO^N\xfa\xcd.\x01\xa7Pp|\xe8\xbeO\xeb\xf1\xdf[\xa3>S\xa68G\xf0\xbe\x1f\x8df\xb7B\x0f\x8d\xa2!\xda\xd8\xde\xe4\x9fe%{.\xcc*\x9b\x11\x8f\xf5n\x05S\x81\x03\xe5\xdal\x93\x0f[\x93p\x1ecg\x91\x13\xf2T\xf0fp\xbb\xfcYL\x9c\x8f\xf6', 0x0) mq_timedreceive(r4, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x2) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir_on}]}) 184.39729ms ago: executing program 5 (id=1383): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x4000, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000500)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x1, r1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000580), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000180)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 100.887119ms ago: executing program 5 (id=1384): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000091c2f20c81403006c05010203010902"], 0x0) r1 = syz_clone(0x80100000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$nl_crypto(0x10, 0x3, 0x15) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(arc4-generic)\x00'}, 0x58) sendmsg$nl_crypto(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000100003"], 0xf0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) bind$packet(r3, &(0x7f0000000100)={0x11, 0x0, r5}, 0x14) syz_open_procfs(r1, &(0x7f0000000180)='attr/prev\x00') syz_usb_disconnect(r0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000008000cb8747cc8500f0ff390000029500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$packet(0x11, 0x3, 0x300) close_range(r6, 0xffffffffffffffff, 0x0) 44.530009ms ago: executing program 2 (id=1385): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x0, 0x0, 'sh\x00'}, 0x2c) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x5, 0x5, 0xa}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x44}}, 0x0) syz_io_uring_setup(0x743a, &(0x7f0000000380)={0x0, 0xf6cb, 0x20, 0x2, 0xffffefff}, &(0x7f0000000140), &(0x7f00000001c0)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000080)=""/229) 0s ago: executing program 0 (id=1386): bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x1000001000104) ioctl$NBD_SET_SOCK(r4, 0xab00, r3) ioctl$NBD_DO_IT(r2, 0xab03) close_range(r1, 0xffffffffffffffff, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) kernel console output (not intermixed with test programs): parsing attributes in process `syz.2.375'. [ 100.854620][ T7502] bridge2: port 1(veth3) entered blocking state [ 100.856536][ T7502] bridge2: port 1(veth3) entered disabled state [ 100.858207][ T7502] veth3: entered allmulticast mode [ 100.860131][ T7502] veth3: entered promiscuous mode [ 100.870849][ T7502] bridge2: port 2(bridge_slave_1) entered blocking state [ 100.875293][ T7502] bridge2: port 2(bridge_slave_1) entered disabled state [ 100.877226][ T7502] bridge_slave_1: entered allmulticast mode [ 100.883039][ T7502] bridge_slave_1: entered promiscuous mode [ 101.805220][ T63] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 101.920014][ T30] libceph: connect (1)[c::]:6789 error -101 [ 101.922190][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 101.967349][ T63] usb 7-1: Using ep0 maxpacket: 8 [ 101.969750][ T63] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.972304][ T63] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.974914][ T63] usb 7-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 101.977104][ T63] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.980260][ T63] usb 7-1: config 0 descriptor?? [ 101.985718][ T63] usbhid 7-1:0.0: can't add hid device: -22 [ 101.987241][ T63] usbhid 7-1:0.0: probe with driver usbhid failed with error -22 [ 102.105464][ T7520] ceph: No mds server is up or the cluster is laggy [ 102.318075][ T9] usb 7-1: USB disconnect, device number 3 [ 102.421233][ T7538] netlink: zone id is out of range [ 103.145199][ T63] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 103.315402][ T63] usb 7-1: Using ep0 maxpacket: 32 [ 103.319726][ T63] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 103.323190][ T63] usb 7-1: config 7 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.327215][ T63] usb 7-1: config 7 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.330512][ T63] usb 7-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 103.334853][ T63] usb 7-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 103.337394][ T63] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.766087][ T63] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 103.768205][ T63] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 103.770113][ T63] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 103.772375][ T63] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 103.774240][ T63] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 103.781851][ T63] ntrig 0003:1B96:000A.0003: hidraw1: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.2-1/input0 [ 103.975149][ T63] usb 7-1: USB disconnect, device number 4 [ 104.165572][ T7553] hid-generic 0003:0627:0001.0001: pid 7553 passed too short report [ 104.251210][ T7572] bridge0: port 2(syz_tun) entered blocking state [ 104.253088][ T7572] bridge0: port 2(syz_tun) entered disabled state [ 104.257029][ T7572] syz_tun: entered allmulticast mode [ 104.260021][ T7572] syz_tun: entered promiscuous mode [ 105.305592][ T7595] netlink: zone id is out of range [ 106.438703][ T7627] vcan0: Master is either lo or non-ether device [ 106.978335][ T7640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.413'. [ 106.980707][ T7640] netlink: 4 bytes leftover after parsing attributes in process `syz.4.413'. [ 107.008603][ T7640] netlink: 4 bytes leftover after parsing attributes in process `syz.4.413'. [ 107.064388][ T7640] bond0: (slave bond_slave_0): Releasing backup interface [ 107.269793][ T7642] netlink: 244 bytes leftover after parsing attributes in process `syz.0.414'. [ 107.552442][ T7648] syz_tun: left allmulticast mode [ 107.554040][ T7648] syz_tun: left promiscuous mode [ 107.555915][ T7648] bridge0: port 2(syz_tun) entered disabled state [ 107.571708][ T7648] bridge_slave_1: left allmulticast mode [ 107.573211][ T7648] bridge_slave_1: left promiscuous mode [ 107.574753][ T7648] bridge0: port 1(bridge_slave_1) entered disabled state [ 107.581430][ T7648] bond0: (slave bond_slave_0): Releasing backup interface [ 107.591539][ T7648] bond0: (slave bond_slave_1): Releasing backup interface [ 107.605811][ T7648] team0: Port device team_slave_0 removed [ 107.612181][ T7648] team0: Port device team_slave_1 removed [ 107.614067][ T7648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.616678][ T7648] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.620043][ T7648] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.622115][ T7648] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.839074][ T7652] team0: Port device wg2 added [ 108.301286][ T5947] Bluetooth: hci2: unexpected event 0x2f length: 1017 > 260 [ 108.716929][ T7668] netlink: 'syz.2.429': attribute type 4 has an invalid length. [ 108.747417][ T7665] syz.0.421 (7665): drop_caches: 1 [ 109.728513][ T7689] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 109.745283][ T7689] picdev_read: 42 callbacks suppressed [ 109.745294][ T7689] kvm: pic: non byte read [ 109.753110][ T7689] pic_ioport_write: 3 callbacks suppressed [ 109.753124][ T7689] kvm: pic: level sensitive irq not supported [ 109.755825][ T7689] kvm: pic: non byte read [ 109.761799][ T7689] kvm: pic: level sensitive irq not supported [ 109.763533][ T7689] kvm: pic: non byte read [ 109.769520][ T7689] kvm: pic: level sensitive irq not supported [ 109.770877][ T7689] kvm: pic: non byte read [ 109.962141][ T7687] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 109.970875][ T7687] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 109.979860][ T7687] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 109.992489][ T7687] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 109.994180][ T7687] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 110.000785][ T7687] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 110.006920][ T7687] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 110.008557][ T7687] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 110.019406][ T7687] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 110.138975][ T7701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.431'. [ 111.707835][ T7742] pim6reg: entered allmulticast mode [ 111.737917][ T7742] pim6reg: left allmulticast mode [ 112.036720][ T5947] Bluetooth: hci2: command 0x0c1a tx timeout [ 112.038448][ T5947] Bluetooth: hci1: command 0x0c1a tx timeout [ 112.040100][ T5936] Bluetooth: hci0: command 0x0c1a tx timeout [ 112.953943][ T7775] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 114.115182][ T66] Bluetooth: hci1: command 0x0c1a tx timeout [ 114.116819][ T66] Bluetooth: hci0: command 0x0c1a tx timeout [ 114.118622][ T66] Bluetooth: hci2: command 0x0c1a tx timeout [ 115.234259][ T7810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.457'. [ 116.206578][ T5947] Bluetooth: hci2: command 0x0c1a tx timeout [ 116.208181][ T5947] Bluetooth: hci0: command 0x0c1a tx timeout [ 116.209734][ T5947] Bluetooth: hci1: command 0x0c1a tx timeout [ 116.298186][ T7829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.462'. [ 118.341513][ T7881] netlink: 36 bytes leftover after parsing attributes in process `syz.2.474'. [ 118.344191][ T7881] netlink: 16 bytes leftover after parsing attributes in process `syz.2.474'. [ 118.347196][ T7881] netlink: 36 bytes leftover after parsing attributes in process `syz.2.474'. [ 118.349716][ T7881] netlink: 36 bytes leftover after parsing attributes in process `syz.2.474'. [ 119.400226][ T39] audit: type=1326 audit(1734531684.814:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7902 comm="syz.0.479" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 119.407013][ T39] audit: type=1326 audit(1734531684.814:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7902 comm="syz.0.479" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 119.417993][ T39] audit: type=1326 audit(1734531684.814:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7902 comm="syz.0.479" exe="/syz-executor" sig=0 arch=40000003 syscall=322 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 119.425251][ T39] audit: type=1326 audit(1734531684.814:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7902 comm="syz.0.479" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 119.430817][ T39] audit: type=1326 audit(1734531684.814:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7902 comm="syz.0.479" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 119.438145][ T39] audit: type=1326 audit(1734531684.814:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7902 comm="syz.0.479" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 119.443921][ T39] audit: type=1326 audit(1734531684.814:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7902 comm="syz.0.479" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 119.449564][ T39] audit: type=1326 audit(1734531684.814:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7902 comm="syz.0.479" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 119.455204][ T39] audit: type=1326 audit(1734531684.824:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7902 comm="syz.0.479" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 119.460731][ T39] audit: type=1326 audit(1734531684.824:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7902 comm="syz.0.479" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 120.397047][ T7917] qnx6: Unknown parameter 'trans' [ 120.409009][ T7917] netlink: 244 bytes leftover after parsing attributes in process `syz.2.483'. [ 120.423523][ T7916] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 120.432758][ T7916] kvm: pic: non byte read [ 120.434876][ T7916] kvm: pic: level sensitive irq not supported [ 120.437122][ T7916] kvm: pic: non byte read [ 120.441491][ T7916] kvm: pic: level sensitive irq not supported [ 120.441755][ T7916] kvm: pic: non byte read [ 120.446129][ T7916] kvm: pic: level sensitive irq not supported [ 120.446445][ T7916] kvm: pic: non byte read [ 122.301114][ T7987] syz.3.491 (7987): drop_caches: 1 [ 122.445557][ T834] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 123.043637][ T7999] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095 [ 124.407455][ T8027] netlink: zone id is out of range [ 127.305246][ T834] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 127.456139][ T834] usb 5-1: Using ep0 maxpacket: 8 [ 127.463456][ T834] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 127.466998][ T834] usb 5-1: config 0 has no interface number 0 [ 127.469294][ T834] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 127.473128][ T834] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 127.480070][ T834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.496202][ T834] usb 5-1: config 0 descriptor?? [ 127.501095][ T834] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 128.114062][ T8071] netlink: 28 bytes leftover after parsing attributes in process `syz.2.516'. [ 128.125438][ T8071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.516'. [ 128.758093][ T6019] usb 5-1: USB disconnect, device number 4 [ 129.335218][ T834] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 129.739000][ T834] usb 9-1: config 0 has no interfaces? [ 129.740787][ T834] usb 9-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 129.743570][ T834] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.772560][ T834] usb 9-1: config 0 descriptor?? [ 129.807133][ T8113] kvm: pic: level sensitive irq not supported [ 129.807773][ T8113] kvm: pic: single mode not supported [ 129.809902][ T8113] kvm: pic: single mode not supported [ 129.812169][ T8113] kvm: pic: single mode not supported [ 129.814592][ T8113] kvm: pic: single mode not supported [ 129.817499][ T8113] kvm: pic: single mode not supported [ 129.819538][ T8113] kvm: pic: single mode not supported [ 129.821384][ T8113] kvm: pic: single mode not supported [ 129.823336][ T8113] kvm: pic: single mode not supported [ 129.825549][ T8113] kvm: pic: single mode not supported [ 129.827378][ T8113] kvm: pic: single mode not supported [ 130.034749][ T8115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.041888][ T8115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.053032][ T8115] usb usb9: usbfs: process 8115 (syz.4.526) did not claim interface 0 before use [ 130.164894][ T6019] usb 9-1: USB disconnect, device number 3 [ 132.120354][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.122186][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.821128][ T39] kauditd_printk_skb: 14 callbacks suppressed [ 132.821139][ T39] audit: type=1326 audit(1734531698.234:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8162 comm="syz.0.543" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 132.835302][ T39] audit: type=1326 audit(1734531698.234:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8162 comm="syz.0.543" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 132.842466][ T39] audit: type=1326 audit(1734531698.254:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8162 comm="syz.0.543" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 132.848372][ T39] audit: type=1326 audit(1734531698.264:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8162 comm="syz.0.543" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 132.860460][ T39] audit: type=1326 audit(1734531698.264:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8162 comm="syz.0.543" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 132.886696][ T39] audit: type=1326 audit(1734531698.274:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8162 comm="syz.0.543" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 132.892089][ T39] audit: type=1326 audit(1734531698.274:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8162 comm="syz.0.543" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 132.913353][ T39] audit: type=1326 audit(1734531698.274:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8162 comm="syz.0.543" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 132.919172][ T39] audit: type=1326 audit(1734531698.274:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8162 comm="syz.0.543" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 132.924993][ T39] audit: type=1326 audit(1734531698.274:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8162 comm="syz.0.543" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 134.948669][ T8212] input: syz0 as /devices/virtual/input/input8 [ 135.573041][ T8230] netlink: 20 bytes leftover after parsing attributes in process `syz.4.564'. [ 135.973289][ T8242] netlink: 'syz.2.567': attribute type 1 has an invalid length. [ 136.022747][ T8242] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.066394][ T8244] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.068386][ T8244] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 136.071458][ T8244] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 137.412105][ T8283] vivid-001: disconnect [ 137.416705][ T8277] vivid-001: reconnect [ 137.505748][ T8289] block nbd2: NBD_DISCONNECT [ 137.508444][ T8289] block nbd2: Disconnected due to user request. [ 137.510907][ T8289] block nbd2: shutting down sockets [ 138.638765][ T39] kauditd_printk_skb: 30 callbacks suppressed [ 138.638778][ T39] audit: type=1804 audit(1734531704.054:153): pid=8316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.587" name="/newroot/144/file0/file0" dev="9p" ino=37617963 res=1 errno=0 [ 138.658645][ T39] audit: type=1800 audit(1734531704.074:154): pid=8316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.587" name="bus" dev="9p" ino=37618168 res=0 errno=0 [ 138.673714][ T39] audit: type=1800 audit(1734531704.074:155): pid=8316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.587" name="bus" dev="9p" ino=37618168 res=0 errno=0 [ 139.751392][ T8354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.597'. [ 140.086995][ T39] audit: type=1326 audit(1734531705.504:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8361 comm="syz.0.599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 140.107516][ T39] audit: type=1326 audit(1734531705.504:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8361 comm="syz.0.599" exe="/syz-executor" sig=0 arch=40000003 syscall=311 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 140.113293][ T39] audit: type=1326 audit(1734531705.504:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8361 comm="syz.0.599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 140.127421][ T39] audit: type=1326 audit(1734531705.504:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8361 comm="syz.0.599" exe="/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 140.133084][ T39] audit: type=1326 audit(1734531705.504:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8361 comm="syz.0.599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 140.138909][ T39] audit: type=1326 audit(1734531705.504:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8361 comm="syz.0.599" exe="/syz-executor" sig=0 arch=40000003 syscall=15 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 140.144518][ T39] audit: type=1326 audit(1734531705.504:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8361 comm="syz.0.599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 141.895166][ T5978] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 142.045120][ T5978] usb 5-1: Using ep0 maxpacket: 8 [ 142.047750][ T5978] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 142.049821][ T5978] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 142.052751][ T5978] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 142.056057][ T5978] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 142.058965][ T5978] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 142.064552][ T5978] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 142.066700][ T5978] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 142.069617][ T5978] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 142.072632][ T5978] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 142.076533][ T5978] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 142.080302][ T5978] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 142.082479][ T5978] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 142.085895][ T5978] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 142.089022][ T5978] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 142.091955][ T5978] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 142.097225][ T5978] usb 5-1: string descriptor 0 read error: -22 [ 142.098955][ T5978] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 142.101305][ T5978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.107775][ T5978] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 142.286995][ T8441] netlink: 'syz.3.620': attribute type 39 has an invalid length. [ 142.472585][ T9] usb 5-1: USB disconnect, device number 5 [ 143.805353][ T8475] cgroup: Name too long [ 144.874619][ T8499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.636'. [ 145.094362][ T8512] tipc: Enabled bearer , priority 0 [ 145.113510][ T66] Bluetooth: hci0: unexpected event for opcode 0x0c25 [ 145.149820][ T8517] usb 1-1: USB disconnect, device number 2 [ 145.320968][ T8534] kernel profiling enabled (shift: 9) [ 146.170521][ T8550] netlink: 32 bytes leftover after parsing attributes in process `syz.0.648'. [ 146.941726][ T8567] netlink: 44 bytes leftover after parsing attributes in process `syz.2.653'. [ 146.945410][ T8567] netlink: 59 bytes leftover after parsing attributes in process `syz.2.653'. [ 146.950733][ T8549] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 146.952946][ T8549] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 146.957191][ T8549] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 146.958967][ T8549] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 146.962429][ T8549] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 146.964604][ T8549] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 146.999105][ T8569] bond0: entered allmulticast mode [ 147.044017][ T8572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.655'. [ 147.069592][ T8572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.655'. [ 147.982772][ T8589] syzkaller0: entered promiscuous mode [ 147.984241][ T8589] syzkaller0: entered allmulticast mode [ 148.245200][ T63] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 148.416773][ T63] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.419661][ T63] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 148.422995][ T63] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 148.426999][ T63] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.431906][ T63] usb 7-1: config 0 descriptor?? [ 148.789399][ T8608] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 148.796976][ T8608] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 148.820207][ T8608] kvm: requested 90514 ns i8254 timer period limited to 200000 ns [ 148.822762][ T8608] kvm: requested 86323 ns i8254 timer period limited to 200000 ns [ 148.825654][ T8608] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 148.840163][ T63] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 148.842179][ T63] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 148.846412][ T63] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 148.849252][ T8608] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 148.864735][ T63] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 148.924509][ T8592] delete_channel: no stack [ 149.109270][ T834] usb 7-1: USB disconnect, device number 5 [ 151.373660][ T8678] Bluetooth: MGMT ver 1.23 [ 151.411502][ T8675] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 152.123804][ T8693] netlink: 12 bytes leftover after parsing attributes in process `syz.4.686'. [ 152.145982][ T8693] bond1: entered promiscuous mode [ 152.147532][ T8693] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.216371][ T8695] netlink: 3 bytes leftover after parsing attributes in process `syz.4.686'. [ 152.239945][ T8695] batadv1: entered promiscuous mode [ 152.242113][ T8695] batadv1: entered allmulticast mode [ 152.248706][ T8695] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 152.254133][ T8695] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 154.250434][ T39] kauditd_printk_skb: 12 callbacks suppressed [ 154.250446][ T39] audit: type=1326 audit(1734531719.664:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8713 comm="syz.0.691" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 154.258864][ T39] audit: type=1326 audit(1734531719.664:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8713 comm="syz.0.691" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 154.264417][ T39] audit: type=1326 audit(1734531719.664:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8713 comm="syz.0.691" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 154.270202][ T39] audit: type=1326 audit(1734531719.664:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8713 comm="syz.0.691" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 154.276191][ T39] audit: type=1326 audit(1734531719.664:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8713 comm="syz.0.691" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 154.281725][ T39] audit: type=1326 audit(1734531719.664:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8713 comm="syz.0.691" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 154.287305][ T39] audit: type=1326 audit(1734531719.664:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8713 comm="syz.0.691" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 154.292806][ T39] audit: type=1326 audit(1734531719.664:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8713 comm="syz.0.691" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 154.298406][ T39] audit: type=1326 audit(1734531719.664:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8713 comm="syz.0.691" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 154.303873][ T39] audit: type=1326 audit(1734531719.664:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8713 comm="syz.0.691" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 154.925812][ T1328] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 155.086289][ T1328] usb 7-1: Using ep0 maxpacket: 16 [ 155.089094][ T1328] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 155.091263][ T1328] usb 7-1: config 0 has no interface number 0 [ 155.092910][ T1328] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 155.095909][ T1328] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 155.100769][ T1328] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 155.103529][ T1328] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 155.105735][ T1328] usb 7-1: Product: syz [ 155.106958][ T1328] usb 7-1: SerialNumber: syz [ 155.109248][ T1328] usb 7-1: config 0 descriptor?? [ 155.112920][ T1328] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 155.116043][ T1328] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.8/input/input9 [ 155.425879][ T8730] capability: warning: `syz.3.696' uses deprecated v2 capabilities in a way that may be insecure [ 155.988902][ T8744] netlink: 48 bytes leftover after parsing attributes in process `syz.0.700'. [ 157.246104][ T8769] netlink: 'syz.4.706': attribute type 4 has an invalid length. [ 157.765167][ C2] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 157.768561][ C2] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 157.769345][ T30] usb 7-1: USB disconnect, device number 6 [ 157.770466][ C2] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 157.802294][ T30] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 158.264698][ T8784] evm: overlay not supported [ 163.367919][ T66] block nbd2: Receive control failed (result -32) [ 163.372336][ T8838] block nbd2: shutting down sockets [ 163.749360][ T8848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.732'. [ 163.756901][ T8848] netlink: 64 bytes leftover after parsing attributes in process `syz.0.732'. [ 164.433782][ T8856] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 165.445164][ T6019] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 165.539938][ T8876] bridge0: port 2(syz_tun) entered blocking state [ 165.541705][ T8876] bridge0: port 2(syz_tun) entered disabled state [ 165.544754][ T8876] syz_tun: entered allmulticast mode [ 165.548726][ T8876] syz_tun: entered promiscuous mode [ 165.595107][ T6019] usb 8-1: Using ep0 maxpacket: 32 [ 165.598106][ T6019] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.602361][ T6019] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.606046][ T6019] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 165.609283][ T6019] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.614526][ T6019] usb 8-1: config 0 descriptor?? [ 166.032554][ T6019] savu 0003:1E7D:2D5A.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 166.835908][ T8900] binder: 8898:8900 ioctl c0306201 0 returned -14 [ 166.872555][ T8900] sp0: Synchronizing with TNC [ 167.030700][ T8898] [U] [ 167.486276][ T63] usb 8-1: reset high-speed USB device number 6 using dummy_hcd [ 168.340807][ T8925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.753'. [ 168.916944][ T8940] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 168.923867][ T8940] kvm: pic: level sensitive irq not supported [ 168.924256][ T8940] kvm: pic: non byte read [ 168.928267][ T8940] kvm: pic: level sensitive irq not supported [ 168.928617][ T8940] kvm: pic: non byte read [ 169.011225][ T6019] usb 8-1: USB disconnect, device number 6 [ 170.215331][ T1328] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 170.365284][ T1328] usb 5-1: Using ep0 maxpacket: 32 [ 170.369791][ T1328] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 170.372176][ T1328] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.374351][ T1328] usb 5-1: Product: syz [ 170.375542][ T1328] usb 5-1: Manufacturer: syz [ 170.376799][ T1328] usb 5-1: SerialNumber: syz [ 170.380670][ T1328] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 170.900420][ T1328] gspca_stk1135: reg_w 0x0 err -71 [ 170.903436][ T1328] gspca_stk1135: serial bus timeout: status=0x00 [ 170.905745][ T1328] gspca_stk1135: Sensor write failed [ 170.907672][ T1328] gspca_stk1135: serial bus timeout: status=0x00 [ 170.909977][ T1328] gspca_stk1135: Sensor write failed [ 170.911894][ T1328] gspca_stk1135: serial bus timeout: status=0x00 [ 170.914338][ T1328] gspca_stk1135: Sensor read failed [ 170.916352][ T1328] gspca_stk1135: serial bus timeout: status=0x00 [ 170.918673][ T1328] gspca_stk1135: Sensor read failed [ 170.920665][ T1328] gspca_stk1135: Detected sensor type unknown (0x0) [ 170.923032][ T1328] gspca_stk1135: serial bus timeout: status=0x00 [ 170.924885][ T1328] gspca_stk1135: Sensor read failed [ 170.926347][ T1328] gspca_stk1135: serial bus timeout: status=0x00 [ 170.928043][ T1328] gspca_stk1135: Sensor read failed [ 170.929470][ T1328] gspca_stk1135: serial bus timeout: status=0x00 [ 170.931153][ T1328] gspca_stk1135: Sensor write failed [ 170.932618][ T1328] gspca_stk1135: serial bus timeout: status=0x00 [ 170.934300][ T1328] gspca_stk1135: Sensor write failed [ 170.935796][ T1328] stk1135 5-1:64.0: probe with driver stk1135 failed with error -71 [ 170.941579][ T1328] usb 5-1: USB disconnect, device number 6 [ 171.070581][ T8978] ======================================================= [ 171.070581][ T8978] WARNING: The mand mount option has been deprecated and [ 171.070581][ T8978] and is ignored by this kernel. Remove the mand [ 171.070581][ T8978] option from the mount to silence this warning. [ 171.070581][ T8978] ======================================================= [ 171.345169][ T8987] [U] [ 171.346428][ T8987] [U] [ 171.347461][ T8987] [U] [ 171.348473][ T8987] [U] [ 171.349448][ T8987] [U] [ 171.350482][ T8987] [U] [ 171.351499][ T8987] [U] [ 171.352503][ T8987] [U] [ 171.353550][ T8987] [U] [ 171.354536][ T8987] [U] [ 171.355465][ T8987] [U] [ 171.356452][ T8987] [U] [ 171.357944][ T8987] [U] [ 171.358990][ T8987] [U] [ 171.359965][ T8987] [U] [ 171.360750][ T8987] [U] [ 171.361518][ T8987] [U] [ 171.362287][ T8987] [U] [ 171.363107][ T8987] [U] [ 171.363897][ T8987] [U] [ 171.364803][ T8987] [U] [ 171.365592][ T8987] [U] [ 171.366351][ T8987] [U] [ 171.367267][ T8987] [U] [ 171.368136][ T8987] [U] [ 171.369006][ T8987] [U] [ 171.370041][ T8987] [U] [ 171.371050][ T8987] [U] [ 171.372059][ T8987] [U] [ 171.373081][ T8987] [U] [ 171.374106][ T8987] [U] [ 171.375133][ T8987] [U] [ 171.376305][ T8987] [U] [ 171.377311][ T8987] [U] [ 171.378343][ T8987] [U] [ 171.379328][ T8987] [U] [ 171.380335][ T8987] [U] [ 171.381362][ T8987] [U] [ 171.382424][ T8987] [U] [ 171.383488][ T8987] [U] [ 171.384608][ T8987] [U] [ 171.385649][ T8987] [U] [ 171.386667][ T8987] [U] [ 171.387718][ T8987] [U] [ 171.389173][ T8987] [U] [ 171.390188][ T8987] [U] [ 171.391199][ T8987] [U] [ 171.392225][ T8987] [U] [ 171.393284][ T8987] [U] [ 171.394309][ T8987] [U] [ 171.395292][ T8987] [U] [ 171.396291][ T8987] [U] [ 171.397895][ T8987] [U] [ 171.398514][ T8988] netlink: 'syz.2.767': attribute type 27 has an invalid length. [ 171.398909][ T8987] [U] [ 171.401645][ T8987] [U] [ 171.402437][ T8987] [U] [ 171.405135][ T8987] [U] [ 171.405932][ T8987] [U] [ 171.406700][ T8987] [U] [ 171.407474][ T8987] [U] [ 171.408257][ T8987] [U] [ 171.408976][ T8987] [U] [ 171.409718][ T8987] [U] [ 171.410675][ T8987] [U] [ 171.411521][ T8987] [U] [ 171.412273][ T8987] [U] [ 171.412983][ T8987] [U] [ 171.413743][ T8987] [U] [ 171.414516][ T8987] [U] [ 171.415238][ T8987] [U] [ 171.416033][ T8987] [U] [ 171.416794][ T8987] [U] [ 171.417720][ T8987] [U] [ 171.418524][ T8987] [U] [ 171.419286][ T8987] [U] [ 171.420067][ T8987] [U] [ 171.420779][ T8987] [U] [ 171.421535][ T8987] [U] [ 171.422311][ T8987] [U] [ 171.423030][ T8987] [U] [ 171.423824][ T8987] [U] [ 171.423961][ T8988] bridge0: port 2(syz_tun) entered blocking state [ 171.424575][ T8987] [U] [ 171.426318][ T8988] bridge0: port 2(syz_tun) entered forwarding state [ 171.427054][ T8987] [U] [ 171.429623][ T8987] [U] [ 171.430544][ T8987] [U] [ 171.431775][ T8988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.431867][ T8987] [U] [ 171.434309][ T8988] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.434385][ T8987] [U] [ 171.437450][ T8987] [U] [ 171.438481][ T8987] [U] [ 171.439603][ T8987] [U] [ 171.440409][ T8987] [U] [ 171.441564][ T8987] [U] [ 171.441604][ T8987] [U] [ 171.443169][ T8987] [U] [ 171.443988][ T8987] [U] [ 171.444770][ T8987] [U] [ 171.447443][ T8987] [U] [ 171.448249][ T8987] [U] [ 171.448273][ T8987] [U] [ 171.449759][ T8987] [U] [ 171.449781][ T8987] [U] [ 171.450493][ T8988] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 171.451381][ T8987] [U] [ 171.456155][ T8987] [U] [ 171.456957][ T8987] [U] [ 171.457829][ T8987] [U] [ 171.458600][ T8987] [U] [ 171.459383][ T8987] [U] [ 171.460196][ T8987] [U] [ 171.460939][ T8987] [U] [ 171.461737][ T8987] [U] [ 171.462553][ T8987] [U] [ 171.463331][ T8987] [U] [ 171.464098][ T8987] [U] [ 171.464900][ T8987] [U] [ 171.465747][ T8987] [U] [ 171.466515][ T8987] [U] [ 171.467394][ T8987] [U] [ 171.468249][ T8987] [U] [ 171.469064][ T8987] [U] [ 171.469838][ T8987] [U] [ 171.470716][ T8987] [U] [ 171.471556][ T8987] [U] [ 171.472325][ T8987] [U] [ 171.473102][ T8987] [U] [ 171.473909][ T8987] [U] [ 171.474748][ T8987] [U] [ 171.475502][ T8987] [U] [ 171.523154][ T8986] [U] [ 172.014141][ T9013] netlink: 'syz.0.773': attribute type 1 has an invalid length. [ 172.038337][ T9013] 8021q: adding VLAN 0 to HW filter on device bond1 [ 172.044666][ T9017] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 172.047103][ T9017] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 172.059388][ T9013] bond1: (slave bridge1): making interface the new active one [ 172.062084][ T9013] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 172.081525][ T9013] bond1: (slave bridge2): Enslaving as an active interface with a down link [ 172.495220][ T64] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 172.526318][ T5947] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 172.535592][ T5947] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 172.541480][ T5947] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 172.556217][ T5947] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 172.559258][ T5947] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 172.561248][ T5947] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 172.579918][ T66] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 172.582509][ T66] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 172.585305][ T66] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 172.588380][ T66] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 172.591600][ T66] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 172.593698][ T66] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 172.678436][ T64] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 172.681502][ T64] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 172.684893][ T64] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 172.689968][ T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.696702][ T9022] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 172.700305][ T64] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 172.735689][ T9030] chnl_net:caif_netlink_parms(): no params data found [ 172.814978][ T9030] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.817530][ T9030] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.819815][ T9030] bridge_slave_0: entered allmulticast mode [ 172.822008][ T9030] bridge_slave_0: entered promiscuous mode [ 172.825311][ T9030] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.827459][ T9030] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.829795][ T9030] bridge_slave_1: entered allmulticast mode [ 172.831933][ T9030] bridge_slave_1: entered promiscuous mode [ 172.856566][ T9030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.860897][ T9030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.888556][ T9030] team0: Port device team_slave_0 added [ 172.893915][ T9030] team0: Port device team_slave_1 added [ 172.903619][ T64] usb 5-1: USB disconnect, device number 7 [ 172.937743][ T9030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.939606][ T9030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.947187][ T9030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.956739][ T9030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.963422][ T9030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.971374][ T9030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.047554][ T9030] hsr_slave_0: entered promiscuous mode [ 173.050413][ T9030] hsr_slave_1: entered promiscuous mode [ 173.052828][ T9030] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.055688][ T9030] Cannot create hsr debugfs directory [ 173.205329][ T9030] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 173.208563][ T9030] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 173.211681][ T9030] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 173.215360][ T9030] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 173.230131][ T9030] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.232775][ T9030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.235725][ T9030] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.238322][ T9030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.266768][ T9030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.277214][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.283110][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.311168][ T9030] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.323342][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.325430][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.337999][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.339932][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.460201][ T9030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.617606][ T9030] veth0_vlan: entered promiscuous mode [ 173.623006][ T9030] veth1_vlan: entered promiscuous mode [ 173.663261][ T9030] veth0_macvtap: entered promiscuous mode [ 173.668826][ T9030] veth1_macvtap: entered promiscuous mode [ 173.679614][ T9030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.683181][ T9030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.688515][ T9030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.692203][ T9030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.697332][ T9030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.708431][ T9030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.712308][ T9030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.716555][ T9030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.720965][ T9030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.724743][ T9030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.739236][ T9030] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.741879][ T9030] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.744995][ T9030] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.750261][ T9030] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.849462][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.859448][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.881068][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.883397][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.685250][ T5947] Bluetooth: hci2: command tx timeout [ 175.216791][ T9089] Cannot find add_set index 0 as target [ 176.021570][ T9094] No buffer was provided with the request [ 176.087241][ T9095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.791'. [ 176.166591][ T9100] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 176.168156][ T9100] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 176.170542][ T9100] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 176.272521][ T9111] netlink: 'syz.3.794': attribute type 4 has an invalid length. [ 176.859659][ T9124] kernel read not supported for file /rmdF (pid: 9124 comm: syz.0.798) [ 176.862686][ T39] kauditd_printk_skb: 18 callbacks suppressed [ 176.862917][ T39] audit: type=1800 audit(1734531742.274:203): pid=9124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.798" name=726D64461716BCEC dev="mqueue" ino=29276 res=0 errno=0 [ 177.433465][ T9134] pim6reg: entered allmulticast mode [ 177.456565][ T9134] pim6reg: left allmulticast mode [ 177.932661][ T9143] bridge_slave_0: left allmulticast mode [ 177.934269][ T9143] bridge_slave_0: left promiscuous mode [ 177.936704][ T9143] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.958797][ T9143] bridge_slave_1: left allmulticast mode [ 177.960740][ T9143] bridge_slave_1: left promiscuous mode [ 177.963867][ T9143] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.984781][ T9143] bond0: (slave bond_slave_0): Releasing backup interface [ 178.012228][ T9143] bond0: (slave bond_slave_1): Releasing backup interface [ 178.028068][ T9143] team0: Port device team_slave_0 removed [ 178.032302][ T9143] team0: Port device team_slave_1 removed [ 178.034290][ T9143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.036530][ T9143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.039297][ T9143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.041293][ T9143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.098757][ T9146] team0: Port device wg2 added [ 178.199038][ T5947] Bluetooth: hci2: command 0x040f tx timeout [ 178.407150][ T9153] syzkaller0: entered promiscuous mode [ 178.409357][ T9153] syzkaller0: entered allmulticast mode [ 178.645506][ T834] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 178.715178][ T64] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 178.790508][ T9162] binder: 9160:9162 ioctl c0306201 0 returned -14 [ 178.849280][ T9162] sp0: Synchronizing with TNC [ 178.866232][ T64] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.869207][ T64] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 178.873225][ T64] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 178.877775][ T64] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.895407][ T64] usb 10-1: config 0 descriptor?? [ 179.166909][ T9160] [U] [ 179.366242][ T64] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 179.368824][ T64] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 179.371576][ T64] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 179.377038][ T64] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 179.594621][ T6019] usb 10-1: USB disconnect, device number 2 [ 180.276482][ T5947] Bluetooth: hci2: command 0x040f tx timeout [ 180.542623][ T9177] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 181.968670][ T9194] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095 [ 182.355227][ T5947] Bluetooth: hci2: command 0x040f tx timeout [ 182.473225][ T39] audit: type=1326 audit(1734531747.884:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9199 comm="syz.5.822" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 182.480776][ T39] audit: type=1326 audit(1734531747.884:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9199 comm="syz.5.822" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 182.496520][ T39] audit: type=1326 audit(1734531747.884:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9199 comm="syz.5.822" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 182.503139][ T39] audit: type=1326 audit(1734531747.884:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9199 comm="syz.5.822" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 182.509177][ T39] audit: type=1326 audit(1734531747.884:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9199 comm="syz.5.822" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 182.514859][ T39] audit: type=1326 audit(1734531747.884:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9199 comm="syz.5.822" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 182.520570][ T39] audit: type=1326 audit(1734531747.884:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9199 comm="syz.5.822" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 182.527980][ T39] audit: type=1326 audit(1734531747.884:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9199 comm="syz.5.822" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 182.528001][ T39] audit: type=1326 audit(1734531747.884:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9199 comm="syz.5.822" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 182.541125][ T39] audit: type=1326 audit(1734531747.894:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9199 comm="syz.5.822" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 182.696623][ T9210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.824'. [ 182.737003][ T9209] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 182.896567][ T6019] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 183.056694][ T6019] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 183.061741][ T6019] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 183.064954][ T6019] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 183.069323][ T6019] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 183.072234][ T6019] usb 7-1: config 0 interface 0 has no altsetting 0 [ 183.079866][ T6019] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 183.082302][ T6019] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 183.085437][ T6019] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 183.087999][ T6019] usb 7-1: config 0 interface 0 has no altsetting 0 [ 183.091738][ T6019] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 183.094118][ T6019] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 183.097074][ T6019] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 183.099746][ T6019] usb 7-1: config 0 interface 0 has no altsetting 0 [ 183.102603][ T6019] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 183.104914][ T6019] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 183.107833][ T6019] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 183.110451][ T6019] usb 7-1: config 0 interface 0 has no altsetting 0 [ 183.113222][ T6019] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 183.115733][ T6019] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 183.118592][ T6019] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 183.121079][ T6019] usb 7-1: config 0 interface 0 has no altsetting 0 [ 183.124163][ T6019] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 183.127580][ T6019] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 183.131565][ T6019] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 183.135141][ T6019] usb 7-1: config 0 interface 0 has no altsetting 0 [ 183.138417][ T6019] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 183.141586][ T6019] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 183.145783][ T6019] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 183.149255][ T6019] usb 7-1: config 0 interface 0 has no altsetting 0 [ 183.152669][ T6019] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 183.156222][ T6019] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 183.160161][ T6019] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 183.163584][ T6019] usb 7-1: config 0 interface 0 has no altsetting 0 [ 183.168040][ T6019] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 183.170433][ T6019] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 183.172716][ T6019] usb 7-1: Product: syz [ 183.173815][ T6019] usb 7-1: Manufacturer: syz [ 183.175485][ T6019] usb 7-1: SerialNumber: syz [ 183.177802][ T6019] usb 7-1: config 0 descriptor?? [ 183.180417][ T6019] yurex 7-1:0.0: Could not submitting URB [ 183.182043][ T6019] yurex 7-1:0.0: probe with driver yurex failed with error -5 [ 183.396503][ T6019] usb 7-1: USB disconnect, device number 7 [ 184.258887][ T9229] sch_fq: defrate 0 ignored. [ 184.302060][ T9233] kvm: pic: level sensitive irq not supported [ 184.302666][ T9233] pic_ioport_write: 21 callbacks suppressed [ 184.302676][ T9233] kvm: pic: single mode not supported [ 184.307150][ T9233] kvm: pic: single mode not supported [ 184.309507][ T9233] kvm: pic: single mode not supported [ 184.311805][ T9233] kvm: pic: single mode not supported [ 184.314084][ T9233] kvm: pic: single mode not supported [ 184.316835][ T9233] kvm: pic: single mode not supported [ 184.319630][ T9233] kvm: pic: single mode not supported [ 184.321926][ T9233] kvm: pic: single mode not supported [ 184.323829][ T9233] kvm: pic: single mode not supported [ 184.326580][ T9233] kvm: pic: single mode not supported [ 184.373530][ T9241] capability: warning: `syz.2.832' uses 32-bit capabilities (legacy support in use) [ 184.445245][ T5947] Bluetooth: hci2: command 0x040f tx timeout [ 185.325509][ T57] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 185.475609][ T57] usb 8-1: Using ep0 maxpacket: 8 [ 185.480388][ T57] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 185.483778][ T57] usb 8-1: config 250 has an invalid interface number: 228 but max is -1 [ 185.487734][ T57] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 185.491049][ T57] usb 8-1: config 250 has no interface number 0 [ 185.493308][ T57] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 185.498546][ T57] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 185.502413][ T57] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 185.506415][ T57] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 185.510313][ T57] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 185.515214][ T57] usb 8-1: config 250 interface 228 has no altsetting 0 [ 185.519705][ T57] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 185.523270][ T57] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 185.526415][ T57] usb 8-1: Product: syz [ 185.527998][ T57] usb 8-1: SerialNumber: syz [ 185.532509][ T57] hub 8-1:250.228: bad descriptor, ignoring hub [ 185.534982][ T57] hub 8-1:250.228: probe with driver hub failed with error -5 [ 185.663852][ T9261] binder: 9258:9261 ioctl c0306201 0 returned -14 [ 185.726461][ T9261] sp0: Synchronizing with TNC [ 185.747408][ T57] usblp 8-1:250.228: usblp0: USB Bidirectional printer dev 7 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 186.371344][ T9247] usb 8-1: reset high-speed USB device number 7 using dummy_hcd [ 186.485498][ T9258] [U] [ 186.518066][ T5947] Bluetooth: hci2: command 0x040f tx timeout [ 187.095849][ T30] usb 8-1: USB disconnect, device number 7 [ 187.116791][ T30] usblp0: removed [ 187.612518][ T9287] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 190.005611][ T9383] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 190.515307][ T6019] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 190.706256][ T6019] usb 7-1: config 0 has no interfaces? [ 190.707739][ T6019] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 190.710219][ T6019] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.713505][ T6019] usb 7-1: config 0 descriptor?? [ 190.975933][ T9405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.979321][ T9405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.992713][ T9389] usb usb9: usbfs: process 9389 (syz.2.857) did not claim interface 0 before use [ 191.080716][ T6019] usb 7-1: USB disconnect, device number 8 [ 191.463552][ T9414] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 191.465625][ T9414] overlayfs: failed to set xattr on upper [ 191.467360][ T9414] overlayfs: ...falling back to redirect_dir=nofollow. [ 191.469263][ T9414] overlayfs: ...falling back to index=off. [ 191.470834][ T9414] overlayfs: ...falling back to uuid=null. [ 191.485456][ T9416] netlink: 'syz.3.863': attribute type 4 has an invalid length. [ 191.672405][ T9420] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 191.687901][ T9422] netfs: Couldn't get user pages (rc=-14) [ 191.789240][ T39] kauditd_printk_skb: 26 callbacks suppressed [ 191.789255][ T39] audit: type=1804 audit(1734531757.194:240): pid=9425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.871" name="/newroot/232/file1" dev="fuse" ino=1 res=1 errno=0 [ 191.808056][ T39] audit: type=1804 audit(1734531757.214:241): pid=9425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.871" name="/newroot/232/file1" dev="fuse" ino=1 res=1 errno=0 [ 193.154349][ T9458] netlink: 28 bytes leftover after parsing attributes in process `syz.5.878'. [ 193.157359][ T9458] netlink: 28 bytes leftover after parsing attributes in process `syz.5.878'. [ 193.163260][ T9458] bond0: entered promiscuous mode [ 193.173174][ T9458] batadv_slave_1: entered promiscuous mode [ 193.176880][ T9458] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 193.615836][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.617686][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.432339][ T9483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.884'. [ 194.559924][ T9485] block nbd5: NBD_DISCONNECT [ 194.561262][ T9485] block nbd5: Disconnected due to user request. [ 194.562906][ T9485] block nbd5: shutting down sockets [ 194.748875][ T39] audit: type=1326 audit(1734531760.164:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9486 comm="syz.2.886" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98579 code=0x7ffc0000 [ 194.754464][ T39] audit: type=1326 audit(1734531760.164:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9486 comm="syz.2.886" exe="/syz-executor" sig=0 arch=40000003 syscall=311 compat=1 ip=0xf7f98579 code=0x7ffc0000 [ 194.760597][ T39] audit: type=1326 audit(1734531760.164:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9486 comm="syz.2.886" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98579 code=0x7ffc0000 [ 194.767612][ T39] audit: type=1326 audit(1734531760.164:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9486 comm="syz.2.886" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98579 code=0x7ffc0000 [ 194.773425][ T39] audit: type=1326 audit(1734531760.164:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9486 comm="syz.2.886" exe="/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf7f98579 code=0x7ffc0000 [ 194.781492][ T39] audit: type=1326 audit(1734531760.164:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9486 comm="syz.2.886" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98579 code=0x7ffc0000 [ 194.787287][ T39] audit: type=1326 audit(1734531760.164:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9486 comm="syz.2.886" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98579 code=0x7ffc0000 [ 194.792766][ T39] audit: type=1326 audit(1734531760.164:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9486 comm="syz.2.886" exe="/syz-executor" sig=0 arch=40000003 syscall=15 compat=1 ip=0xf7f98579 code=0x7ffc0000 [ 195.757240][ T9502] cgroup: Name too long [ 195.924646][ T9513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.902'. [ 197.198956][ T9606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.899'. [ 197.235665][ T9606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.899'. [ 197.511612][ T9621] tipc: Enabled bearer , priority 0 [ 197.556739][ T9619] tipc: Disabling bearer [ 197.825676][ T9633] cgroup: Name too long [ 198.961426][ T9654] binder: 9645:9654 ioctl c0306201 0 returned -14 [ 199.001045][ T9654] sp0: Synchronizing with TNC [ 199.494128][ T9645] [U] [ 199.625152][ T1328] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 199.635830][ T834] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 199.785156][ T1328] usb 7-1: Using ep0 maxpacket: 32 [ 199.787498][ T834] usb 8-1: Using ep0 maxpacket: 32 [ 199.790587][ T1328] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.794079][ T1328] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.798350][ T1328] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 199.800819][ T1328] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.804340][ T1328] usb 7-1: config 0 descriptor?? [ 199.830530][ T834] usb 8-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 199.832926][ T834] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.835101][ T834] usb 8-1: Product: syz [ 199.836434][ T834] usb 8-1: Manufacturer: syz [ 199.837612][ T834] usb 8-1: SerialNumber: syz [ 199.846585][ T834] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 200.244527][ T1328] savu 0003:1E7D:2D5A.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 200.398467][ T834] gspca_stk1135: reg_w 0x0 err -71 [ 200.402276][ T834] gspca_stk1135: serial bus timeout: status=0x00 [ 200.404033][ T834] gspca_stk1135: Sensor write failed [ 200.406332][ T834] gspca_stk1135: serial bus timeout: status=0x00 [ 200.408065][ T834] gspca_stk1135: Sensor write failed [ 200.409551][ T834] gspca_stk1135: serial bus timeout: status=0x00 [ 200.411334][ T834] gspca_stk1135: Sensor read failed [ 200.413039][ T834] gspca_stk1135: serial bus timeout: status=0x00 [ 200.414809][ T834] gspca_stk1135: Sensor read failed [ 200.417055][ T834] gspca_stk1135: Detected sensor type unknown (0x0) [ 200.418904][ T834] gspca_stk1135: serial bus timeout: status=0x00 [ 200.420660][ T834] gspca_stk1135: Sensor read failed [ 200.422102][ T834] gspca_stk1135: serial bus timeout: status=0x00 [ 200.423836][ T834] gspca_stk1135: Sensor read failed [ 200.425882][ T834] gspca_stk1135: serial bus timeout: status=0x00 [ 200.427651][ T834] gspca_stk1135: Sensor write failed [ 200.429094][ T834] gspca_stk1135: serial bus timeout: status=0x00 [ 200.430900][ T834] gspca_stk1135: Sensor write failed [ 200.432392][ T834] stk1135 8-1:64.0: probe with driver stk1135 failed with error -71 [ 200.443709][ T834] usb 8-1: USB disconnect, device number 8 [ 201.585150][ T5993] usb 7-1: reset high-speed USB device number 9 using dummy_hcd [ 201.761147][ T9686] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 203.202397][ T9700] netlink: 20 bytes leftover after parsing attributes in process `syz.5.923'. [ 203.328826][ T9703] netlink: 'syz.5.924': attribute type 1 has an invalid length. [ 203.351203][ T9703] bond1: entered promiscuous mode [ 203.352867][ T9703] 8021q: adding VLAN 0 to HW filter on device bond1 [ 203.421537][ T9705] netlink: 3 bytes leftover after parsing attributes in process `syz.5.924'. [ 203.434866][ T9705] batadv1: entered promiscuous mode [ 203.436847][ T9705] batadv1: entered allmulticast mode [ 203.441224][ T9705] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 203.444772][ T9705] bond1: (slave batadv1): making interface the new active one [ 203.449654][ T9705] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 204.057173][ T5938] usb 7-1: USB disconnect, device number 9 [ 204.200573][ T9713] netlink: 16 bytes leftover after parsing attributes in process `syz.2.928'. [ 204.283279][ T39] kauditd_printk_skb: 15 callbacks suppressed [ 204.283293][ T39] audit: type=1326 audit(1734531769.694:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9712 comm="syz.2.928" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f98579 code=0x0 [ 204.496935][ T9718] overlayfs: failed to resolve './file0': -2 [ 206.322573][ T9760] netlink: 4 bytes leftover after parsing attributes in process `syz.5.938'. [ 206.337484][ T9760] netlink: 4 bytes leftover after parsing attributes in process `syz.5.938'. [ 207.411769][ T9785] binder: 9780:9785 ioctl c0306201 0 returned -14 [ 211.632336][ T39] audit: type=1326 audit(1734531777.044:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9849 comm="syz.5.962" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 211.647225][ T39] audit: type=1326 audit(1734531777.054:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9849 comm="syz.5.962" exe="/syz-executor" sig=0 arch=40000003 syscall=311 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 211.655283][ T5947] Bluetooth: hci2: unexpected Set CIG Parameters response data [ 211.658473][ T5947] Bluetooth: hci2: unexpected event for opcode 0x2062 [ 211.681962][ T39] audit: type=1326 audit(1734531777.054:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9849 comm="syz.5.962" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 211.706595][ T39] audit: type=1326 audit(1734531777.054:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9849 comm="syz.5.962" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 211.716991][ T39] audit: type=1326 audit(1734531777.054:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9849 comm="syz.5.962" exe="/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 211.728232][ T39] audit: type=1326 audit(1734531777.054:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9849 comm="syz.5.962" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 211.764055][ T39] audit: type=1326 audit(1734531777.054:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9849 comm="syz.5.962" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 211.780510][ T39] audit: type=1326 audit(1734531777.054:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9849 comm="syz.5.962" exe="/syz-executor" sig=0 arch=40000003 syscall=15 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 211.820471][ T39] audit: type=1326 audit(1734531777.054:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9849 comm="syz.5.962" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 211.827439][ T39] audit: type=1326 audit(1734531777.054:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9849 comm="syz.5.962" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 212.742331][ T9866] netlink: 28 bytes leftover after parsing attributes in process `syz.0.966'. [ 212.744806][ T9866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.966'. [ 213.300701][ T5947] block nbd5: Receive control failed (result -32) [ 213.329389][ T9881] block nbd5: shutting down sockets [ 215.717128][ T5947] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 215.719485][ T5947] Bluetooth: hci2: Injecting HCI hardware error event [ 215.722855][ T5947] Bluetooth: hci2: hardware error 0x00 [ 216.190300][ T9908] kvm: pic: level sensitive irq not supported [ 216.190778][ T9908] pic_ioport_write: 21 callbacks suppressed [ 216.190787][ T9908] kvm: pic: single mode not supported [ 216.194290][ T9908] kvm: pic: single mode not supported [ 216.196620][ T9908] kvm: pic: single mode not supported [ 216.198360][ T9908] kvm: pic: single mode not supported [ 216.199994][ T9908] kvm: pic: single mode not supported [ 216.201647][ T9908] kvm: pic: single mode not supported [ 216.203294][ T9908] kvm: pic: single mode not supported [ 216.204959][ T9908] kvm: pic: single mode not supported [ 216.207255][ T9908] kvm: pic: single mode not supported [ 216.208912][ T9908] kvm: pic: single mode not supported [ 216.728346][ T39] kauditd_printk_skb: 14 callbacks suppressed [ 216.728359][ T39] audit: type=1326 audit(1734531782.144:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9904 comm="syz.3.976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58579 code=0x7ffc0000 [ 216.744124][ T39] audit: type=1326 audit(1734531782.144:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9904 comm="syz.3.976" exe="/syz-executor" sig=0 arch=40000003 syscall=311 compat=1 ip=0xf7f58579 code=0x7ffc0000 [ 216.765023][ T39] audit: type=1326 audit(1734531782.144:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9904 comm="syz.3.976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58579 code=0x7ffc0000 [ 216.776222][ T39] audit: type=1326 audit(1734531782.144:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9904 comm="syz.3.976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58579 code=0x7ffc0000 [ 216.787908][ T39] audit: type=1326 audit(1734531782.144:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9904 comm="syz.3.976" exe="/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf7f58579 code=0x7ffc0000 [ 216.797960][ T39] audit: type=1326 audit(1734531782.144:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9904 comm="syz.3.976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58579 code=0x7ffc0000 [ 216.824230][ T39] audit: type=1326 audit(1734531782.144:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9904 comm="syz.3.976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58579 code=0x7ffc0000 [ 216.830567][ T39] audit: type=1326 audit(1734531782.144:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9904 comm="syz.3.976" exe="/syz-executor" sig=0 arch=40000003 syscall=15 compat=1 ip=0xf7f58579 code=0x7ffc0000 [ 216.836282][ T39] audit: type=1326 audit(1734531782.144:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9904 comm="syz.3.976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58579 code=0x7ffc0000 [ 216.842070][ T39] audit: type=1326 audit(1734531782.144:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9904 comm="syz.3.976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58579 code=0x7ffc0000 [ 217.805226][ T5947] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 218.585150][ T63] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 218.745172][ T63] usb 10-1: Using ep0 maxpacket: 8 [ 218.751313][ T63] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 218.753459][ T63] usb 10-1: config 0 has no interface number 0 [ 218.757043][ T63] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 218.760237][ T63] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 218.762988][ T63] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.770449][ T63] usb 10-1: config 0 descriptor?? [ 218.775831][ T63] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 219.186981][ T9953] netlink: 44 bytes leftover after parsing attributes in process `syz.3.991'. [ 219.190098][ T9953] netlink: 59 bytes leftover after parsing attributes in process `syz.3.991'. [ 220.039343][ T6019] usb 10-1: USB disconnect, device number 3 [ 220.248516][ T9982] netlink: 28 bytes leftover after parsing attributes in process `syz.3.994'. [ 220.251000][ T9982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.994'. [ 220.263287][ T9985] kvm: pic: level sensitive irq not supported [ 221.754345][ T9659] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 221.908894][ T9659] usb 5-1: Using ep0 maxpacket: 8 [ 221.916581][ T9659] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.919476][ T9659] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.921988][ T9659] usb 5-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 221.924622][ T9659] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.930583][ T9659] usb 5-1: config 0 descriptor?? [ 221.937277][ T9659] usbhid 5-1:0.0: can't add hid device: -22 [ 221.939271][ T9659] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 222.266085][ T9] usb 5-1: USB disconnect, device number 8 [ 222.925131][ T9659] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 223.079078][ T9659] usb 8-1: config 0 has no interfaces? [ 223.080810][ T9659] usb 8-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 223.083271][ T9659] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.086930][ T9659] usb 8-1: config 0 descriptor?? [ 223.346965][T10022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.351211][T10022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.358595][T10017] usb usb9: usbfs: process 10017 (syz.3.1012) did not claim interface 0 before use [ 223.469752][ T9659] usb 8-1: USB disconnect, device number 9 [ 224.285205][ T5938] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 224.435286][ T5938] usb 8-1: Using ep0 maxpacket: 8 [ 224.438059][ T5938] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 224.440533][ T5938] usb 8-1: config 0 has no interface number 0 [ 224.442322][ T5938] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 224.445448][ T5938] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 224.447809][ T5938] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.452102][ T5938] usb 8-1: config 0 descriptor?? [ 224.458128][ T5938] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 224.657062][T10044] syz_tun: left allmulticast mode [ 224.658508][T10044] syz_tun: left promiscuous mode [ 224.659900][T10044] bridge0: port 2(syz_tun) entered disabled state [ 224.663692][T10044] bridge_slave_0: left allmulticast mode [ 224.665334][T10044] bridge_slave_0: left promiscuous mode [ 224.666856][T10044] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.669826][T10044] bridge_slave_1: left allmulticast mode [ 224.671312][T10044] bridge_slave_1: left promiscuous mode [ 224.672668][T10044] bridge2: port 2(bridge_slave_1) entered disabled state [ 224.676437][T10044] bond0: (slave bond_slave_0): Releasing backup interface [ 224.679372][T10044] bond0: (slave bond_slave_1): Releasing backup interface [ 224.686572][T10044] team0: Port device team_slave_0 removed [ 224.692025][T10044] team0: Port device team_slave_1 removed [ 224.693740][T10044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.697025][T10044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.699385][T10044] veth3: left allmulticast mode [ 224.700681][T10044] veth3: left promiscuous mode [ 224.702061][T10044] bridge2: port 1(veth3) entered disabled state [ 224.736738][T10044] team0: Port device wg2 added [ 225.730643][ T5938] usb 8-1: USB disconnect, device number 10 [ 226.235736][ T5938] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 226.395123][ T5938] usb 10-1: Using ep0 maxpacket: 8 [ 226.406279][ T5938] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.414896][ T5938] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.418841][ T5938] usb 10-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 226.422661][ T5938] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.432684][ T5938] usb 10-1: config 0 descriptor?? [ 226.440932][ T5938] usbhid 10-1:0.0: can't add hid device: -22 [ 226.443140][ T5938] usbhid 10-1:0.0: probe with driver usbhid failed with error -22 [ 226.717268][ T5938] usb 10-1: USB disconnect, device number 4 [ 227.195126][ T30] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 227.367203][ T30] usb 5-1: config 0 has no interfaces? [ 227.368895][ T30] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 227.374603][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.381803][ T30] usb 5-1: config 0 descriptor?? [ 227.438872][ T39] kauditd_printk_skb: 13 callbacks suppressed [ 227.438883][ T39] audit: type=1326 audit(1734531792.854:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.5.1020" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 227.448281][ T39] audit: type=1326 audit(1734531792.854:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.5.1020" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 227.453911][ T39] audit: type=1326 audit(1734531792.854:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.5.1020" exe="/syz-executor" sig=0 arch=40000003 syscall=311 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 227.459801][ T39] audit: type=1326 audit(1734531792.854:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.5.1020" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 227.466561][ T39] audit: type=1326 audit(1734531792.854:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.5.1020" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 227.474527][ T39] audit: type=1326 audit(1734531792.854:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.5.1020" exe="/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 227.480460][ T39] audit: type=1326 audit(1734531792.854:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.5.1020" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 227.486308][ T39] audit: type=1326 audit(1734531792.854:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.5.1020" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 227.491925][ T39] audit: type=1326 audit(1734531792.854:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.5.1020" exe="/syz-executor" sig=0 arch=40000003 syscall=15 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 227.497879][ T39] audit: type=1326 audit(1734531792.854:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.5.1020" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 227.640775][T10094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.644981][T10094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.655761][T10094] usb usb9: usbfs: process 10094 (syz.0.1018) did not claim interface 0 before use [ 227.731136][ T5938] usb 5-1: USB disconnect, device number 9 [ 227.934288][T10099] bridge_slave_0: left allmulticast mode [ 227.936030][T10099] bridge_slave_0: left promiscuous mode [ 227.937609][T10099] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.944336][T10099] bridge_slave_1: left allmulticast mode [ 227.948835][T10099] bridge_slave_1: left promiscuous mode [ 227.950389][T10099] bridge1: port 1(bridge_slave_1) entered disabled state [ 227.954402][T10099] bond0: (slave bond_slave_0): Releasing backup interface [ 227.958720][T10099] bond0: (slave bond_slave_1): Releasing backup interface [ 227.971370][T10099] team0: Port device team_slave_0 removed [ 227.979454][T10099] team0: Port device team_slave_1 removed [ 227.981305][T10099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.983413][T10099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.987835][T10099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.989834][T10099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.024622][T10101] team0: Port device wg2 added [ 230.675808][ T63] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 230.835158][ T63] usb 8-1: Using ep0 maxpacket: 8 [ 230.839231][ T63] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 230.841253][ T63] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 230.844290][ T63] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 230.847400][ T63] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 230.851296][ T63] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 230.855803][ T63] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 230.857772][ T63] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 230.861324][ T63] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 230.864327][ T63] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 230.867827][ T63] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 230.873325][ T63] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 230.875284][ T63] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 230.879057][ T63] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 230.881809][ T63] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 230.884696][ T63] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 230.890968][ T63] usb 8-1: string descriptor 0 read error: -22 [ 230.892609][ T63] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 230.894938][ T63] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.899632][ T63] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 231.285099][ T30] usb 8-1: USB disconnect, device number 11 [ 231.294576][T10166] adutux: No device or device unplugged -19 [ 234.252518][T10214] [U] [ 234.253293][T10214] [U] [ 234.254067][T10214] [U] [ 234.254874][T10214] [U] [ 234.256047][T10214] [U] [ 234.256841][T10214] [U] [ 234.257640][T10214] [U] [ 234.258402][T10214] [U] [ 234.265368][T10214] [U] [ 234.266179][T10214] [U] [ 234.266905][T10214] [U] [ 234.267676][T10214] [U] [ 234.269183][T10214] [U] [ 234.269972][T10214] [U] [ 234.270699][T10214] [U] [ 234.271502][T10214] [U] [ 234.272445][T10214] [U] [ 234.273191][T10214] [U] [ 234.273970][T10214] [U] [ 234.274712][T10214] [U] [ 234.279011][T10214] [U] [ 234.279811][T10214] [U] [ 234.280776][T10214] [U] [ 234.281806][T10214] [U] [ 234.282856][T10214] [U] [ 234.283787][T10214] [U] [ 234.284528][T10214] [U] [ 234.285294][T10214] [U] [ 234.291236][T10214] [U] [ 234.292291][T10214] [U] [ 234.293046][T10214] [U] [ 234.293921][T10214] [U] [ 234.294984][T10214] [U] [ 234.296001][T10214] [U] [ 234.297020][T10214] [U] [ 234.298051][T10214] [U] [ 234.299381][T10214] [U] [ 234.300418][T10214] [U] [ 234.301449][T10214] [U] [ 234.302481][T10214] [U] [ 234.307303][T10214] [U] [ 234.308123][T10214] [U] [ 234.308897][T10214] [U] [ 234.309662][T10214] [U] [ 234.311384][T10214] [U] [ 234.311401][T10216] netlink: 'syz.0.1050': attribute type 27 has an invalid length. [ 234.312128][T10214] [U] [ 234.315102][T10214] [U] [ 234.315833][T10214] [U] [ 234.362936][T10214] [U] [ 234.364044][T10214] [U] [ 234.365095][T10214] [U] [ 234.366134][T10214] [U] [ 234.368376][T10214] [U] [ 234.369451][T10214] [U] [ 234.370490][T10214] [U] [ 234.371515][T10214] [U] [ 234.372751][T10214] [U] [ 234.373800][T10214] [U] [ 234.374840][T10214] [U] [ 234.375872][T10214] [U] [ 234.377046][T10214] [U] [ 234.378113][T10214] [U] [ 234.379136][T10214] [U] [ 234.380161][T10214] [U] [ 234.381216][T10214] [U] [ 234.382264][T10214] [U] [ 234.383303][T10214] [U] [ 234.384375][T10214] [U] [ 234.386119][T10214] [U] [ 234.387171][T10214] [U] [ 234.388240][T10214] [U] [ 234.389275][T10214] [U] [ 234.390389][T10214] [U] [ 234.391420][T10214] [U] [ 234.392447][T10214] [U] [ 234.393620][T10214] [U] [ 234.394426][T10214] [U] [ 234.395215][T10214] [U] [ 234.396047][T10214] [U] [ 234.396785][T10214] [U] [ 234.398538][T10214] [U] [ 234.399279][T10214] [U] [ 234.400009][T10214] [U] [ 234.400734][T10214] [U] [ 234.401523][T10214] [U] [ 234.402255][T10214] [U] [ 234.402987][T10214] [U] [ 234.403726][T10214] [U] [ 234.404521][T10214] [U] [ 234.405265][T10214] [U] [ 234.406030][T10214] [U] [ 234.406757][T10214] [U] [ 234.408255][T10214] [U] [ 234.409000][T10214] [U] [ 234.409746][T10214] [U] [ 234.410477][T10214] [U] [ 234.411219][T10214] [U] [ 234.411942][T10214] [U] [ 234.412666][T10214] [U] [ 234.413391][T10214] [U] [ 234.414140][T10214] [U] [ 234.414865][T10214] [U] [ 234.415601][T10214] [U] [ 234.416328][T10214] [U] [ 234.417705][T10214] [U] [ 234.418463][T10214] [U] [ 234.419193][T10214] [U] [ 234.419922][T10214] [U] [ 234.420753][T10214] [U] [ 234.421509][T10214] [U] [ 234.422236][T10214] [U] [ 234.422960][T10214] [U] [ 234.423701][T10214] [U] [ 234.424448][T10214] [U] [ 234.425180][T10214] [U] [ 234.425929][T10214] [U] [ 234.427731][T10214] [U] [ 234.428390][T10214] [U] [ 234.429094][T10214] [U] [ 234.429843][T10214] [U] [ 234.430592][T10214] [U] [ 234.431335][T10214] [U] [ 234.432080][T10214] [U] [ 234.432810][T10214] [U] [ 234.433711][T10214] [U] [ 234.434456][T10214] [U] [ 234.435213][T10214] [U] [ 234.570381][T10216] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.572732][T10216] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.579269][T10216] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.581897][T10216] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.595181][ T6019] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 234.641698][T10214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.644565][T10214] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.650713][T10214] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 234.697749][T10212] [U] [ 234.746330][ T6019] usb 10-1: config 0 has no interfaces? [ 234.747854][ T6019] usb 10-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 234.750213][ T6019] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.755485][ T6019] usb 10-1: config 0 descriptor?? [ 235.024443][T10229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.026863][T10229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.037218][T10229] usb usb9: usbfs: process 10229 (syz.5.1051) did not claim interface 0 before use [ 235.097659][ T1328] usb 10-1: USB disconnect, device number 5 [ 238.097279][T10268] veth1_vlan: left promiscuous mode [ 240.635341][ T9] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 240.795302][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 240.800330][ T9] usb 10-1: config index 0 descriptor too short (expected 5924, got 36) [ 240.803274][ T9] usb 10-1: config 250 has an invalid interface number: 228 but max is -1 [ 240.806305][ T9] usb 10-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 240.809793][ T9] usb 10-1: config 250 has no interface number 0 [ 240.812069][ T9] usb 10-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 240.816240][ T9] usb 10-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 240.820156][ T9] usb 10-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 240.823400][ T9] usb 10-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 240.826381][ T9] usb 10-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 240.830582][ T9] usb 10-1: config 250 interface 228 has no altsetting 0 [ 240.834652][ T9] usb 10-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 240.837847][ T9] usb 10-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 240.840858][ T9] usb 10-1: Product: syz [ 240.842321][ T9] usb 10-1: SerialNumber: syz [ 240.855970][ T9] hub 10-1:250.228: bad descriptor, ignoring hub [ 240.858161][ T9] hub 10-1:250.228: probe with driver hub failed with error -5 [ 241.063122][ T9] usblp 10-1:250.228: usblp0: USB Bidirectional printer dev 6 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 241.967055][T10293] usb 10-1: reset high-speed USB device number 6 using dummy_hcd [ 242.635413][ T9659] usb 10-1: USB disconnect, device number 6 [ 242.639144][ T9659] usblp0: removed [ 243.168979][T10438] syz.0.1083: attempt to access beyond end of device [ 243.168979][T10438] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 243.173605][T10438] FAT-fs (nbd0): unable to read boot sector [ 243.435247][ T63] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 243.585226][ T63] usb 7-1: Using ep0 maxpacket: 8 [ 243.590630][ T63] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 243.592841][ T63] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 243.595651][ T63] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 243.598193][ T63] usb 7-1: config 250 has no interface number 0 [ 243.603208][ T63] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 243.607260][ T63] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 243.611010][ T63] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 243.614085][ T63] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 243.619453][ T63] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 243.623026][ T63] usb 7-1: config 250 interface 228 has no altsetting 0 [ 243.627718][ T63] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 243.630930][ T63] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 243.633887][ T63] usb 7-1: Product: syz [ 243.638242][ T63] usb 7-1: SerialNumber: syz [ 243.655976][ T63] hub 7-1:250.228: bad descriptor, ignoring hub [ 243.657767][ T63] hub 7-1:250.228: probe with driver hub failed with error -5 [ 243.864397][ T63] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 10 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 244.496842][T10433] usb 7-1: reset high-speed USB device number 10 using dummy_hcd [ 245.216286][ T9659] usb 7-1: USB disconnect, device number 10 [ 245.219462][ T9659] usblp0: removed [ 246.111155][T10471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1082'. [ 246.124279][T10471] bond2: entered promiscuous mode [ 246.126519][T10471] 8021q: adding VLAN 0 to HW filter on device bond2 [ 246.224039][T10476] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1082'. [ 246.234093][T10476] batadv1: entered promiscuous mode [ 246.236012][T10476] batadv1: entered allmulticast mode [ 246.241822][T10476] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 246.247194][T10476] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 246.626052][ T5947] block nbd3: Receive control failed (result -107) [ 246.646689][T10481] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 246.659837][T10481] kvm: pic: level sensitive irq not supported [ 246.660103][T10481] kvm: pic: non byte read [ 246.742823][T10479] syz.3.1086: attempt to access beyond end of device [ 246.742823][T10479] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 246.746993][T10484] nbd3: detected capacity change from 0 to 20 [ 246.752108][T10479] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 246.754955][ T8469] block nbd3: Dead connection, failed to find a fallback [ 246.756963][ T8469] block nbd3: shutting down sockets [ 246.758735][ T8469] blk_print_req_error: 90 callbacks suppressed [ 246.758746][ T8469] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.760628][T10479] I/O error, dev nbd3, sector 18 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.761044][ T8469] buffer_io_error: 90 callbacks suppressed [ 246.761056][ T8469] Buffer I/O error on dev nbd3, logical block 0, async page read [ 246.764168][T10479] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=9, location=9 [ 246.772749][ T8469] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.775582][ T8469] Buffer I/O error on dev nbd3, logical block 1, async page read [ 246.776612][T10479] I/O error, dev nbd3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.777826][ T8469] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.780155][T10479] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8, location=8 [ 246.782451][ T8469] Buffer I/O error on dev nbd3, logical block 2, async page read [ 246.788317][T10479] I/O error, dev nbd3, sector 14 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.790739][T10479] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=7, location=7 [ 246.793128][T10479] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 246.801484][ T8469] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.803901][ T8469] Buffer I/O error on dev nbd3, logical block 3, async page read [ 246.809817][ T8469] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.812189][ T8469] Buffer I/O error on dev nbd3, logical block 0, async page read [ 246.814259][ T8469] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.818122][ T8469] Buffer I/O error on dev nbd3, logical block 1, async page read [ 246.820245][ T8469] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.822631][ T8469] Buffer I/O error on dev nbd3, logical block 2, async page read [ 246.824740][ T8469] Buffer I/O error on dev nbd3, logical block 3, async page read [ 246.829226][T10479] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 246.831867][T10479] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=4, location=4 [ 246.834366][ T8469] Buffer I/O error on dev nbd3, logical block 0, async page read [ 246.838140][T10479] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=3, location=3 [ 246.840566][T10479] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=2, location=2 [ 246.843187][T10479] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 246.845226][ T8469] Buffer I/O error on dev nbd3, logical block 1, async page read [ 246.850091][ T8469] ldm_validate_partition_table(): Disk read failed. [ 246.850331][T10479] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 246.852038][ T8469] Dev nbd3: unable to read RDB block 0 [ 246.855529][T10479] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=1, location=1 [ 246.857507][ T8469] nbd3: unable to read partition table [ 246.858250][T10479] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=0, location=0 [ 246.859725][ T8469] nbd3: partition table beyond EOD, [ 246.862004][T10479] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 246.862021][ T8469] truncated [ 246.867010][T10479] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 246.870062][ T8469] ldm_validate_partition_table(): Disk read failed. [ 246.871986][ T8469] Dev nbd3: unable to read RDB block 0 [ 246.873577][ T8469] nbd3: unable to read partition table [ 246.875268][ T8469] nbd3: partition table beyond EOD, truncated [ 248.375319][ T6019] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 248.545256][ T6019] usb 5-1: Using ep0 maxpacket: 8 [ 248.549933][ T6019] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 248.557020][ T6019] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 248.563590][ T6019] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 248.572195][ T6019] usb 5-1: config 250 has no interface number 0 [ 248.578273][ T6019] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 248.583494][ T6019] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 248.587087][ T6019] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 248.595388][ T6019] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 248.598268][ T6019] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 248.601847][ T6019] usb 5-1: config 250 interface 228 has no altsetting 0 [ 248.608942][ T6019] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 248.611540][ T6019] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 248.614331][ T6019] usb 5-1: Product: syz [ 248.616213][ T6019] usb 5-1: SerialNumber: syz [ 248.635019][ T6019] hub 5-1:250.228: bad descriptor, ignoring hub [ 248.636936][ T6019] hub 5-1:250.228: probe with driver hub failed with error -5 [ 248.865566][ T6019] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 10 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 249.245280][ T5938] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 249.495572][ T5938] usb 7-1: Using ep0 maxpacket: 8 [ 249.506588][ T5938] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 249.508498][ T5938] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 249.511216][ T5938] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 249.514580][ T5938] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 249.518122][ T5938] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 249.524215][ T5938] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 249.526437][ T5938] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 249.529639][ T5938] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 249.532715][ T5938] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 249.535997][ T5938] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 249.541485][ T5938] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 249.543466][ T5938] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 249.546582][ T5938] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 249.549426][ T5938] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 249.552314][ T5938] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 249.559282][ T5938] usb 7-1: string descriptor 0 read error: -22 [ 249.560999][ T5938] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 249.563753][ T5938] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.690878][T10524] usb 5-1: reset high-speed USB device number 10 using dummy_hcd [ 249.846834][T10552] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 249.935318][T10557] input: syz1 as /devices/virtual/input/input10 [ 250.052924][ T5938] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 250.057178][ T5938] usb 7-1: USB disconnect, device number 11 [ 250.354692][T10580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1107'. [ 250.357672][T10580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1107'. [ 250.365254][ T30] usb 5-1: USB disconnect, device number 10 [ 250.368414][ T30] usblp0: removed [ 251.239410][T10607] input: syz0 as /devices/virtual/input/input11 [ 255.015448][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.017150][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.316190][ T25] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 270.386253][T10685] vim2m vim2m.0: vidioc_s_fmt queue busy [ 273.511397][T10752] netlink: 70 bytes leftover after parsing attributes in process `syz.3.1142'. [ 273.513833][T10752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1142'. [ 273.534812][ T39] kauditd_printk_skb: 16 callbacks suppressed [ 273.534846][ T39] audit: type=1326 audit(1734531838.944:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10751 comm="syz.3.1142" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f58579 code=0x0 [ 274.035681][ T9659] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 275.275141][ T9659] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 275.447696][ T9659] usb 7-1: config 0 has no interfaces? [ 275.449838][ T9659] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 275.453096][ T9659] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.472768][ T9659] usb 7-1: config 0 descriptor?? [ 275.558570][T10809] [U] [ 275.563488][T10809] [U] [ 275.565241][T10809] [U] B-LRJ[Ćќ6}%4̾ H@K-YLEU@F%PEZE,9F* [ 275.569336][T10809] [U] CW* 9JQ#ESWCV1! GPX [ 275.572158][T10809] [U] N%9C_NʅBC$4( [ 275.575936][T10809] [U] H Q؛TORI#ıTNBS_RЬƫ:؀ɦTȯ 0ÏWڙ_[HN% [ 275.579214][T10809] [U] Ϡ4RЛ<)6JG؃K^R\ [ 275.581383][T10809] [U] 7R:J37 [ 275.596460][T10809] [U] YP<ԅUH3 ư-̤\PQBX!Q6SO'}[P5O>D֎YJ>|H0=ԷTXZY֦ʢĚ4IǢ5AZ~ZA~K^TGSJI:OD!M2KWR>ƈΗKC?X8H*@QEۻU .J9ȓ~{`'R)-Ǭ=5֝JLY CB;+LP,FNY%3P&)][ȋ4Lö!J> [ 275.604342][T10809] [U] .”C֯EJJ@KJ605RXUTTO&XO֕\&N%Y176`IW [ 275.607694][T10809] [U] M<@NKJ(6))VLR [ 275.610469][T10809] [U] >YG Z?`OMX؍Ӈ"9+DE{Ō$~BYDUME!XݛAAU}J£2N%MBQ [ 275.613637][T10809] [U] WVW@HZ=(EJ~OS@BH:"!JIUJ=)ΎU GԖ=Y=KADR:=SAX X [ 275.626804][T10809] [U] BIޙE}ET@3( V{κ~UK+{3T$ƻ.N[8Sʇ""ʔ̺]RG5 [ 275.629728][T10809] [U] V{ըVNB>DMTQT [ 275.631537][T10809] [U] G*|9ٺņ [ 275.632751][T10809] [U] GMIUE! Tό*ߐ8A7I5-|6LK [ 275.638441][T10809] [U] NūD  S}RBYWIOQ&O,P],7͛UI [ 275.646961][T10809] [U] $LU2F_3+|NWµZEǗP1W~N(O͝8D SCDʮF65ZGRް{TK"@ :5}GBDѸ\K [ 275.665662][T10809] [U] Yҟ844N<; [ 275.668350][T10809] [U] UI7X#E4VMLȋG͔A)-(N̗NL#)׌SU6 [ 275.671294][T10809] [U] )<E?AUܤ9 %]DCCE+L<'T1Kȅ3.ɻ WSZYϼ9I>]Ȝ}{/`ܿ5'E 41 TNAX߿ʯϭQëI T%G7L~BS [ 275.678539][T10809] [U] ͢ [ 275.688624][T10809] [U] ZUĪ4&˙E~8Eσ1L{ȨGVY$PNO4M*F`ATM0?*I#;Ѥ+4VGAݬ%H[AYX)LG]F H|ZVE/ϧ17Ǭ-ǽHO+^)8&E@A8G˅-WRS-V-ұO>ŝQ#9UAH)FSA֙INZ@C>KLVD^1)M$/Є78..QA|Ȧ)9">D>E#I`\|{UFH.. EMW}]5 -,ŢRK}FQCO*PNF [ 275.697897][T10809] [U]  [ 275.700515][T10809] [U] T0ԝ*հXAɣA4WKC]X]L= [ 275.703546][T10809] [U] $CUGSEԲ6TτPP˒Z3T2ȍ9W-֑̙ARݻNBڎ:^XϧB̲~{J [ 275.710417][ T9659] usb 7-1: USB disconnect, device number 12 [ 275.730296][T10809] [U] T̷E' 2L*A -;P;BT.N`_Ӯ;*U;5C#R/QK*MSA#)AB>YؐO\;^'O5_YHLCE&A`;œԸЕSSƇ{H TM0BI^L>8٢VV8<-{$>D ý]WU0?K ˼ڹ[UIRB_IL/ESI*WS*ZS͎ђ [ 275.737130][T10809] [U] [ 276.362444][T10803] [U] [ 284.020885][T10834] loop7: detected capacity change from 0 to 16384 [ 284.048105][T10839] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1156'. [ 284.065211][T10834] loop7: detected capacity change from 16384 to 16383 [ 284.243990][T10851] 9pnet: Found fid 0 not clunked [ 284.264700][T10853] syz.5.1160[10853] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 284.264785][T10853] syz.5.1160[10853] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 284.271838][T10853] syz.5.1160[10853] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 286.376001][T10891] netlink: 'syz.5.1169': attribute type 1 has an invalid length. [ 286.381264][T10891] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1169'. [ 286.619676][T10905] wg1 speed is unknown, defaulting to 1000 [ 286.622988][T10905] wg1 speed is unknown, defaulting to 1000 [ 286.626486][T10905] wg1 speed is unknown, defaulting to 1000 [ 286.691223][T10905] infiniband syz2: set active [ 286.693985][T10905] infiniband syz2: added wg1 [ 286.696719][ T64] wg1 speed is unknown, defaulting to 1000 [ 286.725807][T10905] RDS/IB: syz2: added [ 286.727695][T10905] smc: adding ib device syz2 with port count 1 [ 286.729496][T10905] smc: ib device syz2 port 1 has pnetid [ 286.734808][ T5993] wg1 speed is unknown, defaulting to 1000 [ 286.739887][T10905] wg1 speed is unknown, defaulting to 1000 [ 286.788692][T10905] wg1 speed is unknown, defaulting to 1000 [ 286.836434][T10905] wg1 speed is unknown, defaulting to 1000 [ 286.875160][T10905] wg1 speed is unknown, defaulting to 1000 [ 286.911553][T10905] wg1 speed is unknown, defaulting to 1000 [ 286.948154][T10905] wg1 speed is unknown, defaulting to 1000 [ 287.437277][T10953] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 287.449183][T10953] kvm: pic: level sensitive irq not supported [ 287.449501][T10953] kvm: pic: non byte read [ 287.453613][T10953] kvm: pic: level sensitive irq not supported [ 287.453993][T10953] kvm: pic: non byte read [ 287.458297][T10953] kvm: pic: level sensitive irq not supported [ 287.458541][T10953] kvm: pic: non byte read [ 288.497850][T10970] 9pnet_fd: Insufficient options for proto=fd [ 289.217922][T10978] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 289.271369][ T39] audit: type=1800 audit(1734531854.684:340): pid=10979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1184" name="file0" dev="9p" ino=37617963 res=0 errno=0 [ 289.282696][T10979] netfs: Couldn't get user pages (rc=-14) [ 289.289123][T10981] netlink: 'syz.0.1186': attribute type 4 has an invalid length. [ 289.291200][T10981] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1186'. [ 291.078651][T11011] netlink: 'syz.2.1196': attribute type 1 has an invalid length. [ 291.081836][T11011] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1196'. [ 291.206557][T11024] netlink: 'syz.5.1197': attribute type 4 has an invalid length. [ 291.208837][T11024] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1197'. [ 291.713581][T11040] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 292.025543][ T25] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 293.933835][T11083] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1209'. [ 302.448484][ T25] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 304.863989][T11164] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1221'. [ 313.092675][T11210] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 314.984850][T11259] block device autoloading is deprecated and will be removed. [ 314.988580][T11259] syz.3.1241: attempt to access beyond end of device [ 314.988580][T11259] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 316.438333][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.035277][ T6019] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 317.196264][ T6019] usb 5-1: config index 0 descriptor too short (expected 25183, got 18) [ 317.198648][ T6019] usb 5-1: config 116 has too many interfaces: 121, using maximum allowed: 32 [ 317.201119][ T6019] usb 5-1: config 116 has an invalid descriptor of length 0, skipping remainder of the config [ 317.203847][ T6019] usb 5-1: config 116 has 0 interfaces, different from the descriptor's value: 121 [ 317.208117][ T6019] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db59, bcdDevice=e9.9b [ 317.210593][ T6019] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.212734][ T6019] usb 5-1: Product: syz [ 317.213902][ T6019] usb 5-1: Manufacturer: syz [ 317.215191][ T6019] usb 5-1: SerialNumber: syz [ 317.548528][T11321] syz.2.1266[11321] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 317.548605][T11321] syz.2.1266[11321] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 317.552758][T11321] syz.2.1266[11321] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 317.678955][ T6019] usb 5-1: USB disconnect, device number 11 [ 317.870208][T11331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1259'. [ 318.021891][T11334] pimreg: entered allmulticast mode [ 318.513029][T11346] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 320.504144][T11373] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1272'. [ 320.618661][T11373] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1272'. [ 320.816351][ T39] audit: type=1326 audit(1734531886.234:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11376 comm="syz.5.1273" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x0 [ 322.754172][T11412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1285'. [ 322.974026][T11422] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 322.974026][T11422] program syz.0.1292 not setting count and/or reply_len properly [ 323.191474][T11423] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1283'. [ 324.001178][T11435] syz.2.1291: attempt to access beyond end of device [ 324.001178][T11435] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 324.190675][ T9659] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 324.346919][ T9659] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 324.349103][ T9659] usb 5-1: config 0 has no interface number 0 [ 324.350725][ T9659] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 324.355658][ T9659] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 324.358851][ T9659] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 324.363348][ T9659] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 324.366555][ T9659] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 324.369725][ T9659] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 324.372140][ T9659] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.375108][ T9659] usb 5-1: config 0 descriptor?? [ 324.377052][T11433] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 324.380737][ T9659] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 324.646897][ C2] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 324.649374][ T9659] usb 5-1: USB disconnect, device number 12 [ 324.659153][T11433] ldusb 5-1:0.55: Couldn't submit interrupt_out_urb -19 [ 324.662695][T11432] delete_channel: no stack [ 324.662922][ T9659] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 325.852196][T11474] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1301'. [ 325.963965][T11478] syz.5.1302: attempt to access beyond end of device [ 325.963965][T11478] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 326.301262][T11490] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 326.303654][T11490] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 326.757158][T11497] wg1 speed is unknown, defaulting to 1000 [ 326.984268][T11506] can0: slcan on ttyS3. [ 327.303702][T11515] random: crng reseeded on system resumption [ 327.815886][T11500] can0 (unregistered): slcan off ttyS3. [ 328.825148][T11582] syz.0.1314: attempt to access beyond end of device [ 328.825148][T11582] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 328.967105][T11595] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1315'. [ 329.949840][T11609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1325'. [ 329.997392][T11609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1325'. [ 331.527125][T11643] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1332'. [ 332.634912][T11670] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 332.634912][T11670] program syz.2.1336 not setting count and/or reply_len properly [ 333.334246][T11681] siw: device registration error -23 [ 334.245136][ T9659] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 334.399144][ T9659] usb 10-1: config index 0 descriptor too short (expected 25183, got 18) [ 334.404029][ T9659] usb 10-1: config 116 has too many interfaces: 121, using maximum allowed: 32 [ 334.407708][ T9659] usb 10-1: config 116 has an invalid descriptor of length 0, skipping remainder of the config [ 334.411814][ T9659] usb 10-1: config 116 has 0 interfaces, different from the descriptor's value: 121 [ 334.421037][ T9659] usb 10-1: New USB device found, idVendor=0fe9, idProduct=db59, bcdDevice=e9.9b [ 334.424303][ T9659] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.429395][ T9659] usb 10-1: Product: syz [ 334.431046][ T9659] usb 10-1: Manufacturer: syz [ 334.433121][ T9659] usb 10-1: SerialNumber: syz [ 334.599148][T11705] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1346'. [ 334.861898][T11711] @: renamed from vlan0 [ 334.874844][T11711] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 334.876696][T11711] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 334.889315][T11711] vhci_hcd vhci_hcd.0: Device attached [ 334.909910][T11711] 9pnet_fd: Insufficient options for proto=fd [ 334.913984][T11711] warning: `syz.2.1348' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 334.930044][T11712] vhci_hcd: connection closed [ 334.950632][ T11] vhci_hcd: stop threads [ 334.954188][ T11] vhci_hcd: release socket [ 334.956167][ T11] vhci_hcd: disconnect device [ 335.180120][ T9659] usb 10-1: USB disconnect, device number 7 [ 335.955289][T11725] can0: slcan on ttyS3. [ 336.195894][T11735] siw: device registration error -23 [ 336.585635][T11717] can0 (unregistered): slcan off ttyS3. [ 337.431254][T11780] netlink: 'syz.5.1358': attribute type 10 has an invalid length. [ 337.439725][T11780] bridge0: entered promiscuous mode [ 337.442007][T11780] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 337.455869][T11780] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1358'. [ 337.494646][T11780] bond0: (slave bridge0): Releasing backup interface [ 337.508532][T11780] bridge0 (unregistering): left promiscuous mode [ 337.747500][T11790] 9pnet_fd: Insufficient options for proto=fd [ 338.144890][T11796] hub 6-0:1.0: USB hub found [ 338.149098][T11796] hub 6-0:1.0: 1 port detected [ 338.381747][T11801] netlink: 'syz.5.1362': attribute type 10 has an invalid length. [ 338.428095][T11801] team0: Device geneve1 is of different type [ 338.836348][ T9659] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 347.042133][T11825] [U] [ 347.042935][T11825] [U] [ 347.043672][T11825] [U] [ 347.044406][T11825] [U] [ 347.049062][T11825] [U] [ 347.049834][T11825] [U] [ 347.050552][T11825] [U] [ 347.051252][T11825] [U] [ 347.051992][T11825] [U] [ 347.052740][T11825] [U] [ 347.053469][T11825] [U] [ 347.054198][T11825] [U] [ 347.064130][T11825] [U] [ 347.064927][T11825] [U] [ 347.065667][T11825] [U] [ 347.066419][T11825] [U] [ 347.072221][T11825] [U] [ 347.073017][T11825] [U] [ 347.073747][T11825] [U] [ 347.074461][T11825] [U] [ 347.080268][T11825] [U] [ 347.081031][T11825] [U] [ 347.081768][T11825] [U] [ 347.082470][T11825] [U] [ 347.083227][T11825] [U] [ 347.083951][T11825] [U] [ 347.084699][T11825] [U] [ 347.085430][T11825] [U] [ 347.086774][T11825] [U] [ 347.087521][T11825] [U] [ 347.088233][T11825] [U] [ 347.088959][T11825] [U] [ 347.089698][T11825] [U] [ 347.090418][T11825] [U] [ 347.091139][T11825] [U] [ 347.091861][T11825] [U] [ 347.092589][T11825] [U] [ 347.093303][T11825] [U] [ 347.094009][T11825] [U] [ 347.094727][T11825] [U] [ 347.100017][T11827] netlink: 'syz.3.1366': attribute type 27 has an invalid length. [ 347.102355][T11825] [U] [ 347.103111][T11825] [U] [ 347.103833][T11825] [U] [ 347.104575][T11825] [U] [ 347.106516][T11825] [U] [ 347.107252][T11825] [U] [ 347.107959][T11825] [U] [ 347.108721][T11825] [U] [ 347.137884][T11825] [U] [ 347.138868][T11825] [U] [ 347.139877][T11825] [U] [ 347.140897][T11825] [U] [ 347.141831][T11825] [U] [ 347.142796][T11825] [U] [ 347.143773][T11825] [U] [ 347.144735][T11825] [U] [ 347.147913][T11825] [U] [ 347.148686][T11825] [U] [ 347.149410][T11825] [U] [ 347.150145][T11825] [U] [ 347.151371][T11825] [U] [ 347.152496][T11825] [U] [ 347.153221][T11825] [U] [ 347.153988][T11825] [U] [ 347.162785][T11825] [U] [ 347.163550][T11825] [U] [ 347.164277][T11825] [U] [ 347.165041][T11825] [U] [ 347.167364][T11825] [U] [ 347.168101][T11825] [U] [ 347.168859][T11825] [U] [ 347.169576][T11825] [U] [ 347.170319][T11825] [U] [ 347.171047][T11825] [U] [ 347.171783][T11825] [U] [ 347.172545][T11825] [U] [ 347.173441][T11825] [U] [ 347.174466][T11825] [U] [ 347.175478][T11825] [U] [ 347.176490][T11825] [U] [ 347.177751][T11825] [U] [ 347.178755][T11825] [U] [ 347.179718][T11825] [U] [ 347.180685][T11825] [U] [ 347.183086][T11825] [U] [ 347.184065][T11825] [U] [ 347.185050][T11825] [U] [ 347.186010][T11825] [U] [ 347.187223][T11825] [U] [ 347.188220][T11825] [U] [ 347.189197][T11825] [U] [ 347.190155][T11825] [U] [ 347.191383][T11825] [U] [ 347.192371][T11825] [U] [ 347.193350][T11825] [U] [ 347.194322][T11825] [U] [ 347.195824][T11825] [U] [ 347.196856][T11825] [U] [ 347.197819][T11825] [U] [ 347.198783][T11825] [U] [ 347.200034][T11825] [U] [ 347.201107][T11825] [U] [ 347.202166][T11825] [U] [ 347.203156][T11825] [U] [ 347.204641][T11825] [U] [ 347.205634][T11825] [U] [ 347.206622][T11825] [U] [ 347.207583][T11825] [U] [ 347.208947][T11825] [U] [ 347.209951][T11825] [U] [ 347.211036][T11825] [U] [ 347.212013][T11825] [U] [ 347.213817][T11825] [U] [ 347.214819][T11825] [U] [ 347.215925][T11825] [U] [ 347.216901][T11825] [U] [ 347.218333][T11825] [U] [ 347.219337][T11825] [U] [ 347.220297][T11825] [U] [ 347.221284][T11825] [U] [ 347.223109][T11825] [U] [ 347.224272][T11825] [U] [ 347.225288][T11825] [U] [ 347.226392][T11825] [U] [ 347.227681][T11825] [U] [ 347.228681][T11825] [U] [ 347.229624][T11825] [U] [ 347.281297][T11827] infiniband syz2: set down [ 347.401683][T11827] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.404224][T11827] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.410300][T11827] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.412964][T11827] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.438865][T11827] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 347.440937][T11827] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 347.461403][T11830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.463769][T11830] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.467248][T11830] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 347.475482][ T5978] wg1 speed is unknown, defaulting to 1000 [ 347.480964][ T5978] wg1 speed is unknown, defaulting to 1000 [ 347.540468][T11824] [U] [ 348.508924][T11855] overlayfs: missing 'lowerdir' [ 349.741700][T11881] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 349.743434][T11881] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 349.755170][T11881] vhci_hcd vhci_hcd.0: Device attached [ 349.922534][T11886] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 349.927948][T11886] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 349.945215][ T6019] vhci_hcd: vhci_device speed not set [ 350.005166][ T6019] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 350.555105][ T5978] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 350.562559][T11898] [ 350.563246][T11898] ====================================================== [ 350.565072][T11898] WARNING: possible circular locking dependency detected [ 350.566891][T11898] 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 Not tainted [ 350.568970][T11898] ------------------------------------------------------ [ 350.571800][T11898] syz.0.1386/11898 is trying to acquire lock: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 350.573400][T11898] ffff8880240830b8 (&eq->sysfs_lock){+.+.}-{4:4}, at: elevator_disable+0xb5/0x490 [ 350.575954][T11898] [ 350.575954][T11898] but task is already holding lock: [ 350.577888][T11898] ffff88804629ec40 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x21c/0x1500 [ 350.580860][T11898] [ 350.580860][T11898] which lock already depends on the new lock. [ 350.580860][T11898] [ 350.583536][T11898] [ 350.583536][T11898] the existing dependency chain (in reverse order) is: [ 350.585864][T11898] [ 350.585864][T11898] -> #4 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 350.588113][T11898] blk_mq_submit_bio+0x1fb6/0x24c0 [ 350.589585][T11898] __submit_bio+0x384/0x540 [ 350.590908][T11898] submit_bio_noacct_nocheck+0x698/0xd70 [ 350.592530][T11898] submit_bio_noacct+0x93a/0x1e20 [ 350.593982][T11898] block_read_full_folio+0x812/0xa50 [ 350.595504][T11898] filemap_read_folio+0xc6/0x2a0 [ 350.596967][T11898] filemap_get_pages+0x155f/0x1be0 [ 350.598438][T11898] filemap_read+0x3ca/0xd70 [ 350.599749][T11898] blkdev_read_iter+0x187/0x480 [ 350.601157][T11898] vfs_read+0x87f/0xbe0 [ 350.602392][T11898] ksys_read+0x12b/0x250 [ 350.603666][T11898] do_syscall_64+0xcd/0x250 [ 350.605033][T11898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.606740][T11898] [ 350.606740][T11898] -> #3 (mapping.invalidate_lock#2){++++}-{4:4}: [ 350.608948][T11898] down_read+0x9a/0x330 [ 350.610187][T11898] page_cache_ra_unbounded+0x173/0x750 [ 350.611741][T11898] page_cache_ra_order+0x8f2/0xc80 [ 350.613213][T11898] filemap_fault+0x14a5/0x2820 [ 350.614601][T11898] __do_fault+0x10a/0x490 [ 350.615876][T11898] do_pte_missing+0x99f/0x3e00 [ 350.617291][T11898] __handle_mm_fault+0x103c/0x2a40 [ 350.618760][T11898] handle_mm_fault+0x3fa/0xaa0 [ 350.620154][T11898] __get_user_pages+0x8d9/0x3b50 [ 350.621591][T11898] __gup_longterm_locked+0x5ff/0x1870 [ 350.623149][T11898] pin_user_pages+0x13f/0x160 [ 350.624517][T11898] xdp_umem_create+0x73c/0x1270 [ 350.625919][T11898] xsk_setsockopt+0x7e7/0xac0 [ 350.627301][T11898] do_sock_setsockopt+0x222/0x480 [ 350.628746][T11898] __sys_setsockopt+0x1a0/0x230 [ 350.630150][T11898] __ia32_sys_setsockopt+0xbc/0x160 [ 350.631631][T11898] __do_fast_syscall_32+0x73/0x120 [ 350.633102][T11898] do_fast_syscall_32+0x32/0x80 [ 350.634501][T11898] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 350.636296][T11898] [ 350.636296][T11898] -> #2 (&mm->mmap_lock){++++}-{4:4}: [ 350.638272][T11898] __might_fault+0x11b/0x190 [ 350.639613][T11898] _copy_from_user+0x29/0xd0 [ 350.640966][T11898] compat_blk_trace_setup+0xc9/0x200 [ 350.642490][T11898] blk_trace_ioctl+0x24a/0x290 [ 350.643882][T11898] compat_blkdev_ioctl+0x13c/0x750 [ 350.645352][T11898] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 350.646891][T11898] __do_fast_syscall_32+0x73/0x120 [ 350.648350][T11898] do_fast_syscall_32+0x32/0x80 [ 350.650051][T11898] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 350.651825][T11898] [ 350.651825][T11898] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}: [ 350.653852][T11898] __mutex_lock+0x19b/0xa60 [ 350.655175][T11898] blk_mq_exit_sched+0xd1/0x310 [ 350.656607][T11898] elevator_exit+0x58/0x80 [ 350.657905][T11898] del_gendisk+0x568/0xad0 [ 350.659253][T11898] nbd_dev_remove+0x3b/0xe0 [ 350.660566][T11898] process_one_work+0x958/0x1b30 [ 350.661988][T11898] worker_thread+0x6c8/0xf00 [ 350.663336][T11898] kthread+0x2c1/0x3a0 [ 350.664557][T11898] ret_from_fork+0x45/0x80 [ 350.665864][T11898] ret_from_fork_asm+0x1a/0x30 [ 350.667272][T11898] [ 350.667272][T11898] -> #0 (&eq->sysfs_lock){+.+.}-{4:4}: [ 350.669192][T11898] __lock_acquire+0x249e/0x3c40 [ 350.670693][T11898] lock_acquire.part.0+0x11b/0x380 [ 350.672164][T11898] __mutex_lock+0x19b/0xa60 [ 350.673482][T11898] elevator_disable+0xb5/0x490 [ 350.674861][T11898] __blk_mq_update_nr_hw_queues+0x41e/0x1500 [ 350.676582][T11898] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 350.678191][T11898] nbd_start_device+0x15b/0xd70 [ 350.679587][T11898] nbd_ioctl+0x21a/0xfd0 [ 350.680848][T11898] compat_blkdev_ioctl+0x2f7/0x750 [ 350.682314][T11898] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 350.683848][T11898] __do_fast_syscall_32+0x73/0x120 [ 350.685326][T11898] do_fast_syscall_32+0x32/0x80 [ 350.686754][T11898] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 350.688535][T11898] [ 350.688535][T11898] other info that might help us debug this: [ 350.688535][T11898] [ 350.691169][T11898] Chain exists of: [ 350.691169][T11898] &eq->sysfs_lock --> mapping.invalidate_lock#2 --> &q->q_usage_counter(io)#49 [ 350.691169][T11898] [ 350.694986][T11898] Possible unsafe locking scenario: [ 350.694986][T11898] [ 350.696940][T11898] CPU0 CPU1 [ 350.698334][T11898] ---- ---- [ 350.699721][T11898] lock(&q->q_usage_counter(io)#49); [ 350.701136][T11898] lock(mapping.invalidate_lock#2); [ 350.703167][T11898] lock(&q->q_usage_counter(io)#49); [ 350.705212][T11898] lock(&eq->sysfs_lock); [ 350.706393][T11898] [ 350.706393][T11898] *** DEADLOCK *** [ 350.706393][T11898] [ 350.708484][T11898] 6 locks held by syz.0.1386/11898: [ 350.709835][T11898] #0: ffff88802400d198 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x151/0xfd0 [ 350.712248][T11898] #1: ffff88802400d0d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x20/0x40 [ 350.715024][T11898] #2: ffff88804629f200 (&q->sysfs_dir_lock){+.+.}-{4:4}, at: __blk_mq_update_nr_hw_queues+0x205/0x1500 [ 350.717915][T11898] #3: ffff88804629f170 (&q->sysfs_lock){+.+.}-{4:4}, at: __blk_mq_update_nr_hw_queues+0x214/0x1500 [ 350.720698][T11898] #4: ffff88804629ec40 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x21c/0x1500 [ 350.723759][T11898] #5: ffff88804629ec78 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x21c/0x1500 [ 350.726880][T11898] [ 350.726880][T11898] stack backtrace: [ 350.728422][T11898] CPU: 3 UID: 0 PID: 11898 Comm: syz.0.1386 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 350.731175][T11898] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 350.733941][T11898] Call Trace: [ 350.734818][T11898] [ 350.735595][T11898] dump_stack_lvl+0x116/0x1f0 [ 350.736857][T11898] print_circular_bug+0x41c/0x610 [ 350.738184][T11898] check_noncircular+0x31a/0x400 [ 350.739481][T11898] ? __pfx_check_noncircular+0x10/0x10 [ 350.740917][T11898] ? save_trace+0x42/0xa10 [ 350.742089][T11898] ? add_lock_to_list+0x17d/0x390 [ 350.743429][T11898] __lock_acquire+0x249e/0x3c40 [ 350.744716][T11898] ? __pfx___lock_acquire+0x10/0x10 [ 350.746079][T11898] ? find_held_lock+0x2d/0x110 [ 350.747355][T11898] lock_acquire.part.0+0x11b/0x380 [ 350.748690][T11898] ? elevator_disable+0xb5/0x490 [ 350.750054][T11898] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 350.751513][T11898] ? rcu_is_watching+0x12/0xc0 [ 350.752786][T11898] ? trace_lock_acquire+0x14e/0x1f0 [ 350.754154][T11898] ? elevator_disable+0xb5/0x490 [ 350.755450][T11898] ? lock_acquire+0x2f/0xb0 [ 350.756664][T11898] ? elevator_disable+0xb5/0x490 [ 350.757961][T11898] __mutex_lock+0x19b/0xa60 [ 350.759149][T11898] ? elevator_disable+0xb5/0x490 [ 350.760455][T11898] ? elevator_disable+0xb5/0x490 [ 350.761749][T11898] ? __pfx___mutex_lock+0x10/0x10 [ 350.763078][T11898] ? __pfx_blk_mq_sched_free_rqs+0x10/0x10 [ 350.764607][T11898] ? mark_held_locks+0x9f/0xe0 [ 350.765866][T11898] ? elevator_disable+0xb5/0x490 [ 350.767185][T11898] elevator_disable+0xb5/0x490 [ 350.768447][T11898] __blk_mq_update_nr_hw_queues+0x41e/0x1500 [ 350.770020][T11898] ? __mutex_trylock_common+0xea/0x250 [ 350.771434][T11898] ? __pfx___mutex_trylock_common+0x10/0x10 [ 350.772988][T11898] ? blk_mq_update_nr_hw_queues+0x20/0x40 [ 350.774468][T11898] ? rcu_is_watching+0x12/0xc0 [ 350.775722][T11898] ? __pfx___blk_mq_update_nr_hw_queues+0x10/0x10 [ 350.777420][T11898] ? blk_mq_update_nr_hw_queues+0x20/0x40 [ 350.778840][T11898] ? __pfx___mutex_lock+0x10/0x10 [ 350.780153][T11898] ? lockdep_hardirqs_on+0x7c/0x110 [ 350.781519][T11898] ? __mutex_lock+0x1cc/0xa60 [ 350.782759][T11898] ? nbd_ioctl+0x151/0xfd0 [ 350.783936][T11898] ? __pfx___mutex_lock+0x10/0x10 [ 350.785254][T11898] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 350.786709][T11898] nbd_start_device+0x15b/0xd70 [ 350.787991][T11898] ? bpf_lsm_capable+0x9/0x10 [ 350.789231][T11898] nbd_ioctl+0x21a/0xfd0 [ 350.790343][T11898] ? __pfx_nbd_ioctl+0x10/0x10 [ 350.791591][T11898] ? __pfx_lock_release+0x10/0x10 [ 350.792906][T11898] ? trace_lock_acquire+0x14e/0x1f0 [ 350.794313][T11898] ? __pfx_nbd_ioctl+0x10/0x10 [ 350.795554][T11898] compat_blkdev_ioctl+0x2f7/0x750 [ 350.796919][T11898] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 350.798381][T11898] ? __fget_files+0x206/0x3a0 [ 350.799613][T11898] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 350.801078][T11898] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 350.802453][T11898] __do_fast_syscall_32+0x73/0x120 [ 350.803794][T11898] do_fast_syscall_32+0x32/0x80 [ 350.805071][T11898] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 350.806786][T11898] RIP: 0023:0xf7f71579 [ 350.807835][T11898] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 350.812781][T11898] RSP: 002b:00000000f50a555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 350.814968][T11898] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ab03 [ 350.817026][T11898] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 350.819059][T11898] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 350.821111][T11898] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 350.823159][T11898] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 350.825219][T11898] [ 350.835754][ T5947] block nbd0: Receive control failed (result -32) [ 350.837511][ T66] block nbd0: Receive control failed (result -32) [ 350.855148][T11882] vhci_hcd: connection reset by peer [ 350.856757][ T12] vhci_hcd: stop threads [ 350.857918][ T12] vhci_hcd: release socket [ 350.859140][ T12] vhci_hcd: disconnect device [ 350.898989][T11898] block nbd0: shutting down sockets [ 350.925144][ T5978] usb 10-1: Using ep0 maxpacket: 32 [ 351.127888][ T5978] usb 10-1: device descriptor read/all, error -71 [ 351.298633][ T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.337175][ T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.397932][ T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.457250][ T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.634197][ T11] bond0 (unregistering): left promiscuous mode [ 351.636496][ T11] bond0 (unregistering): Released all slaves [ 351.642251][ T11] bond1 (unregistering): (slave batadv1): Releasing active interface [ 351.645881][ T11] bond1 (unregistering): Released all slaves [ 351.933816][ T11] batadv_slave_1: left promiscuous mode [ 351.936775][ T11] hsr_slave_0: left promiscuous mode [ 351.938545][ T11] hsr_slave_1: left promiscuous mode [ 351.941046][ T11] veth1_macvtap: left promiscuous mode [ 351.942499][ T11] veth0_macvtap: left promiscuous mode [ 352.470466][ T11] team0 (unregistering): Port device wg2 removed [ 355.155095][ T6019] vhci_hcd: vhci_device speed not set [ 355.294950][ T11] bond1 (unregistering): (slave bridge1): Releasing active interface [ 355.297064][ T11] bond1 (unregistering): (slave bridge1): the permanent HWaddr of slave - a6:01:af:55:8b:8c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 355.372592][ T11] bond1 (unregistering): (slave bridge2): Releasing active interface [ 355.528034][ T11] bond0 (unregistering): Released all slaves [ 355.624229][ T11] bond1 (unregistering): Released all slaves [ 355.746006][ T11] IPVS: stopping backup sync thread 7174 ... [ 355.748172][ T11] IPVS: stopping backup sync thread 7173 ... [ 355.750533][ T11] IPVS: stopping backup sync thread 7172 ... [ 355.752568][ T11] IPVS: stopping backup sync thread 7171 ... [ 355.885920][ T11] hsr_slave_0: left promiscuous mode [ 356.879822][ T11] team0 (unregistering): Port device wg2 removed [ 357.374445][ T11] IPVS: stop unused estimator thread 0... VM DIAGNOSIS: 14:25:16 Registers: info registers vcpu 0 CPU#0 RAX=0000000000e3d75c RBX=0000000000000000 RCX=ffffffff8b1a1819 RDX=ffffed1005686fee RSI=ffffffff8bb16c80 RDI=ffffffff81702e19 RBP=fffffbfff1b52ef8 RSP=ffffffff8da07e20 R8 =0000000000000000 R9 =ffffed1005686fed R10=ffff88802b437f6b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8da977c0 R14=ffffffff901cde90 R15=0000000000000000 RIP=ffffffff8b1a2bff RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c31257f CR3=00000000635d0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004c00000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080010001 RBX=ffff88802b528a30 RCX=ffffffff818ae3cd RDX=ffff88801cedc880 RSI=ffffffff8bb16c80 RDI=0000000000000001 RBP=1ffff920000b41e6 RSP=ffffc900005a0ee8 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=ffffc900005a0ff8 R12=0000000000028a30 R13=ffff88801cedc880 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81994f03 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002e911ffc CR3=00000000266fe000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=0000000000000002 RCX=ffffffff88fa1cab RDX=fffffbfff2039bd3 RSI=0000000000000008 RDI=ffffffff901cde90 RBP=0000000000000000 RSP=ffffc90004f8f798 R8 =0000000000000000 R9 =fffffbfff2039bd2 R10=ffffffff901cde97 R11=0000000000000000 R12=ffff88804d1a4640 R13=ffffc90004f8fd70 R14=0000000000000000 R15=ffff88805d11e028 RIP=ffffffff81fbbc58 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002e9e0ffc CR3=00000000266fe000 CR4=00352ef0 DR0=0000000000000000 DR1=000000000000000a DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851420b5 RDI=ffffffff9a667300 RBP=ffffffff9a6672c0 RSP=ffffc9000d8defd0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000002d R14=ffffffff85142050 R15=0000000000000000 RIP=ffffffff851420df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002e709ffc CR3=000000006ebca000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000ff000000000 0000006600000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000