last executing test programs: 2m59.449155286s ago: executing program 3 (id=3994): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26beeef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f00000001c0)="051a000200", 0x5}], 0x2) 2m59.366329921s ago: executing program 3 (id=3999): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) readv(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/214, 0xd6}], 0x1) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001e0001eb25bd70000000000001"], 0x114}], 0x1}, 0x0) 2m59.207595017s ago: executing program 3 (id=4005): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xd}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c643c, &(0x7f0000000300)={0x0, 0x0, r0}) 2m59.154380568s ago: executing program 3 (id=4007): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1edc01, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x887008, 0x0) 2m59.145351836s ago: executing program 3 (id=4010): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x44}}, 0x0) 2m58.698567267s ago: executing program 3 (id=4012): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x5, 0x2, 0x3}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r2, 0x0, 0x7ffffff5, 0xa, 0x1ff, 0x1}) 2m58.621443672s ago: executing program 32 (id=4012): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x5, 0x2, 0x3}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r2, 0x0, 0x7ffffff5, 0xa, 0x1ff, 0x1}) 1m3.468798292s ago: executing program 2 (id=6687): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4840) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 1m3.270236924s ago: executing program 2 (id=6693): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0x20000006}) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r2, &(0x7f0000000280)={r0, r1, 0x804}) 1m3.211083322s ago: executing program 2 (id=6696): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = syz_io_uring_setup(0x1327, &(0x7f0000000300)={0x0, 0x7303, 0x10100, 0x0, 0x2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x4000, 0x0, 0x0, 0x0) 1m3.206686868s ago: executing program 2 (id=6699): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0xc) 1m3.136915371s ago: executing program 2 (id=6702): ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) r0 = socket(0xa, 0x3, 0x3a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000340)={'pim6reg\x00', 0x2}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) 1m2.999017112s ago: executing program 2 (id=6704): r0 = io_uring_setup(0x560e, &(0x7f0000000a40)={0x0, 0xb589, 0x2, 0x0, 0x3bd}) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) listen(r1, 0x3) accept4(r1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m2.958902167s ago: executing program 33 (id=6704): r0 = io_uring_setup(0x560e, &(0x7f0000000a40)={0x0, 0xb589, 0x2, 0x0, 0x3bd}) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) listen(r1, 0x3) accept4(r1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 37.633955342s ago: executing program 0 (id=7433): r0 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000180)=0xd, 0x4) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000002100)=[{{0x0, 0x0, 0x0}, 0x3ff}], 0x1, 0x62, 0x0) 37.592586343s ago: executing program 0 (id=7434): openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xe099, 0x0, 0x1, 0xb5}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffff9, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) 37.491349133s ago: executing program 0 (id=7435): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x7f) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000010"]) 37.380625778s ago: executing program 0 (id=7436): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 37.380416526s ago: executing program 0 (id=7437): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000900)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 37.24154012s ago: executing program 0 (id=7438): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0x41}]) 37.18867973s ago: executing program 34 (id=7438): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0x41}]) 8.724480195s ago: executing program 6 (id=8154): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x68}}, 0x0) 8.665569433s ago: executing program 6 (id=8155): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r0, &(0x7f0000000980)=[{&(0x7f0000000500)="be81", 0x2}], 0x1, 0x5, 0xa, 0x14) 8.665329138s ago: executing program 6 (id=8156): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 8.562068858s ago: executing program 6 (id=8157): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x48) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x227) 8.494407834s ago: executing program 6 (id=8158): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xa, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x2, 0x0, 0x0, 0x41000}, 0x94) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x53) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r1, 0x68ae}, 0x8) 8.272967729s ago: executing program 6 (id=8160): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.219079164s ago: executing program 35 (id=8160): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.42878197s ago: executing program 7 (id=8273): bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, &(0x7f00000000c0)) 3.356747738s ago: executing program 7 (id=8275): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x28}}, 0x48080) 3.356409727s ago: executing program 7 (id=8277): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@local, 0x0, r1}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@mcast2, @rand_addr=' \x01\x00', @private2, 0x0, 0x0, 0x0, 0x0, 0x20, 0xa0022, r1}) 3.341689583s ago: executing program 7 (id=8280): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0xb72, 0x4, 0x6, 0x68e}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) 3.278284113s ago: executing program 7 (id=8282): syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 2.408647668s ago: executing program 1 (id=8292): r0 = fsopen(&(0x7f00000000c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = gettid() fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000100)='\x00\x00\x00\xa6\a=', 0x0, r0) tkill(r1, 0xb) 1.55310469s ago: executing program 1 (id=8300): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x43, 0x1, 0x1}, 0x10) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000001540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.226207149s ago: executing program 4 (id=8311): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0x4}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 983.209541ms ago: executing program 4 (id=8313): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a050600001900000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001414000000110001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)={0x2c, 0xd, 0xa, 0xe01, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x2c}}, 0x0) 929.480575ms ago: executing program 4 (id=8314): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) close_range(r0, 0xffffffffffffffff, 0x0) 698.001135ms ago: executing program 4 (id=8318): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r1) ioctl$KVM_CHECK_EXTENSION(r2, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x0, 0x4, 0x3000, 0x2000, &(0x7f000060b000/0x2000)=nil, 0x9}) 697.634328ms ago: executing program 1 (id=8319): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x0, 0xf7ffffff, @private2={0xfc, 0x2, '\x00', 0x2}}, 0x1c) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 639.700172ms ago: executing program 1 (id=8320): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000340)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="78030000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r3], 0x378}}, 0x0) open_by_handle_at(r0, &(0x7f0000000100)=@xfs_parent={0x1c, 0x82, {0x100, 0x68e, 0x800000000000009, 0x4}}, 0x80) 639.459495ms ago: executing program 1 (id=8321): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x20000, 0x0, 0x2c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 552.227201ms ago: executing program 1 (id=8323): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd289400000000000001090224"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 489.659708ms ago: executing program 4 (id=8326): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x24, 0x10, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}}, 0x24}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000023c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xfd, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2}}}}}}, 0x0) 489.431717ms ago: executing program 4 (id=8328): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 359.437515ms ago: executing program 7 (id=8333): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x34, 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) r2 = epoll_create1(0x80000) syz_usb_disconnect(r0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x1}) 179.348245ms ago: executing program 5 (id=8336): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@multiplanar_userptr={0x1000009, 0x1, 0x4, 0x10, 0x4, {0x0, 0x2710}, {0x0, 0xc, 0xf8, 0x7, 0xd, 0x0, "3b051c46"}, 0x10000, 0x2, {0x0}, 0x1}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f046}) 79.422851ms ago: executing program 5 (id=8337): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000d"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 79.268393ms ago: executing program 5 (id=8338): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file7\x00', 0x0) 51.15513ms ago: executing program 5 (id=8339): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x15031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000280)={{&(0x7f0000a84000/0x2000)=nil, 0x2000}, 0x1}) 220.87µs ago: executing program 5 (id=8340): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x7fffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 0s ago: executing program 5 (id=8341): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) kernel console output (not intermixed with test programs): rface number: 1 but max is 0 [ 293.303304][ T10] usb 9-1: config 0 has no interface number 0 [ 293.306860][ T10] usb 9-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 293.309914][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.312469][ T10] usb 9-1: Product: syz [ 293.313843][ T10] usb 9-1: Manufacturer: syz [ 293.315537][ T10] usb 9-1: SerialNumber: syz [ 293.319132][ T10] usb 9-1: config 0 descriptor?? [ 293.323039][ T10] usb 9-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 293.325887][ T10] usb 9-1: selecting invalid altsetting 1 [ 293.327682][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 293.330596][ T10] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 293.334182][ T10] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 293.337712][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 293.340371][ T10] usb 9-1: media controller created [ 293.350210][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 293.394623][ T5977] Bluetooth: hci3: sending frame failed (-49) [ 293.398644][ T5978] Bluetooth: hci3: Opcode 0x1003 failed: -49 [ 293.690742][ T5977] Bluetooth: hci3: sending frame failed (-49) [ 293.693604][ T5978] Bluetooth: hci3: Opcode 0x1003 failed: -49 [ 293.727500][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 294.207522][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 294.287518][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 294.447456][ T10] usb 9-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 294.449837][ T10] zl10353_read_register: readreg error (reg=127, ret==-110) [ 294.453875][ T10] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 294.467917][ T10] usb 9-1: USB disconnect, device number 9 [ 295.092314][T20553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6522'. [ 295.095590][T20553] netlink: 'syz.4.6522': attribute type 30 has an invalid length. [ 295.103899][ T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.110183][ T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.113663][ T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.116338][ T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.124809][T20557] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6524'. [ 295.322860][T20581] syz.0.6534: vmalloc error: size 1633771961, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 295.330205][T20581] CPU: 0 UID: 0 PID: 20581 Comm: syz.0.6534 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(full) [ 295.330222][T20581] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 295.330228][T20581] Call Trace: [ 295.330233][T20581] [ 295.330238][T20581] dump_stack_lvl+0x16c/0x1f0 [ 295.330328][T20581] warn_alloc+0x248/0x3a0 [ 295.330364][T20581] ? __pfx_warn_alloc+0x10/0x10 [ 295.330378][T20581] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 295.330394][T20581] ? mtree_range_walk+0x718/0xc00 [ 295.330418][T20581] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 295.330430][T20581] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 295.330449][T20581] ? policy_nodemask+0xea/0x4e0 [ 295.330465][T20581] ? drm_property_create_blob+0x74/0x330 [ 295.330478][T20581] ? alloc_pages_mpol+0x25a/0x550 [ 295.330492][T20581] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 295.330508][T20581] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 295.330520][T20581] ? ___kmalloc_large_node+0xed/0x160 [ 295.330539][T20581] __kvmalloc_node_noprof+0x30a/0x620 [ 295.330551][T20581] ? drm_property_create_blob+0x74/0x330 [ 295.330564][T20581] ? drm_property_create_blob+0x74/0x330 [ 295.330579][T20581] ? drm_property_create_blob+0x74/0x330 [ 295.330591][T20581] drm_property_create_blob+0x74/0x330 [ 295.330603][T20581] ? find_held_lock+0x2b/0x80 [ 295.330616][T20581] drm_mode_createblob_ioctl+0x10d/0x450 [ 295.330631][T20581] drm_ioctl_kernel+0x1f1/0x3e0 [ 295.330645][T20581] ? __pfx_drm_mode_createblob_ioctl+0x10/0x10 [ 295.330659][T20581] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 295.330674][T20581] ? _copy_from_user+0x93/0xd0 [ 295.330691][T20581] drm_ioctl+0x5c9/0xc30 [ 295.330707][T20581] ? __pfx_drm_mode_createblob_ioctl+0x10/0x10 [ 295.330721][T20581] ? __pfx_drm_ioctl+0x10/0x10 [ 295.330744][T20581] drm_compat_ioctl+0x327/0x460 [ 295.330762][T20581] ? __pfx_drm_compat_ioctl+0x10/0x10 [ 295.330780][T20581] __ia32_compat_sys_ioctl+0x23f/0x370 [ 295.330799][T20581] __do_fast_syscall_32+0x7c/0x3a0 [ 295.330813][T20581] do_fast_syscall_32+0x32/0x80 [ 295.330825][T20581] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 295.330838][T20581] RIP: 0023:0xf705e579 [ 295.330848][T20581] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 295.330858][T20581] RSP: 002b:00000000f544e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 295.330869][T20581] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c01064bd [ 295.330875][T20581] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 295.330882][T20581] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 295.330888][T20581] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 295.330894][T20581] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 295.330907][T20581] [ 295.330911][T20581] Mem-Info: [ 295.430421][T20581] active_anon:4587 inactive_anon:131 isolated_anon:0 [ 295.430421][T20581] active_file:7866 inactive_file:18920 isolated_file:0 [ 295.430421][T20581] unevictable:1768 dirty:441 writeback:0 [ 295.430421][T20581] slab_reclaimable:6604 slab_unreclaimable:61504 [ 295.430421][T20581] mapped:22833 shmem:2305 pagetables:1532 [ 295.430421][T20581] sec_pagetables:313 bounce:0 [ 295.430421][T20581] kernel_misc_reclaimable:0 [ 295.430421][T20581] free:63444 free_pcp:12402 free_cma:0 [ 295.444852][T20581] Node 0 active_anon:104kB inactive_anon:144kB active_file:12kB inactive_file:516kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:1988kB dirty:4kB writeback:0kB shmem:4548kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8260kB pagetables:1764kB sec_pagetables:1144kB all_unreclaimable? no Balloon:0kB [ 295.457290][T20581] Node 1 active_anon:18244kB inactive_anon:380kB active_file:31452kB inactive_file:75164kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:89344kB dirty:1760kB writeback:0kB shmem:4672kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6156kB pagetables:4564kB sec_pagetables:108kB all_unreclaimable? no Balloon:0kB [ 295.476619][T20581] Node 0 DMA free:2100kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:32kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 295.485565][T20581] lowmem_reserve[]: 0 288 288 288 288 [ 295.488829][T20581] Node 0 DMA32 free:16716kB boost:0kB min:13220kB low:16524kB high:19828kB reserved_highatomic:2048KB free_highatomic:236KB active_anon:104kB inactive_anon:144kB active_file:12kB inactive_file:484kB unevictable:3536kB writepending:4kB present:1032196kB managed:295220kB mlocked:0kB bounce:0kB free_pcp:12080kB local_pcp:2784kB free_cma:0kB [ 295.500069][T20581] lowmem_reserve[]: 0 0 0 0 0 [ 295.501636][T20581] Node 1 DMA32 free:235540kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:8192KB free_highatomic:7208KB active_anon:18244kB inactive_anon:380kB active_file:31452kB inactive_file:75164kB unevictable:3536kB writepending:1760kB present:1048432kB managed:948220kB mlocked:0kB bounce:0kB free_pcp:37424kB local_pcp:13356kB free_cma:0kB [ 295.512183][T20581] lowmem_reserve[]: 0 0 0 0 0 [ 295.513785][T20581] Node 0 DMA: 5*4kB (M) 4*8kB (UM) 6*16kB (M) 11*32kB (UM) 1*64kB (M) 0*128kB 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2100kB [ 295.519357][T20581] Node 0 DMA32: 157*4kB (UMEH) 271*8kB (UMEH) 110*16kB (UMEH) 64*32kB (UMEH) 44*64kB (UMEH) 15*128kB (UME) 5*256kB (UM) 6*512kB (UME) 1*1024kB (U) 0*2048kB 0*4096kB = 16716kB [ 295.529920][T20581] Node 1 DMA32: 283*4kB (UMH) 602*8kB (UMEH) 617*16kB (UMEH) 824*32kB (UMEH) 543*64kB (UMEH) 217*128kB (UMEH) 97*256kB (UMEH) 46*512kB (UMEH) 22*1024kB (UM) 11*2048kB (UM) 9*4096kB (UM) = 235020kB [ 295.537539][T20581] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 295.541764][T20581] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 295.545781][T20581] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 295.549932][T20581] Node 1 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 295.553821][T20581] 29369 total pagecache pages [ 295.556300][T20581] 282 pages in swap cache [ 295.558537][T20581] Free swap = 120724kB [ 295.560528][T20581] Total swap = 124996kB [ 295.562539][T20581] 524155 pages RAM [ 295.564289][T20581] 0 pages HighMem/MovableOnly [ 295.566366][T20581] 209455 pages reserved [ 295.568372][T20581] 0 pages cma reserved [ 296.685552][T20752] kernel read not supported for file /file1 (pid: 20752 comm: syz.1.6617) [ 296.689910][ T40] audit: type=1800 audit(2000000992.149:1365): pid=20752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6617" name="file1" dev="mqueue" ino=104249 res=0 errno=0 [ 296.926014][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 297.077729][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 297.081242][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 297.084743][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 297.088259][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 297.091064][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.095467][T20754] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 297.099504][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 297.325772][ C3] net_ratelimit: 11 callbacks suppressed [ 297.325784][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 297.358037][ T6193] usb 5-1: USB disconnect, device number 28 [ 297.405735][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 297.485688][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 297.885439][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 298.365169][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 298.455186][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 298.525109][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 298.530423][T20811] overlayfs: failed lookup in lower (newroot/1627, name='file1', err=-40): overlapping layers [ 298.934943][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 298.996149][T20836] block nbd0: Dead connection, failed to find a fallback [ 298.998688][T20836] block nbd0: shutting down sockets [ 299.000484][T20836] blk_print_req_error: 5 callbacks suppressed [ 299.000493][T20836] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 299.006906][T20836] buffer_io_error: 6 callbacks suppressed [ 299.006915][T20836] Buffer I/O error on dev nbd0, logical block 0, async page read [ 299.011324][T20836] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 299.014206][T20836] Buffer I/O error on dev nbd0, logical block 1, async page read [ 299.017040][T20836] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 299.019864][T20836] Buffer I/O error on dev nbd0, logical block 2, async page read [ 299.022353][T20836] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 299.025299][T20836] Buffer I/O error on dev nbd0, logical block 3, async page read [ 299.027860][T20836] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 299.030650][T20836] Buffer I/O error on dev nbd0, logical block 0, async page read [ 299.033135][T20836] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 299.036429][T20836] Buffer I/O error on dev nbd0, logical block 1, async page read [ 299.038961][T20836] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 299.041829][T20836] Buffer I/O error on dev nbd0, logical block 2, async page read [ 299.044334][T20836] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 299.047276][T20836] Buffer I/O error on dev nbd0, logical block 3, async page read [ 299.049844][T20836] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 299.052655][T20836] Buffer I/O error on dev nbd0, logical block 0, async page read [ 299.055384][T20836] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 299.058239][T20836] Buffer I/O error on dev nbd0, logical block 1, async page read [ 299.063708][T20836] ldm_validate_partition_table(): Disk read failed. [ 299.066732][T20836] Dev nbd0: unable to read RDB block 0 [ 299.069323][T20836] nbd0: unable to read partition table [ 299.375699][ T2295] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 299.404689][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 299.468954][T20853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6662'. [ 299.484651][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 299.534723][ T2295] usb 5-1: Using ep0 maxpacket: 16 [ 299.537574][ T2295] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 299.540676][ T2295] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 180, changing to 11 [ 299.544190][ T2295] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 26584, setting to 1024 [ 299.547977][ T2295] usb 5-1: config 0 interface 0 has no altsetting 0 [ 299.551765][ T2295] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 299.554781][ T2295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.557293][ T2295] usb 5-1: Product: syz [ 299.568987][ T2295] usb 5-1: Manufacturer: syz [ 299.570580][ T2295] usb 5-1: SerialNumber: syz [ 299.574052][ T2295] usb 5-1: config 0 descriptor?? [ 299.576840][T20839] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 299.787033][T20839] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 299.791187][ T2295] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input96 [ 299.994788][ T2295] usb 5-1: USB disconnect, device number 29 [ 300.017149][T20903] loop7: detected capacity change from 0 to 7 [ 300.218687][T20903] Dev loop7: unable to read RDB block 7 [ 300.221731][T20903] loop7: unable to read partition table [ 300.223790][T20903] loop7: partition table beyond EOD, truncated [ 300.226307][T20903] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 300.894784][ T5977] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 300.898531][ T5977] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 300.901579][ T5977] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 300.905988][ T5977] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 300.908627][ T5977] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 300.914246][ T5978] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 300.917035][ T5978] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 300.919417][ T5978] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 300.923322][ T5978] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 300.927714][ T5978] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 300.943006][T20950] lo speed is unknown, defaulting to 1000 [ 300.977822][T20954] 9pnet: p9_errstr2errno: server reported unknown error @0x0000000000000004 [ 301.021591][T20950] chnl_net:caif_netlink_parms(): no params data found [ 301.054674][ T6052] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 301.094208][T20950] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.096572][T20950] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.098907][T20950] bridge_slave_0: entered allmulticast mode [ 301.101560][T20950] bridge_slave_0: entered promiscuous mode [ 301.104733][T20950] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.107057][T20950] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.109349][T20950] bridge_slave_1: entered allmulticast mode [ 301.112559][T20950] bridge_slave_1: entered promiscuous mode [ 301.145124][T20950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.149689][T20950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.182775][T20950] team0: Port device team_slave_0 added [ 301.187304][T20950] team0: Port device team_slave_1 added [ 301.217179][T20950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.219366][T20950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.227297][T20950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.231625][T20950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.234099][T20950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.234957][ T6052] usb 6-1: Using ep0 maxpacket: 16 [ 301.241800][T20950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.250544][ T6052] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 301.253536][ T6052] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 180, changing to 11 [ 301.257981][ T6052] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 26584, setting to 1024 [ 301.261430][ T6052] usb 6-1: config 0 interface 0 has no altsetting 0 [ 301.265298][ T6052] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 301.268259][ T6052] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.270767][ T6052] usb 6-1: Product: syz [ 301.272103][ T6052] usb 6-1: Manufacturer: syz [ 301.273523][ T6052] usb 6-1: SerialNumber: syz [ 301.278509][ T6052] usb 6-1: config 0 descriptor?? [ 301.280667][T20947] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 301.288835][T20950] hsr_slave_0: entered promiscuous mode [ 301.291024][T20950] hsr_slave_1: entered promiscuous mode [ 301.292941][T20950] debugfs: 'hsr0' already exists in 'hsr' [ 301.295022][T20950] Cannot create hsr debugfs directory [ 301.371030][T20969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6716'. [ 301.375140][T20969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6716'. [ 301.378053][T20969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6716'. [ 301.420030][T20950] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 301.424851][T20950] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 301.428900][T20950] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 301.432896][T20950] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 301.447727][T20950] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.449920][T20950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.452537][T20950] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.454714][T20950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.481886][T20950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.490839][T20947] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 301.495206][ T6052] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input97 [ 301.497929][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.505133][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.531433][T20950] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.544449][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.547535][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.550957][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.553205][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.678759][T20950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.700454][ T10] usb 6-1: USB disconnect, device number 24 [ 301.809032][T20950] veth0_vlan: entered promiscuous mode [ 301.813938][T20950] veth1_vlan: entered promiscuous mode [ 301.828948][T20950] veth0_macvtap: entered promiscuous mode [ 301.832858][T20950] veth1_macvtap: entered promiscuous mode [ 301.842005][T20950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.850535][T20950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.856456][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.859247][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.862407][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.865339][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.895196][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.897754][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.914159][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.916689][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.923677][ T53] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 301.955725][ T40] audit: type=1326 audit(2000000997.421:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21003 comm="syz.4.6731" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 301.962429][ T40] audit: type=1326 audit(2000000997.421:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21003 comm="syz.4.6731" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 301.970690][ T40] audit: type=1326 audit(2000000997.421:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21003 comm="syz.4.6731" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 301.978433][ T40] audit: type=1326 audit(2000000997.421:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21003 comm="syz.4.6731" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 301.985428][ T40] audit: type=1326 audit(2000000997.421:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21003 comm="syz.4.6731" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 301.992040][ T40] audit: type=1326 audit(2000000997.421:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21003 comm="syz.4.6731" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 301.998840][ T40] audit: type=1326 audit(2000000997.431:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21003 comm="syz.4.6731" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 302.006002][ T40] audit: type=1326 audit(2000000997.431:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21003 comm="syz.4.6731" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 302.012794][ T40] audit: type=1326 audit(2000000997.441:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21003 comm="syz.4.6731" exe="/syz-executor" sig=0 arch=40000003 syscall=180 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 302.019465][ T40] audit: type=1326 audit(2000000997.441:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21003 comm="syz.4.6731" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 302.083415][ T53] usb 5-1: Using ep0 maxpacket: 16 [ 302.086317][ T53] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.089853][ T53] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.092935][ T53] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 302.097144][ T53] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 302.100000][ T53] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.104838][ T53] usb 5-1: config 0 descriptor?? [ 302.518681][ T53] hid_parser_main: 20 callbacks suppressed [ 302.518693][ T53] shield 0003:0955:7214.002F: unknown main item tag 0x0 [ 302.522877][ T53] shield 0003:0955:7214.002F: unknown main item tag 0x0 [ 302.525694][ T53] shield 0003:0955:7214.002F: unknown main item tag 0x0 [ 302.527898][ T53] shield 0003:0955:7214.002F: unknown main item tag 0x0 [ 302.530060][ T53] shield 0003:0955:7214.002F: unknown main item tag 0x0 [ 302.537311][ T53] input: HID 0955:7214 Haptics as /devices/virtual/input/input98 [ 302.549753][ T53] shield 0003:0955:7214.002F: Registered Thunderstrike controller [ 302.552353][ T53] shield 0003:0955:7214.002F: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 302.603182][ C1] net_ratelimit: 9 callbacks suppressed [ 302.603195][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 302.683051][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 302.719737][T20992] netlink: 'syz.0.6722': attribute type 2 has an invalid length. [ 302.722212][T20992] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6722'. [ 302.726880][ T6032] shield 0003:0955:7214.002F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 302.727259][ T6193] usb 5-1: USB disconnect, device number 30 [ 302.730568][ T6032] shield 0003:0955:7214.002F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 302.736256][ T6032] shield 0003:0955:7214.002F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 302.739925][ T6032] shield 0003:0955:7214.002F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 302.858550][T21032] veth0_to_hsr: entered promiscuous mode [ 302.862582][T21032] veth0_to_hsr: left promiscuous mode [ 303.012983][ T5978] Bluetooth: hci1: command tx timeout [ 303.026917][T21048] 9pnet: p9_errstr2errno: server reported unknown error @0x0000000000000004 [ 303.092861][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 303.257829][T21059] netlink: 14528 bytes leftover after parsing attributes in process `syz.4.6750'. [ 303.291480][T21063] input: syz1 as /devices/virtual/input/input99 [ 303.300493][ T6193] hid-generic 0000:3000000:0000.0030: unknown main item tag 0x4 [ 303.304926][ T6193] hid-generic 0000:3000000:0000.0030: unknown main item tag 0x2 [ 303.307356][ T6193] hid-generic 0000:3000000:0000.0030: unknown main item tag 0x0 [ 303.310393][ T6193] hid-generic 0000:3000000:0000.0030: unknown main item tag 0x0 [ 303.315759][ T6193] hid-generic 0000:3000000:0000.0030: unknown main item tag 0x0 [ 303.319022][ T6193] hid-generic 0000:3000000:0000.0030: hidraw0: HID v0.00 Device [sy] on syz0 [ 303.437491][T21083] netlink: 'syz.5.6761': attribute type 1 has an invalid length. [ 303.439935][T21083] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6761'. [ 303.477271][T21089] input: syz1 as /devices/virtual/input/input100 [ 303.538451][T21095] af_packet: tpacket_rcv: packet too big, clamped from 44 to 4294967272. macoff=96 [ 303.642599][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 303.662609][ T6052] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 303.732601][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 303.761303][T21118] veth0_to_hsr: entered promiscuous mode [ 303.764090][T21118] veth0_to_hsr: left promiscuous mode [ 303.812518][ T6052] usb 9-1: Using ep0 maxpacket: 16 [ 303.812531][ T7306] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 303.815381][ T6052] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.819938][ T6052] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.824811][ T6052] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 303.828919][ T6052] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 303.831715][ T6052] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.835633][ T6052] usb 9-1: config 0 descriptor?? [ 303.966620][ T7306] usb 6-1: Using ep0 maxpacket: 32 [ 303.969677][ T7306] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 303.972173][ T7306] usb 6-1: config 0 has no interface number 0 [ 303.980099][ T7306] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 303.982258][T21126] netlink: 14528 bytes leftover after parsing attributes in process `syz.0.6790'. [ 303.983116][ T7306] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.989058][ T7306] usb 6-1: Product: syz [ 303.990616][ T7306] usb 6-1: Manufacturer: syz [ 303.992270][ T7306] usb 6-1: SerialNumber: syz [ 303.995235][ T7306] usb 6-1: config 0 descriptor?? [ 304.001130][ T7306] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 304.004053][ T7306] usb 6-1: selecting invalid altsetting 1 [ 304.005866][ T7306] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 304.009144][ T7306] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 304.012845][ T7306] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 304.015381][ T7306] usb 6-1: media controller created [ 304.025529][ T7306] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 304.122373][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 304.233540][T21132] netlink: 'syz.0.6785': attribute type 1 has an invalid length. [ 304.236134][T21132] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6785'. [ 304.248521][ T6052] input: HID 0955:7214 Haptics as /devices/virtual/input/input101 [ 304.257083][ T6052] shield 0003:0955:7214.0031: Registered Thunderstrike controller [ 304.260143][ T6052] shield 0003:0955:7214.0031: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 304.348558][T21143] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 304.453383][T21079] netlink: 'syz.4.6760': attribute type 2 has an invalid length. [ 304.455939][T21079] netlink: 244 bytes leftover after parsing attributes in process `syz.4.6760'. [ 304.460290][ T59] usb 9-1: USB disconnect, device number 10 [ 304.463282][ T6052] shield 0003:0955:7214.0031: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 304.466882][ T6052] shield 0003:0955:7214.0031: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 304.470471][ T6052] shield 0003:0955:7214.0031: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 304.477118][ T6052] shield 0003:0955:7214.0031: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 304.682254][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 304.762004][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 304.990734][T21164] binder: 21161:21164 ioctl c0306201 800008c0 returned -14 [ 305.082081][ T7306] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 305.082653][ T5978] Bluetooth: hci1: command tx timeout [ 305.084405][ T7306] zl10353_read_register: readreg error (reg=127, ret==-110) [ 305.103047][T21176] pim6reg1: entered promiscuous mode [ 305.105126][T21176] pim6reg1: entered allmulticast mode [ 305.113261][T21105] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 305.127206][ T7306] usb 6-1: USB disconnect, device number 25 [ 305.161949][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 305.334083][T21192] KVM: debugfs: duplicate directory 21192-4 [ 305.629740][T21216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6826'. [ 305.698158][T21224] ipvlan2: entered promiscuous mode [ 305.721605][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 305.764154][T21232] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 305.926761][T21254] KVM: debugfs: duplicate directory 21254-4 [ 306.773623][T21341] __nla_validate_parse: 2 callbacks suppressed [ 306.773635][T21341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6886'. [ 306.813444][T21347] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.6889'. [ 306.858866][T21349] KVM: debugfs: duplicate directory 21349-4 [ 307.161278][ T5978] Bluetooth: hci1: command tx timeout [ 307.366106][T21392] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.6910'. [ 307.500108][T21414] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 307.502470][T21414] IPv6: NLM_F_CREATE should be set when creating new route [ 307.503756][T21415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6921'. [ 307.589617][T21430] tun0: tun_chr_ioctl cmd 1074025675 [ 307.591408][T21430] tun0: persist enabled [ 307.592882][T21430] tun0: tun_chr_ioctl cmd 1074025675 [ 307.594529][T21430] tun0: persist enabled [ 307.800577][ C1] net_ratelimit: 5 callbacks suppressed [ 307.800590][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 307.820788][ T7306] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 307.880544][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 307.972559][ T7306] usb 9-1: Using ep0 maxpacket: 32 [ 307.975376][ T7306] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 307.978701][ T7306] usb 9-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 307.982266][ T7306] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 307.985226][ T7306] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 307.988197][ T7306] usb 9-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 307.994312][ T7306] usb 9-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 307.997162][ T7306] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.999622][ T7306] usb 9-1: Product: syz [ 308.001770][ T7306] usb 9-1: Manufacturer: syz [ 308.003308][ T7306] usb 9-1: SerialNumber: syz [ 308.005878][ T7306] usb 9-1: config 0 descriptor?? [ 308.012868][ T7306] hdpvr 9-1:0.0: Could not find bulk-in endpoint [ 308.014944][ T7306] hdpvr 9-1:0.0: probe with driver hdpvr failed with error -12 [ 308.216738][ T6032] usb 9-1: USB disconnect, device number 11 [ 308.281530][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 308.603954][T21463] pim6reg1: entered promiscuous mode [ 308.605646][T21463] pim6reg1: entered allmulticast mode [ 308.738241][T21473] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 308.840001][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 308.920116][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 309.249735][ T5978] Bluetooth: hci1: command tx timeout [ 309.329731][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 309.879494][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 309.969377][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 310.072416][T21562] loop6: detected capacity change from 0 to 63 [ 310.072452][T21560] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6986'. [ 310.075125][T21562] buffer_io_error: 55 callbacks suppressed [ 310.075135][T21562] Buffer I/O error on dev loop6, logical block 0, async page read [ 310.080111][T21562] Buffer I/O error on dev loop6, logical block 0, async page read [ 310.085744][T21562] Buffer I/O error on dev loop6, logical block 0, async page read [ 310.088731][T21562] Buffer I/O error on dev loop6, logical block 0, async page read [ 310.092094][T21562] Buffer I/O error on dev loop6, logical block 0, async page read [ 310.095233][T21562] Buffer I/O error on dev loop6, logical block 0, async page read [ 310.097939][T21562] Buffer I/O error on dev loop6, logical block 0, async page read [ 310.101931][T21562] Buffer I/O error on dev loop6, logical block 0, async page read [ 310.104465][T21562] ldm_validate_partition_table(): Disk read failed. [ 310.106544][T21562] Buffer I/O error on dev loop6, logical block 0, async page read [ 310.109098][T21562] Buffer I/O error on dev loop6, logical block 0, async page read [ 310.111692][T21562] Dev loop6: unable to read RDB block 0 [ 310.114139][T21562] loop6: unable to read partition table [ 310.116003][T21562] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 310.359307][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 310.588171][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 310.588183][ T40] audit: type=1326 audit(2000001006.046:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21640 comm="syz.1.7034" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 310.598220][ T40] audit: type=1326 audit(2000001006.056:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21640 comm="syz.1.7034" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 310.605927][ T40] audit: type=1326 audit(2000001006.056:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21640 comm="syz.1.7034" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 310.615086][ T40] audit: type=1326 audit(2000001006.056:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21640 comm="syz.1.7034" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 310.622663][ T40] audit: type=1326 audit(2000001006.056:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21640 comm="syz.1.7034" exe="/syz-executor" sig=0 arch=40000003 syscall=116 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 310.630838][ T40] audit: type=1326 audit(2000001006.056:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21640 comm="syz.1.7034" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 310.635200][T21648] netlink: 256 bytes leftover after parsing attributes in process `syz.5.7036'. [ 310.638305][ T40] audit: type=1326 audit(2000001006.066:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21640 comm="syz.1.7034" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 310.837683][T21661] overlay: filesystem on ./bus not supported as upperdir [ 310.888579][ T40] audit: type=1326 audit(2000001006.346:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21668 comm="syz.5.7039" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 310.897203][ T40] audit: type=1326 audit(2000001006.346:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21668 comm="syz.5.7039" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 310.904622][ T40] audit: type=1326 audit(2000001006.346:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21668 comm="syz.5.7039" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 310.929007][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 311.123382][T21695] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.7053'. [ 311.251456][T21714] tipc: Started in network mode [ 311.253483][T21714] tipc: Node identity ac1414bb, cluster identity 4711 [ 311.256385][T21714] tipc: Enabling of bearer rejected, failed to enable media [ 311.335354][T21721] binder: 21720:21721 ioctl c0306201 0 returned -14 [ 311.907534][T21741] overlay: filesystem on ./bus not supported as upperdir [ 312.114238][T21758] input: syz1 as /devices/virtual/input/input102 [ 312.318274][ T59] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 312.343587][T21774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7089'. [ 312.457874][T21784] netlink: 'syz.4.7094': attribute type 10 has an invalid length. [ 312.461913][T21784] netlink: 'syz.4.7094': attribute type 4 has an invalid length. [ 312.464350][T21784] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7094'. [ 312.472025][T21784] : renamed from bond0 (while UP) [ 312.472307][ T59] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 312.476814][ T59] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 312.481642][ T59] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 312.485610][ T59] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 312.489787][ T59] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 312.494792][ T59] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 312.498232][ T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.503152][ T59] usb 5-1: config 0 descriptor?? [ 312.506095][T21756] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 312.686015][T21798] input: syz1 as /devices/virtual/input/input103 [ 312.719134][T21800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7101'. [ 312.773420][T21806] netlink: 'syz.1.7104': attribute type 10 has an invalid length. [ 312.776975][T21806] netlink: 'syz.1.7104': attribute type 4 has an invalid length. [ 312.779571][T21806] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7104'. [ 312.785216][T21806] : renamed from bond0 [ 312.919912][ T59] hid_parser_main: 16 callbacks suppressed [ 312.919926][ T59] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 312.922126][T21820] input: syz1 as /devices/virtual/input/input104 [ 312.924165][ T59] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 312.930709][ T59] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 312.933063][ T59] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 312.935377][ T59] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 312.937777][ T59] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 312.940679][ T59] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 312.943110][ T59] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 312.945784][ T59] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 312.949753][ T59] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 312.955094][ T59] plantronics 0003:047F:FFFF.0032: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 313.007893][ C1] net_ratelimit: 3 callbacks suppressed [ 313.007904][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 313.087922][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 313.179084][ T59] usb 5-1: USB disconnect, device number 31 [ 313.544086][T21856] netlink: 'syz.1.7129': attribute type 2 has an invalid length. [ 313.546553][T21856] netlink: 85376 bytes leftover after parsing attributes in process `syz.1.7129'. [ 313.717351][T21868] pim6reg: entered allmulticast mode [ 313.724684][T21868] pim6reg: left allmulticast mode [ 314.047663][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 314.127356][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 314.849600][T21904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7149'. [ 314.852969][T21904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7149'. [ 314.855834][T21904] netlink: 'syz.4.7149': attribute type 5 has an invalid length. [ 315.076850][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 315.140825][T21916] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7155'. [ 315.143698][T21916] netlink: 43 bytes leftover after parsing attributes in process `syz.4.7155'. [ 315.146496][T21916] netlink: 'syz.4.7155': attribute type 6 has an invalid length. [ 315.149230][T21916] netlink: 'syz.4.7155': attribute type 5 has an invalid length. [ 315.151733][T21916] netlink: 43 bytes leftover after parsing attributes in process `syz.4.7155'. [ 315.156867][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 316.076377][ T6032] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 316.116452][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 316.196290][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 316.228172][ T6032] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 316.230790][ T6032] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 316.234449][ T6032] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 316.238101][ T6032] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 316.241875][ T6032] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 316.245977][ T6032] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 316.249071][ T6032] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.252896][ T6032] usb 6-1: config 0 descriptor?? [ 316.254979][T21976] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 316.598837][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.600917][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.669684][ T6032] plantronics 0003:047F:FFFF.0033: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 316.711767][T21998] netlink: 'syz.0.7194': attribute type 1 has an invalid length. [ 316.927302][ T6193] usb 6-1: USB disconnect, device number 26 [ 317.165840][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 317.245814][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 317.800075][T22065] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7227'. [ 317.955522][ T59] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 318.105347][ T59] usb 6-1: Using ep0 maxpacket: 8 [ 318.108251][ T59] usb 6-1: config 0 interface 0 has no altsetting 0 [ 318.110361][ T59] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 318.113164][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.116837][ T59] usb 6-1: config 0 descriptor?? [ 318.190787][T22083] pim6reg1: entered promiscuous mode [ 318.192941][T22083] pim6reg1: entered allmulticast mode [ 318.195435][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 318.285194][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 318.524881][ T59] mcp2221 0003:04D8:00DD.0034: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 318.725239][ T59] usb 6-1: USB disconnect, device number 27 [ 319.244831][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 319.316102][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 319.412798][T22107] overlayfs: failed to create directory ./bus/work (errno: 1); mounting read-only [ 319.415747][T22107] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 319.604445][T22127] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 319.769503][T22139] pim6reg1: entered promiscuous mode [ 319.771262][T22139] pim6reg1: entered allmulticast mode [ 320.274289][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 320.354268][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 320.973973][ T59] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 321.123797][ T59] usb 10-1: Using ep0 maxpacket: 32 [ 321.126703][ T59] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 321.131533][ T59] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 321.134474][ T59] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 321.137047][ T59] usb 10-1: Product: syz [ 321.138312][T22186] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7281'. [ 321.138393][ T59] usb 10-1: Manufacturer: syz [ 321.142739][ T59] usb 10-1: SerialNumber: syz [ 321.145956][ T59] usb 10-1: config 0 descriptor?? [ 321.148185][T22156] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 321.313780][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 321.359140][ T6193] usb 10-1: USB disconnect, device number 2 [ 321.403648][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 321.416928][T22219] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 321.419079][T22219] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 321.422645][T22219] vhci_hcd vhci_hcd.0: Device attached [ 321.429403][T22220] usbip_core: unknown command [ 321.431043][T22220] vhci_hcd: unknown pdu 0 [ 321.432571][T22220] usbip_core: unknown command [ 321.436827][ T98] vhci_hcd: stop threads [ 321.438215][ T98] vhci_hcd: release socket [ 321.439632][ T98] vhci_hcd: disconnect device [ 322.343265][ T59] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 322.363289][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 322.443137][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 322.513083][ T59] usb 6-1: Using ep0 maxpacket: 8 [ 322.516832][ T59] usb 6-1: config 0 interface 0 has no altsetting 0 [ 322.519173][ T59] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 322.522042][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.529183][ T59] usb 6-1: config 0 descriptor?? [ 322.915204][T22273] netlink: 348 bytes leftover after parsing attributes in process `syz.4.7318'. [ 322.943698][ T59] mcp2221 0003:04D8:00DD.0035: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 323.002985][ T6052] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 323.057815][T22284] syzkaller1: entered promiscuous mode [ 323.060104][T22284] syzkaller1: entered allmulticast mode [ 323.143870][ T7306] usb 6-1: USB disconnect, device number 28 [ 323.155585][T22286] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7325'. [ 323.176272][ T6052] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 323.180765][ T6052] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 323.185906][ T6052] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 323.188721][ T6052] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.194097][T22265] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 323.204341][ T6052] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 323.392682][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 323.425241][T22306] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7335'. [ 323.456036][ T6052] usb 5-1: USB disconnect, device number 33 [ 323.472617][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 323.495370][T22310] loop7: detected capacity change from 0 to 7 [ 323.497646][ C2] blk_print_req_error: 55 callbacks suppressed [ 323.497654][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 323.502424][ C2] buffer_io_error: 14 callbacks suppressed [ 323.502431][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 323.506938][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 323.509893][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 323.512661][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 323.515526][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 323.518177][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 323.521105][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 323.523915][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 323.526761][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 323.528740][T22312] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 323.529379][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 323.535434][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 323.538040][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 323.540917][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 323.543451][T22310] ldm_validate_partition_table(): Disk read failed. [ 323.547444][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 323.550881][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 323.553597][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 323.556472][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 323.560670][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 323.564576][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 323.567503][T22310] Dev loop7: unable to read RDB block 0 [ 323.569647][T22310] loop7: unable to read partition table [ 323.571582][T22310] loop7: partition table beyond EOD, truncated [ 323.573953][T22310] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 323.881223][T22343] loop7: detected capacity change from 0 to 7 [ 323.884394][T22343] ldm_validate_partition_table(): Disk read failed. [ 323.886963][T22343] Dev loop7: unable to read RDB block 0 [ 323.889095][T22343] loop7: unable to read partition table [ 323.890946][T22343] loop7: partition table beyond EOD, truncated [ 323.894224][T22343] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 324.055852][T22363] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 324.058454][T22363] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 324.060909][T22363] vhci_hcd vhci_hcd.0: Device attached [ 324.066054][T22364] usbip_core: unknown command [ 324.067573][T22364] vhci_hcd: unknown pdu 0 [ 324.068957][T22364] usbip_core: unknown command [ 324.070697][ T1142] vhci_hcd: stop threads [ 324.072149][ T1142] vhci_hcd: release socket [ 324.073676][ T1142] vhci_hcd: disconnect device [ 324.382325][ T6032] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 324.432336][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 324.522198][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 324.533618][ T6032] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 324.537165][ T6032] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 324.540309][ T6032] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 324.546982][ T6032] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.551119][T22374] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 324.555156][ T6032] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 324.733802][T22402] 9pnet: p9_errstr2errno: server reported unknown error 18446 [ 324.803193][T22408] veth0: entered promiscuous mode [ 324.805671][T22407] veth0: left promiscuous mode [ 324.813120][ T6052] usb 9-1: USB disconnect, device number 12 [ 324.886363][T22416] sctp: [Deprecated]: syz.1.7387 (pid 22416) Use of struct sctp_assoc_value in delayed_ack socket option. [ 324.886363][T22416] Use struct sctp_sack_info instead [ 325.243874][T22450] sctp: [Deprecated]: syz.5.7401 (pid 22450) Use of struct sctp_assoc_value in delayed_ack socket option. [ 325.243874][T22450] Use struct sctp_sack_info instead [ 325.471635][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 325.491282][T22472] netlink: 'syz.5.7413': attribute type 1 has an invalid length. [ 325.551600][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 325.554865][T22478] loop2: detected capacity change from 0 to 7 [ 325.557217][T22478] Dev loop2: unable to read RDB block 7 [ 325.559058][T22478] loop2: AHDI p2 [ 325.560334][T22478] loop2: partition table partially beyond EOD, truncated [ 325.560617][T22481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7418'. [ 325.675769][T22493] netlink: 'syz.4.7424': attribute type 1 has an invalid length. [ 325.708720][T22499] 9pnet: p9_errstr2errno: server reported unknown error 18446 [ 325.831472][ T842] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 325.991520][ T842] usb 10-1: Using ep0 maxpacket: 8 [ 325.994474][ T842] usb 10-1: config 0 interface 0 has no altsetting 0 [ 325.997138][ T842] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 326.000591][ T842] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.005409][ T842] usb 10-1: config 0 descriptor?? [ 326.197555][T22519] kvm: user requested TSC rate below hardware speed [ 326.423907][ T842] mcp2221 0003:04D8:00DD.0036: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 326.455557][ T12] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.511193][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 326.553282][ T12] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.591078][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 326.608560][ T12] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.625130][ T6032] usb 10-1: USB disconnect, device number 3 [ 326.652493][ T5977] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 326.656993][ T5977] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 326.660817][ T5977] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 326.666742][ T5977] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 326.671883][ T5977] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 326.698403][ T12] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.706841][T22528] lo speed is unknown, defaulting to 1000 [ 326.707364][T22538] input: syz0 as /devices/virtual/input/input105 [ 326.799877][T22528] chnl_net:caif_netlink_parms(): no params data found [ 326.821697][ T12] bridge_slave_1: left allmulticast mode [ 326.823675][ T12] bridge_slave_1: left promiscuous mode [ 326.826521][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.834764][ T12] bridge_slave_0: left allmulticast mode [ 326.836586][ T12] bridge_slave_0: left promiscuous mode [ 326.838478][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.948160][ T12] 0XD (unregistering): left promiscuous mode [ 327.145586][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.153009][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.158506][ T12] bond0 (unregistering): Released all slaves [ 327.164244][T22564] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 327.193535][T22559] mkiss: ax0: crc mode is auto. [ 327.228962][ T12] tipc: Disabling bearer [ 327.232255][ T12] tipc: Left network mode [ 327.257355][T22528] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.260274][T22528] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.263821][T22528] bridge_slave_0: entered allmulticast mode [ 327.266446][T22528] bridge_slave_0: entered promiscuous mode [ 327.269539][T22528] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.273208][T22528] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.275599][T22528] bridge_slave_1: entered allmulticast mode [ 327.278246][T22528] bridge_slave_1: entered promiscuous mode [ 327.291053][ T67] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 327.339947][T22528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.346804][T22528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.379940][T22571] lo speed is unknown, defaulting to 1000 [ 327.411877][T22528] team0: Port device team_slave_0 added [ 327.431215][T22528] team0: Port device team_slave_1 added [ 327.453153][ T67] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 327.456548][ T67] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 327.459524][ T67] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 327.462729][ T67] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.467230][T22561] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 327.473242][ T67] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 327.490189][T22528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.492701][T22528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.501021][T22528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.505703][T22528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.507881][T22528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.515827][T22528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.547239][ T12] batadv_slave_1: left promiscuous mode [ 327.552652][ T12] hsr_slave_0: left promiscuous mode [ 327.554721][ T12] hsr_slave_1: left promiscuous mode [ 327.556702][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.559061][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.561426][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 327.565035][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.567355][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.597207][ T12] veth1_vlan: left promiscuous mode [ 327.599139][ T12] veth0_vlan: left promiscuous mode [ 327.630633][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 327.842990][ T9] usb 6-1: USB disconnect, device number 29 [ 328.138360][ T12] team0 (unregistering): Port device team_slave_1 removed [ 328.211578][ T12] team0 (unregistering): Port device team_slave_0 removed [ 328.590190][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 328.670381][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 328.751775][ T5977] Bluetooth: hci3: command tx timeout [ 328.854008][T22588] mkiss: ax0: crc mode is auto. [ 328.952565][T22528] hsr_slave_0: entered promiscuous mode [ 328.955768][T22528] hsr_slave_1: entered promiscuous mode [ 328.958626][T22528] debugfs: 'hsr0' already exists in 'hsr' [ 328.961200][T22528] Cannot create hsr debugfs directory [ 329.156547][T22528] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 329.162153][T22528] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 329.166916][T22528] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 329.173429][T22528] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 329.232967][T22528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.247833][T22528] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.255439][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.258473][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.266245][ T98] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.268607][ T98] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.316641][T22528] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 329.318935][ T842] kernel write not supported for file /comedi4 (pid: 842 comm: kworker/3:2) [ 329.324233][ T12] IPVS: stop unused estimator thread 0... [ 329.434835][T22528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.598634][T22528] veth0_vlan: entered promiscuous mode [ 329.604313][T22528] veth1_vlan: entered promiscuous mode [ 329.620008][T22528] veth0_macvtap: entered promiscuous mode [ 329.624365][T22528] veth1_macvtap: entered promiscuous mode [ 329.629604][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 329.637941][T22528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.646264][T22528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.654630][ T98] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.657763][ T98] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.661691][ T98] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.666477][T22669] netlink: 'syz.5.7495': attribute type 1 has an invalid length. [ 329.668834][ T98] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.668907][T22669] netlink: 236 bytes leftover after parsing attributes in process `syz.5.7495'. [ 329.709620][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 329.717844][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.720862][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.734831][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.737310][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.799881][ T53] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 329.969510][ T53] usb 9-1: Using ep0 maxpacket: 8 [ 329.972791][ T53] usb 9-1: config 0 interface 0 has no altsetting 0 [ 329.974883][ T53] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 329.977765][ T53] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.981721][ T53] usb 9-1: config 0 descriptor?? [ 330.009569][T22695] netlink: 'syz.6.7505': attribute type 1 has an invalid length. [ 330.012187][T22695] netlink: 236 bytes leftover after parsing attributes in process `syz.6.7505'. [ 330.173334][T22710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7513'. [ 330.319436][ T7309] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 330.404192][ T53] mcp2221 0003:04D8:00DD.0037: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 330.418567][T22736] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 330.422182][T22736] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 330.425880][T22736] overlayfs: failed to get uuid (1833/file1, err=-13); falling back to uuid=null. [ 330.469257][ T7309] usb 10-1: Using ep0 maxpacket: 8 [ 330.472583][ T7309] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 330.476506][ T7309] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 330.480772][ T7309] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 330.484003][ T7309] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 330.488195][ T7309] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 330.491297][ T7309] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.599755][ T59] usb 9-1: USB disconnect, device number 13 [ 330.670087][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 330.698547][ T7309] usb 10-1: GET_CAPABILITIES returned 0 [ 330.701048][ T7309] usbtmc 10-1:16.0: can't read capabilities [ 330.759090][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 330.838998][ T5977] Bluetooth: hci3: command tx timeout [ 330.899757][ T7306] usb 10-1: USB disconnect, device number 4 [ 331.508594][ T6032] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 331.658671][ T6032] usb 11-1: Using ep0 maxpacket: 8 [ 331.661872][ T6032] usb 11-1: config 0 interface 0 has no altsetting 0 [ 331.661892][ T6032] usb 11-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 331.661904][ T6032] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.663027][ T6032] usb 11-1: config 0 descriptor?? [ 331.708536][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 331.788510][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 332.088952][ T6032] mcp2221 0003:04D8:00DD.0038: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 332.290464][ T7306] usb 11-1: USB disconnect, device number 2 [ 332.360133][ T10] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 332.508226][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 332.510445][T22800] vlan2: entered promiscuous mode [ 332.511176][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.512641][T22800] : entered promiscuous mode [ 332.516015][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.517950][T22800] bond_slave_0: entered promiscuous mode [ 332.518403][T22800] bond_slave_1: entered promiscuous mode [ 332.521161][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 332.524115][T22800] : (slave vlan2): Opening slave failed [ 332.525221][ T10] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 332.535075][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.543353][ T10] usb 6-1: config 0 descriptor?? [ 332.641309][T22806] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7558'. [ 332.748046][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 332.828053][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 332.908091][ T5977] Bluetooth: hci3: command tx timeout [ 332.950993][ T10] hid_parser_main: 20 callbacks suppressed [ 332.951005][ T10] shield 0003:0955:7214.0039: unknown main item tag 0x0 [ 332.955355][ T10] shield 0003:0955:7214.0039: unknown main item tag 0x0 [ 332.957532][ T10] shield 0003:0955:7214.0039: unknown main item tag 0x0 [ 332.963077][ T10] shield 0003:0955:7214.0039: unknown main item tag 0x0 [ 332.965258][ T10] shield 0003:0955:7214.0039: unknown main item tag 0x0 [ 332.969372][ T10] input: HID 0955:7214 Haptics as /devices/virtual/input/input106 [ 332.982197][ T10] shield 0003:0955:7214.0039: Registered Thunderstrike controller [ 332.984586][ T10] shield 0003:0955:7214.0039: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 333.154470][ T841] shield 0003:0955:7214.0039: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 333.160230][ T10] usb 6-1: USB disconnect, device number 30 [ 333.164912][ T841] shield 0003:0955:7214.0039: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 333.170463][ T841] shield 0003:0955:7214.0039: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 333.176427][ T841] shield 0003:0955:7214.0039: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 333.486958][T22855] vlan2: entered promiscuous mode [ 333.488672][T22855] bond0: entered promiscuous mode [ 333.490825][T22855] bond_slave_0: entered promiscuous mode [ 333.492851][T22855] bond_slave_1: entered promiscuous mode [ 333.498508][ T841] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 333.660409][ T841] usb 10-1: config 0 has an invalid interface number: 113 but max is 0 [ 333.663071][ T841] usb 10-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 333.666162][ T841] usb 10-1: config 0 has no interface number 0 [ 333.668242][ T841] usb 10-1: config 0 interface 113 altsetting 53 endpoint 0x4 has invalid maxpacket 16, setting to 8 [ 333.671631][ T841] usb 10-1: config 0 interface 113 altsetting 53 endpoint 0x1 is Bulk; changing to Interrupt [ 333.674933][ T841] usb 10-1: config 0 interface 113 altsetting 53 endpoint 0xB has invalid maxpacket 16, setting to 8 [ 333.678581][ T841] usb 10-1: config 0 interface 113 altsetting 53 has a duplicate endpoint with address 0xB, skipping [ 333.681954][ T841] usb 10-1: config 0 interface 113 has no altsetting 0 [ 333.684134][ T841] usb 10-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=65.db [ 333.686986][ T841] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.691181][ T841] usb 10-1: config 0 descriptor?? [ 333.787563][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 333.867556][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 333.908992][T22880] debugfs: Invalid uid '0x00000000ffffffff' [ 333.911105][ T841] usb 10-1: string descriptor 0 read error: -71 [ 333.915287][ T841] asix 10-1:0.113 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 333.921652][ T841] asix 10-1:0.113: probe with driver asix failed with error -71 [ 333.926238][ T841] usb 10-1: USB disconnect, device number 5 [ 334.195510][T22903] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 334.276041][T22910] loop8: detected capacity change from 0 to 8 [ 334.279308][T22910] Dev loop8: unable to read RDB block 8 [ 334.281139][T22910] loop8: unable to read partition table [ 334.282984][T22910] loop8: partition table beyond EOD, truncated [ 334.285024][T22910] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 334.465268][T22925] loop6: detected capacity change from 0 to 524287487 [ 334.470071][T22528] buffer_io_error: 20 callbacks suppressed [ 334.470082][T22528] Buffer I/O error on dev loop6, logical block 0, async page read [ 334.474413][T22528] Buffer I/O error on dev loop6, logical block 0, async page read [ 334.477191][T22528] Buffer I/O error on dev loop6, logical block 0, async page read [ 334.479659][T22528] Buffer I/O error on dev loop6, logical block 0, async page read [ 334.482171][T22528] Buffer I/O error on dev loop6, logical block 0, async page read [ 334.484759][T22528] Buffer I/O error on dev loop6, logical block 0, async page read [ 334.488061][T22528] Buffer I/O error on dev loop6, logical block 0, async page read [ 334.491052][T22528] Buffer I/O error on dev loop6, logical block 0, async page read [ 334.493578][T22528] ldm_validate_partition_table(): Disk read failed. [ 334.495645][T22528] Buffer I/O error on dev loop6, logical block 0, async page read [ 334.499852][T22528] Buffer I/O error on dev loop6, logical block 0, async page read [ 334.502359][T22528] Dev loop6: unable to read RDB block 0 [ 334.504305][T22528] loop6: unable to read partition table [ 334.507217][T22925] ldm_validate_partition_table(): Disk read failed. [ 334.509403][T22925] Dev loop6: unable to read RDB block 0 [ 334.511359][T22925] loop6: unable to read partition table [ 334.513224][T22925] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 334.569480][T22925] loop6: detected capacity change from 524287487 to 524288000 [ 334.826985][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 334.906961][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 334.987247][ T5977] Bluetooth: hci3: command tx timeout [ 335.106998][ T842] usb 11-1: new low-speed USB device number 3 using dummy_hcd [ 335.261690][ T842] usb 11-1: config 0 has an invalid interface number: 113 but max is 0 [ 335.264276][ T842] usb 11-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 335.268269][ T842] usb 11-1: config 0 has no interface number 0 [ 335.270155][ T842] usb 11-1: config 0 interface 113 altsetting 53 endpoint 0x4 has invalid maxpacket 16, setting to 8 [ 335.273928][ T842] usb 11-1: config 0 interface 113 altsetting 53 endpoint 0x1 is Bulk; changing to Interrupt [ 335.277593][ T842] usb 11-1: config 0 interface 113 altsetting 53 endpoint 0xB has invalid maxpacket 16, setting to 8 [ 335.281125][ T842] usb 11-1: config 0 interface 113 altsetting 53 has a duplicate endpoint with address 0xB, skipping [ 335.284639][ T842] usb 11-1: config 0 interface 113 has no altsetting 0 [ 335.287143][ T842] usb 11-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=65.db [ 335.290148][ T842] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.293936][ T842] usb 11-1: config 0 descriptor?? [ 335.501347][ T842] usb 11-1: string descriptor 0 read error: -71 [ 335.504040][ T842] asix 11-1:0.113 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 335.508132][ T842] asix 11-1:0.113: probe with driver asix failed with error -71 [ 335.512700][ T842] usb 11-1: USB disconnect, device number 3 [ 335.606811][ T10] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 335.756560][T23001] debugfs: Invalid gid '0x00000000ffffffff' [ 335.786541][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 335.789638][ T10] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 335.792930][ T10] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.796626][ T10] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 335.802168][ T10] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 335.805362][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 335.808131][ T10] usb 10-1: SerialNumber: syz [ 335.812150][ T10] hub 10-1:1.0: bad descriptor, ignoring hub [ 335.814209][ T10] hub 10-1:1.0: probe with driver hub failed with error -5 [ 335.817109][ T10] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -22 [ 335.866460][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 335.946385][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 336.067147][T23009] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7652'. [ 336.126647][ T10] usb 10-1: USB disconnect, device number 6 [ 336.290935][T23023] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7659'. [ 336.526007][T23045] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 336.780746][T23067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7680'. [ 336.906011][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 336.986108][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 337.056263][T23098] pim6reg1: entered promiscuous mode [ 337.058849][T23098] pim6reg1: entered allmulticast mode [ 337.514580][T23145] binder: 23144:23145 unknown command 39 [ 337.516542][T23145] binder: 23144:23145 ioctl c0306201 800003c0 returned -22 [ 337.555886][ T53] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 337.726928][ T53] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 337.730334][ T53] usb 11-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 337.737135][ T53] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 337.740895][ T53] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.747801][T23129] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 337.762700][ T53] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 337.846367][T23184] lo speed is unknown, defaulting to 1000 [ 337.880661][T23184] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7734'. [ 337.883685][T23184] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7734'. [ 337.945474][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 338.000510][ T53] usb 11-1: USB disconnect, device number 4 [ 338.025528][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 338.175398][ T6193] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 338.327285][ T6193] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 338.330775][ T6193] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.334864][ T6193] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.338405][ T6193] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 338.343341][ T6193] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 338.347012][ T6193] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 338.349542][ T6193] usb 10-1: Manufacturer: syz [ 338.352417][ T6193] usb 10-1: config 0 descriptor?? [ 338.557520][ T10] kernel write not supported for file /sequencer2 (pid: 10 comm: kworker/0:1) [ 338.759180][ T6193] appleir 0003:05AC:8243.003A: unknown main item tag 0x0 [ 338.763658][ T6193] appleir 0003:05AC:8243.003A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 338.828858][T23232] lo speed is unknown, defaulting to 1000 [ 338.886676][T23232] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7762'. [ 338.890404][T23232] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7762'. [ 338.985076][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 338.998489][T23243] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 339.039170][ T6193] usb 10-1: USB disconnect, device number 7 [ 339.064933][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 339.592006][T23258] netlink: 'syz.4.7764': attribute type 12 has an invalid length. [ 339.595078][T23258] netlink: 'syz.4.7764': attribute type 29 has an invalid length. [ 339.597662][T23258] netlink: 148 bytes leftover after parsing attributes in process `syz.4.7764'. [ 339.812904][T23290] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 339.815160][T23291] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 339.824638][ T7309] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 339.869568][T23299] binder: 23298:23299 unknown command 39 [ 339.871864][T23299] binder: 23298:23299 ioctl c0306201 800003c0 returned -22 [ 339.989620][ T7309] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 339.993168][ T7309] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 339.996490][ T7309] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 339.999276][ T7309] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.013558][T23255] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 340.021253][ T7309] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 340.034420][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 340.104405][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 340.162277][T23323] binder: 23322:23323 unknown command 39 [ 340.164110][T23323] binder: 23322:23323 ioctl c0306201 800003c0 returned -22 [ 340.257172][ T842] usb 10-1: USB disconnect, device number 8 [ 340.800354][T23343] hub 6-0:1.0: USB hub found [ 340.802438][T23343] hub 6-0:1.0: 1 port detected [ 340.908895][T23364] overlayfs: upper fs does not support tmpfile. [ 341.064023][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 341.143888][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 341.220138][T23395] overlayfs: upper fs does not support tmpfile. [ 341.311266][T23405] netlink: 'syz.4.7846': attribute type 25 has an invalid length. [ 341.315782][T23405] netlink: 'syz.4.7846': attribute type 7 has an invalid length. [ 341.462019][T23417] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7844'. [ 341.830167][T23451] binder: 23450:23451 ioctl c0306201 80000540 returned -22 [ 341.954601][T23464] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 342.103415][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 342.143727][T23480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7873'. [ 342.169530][ T6193] kernel read not supported for file /input/mouse0 (pid: 6193 comm: kworker/3:3) [ 342.193738][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 342.453267][ T7309] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 342.614407][ T7309] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 342.617828][ T7309] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.621390][ T7309] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.624572][ T7309] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 342.629554][ T7309] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 342.632643][ T7309] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 342.635325][ T7309] usb 6-1: Manufacturer: syz [ 342.638127][ T7309] usb 6-1: config 0 descriptor?? [ 342.733061][ T6193] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 342.841165][ T5977] Bluetooth: hci1: ISO packet too small [ 342.887685][ T6193] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 342.891099][ T6193] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 342.895090][ T6193] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 342.897815][ T6193] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.898264][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 342.898274][ T40] audit: type=1326 audit(2000001039.381:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23508 comm="syz.5.7886" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x0 [ 342.902045][T23501] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 342.913632][ T6193] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 343.046479][ T7309] appleir 0003:05AC:8243.003B: unknown main item tag 0x0 [ 343.050585][ T7309] appleir 0003:05AC:8243.003B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 343.151646][ T6193] usb 9-1: USB disconnect, device number 14 [ 343.224548][T23530] syzkaller1: entered promiscuous mode [ 343.226356][T23530] syzkaller1: entered allmulticast mode [ 343.313899][ T6032] usb 6-1: USB disconnect, device number 31 [ 343.690805][T23565] netlink: 96 bytes leftover after parsing attributes in process `syz.6.7912'. [ 343.955372][T23600] lo speed is unknown, defaulting to 1000 [ 344.092479][ T10] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 344.192300][ C1] net_ratelimit: 2 callbacks suppressed [ 344.192311][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 344.253600][ T10] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 344.257003][ T10] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 344.260315][ T10] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 344.264956][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.270921][T23585] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 344.272238][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 344.277122][ T10] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 344.524782][ T842] usb 10-1: USB disconnect, device number 9 [ 344.571694][ T40] audit: type=1326 audit(2000001041.052:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23573 comm="syz.6.7916" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7fc00000 [ 345.004498][T23646] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 345.183682][ T10] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 345.216092][T23663] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.7956'. [ 345.221803][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 345.311823][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 345.331760][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 345.334642][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 345.337820][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.341187][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 345.344234][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 345.348965][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 345.351892][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 345.354414][ T10] usb 6-1: SerialNumber: syz [ 345.358216][ T10] hub 6-1:1.0: bad descriptor, ignoring hub [ 345.360125][ T10] hub 6-1:1.0: probe with driver hub failed with error -5 [ 345.363001][ T10] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 345.501669][ T6193] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 345.521611][ T61] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 345.662961][ T6193] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 345.666429][ T6193] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 345.669616][ T6193] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 345.672687][ T6193] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.676867][T23667] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 345.680899][ T6193] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 345.684672][ T61] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.688071][ T61] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.691087][ T61] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 345.696930][ T61] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 345.700216][ T61] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.708848][ T61] usb 11-1: config 0 descriptor?? [ 345.762303][T23632] raw-gadget.0 gadget.1: fail, usb_ep_set_wedge returned -11 [ 345.871699][ T10] usb 6-1: USB disconnect, device number 32 [ 345.944877][ T7309] usb 10-1: USB disconnect, device number 10 [ 346.121356][ T61] plantronics 0003:047F:FFFF.003C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 346.261274][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 346.327502][ T5978] Bluetooth: hci4: sending frame failed (-49) [ 346.330065][ T5977] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 346.341219][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 346.494836][ T10] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 346.641548][ T7309] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 346.642310][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 346.647409][ T10] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 346.650573][ T10] usb 9-1: config 0 has no interface number 0 [ 346.653093][ T10] usb 9-1: config 0 interface 184 has no altsetting 0 [ 346.658004][ T10] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 346.660856][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.664130][ T10] usb 9-1: Product: syz [ 346.665712][ T10] usb 9-1: Manufacturer: syz [ 346.667622][ T10] usb 9-1: SerialNumber: syz [ 346.673247][ T10] usb 9-1: config 0 descriptor?? [ 346.676601][ T10] smsc75xx v1.0.0 [ 346.677783][ T10] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 346.681792][ T10] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -22 [ 346.792449][ T7309] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 346.796161][ T7309] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 346.799681][ T7309] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 346.803634][ T7309] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 346.807756][ T7309] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 346.810642][ T7309] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.815286][ T7309] usb 6-1: config 0 descriptor?? [ 346.818241][T23678] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 346.884397][ T59] usb 9-1: USB disconnect, device number 15 [ 347.226809][ T7309] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 347.229297][ T7309] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 347.231887][ T7309] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 347.234244][ T7309] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 347.236675][ T7309] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 347.241440][ T7309] plantronics 0003:047F:FFFF.003D: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 347.310795][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 347.380668][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 347.482622][ T6032] usb 6-1: USB disconnect, device number 33 [ 347.710598][ T67] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 347.871933][ T67] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.875345][ T67] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.878402][ T67] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 347.883465][ T67] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 347.886510][ T67] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.890403][ T67] usb 10-1: config 0 descriptor?? [ 347.958702][T23753] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7997'. [ 347.963109][T23753] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7997'. [ 348.121265][ T59] usb 11-1: USB disconnect, device number 5 [ 348.314041][ T67] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 348.316513][ T67] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 348.318825][ T67] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 348.321548][ T67] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 348.323868][ T67] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 348.327954][ T67] plantronics 0003:047F:FFFF.003E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 348.350239][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 348.382283][T23789] batadv_slave_1: entered promiscuous mode [ 348.384760][T23788] batadv_slave_1: left promiscuous mode [ 348.400259][ T10] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 348.430166][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 348.551842][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.555230][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.558365][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 348.562719][ T10] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 348.565579][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.569160][ T10] usb 9-1: config 0 descriptor?? [ 348.581900][ T6032] usb 10-1: USB disconnect, device number 11 [ 348.810010][ T9] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 348.971313][ T9] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 348.974818][ T9] usb 11-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 348.977948][ T9] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 348.982385][ T9] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.987962][ T10] plantronics 0003:047F:FFFF.003F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 348.993381][T23805] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 348.997499][ T9] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 349.238814][ T6032] usb 11-1: USB disconnect, device number 6 [ 349.244986][ T9] usb 9-1: USB disconnect, device number 16 [ 349.379710][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 349.459632][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 349.985164][T23835] lo speed is unknown, defaulting to 1000 [ 350.024624][T23842] batadv_slave_1: entered promiscuous mode [ 350.027173][T23841] batadv_slave_1: left promiscuous mode [ 350.030861][T23839] kvm: apic: phys broadcast and lowest prio [ 350.062155][T23835] netlink: 'syz.1.8034': attribute type 1 has an invalid length. [ 350.064750][T23835] netlink: 'syz.1.8034': attribute type 2 has an invalid length. [ 350.093265][T23848] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 350.095720][T23848] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 350.098942][T23848] vhci_hcd vhci_hcd.0: Device attached [ 350.125219][T23856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8043'. [ 350.289310][ T61] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 350.329205][ T6193] usb 47-1: new high-speed USB device number 2 using vhci_hcd [ 350.339385][ T842] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 350.387220][T23875] PID 23875 killed due to inadequate hugepage pool [ 350.429177][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 350.441409][ T61] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 350.445889][ T61] usb 11-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 350.450731][ T61] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 350.454269][ T61] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.459671][T23844] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 350.464202][ T61] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 350.486027][T23883] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.8054'. [ 350.489158][ T842] usb 10-1: Using ep0 maxpacket: 16 [ 350.492337][ T842] usb 10-1: config 0 has no interfaces? [ 350.494148][ T842] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 350.497002][ T842] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.500716][ T842] usb 10-1: config 0 descriptor?? [ 350.509158][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 350.627883][T23889] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 350.703841][ T6032] usb 11-1: USB disconnect, device number 7 [ 350.708007][T23850] vhci_hcd: connection closed [ 350.710254][ T1141] vhci_hcd: stop threads [ 350.713530][ T1141] vhci_hcd: release socket [ 350.715005][ T1141] vhci_hcd: disconnect device [ 350.720375][ T2295] usb 10-1: USB disconnect, device number 12 [ 350.769216][ T6193] vhci_hcd: vhci_device speed not set [ 350.899578][T23901] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 350.963362][T23901] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 351.003801][T23901] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 351.071763][T23901] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 351.150778][ T98] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 351.161366][ T1141] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 351.166991][ T1141] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 351.176967][ T1168] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 351.458766][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 351.508756][ T61] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 351.538582][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 351.659788][ T61] usb 11-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 351.664560][ T61] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 351.667373][ T61] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 351.670190][ T61] usb 11-1: SerialNumber: syz [ 351.698531][ T842] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 351.850199][ T842] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.853431][ T842] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.856868][ T842] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.859956][ T842] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 351.863974][ T842] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 351.866825][ T842] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.872459][ T842] usb 9-1: config 0 descriptor?? [ 352.117930][T23970] pim6reg1: entered promiscuous mode [ 352.120238][T23970] pim6reg1: entered allmulticast mode [ 352.283036][ T842] keytouch 0003:0926:3333.0040: fixing up Keytouch IEC report descriptor [ 352.295217][ T842] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0926:3333.0040/input/input108 [ 352.298992][ T61] cdc_ether 11-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.6-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 352.369530][ T842] keytouch 0003:0926:3333.0040: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 352.484117][ T53] usb 9-1: USB disconnect, device number 17 [ 352.498193][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 352.578055][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 352.623895][T23977] binder: 23976:23977 ioctl c0306201 80000040 returned -14 [ 352.691008][ T842] usb 11-1: USB disconnect, device number 8 [ 352.693878][ T842] cdc_ether 11-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.6-1, CDC Ethernet Device [ 353.005882][T23989] vivid-004: disconnect [ 353.008565][T23988] vivid-004: reconnect [ 353.089395][T23999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8106'. [ 353.093030][T23999] netlink: 'syz.1.8106': attribute type 1 has an invalid length. [ 353.095854][T23999] netlink: 'syz.1.8106': attribute type 2 has an invalid length. [ 353.300398][T24026] loop2: detected capacity change from 0 to 7 [ 353.302883][T24026] Dev loop2: unable to read RDB block 7 [ 353.304739][T24026] loop2: unable to read partition table [ 353.306643][T24026] loop2: partition table beyond EOD, truncated [ 353.309426][T24026] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 353.512433][T24053] lo speed is unknown, defaulting to 1000 [ 353.537691][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 353.553072][T24055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 353.627750][ T67] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 353.787639][ T67] usb 11-1: Using ep0 maxpacket: 16 [ 353.790853][ T67] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.794347][ T67] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.797714][ T67] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 353.802024][ T67] usb 11-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 353.804949][ T67] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.809622][ T67] usb 11-1: config 0 descriptor?? [ 354.077433][ T842] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 354.218723][ T67] hid_parser_main: 10 callbacks suppressed [ 354.218742][ T67] shield 0003:0955:7214.0041: unknown main item tag 0x0 [ 354.224376][ T67] shield 0003:0955:7214.0041: unknown main item tag 0x0 [ 354.227101][ T67] shield 0003:0955:7214.0041: unknown main item tag 0x0 [ 354.232690][ T67] shield 0003:0955:7214.0041: unknown main item tag 0x0 [ 354.235176][ T67] shield 0003:0955:7214.0041: unknown main item tag 0x0 [ 354.237368][ T842] usb 9-1: Using ep0 maxpacket: 16 [ 354.240670][ T67] input: HID 0955:7214 Haptics as /devices/virtual/input/input110 [ 354.241095][ T842] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.250608][ T842] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.251999][ T67] shield 0003:0955:7214.0041: Registered Thunderstrike controller [ 354.253897][ T842] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 354.259234][ T67] shield 0003:0955:7214.0041: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.6-1/input0 [ 354.261956][ T842] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 354.268898][ T842] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.273279][ T842] usb 9-1: config 0 descriptor?? [ 354.415911][T24039] random: crng reseeded on system resumption [ 354.430236][ T6193] usb 11-1: USB disconnect, device number 9 [ 354.430437][ T67] shield 0003:0955:7214.0041: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 354.437243][ T67] shield 0003:0955:7214.0041: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 354.442139][ T67] shield 0003:0955:7214.0041: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 354.446740][ T67] shield 0003:0955:7214.0041: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 354.557056][ T61] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 354.587168][ C1] net_ratelimit: 1 callbacks suppressed [ 354.587180][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 354.667092][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 354.683840][ T842] input: HID 0955:7214 Haptics as /devices/virtual/input/input111 [ 354.691685][ T842] shield 0003:0955:7214.0042: Registered Thunderstrike controller [ 354.694232][ T842] shield 0003:0955:7214.0042: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 354.717044][ T61] usb 6-1: Using ep0 maxpacket: 8 [ 354.719908][ T61] usb 6-1: config 0 interface 0 has no altsetting 0 [ 354.721949][ T61] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 354.724763][ T61] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.728557][ T61] usb 6-1: config 0 descriptor?? [ 354.889032][ T34] shield 0003:0955:7214.0042: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 354.889119][ T2295] usb 9-1: USB disconnect, device number 18 [ 354.893796][ T34] shield 0003:0955:7214.0042: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 354.900312][ T34] shield 0003:0955:7214.0042: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 354.903902][ T34] shield 0003:0955:7214.0042: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 355.123701][T24101] netlink: 'syz.6.8156': attribute type 12 has an invalid length. [ 355.126200][T24101] netlink: 'syz.6.8156': attribute type 29 has an invalid length. [ 355.128950][T24101] netlink: 148 bytes leftover after parsing attributes in process `syz.6.8156'. [ 355.140227][ T61] mcp2221 0003:04D8:00DD.0043: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 355.341314][ T61] usb 6-1: USB disconnect, device number 34 [ 355.454112][ T1142] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.559252][ T1142] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.618318][ T5978] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 355.627802][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 355.630078][ T5978] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 355.635225][ T5978] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 355.635619][ T1142] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.638700][ T5978] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 355.646073][ T5978] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 355.666030][T24117] lo speed is unknown, defaulting to 1000 [ 355.696507][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 355.703943][ T1142] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.708519][ T34] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 355.803804][T24117] chnl_net:caif_netlink_parms(): no params data found [ 355.854037][ T1142] bridge_slave_1: left allmulticast mode [ 355.855884][ T1142] bridge_slave_1: left promiscuous mode [ 355.857894][ T34] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 355.857911][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 355.862278][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.865637][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 355.871609][ T34] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 355.872029][ T1142] bridge_slave_0: left allmulticast mode [ 355.875617][ T34] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 355.878865][ T1142] bridge_slave_0: left promiscuous mode [ 355.881197][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.883715][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.888359][ T34] usb 9-1: config 0 descriptor?? [ 356.086500][ T9] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 356.168867][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.172473][ T1142] bond_slave_0: left promiscuous mode [ 356.177095][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.180871][ T1142] bond_slave_1: left promiscuous mode [ 356.184173][ T1142] bond0 (unregistering): Released all slaves [ 356.237492][ T9] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 356.237780][T24117] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.241992][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 356.242017][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 356.242035][ T9] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 356.242065][ T9] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 356.242077][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.244605][T24117] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.250614][ T9] usb 10-1: config 0 descriptor?? [ 356.251878][T24117] bridge_slave_0: entered allmulticast mode [ 356.274951][T24117] bridge_slave_0: entered promiscuous mode [ 356.278605][T24117] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.280882][T24117] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.283188][T24117] bridge_slave_1: entered allmulticast mode [ 356.285896][T24117] bridge_slave_1: entered promiscuous mode [ 356.303002][ T34] plantronics 0003:047F:FFFF.0044: ignoring exceeding usage max [ 356.308954][ T34] plantronics 0003:047F:FFFF.0044: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 356.349038][T24117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.354995][T24117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.391418][T24117] team0: Port device team_slave_0 added [ 356.394730][T24117] team0: Port device team_slave_1 added [ 356.448768][T24117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.451503][T24117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.462054][T24117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.467356][T24117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.469574][T24117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.479421][T24117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.528347][T24117] hsr_slave_0: entered promiscuous mode [ 356.531064][T24117] hsr_slave_1: entered promiscuous mode [ 356.533213][T24117] debugfs: 'hsr0' already exists in 'hsr' [ 356.535501][T24117] Cannot create hsr debugfs directory [ 356.541526][ T1142] hsr_slave_0: left promiscuous mode [ 356.543723][ T1142] hsr_slave_1: left promiscuous mode [ 356.545753][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.548073][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.550723][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.552871][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.583124][ T1142] veth1_macvtap: left promiscuous mode [ 356.584955][ T1142] veth0_macvtap: left promiscuous mode [ 356.586852][ T1142] veth1_vlan: left promiscuous mode [ 356.588559][ T1142] veth0_vlan: left promiscuous mode [ 356.656083][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 356.668311][ T9] plantronics 0003:047F:FFFF.0045: ignoring exceeding usage max [ 356.674222][ T9] plantronics 0003:047F:FFFF.0045: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 356.736098][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 357.137840][T24155] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8179'. [ 357.236760][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 357.310149][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 357.519428][ T34] usb 10-1: USB disconnect, device number 13 [ 357.705545][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 357.708952][ T5977] Bluetooth: hci3: command tx timeout [ 357.775494][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 357.962356][T24117] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 357.966770][T24117] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 357.970869][T24117] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 357.975642][T24117] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 358.024341][T24117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.034506][T24117] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.041146][ T98] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.043403][ T98] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.058478][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.061295][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.190491][T24117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.225752][T24190] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.8190'. [ 358.233232][T24193] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 358.285993][ T9] usb 9-1: USB disconnect, device number 19 [ 358.327555][T24117] veth0_vlan: entered promiscuous mode [ 358.332317][T24117] veth1_vlan: entered promiscuous mode [ 358.351523][T24117] veth0_macvtap: entered promiscuous mode [ 358.356045][T24117] veth1_macvtap: entered promiscuous mode [ 358.365034][T24117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.374629][T24117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.379532][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.382270][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.386551][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.389243][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.424049][ T98] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.426954][ T98] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.439669][ T98] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.442130][ T98] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.735130][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 358.815296][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 358.990683][T24246] input: syz0 as /devices/virtual/input/input112 [ 358.993441][T24246] input: failed to attach handler leds to device input112, error: -6 [ 359.256187][ T40] audit: type=1326 audit(2000001311.747:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24280 comm="syz.7.8226" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd8579 code=0x0 [ 359.425372][T24300] input: syz0 as /devices/virtual/input/input113 [ 359.774564][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 359.784513][ T5977] Bluetooth: hci3: command tx timeout [ 359.854504][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 360.309290][T24396] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8274'. [ 360.403282][T24411] netlink: 51 bytes leftover after parsing attributes in process `syz.5.8281'. [ 360.664409][ T6052] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 360.813983][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 360.823984][ T6052] usb 12-1: Using ep0 maxpacket: 8 [ 360.826931][ T6052] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 360.829501][ T6052] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 360.832508][ T6052] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 360.835887][ T6052] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 360.838961][ T6052] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 360.842001][ T6052] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 360.846120][ T6052] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 360.849045][ T6052] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.853833][ T6052] usbtmc 12-1:16.0: probe with driver usbtmc failed with error -22 [ 360.893936][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 360.896307][ T59] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 361.045013][ T59] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.048425][ T59] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.051433][ T59] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 361.057906][ T59] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 361.060843][ T59] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.064646][ T59] usb 10-1: config 0 descriptor?? [ 361.091869][T24433] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8291'. [ 361.107895][T24433] vxlan1: entered promiscuous mode [ 361.291283][ T9] libceph: connect (1)[c::]:6789 error -101 [ 361.293861][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 361.473450][ T59] plantronics 0003:047F:FFFF.0046: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 361.555559][ T7306] libceph: connect (1)[c::]:6789 error -101 [ 361.557580][ T7306] libceph: mon0 (1)[c::]:6789 connect error [ 361.725794][ T2295] usb 10-1: USB disconnect, device number 14 [ 361.853440][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 361.853647][ T5977] Bluetooth: hci3: command tx timeout [ 361.933472][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 362.063563][ T7306] libceph: connect (1)[c::]:6789 error -101 [ 362.065571][ T7306] libceph: mon0 (1)[c::]:6789 connect error [ 362.113513][T24435] ceph: No mds server is up or the cluster is laggy [ 362.519950][T24480] netlink: 'syz.4.8311': attribute type 13 has an invalid length. [ 362.823104][ T7306] usb 12-1: USB disconnect, device number 2 [ 362.902915][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 362.917959][T24493] serio: Serial port ptm0 [ 362.972932][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 363.368171][T24536] hsr0: entered allmulticast mode [ 363.369845][T24536] hsr_slave_0: entered allmulticast mode [ 363.371631][T24536] hsr_slave_1: entered allmulticast mode [ 363.381948][T24536] hsr_slave_0: left promiscuous mode [ 363.382690][ T9] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 363.386090][T24536] hsr_slave_1: left promiscuous mode [ 363.397242][T24536] hsr0 (unregistering): left allmulticast mode [ 363.482681][ T6052] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 363.532990][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 363.539532][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.543122][ T9] usb 6-1: config 0 has no interfaces? [ 363.545468][ T9] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 363.548267][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.551908][ T9] usb 6-1: config 0 descriptor?? [ 363.582618][ T7306] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 363.642602][ T6052] usb 9-1: Using ep0 maxpacket: 32 [ 363.645719][ T6052] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 363.648373][ T6052] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 363.651059][ T6052] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 363.654297][ T6052] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 363.657329][ T6052] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 363.660328][ T6052] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 363.664532][ T6052] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 363.667361][ T6052] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.671211][ T6052] usb 9-1: config 0 descriptor?? [ 363.720821][T24552] [ 363.721662][T24552] ===================================================== [ 363.724106][T24552] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 363.726488][T24552] 6.16.0-syzkaller-11895-gcca7a0aae895 #0 Not tainted [ 363.729076][T24552] ----------------------------------------------------- [ 363.732194][T24552] syz.5.8341/24552 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 363.733709][ T7306] usb 12-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 363.734596][T24552] ffff88806b75c9f0 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x138/0x510 [ 363.738195][ T7306] usb 12-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 363.740861][T24552] [ 363.740861][T24552] and this task is already holding: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 363.740870][T24552] ffff888077fe2028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 363.744194][ T7306] usb 12-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 363.746444][T24552] which would create a new lock dependency: [ 363.749770][ T7306] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.752618][T24552] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 363.752652][T24552] [ 363.752652][T24552] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 363.752657][T24552] (&dev->event_lock#2){..-.}-{3:3} [ 363.752670][T24552] [ 363.752670][T24552] ... which became SOFTIRQ-irq-safe at: [ 363.752675][T24552] lock_acquire+0x179/0x350 [ 363.752693][T24552] _raw_spin_lock_irqsave+0x3a/0x60 [ 363.757745][ T9] usb 6-1: USB disconnect, device number 35 [ 363.759653][T24552] input_inject_event+0x9f/0x3b0 [ 363.773413][T24552] led_set_brightness+0x217/0x290 [ 363.775041][T24552] led_trigger_event+0xda/0x270 [ 363.776619][T24552] kbd_bh+0x21b/0x300 [ 363.777926][T24552] tasklet_action_common+0x284/0x400 [ 363.779640][T24552] handle_softirqs+0x219/0x8e0 [ 363.781200][T24552] __irq_exit_rcu+0x109/0x170 [ 363.782723][T24552] irq_exit_rcu+0x9/0x30 [ 363.783470][T24534] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 363.784107][T24552] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 363.787472][ T7306] usb 12-1: Quirk or no altset; falling back to MIDI 1.0 [ 363.788202][T24552] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 363.788220][T24552] _raw_spin_unlock_irqrestore+0x31/0x80 [ 363.794201][T24552] input_inject_event+0x1c0/0x3b0 [ 363.795945][T24552] evdev_write+0x2e1/0x440 [ 363.797436][T24552] vfs_write+0x29d/0x1150 [ 363.798894][T24552] ksys_write+0x1f8/0x250 [ 363.800346][T24552] __do_fast_syscall_32+0x7c/0x3a0 [ 363.802029][T24552] do_fast_syscall_32+0x32/0x80 [ 363.803613][T24552] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 363.805621][T24552] [ 363.805621][T24552] to a SOFTIRQ-irq-unsafe lock: [ 363.807800][T24552] (tasklist_lock){.+.+}-{3:3} [ 363.807817][T24552] [ 363.807817][T24552] ... which became SOFTIRQ-irq-unsafe at: [ 363.811788][T24552] ... [ 363.811793][T24552] lock_acquire+0x179/0x350 [ 363.814143][T24552] _raw_read_lock+0x5f/0x70 [ 363.815675][T24552] __do_wait+0x105/0x890 [ 363.817054][T24552] do_wait+0x21e/0x5a0 [ 363.818379][T24552] kernel_wait+0x9f/0x160 [ 363.819821][T24552] call_usermodehelper_exec_work+0xf1/0x170 [ 363.821720][T24552] process_one_work+0x9cc/0x1b70 [ 363.823335][T24552] worker_thread+0x6c8/0xf10 [ 363.824817][T24552] kthread+0x3c5/0x780 [ 363.826159][T24552] ret_from_fork+0x5d7/0x6f0 [ 363.827680][T24552] ret_from_fork_asm+0x1a/0x30 [ 363.829238][T24552] [ 363.829238][T24552] other info that might help us debug this: [ 363.829238][T24552] [ 363.832395][T24552] Chain exists of: [ 363.832395][T24552] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 363.832395][T24552] [ 363.836569][T24552] Possible interrupt unsafe locking scenario: [ 363.836569][T24552] [ 363.839133][T24552] CPU0 CPU1 [ 363.840834][T24552] ---- ---- [ 363.842518][T24552] lock(tasklist_lock); [ 363.843872][T24552] local_irq_disable(); [ 363.845958][T24552] lock(&dev->event_lock#2); [ 363.848229][T24552] lock(&client->buffer_lock); [ 363.850524][T24552] [ 363.851643][T24552] lock(&dev->event_lock#2); [ 363.853184][T24552] [ 363.853184][T24552] *** DEADLOCK *** [ 363.853184][T24552] [ 363.855799][T24552] 7 locks held by syz.5.8341/24552: [ 363.857426][T24552] #0: ffff888028af8118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x184/0x440 [ 363.860293][T24552] #1: ffff888022f90230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0x9f/0x3b0 [ 363.863473][T24552] #2: ffffffff8e5c0fe0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbb/0x3b0 [ 363.866492][T24552] #3: ffffffff8e5c0fe0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x80/0x880 [ 363.869497][T24552] #4: ffffffff8e5c0fe0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x7b/0x390 [ 363.872371][T24552] #5: ffff888077fe2028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 363.875590][T24552] #6: ffffffff8e5c0fe0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x62/0x510 [ 363.878426][T24552] [ 363.878426][T24552] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 363.881675][T24552] -> (&dev->event_lock#2){..-.}-{3:3} { [ 363.883475][T24552] IN-SOFTIRQ-W at: [ 363.884772][T24552] lock_acquire+0x179/0x350 [ 363.886788][T24552] _raw_spin_lock_irqsave+0x3a/0x60 [ 363.888998][T24552] input_inject_event+0x9f/0x3b0 [ 363.891135][T24552] led_set_brightness+0x217/0x290 [ 363.893286][T24552] led_trigger_event+0xda/0x270 [ 363.895414][T24552] kbd_bh+0x21b/0x300 [ 363.897253][T24552] tasklet_action_common+0x284/0x400 [ 363.899448][T24552] handle_softirqs+0x219/0x8e0 [ 363.901519][T24552] __irq_exit_rcu+0x109/0x170 [ 363.903578][T24552] irq_exit_rcu+0x9/0x30 [ 363.905493][T24552] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 363.907857][T24552] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 363.910304][T24552] _raw_spin_unlock_irqrestore+0x31/0x80 [ 363.912655][T24552] input_inject_event+0x1c0/0x3b0 [ 363.914807][T24552] evdev_write+0x2e1/0x440 [ 363.916787][T24552] vfs_write+0x29d/0x1150 [ 363.918716][T24552] ksys_write+0x1f8/0x250 [ 363.920659][T24552] __do_fast_syscall_32+0x7c/0x3a0 [ 363.922840][T24552] do_fast_syscall_32+0x32/0x80 [ 363.924939][T24552] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 363.927471][T24552] INITIAL USE at: [ 363.928745][T24552] lock_acquire+0x179/0x350 [ 363.930713][T24552] _raw_spin_lock_irqsave+0x3a/0x60 [ 363.932568][ T5977] Bluetooth: hci3: command tx timeout [ 363.932891][T24552] input_inject_event+0x9f/0x3b0 [ 363.932910][T24552] led_set_brightness+0x217/0x290 [ 363.932924][T24552] kbd_led_trigger_activate+0xcb/0x110 [ 363.941040][T24552] led_trigger_set+0x59a/0xc50 [ 363.943103][T24552] led_trigger_set_default+0x1e0/0x2e0 [ 363.945433][T24552] led_classdev_register_ext+0x7b8/0xa10 [ 363.947735][T24552] input_leds_connect+0x552/0x8e0 [ 363.949844][T24552] input_attach_handler.isra.0+0x184/0x260 [ 363.952196][T24552] input_register_device+0xab9/0x1180 [ 363.954415][T24552] atkbd_connect+0x5f8/0xa40 [ 363.956414][T24552] serio_driver_probe+0x7c/0xd0 [ 363.958477][T24552] really_probe+0x23e/0xa90 [ 363.960446][T24552] __driver_probe_device+0x1de/0x440 [ 363.962649][T24552] driver_probe_device+0x4c/0x1b0 [ 363.964761][T24552] __driver_attach+0x283/0x580 [ 363.966786][T24552] bus_for_each_dev+0x13b/0x1d0 [ 363.968838][T24552] serio_handle_event+0x335/0xc30 [ 363.970956][T24552] process_one_work+0x9cc/0x1b70 [ 363.973061][T24552] worker_thread+0x6c8/0xf10 [ 363.975026][T24552] kthread+0x3c5/0x780 [ 363.976862][T24552] ret_from_fork+0x5d7/0x6f0 [ 363.978844][T24552] ret_from_fork_asm+0x1a/0x30 [ 363.980871][T24552] } [ 363.981707][T24552] ... key at: [] __key.7+0x0/0x40 [ 363.983985][T24552] -> (&client->buffer_lock){....}-{3:3} { [ 363.985783][T24552] INITIAL USE at: [ 363.987027][T24552] lock_acquire+0x179/0x350 [ 363.988945][T24552] _raw_spin_lock+0x2e/0x40 [ 363.990853][T24552] evdev_pass_values+0x10e/0x9b0 [ 363.992905][T24552] evdev_events+0x1bb/0x390 [ 363.994811][T24552] input_pass_values+0x74e/0x880 [ 363.996038][ T61] usb 12-1: USB disconnect, device number 3 [ 363.996852][T24552] input_handle_event+0xf00/0x14d0 [ 363.996869][T24552] input_inject_event+0x1e8/0x3b0 [ 364.002932][T24552] evdev_write+0x2e1/0x440 [ 364.004842][T24552] vfs_write+0x29d/0x1150 [ 364.006714][T24552] ksys_write+0x1f8/0x250 [ 364.008582][T24552] __do_fast_syscall_32+0x7c/0x3a0 [ 364.010659][T24552] do_fast_syscall_32+0x32/0x80 [ 364.012672][T24552] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 364.015131][T24552] } [ 364.015982][T24552] ... key at: [] __key.1+0x0/0x40 [ 364.018193][T24552] ... acquired at: [ 364.019412][T24552] _raw_spin_lock+0x2e/0x40 [ 364.020915][T24552] evdev_pass_values+0x10e/0x9b0 [ 364.022529][T24552] evdev_events+0x1bb/0x390 [ 364.024031][T24552] input_pass_values+0x74e/0x880 [ 364.025647][T24552] input_handle_event+0xf00/0x14d0 [ 364.027319][T24552] input_inject_event+0x1e8/0x3b0 [ 364.028962][T24552] evdev_write+0x2e1/0x440 [ 364.030426][T24552] vfs_write+0x29d/0x1150 [ 364.031873][T24552] ksys_write+0x1f8/0x250 [ 364.033316][T24552] __do_fast_syscall_32+0x7c/0x3a0 [ 364.034978][T24552] do_fast_syscall_32+0x32/0x80 [ 364.036584][T24552] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 364.038617][T24552] [ 364.039395][T24552] [ 364.039395][T24552] the dependencies between the lock to be acquired [ 364.039400][T24552] and SOFTIRQ-irq-unsafe lock: [ 364.043641][T24552] -> (tasklist_lock){.+.+}-{3:3} { [ 364.045312][T24552] HARDIRQ-ON-R at: [ 364.046630][T24552] lock_acquire+0x179/0x350 [ 364.048674][T24552] _raw_read_lock+0x5f/0x70 [ 364.050698][T24552] __do_wait+0x105/0x890 [ 364.052670][T24552] do_wait+0x21e/0x5a0 [ 364.054576][T24552] kernel_wait+0x9f/0x160 [ 364.056581][T24552] call_usermodehelper_exec_work+0xf1/0x170 [ 364.059028][T24552] process_one_work+0x9cc/0x1b70 [ 364.061203][T24552] worker_thread+0x6c8/0xf10 [ 364.063257][T24552] kthread+0x3c5/0x780 [ 364.065174][T24552] ret_from_fork+0x5d7/0x6f0 [ 364.067229][T24552] ret_from_fork_asm+0x1a/0x30 [ 364.069342][T24552] SOFTIRQ-ON-R at: [ 364.070657][T24552] lock_acquire+0x179/0x350 [ 364.072722][T24552] _raw_read_lock+0x5f/0x70 [ 364.074777][T24552] __do_wait+0x105/0x890 [ 364.076745][T24552] do_wait+0x21e/0x5a0 [ 364.078655][T24552] kernel_wait+0x9f/0x160 [ 364.080651][T24552] call_usermodehelper_exec_work+0xf1/0x170 [ 364.083094][T24552] process_one_work+0x9cc/0x1b70 [ 364.085257][T24552] worker_thread+0x6c8/0xf10 [ 364.087285][T24552] kthread+0x3c5/0x780 [ 364.089184][T24552] ret_from_fork+0x5d7/0x6f0 [ 364.091253][T24552] ret_from_fork_asm+0x1a/0x30 [ 364.093397][T24552] INITIAL USE at: [ 364.094689][T24552] lock_acquire+0x179/0x350 [ 364.096710][T24552] _raw_write_lock_irq+0x36/0x50 [ 364.098849][T24552] copy_process+0x4caf/0x7690 [ 364.100928][T24552] kernel_clone+0xfc/0x930 [ 364.102918][T24552] user_mode_thread+0xc7/0x110 [ 364.105030][T24552] rest_init+0x23/0x2b0 [ 364.106956][T24552] start_kernel+0x3ee/0x4d0 [ 364.108960][T24552] x86_64_start_reservations+0x18/0x30 [ 364.111232][T24552] x86_64_start_kernel+0x130/0x190 [ 364.113422][T24552] common_startup_64+0x13e/0x148 [ 364.115541][T24552] INITIAL READ USE at: [ 364.116961][T24552] lock_acquire+0x179/0x350 [ 364.119093][T24552] _raw_read_lock+0x5f/0x70 [ 364.121251][T24552] __do_wait+0x105/0x890 [ 364.123333][T24552] do_wait+0x21e/0x5a0 [ 364.125368][T24552] kernel_wait+0x9f/0x160 [ 364.127476][T24552] call_usermodehelper_exec_work+0xf1/0x170 [ 364.130054][T24552] process_one_work+0x9cc/0x1b70 [ 364.132357][T24552] worker_thread+0x6c8/0xf10 [ 364.134520][T24552] kthread+0x3c5/0x780 [ 364.136549][T24552] ret_from_fork+0x5d7/0x6f0 [ 364.138729][T24552] ret_from_fork_asm+0x1a/0x30 [ 364.140989][T24552] } [ 364.141942][T24552] ... key at: [] tasklist_lock+0x18/0x40 [ 364.144816][T24552] ... acquired at: [ 364.146096][T24552] _raw_read_lock+0x5f/0x70 [ 364.147602][T24552] send_sigurg+0xed/0xc80 [ 364.149057][T24552] sk_send_sigurg+0x76/0x360 [ 364.150563][T24552] unix_stream_sendmsg+0xfa5/0x1340 [ 364.152240][T24552] ____sys_sendmsg+0xa98/0xc70 [ 364.153780][T24552] ___sys_sendmsg+0x134/0x1d0 [ 364.155315][T24552] __sys_sendmmsg+0x2f9/0x420 [ 364.156853][T24552] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 364.158645][T24552] __do_fast_syscall_32+0x7c/0x3a0 [ 364.160297][T24552] do_fast_syscall_32+0x32/0x80 [ 364.161889][T24552] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 364.163912][T24552] [ 364.164674][T24552] -> (&f_owner->lock){....}-{3:3} { [ 364.166332][T24552] INITIAL USE at: [ 364.167580][T24552] lock_acquire+0x179/0x350 [ 364.169512][T24552] _raw_write_lock_irq+0x36/0x50 [ 364.171550][T24552] __f_setown+0x61/0x3c0 [ 364.173418][T24552] generic_setlease+0xef2/0x1300 [ 364.175479][T24552] kernel_setlease+0x106/0x140 [ 364.177514][T24552] vfs_setlease+0x258/0x2d0 [ 364.179529][T24552] fcntl_setlease+0x3ed/0x5a0 [ 364.181522][T24552] do_fcntl+0x751/0x15a0 [ 364.183410][T24552] do_compat_fcntl64+0x367/0x710 [ 364.185480][T24552] __do_fast_syscall_32+0x7c/0x3a0 [ 364.187605][T24552] do_fast_syscall_32+0x32/0x80 [ 364.189638][T24552] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 364.192143][T24552] INITIAL READ USE at: [ 364.193548][T24552] lock_acquire+0x179/0x350 [ 364.195630][T24552] _raw_read_lock_irqsave+0x74/0x90 [ 364.197916][T24552] send_sigio+0x31/0x3e0 [ 364.199988][T24552] dnotify_handle_event+0x15e/0x2b0 [ 364.202291][T24552] fsnotify_handle_inode_event.isra.0+0x1e2/0x3f0 [ 364.204937][T24552] fsnotify+0x13d6/0x1dc0 [ 364.206945][T24552] vfs_mkdir+0x71d/0x8c0 [ 364.208938][T24552] do_mkdirat+0x304/0x3e0 [ 364.210949][T24552] __ia32_sys_mkdir+0x61/0x80 [ 364.213104][T24552] __do_fast_syscall_32+0x7c/0x3a0 [ 364.215368][T24552] do_fast_syscall_32+0x32/0x80 [ 364.217549][T24552] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 364.220177][T24552] } [ 364.221029][T24552] ... key at: [] __key.1+0x0/0x40 [ 364.223253][T24552] ... acquired at: [ 364.224492][T24552] _raw_read_lock_irqsave+0x74/0x90 [ 364.226158][T24552] send_sigio+0x31/0x3e0 [ 364.227570][T24552] kill_fasync+0x214/0x510 [ 364.229034][T24552] lease_break_callback+0x23/0x30 [ 364.230663][T24552] __break_lease+0x671/0x1810 [ 364.232193][T24552] do_dentry_open+0x91f/0x1530 [ 364.233740][T24552] vfs_open+0x82/0x3f0 [ 364.235083][T24552] path_openat+0x1de4/0x2cb0 [ 364.236597][T24552] do_filp_open+0x20b/0x470 [ 364.238090][T24552] do_sys_openat2+0x11b/0x1d0 [ 364.239624][T24552] __ia32_compat_sys_open+0x146/0x1e0 [ 364.241361][T24552] __do_fast_syscall_32+0x7c/0x3a0 [ 364.243016][T24552] do_fast_syscall_32+0x32/0x80 [ 364.244599][T24552] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 364.246643][T24552] [ 364.247427][T24552] -> (&new->fa_lock){....}-{3:3} { [ 364.249064][T24552] INITIAL USE at: [ 364.250308][T24552] lock_acquire+0x179/0x350 [ 364.252217][T24552] _raw_write_lock_irq+0x36/0x50 [ 364.254226][T24552] fasync_remove_entry+0xb2/0x1e0 [ 364.256306][T24552] fasync_helper+0xaf/0xd0 [ 364.258202][T24552] lease_modify+0x232/0x500 [ 364.260103][T24552] locks_remove_file+0x29e/0x5c0 [ 364.262143][T24552] __fput+0x351/0xb70 [ 364.263891][T24552] task_work_run+0x150/0x240 [ 364.265822][T24552] exit_to_user_mode_loop+0xeb/0x110 [ 364.267973][T24552] __do_fast_syscall_32+0x2ac/0x3a0 [ 364.270062][T24552] do_fast_syscall_32+0x32/0x80 [ 364.272062][T24552] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 364.274509][T24552] INITIAL READ USE at: [ 364.275888][T24552] lock_acquire+0x179/0x350 [ 364.277923][T24552] _raw_read_lock_irqsave+0x74/0x90 [ 364.280183][T24552] kill_fasync+0x138/0x510 [ 364.282202][T24552] sock_wake_async+0x132/0x160 [ 364.284318][T24552] mptcp_close_wake_up+0x2eb/0x600 [ 364.286527][T24552] __mptcp_close_ssk+0xd54/0x14d0 [ 364.288695][T24552] mptcp_destroy_common+0x65a/0xaf0 [ 364.290928][T24552] mptcp_disconnect+0x228/0x870 [ 364.293059][T24552] inet_shutdown+0x26c/0x440 [ 364.295088][T24552] __sys_shutdown+0x113/0x1b0 [ 364.297157][T24552] __ia32_sys_shutdown+0x53/0x80 [ 364.299313][T24552] __do_fast_syscall_32+0x7c/0x3a0 [ 364.301513][T24552] do_fast_syscall_32+0x32/0x80 [ 364.303714][T24552] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 364.306475][T24552] } [ 364.307511][T24552] ... key at: [] __key.0+0x0/0x40 [ 364.309843][T24552] ... acquired at: [ 364.311055][T24552] lock_acquire+0x179/0x350 [ 364.312545][T24552] _raw_read_lock_irqsave+0x74/0x90 [ 364.314211][T24552] kill_fasync+0x138/0x510 [ 364.315686][T24552] evdev_pass_values+0x619/0x9b0 [ 364.317275][T24552] evdev_events+0x1bb/0x390 [ 364.318784][T24552] input_pass_values+0x74e/0x880 [ 364.320795][T24552] input_handle_event+0xf00/0x14d0 [ 364.322863][T24552] input_inject_event+0x1e8/0x3b0 [ 364.325035][T24552] evdev_write+0x2e1/0x440 [ 364.326513][T24552] vfs_write+0x29d/0x1150 [ 364.327959][T24552] ksys_write+0x1f8/0x250 [ 364.329381][T24552] __do_fast_syscall_32+0x7c/0x3a0 [ 364.331038][T24552] do_fast_syscall_32+0x32/0x80 [ 364.332631][T24552] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 364.334661][T24552] [ 364.335449][T24552] [ 364.335449][T24552] stack backtrace: [ 364.337286][T24552] CPU: 1 UID: 0 PID: 24552 Comm: syz.5.8341 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(full) [ 364.337301][T24552] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 364.337308][T24552] Call Trace: [ 364.337312][T24552] [ 364.337317][T24552] dump_stack_lvl+0x116/0x1f0 [ 364.337330][T24552] check_irq_usage+0x7dc/0x920 [ 364.337344][T24552] ? __pfx___smp_call_single_queue+0x10/0x10 [ 364.337359][T24552] ? check_path.constprop.0+0x24/0x50 [ 364.337374][T24552] ? __lock_acquire+0x12bc/0x1ce0 [ 364.337387][T24552] __lock_acquire+0x12bc/0x1ce0 [ 364.337404][T24552] lock_acquire+0x179/0x350 [ 364.337418][T24552] ? kill_fasync+0x138/0x510 [ 364.337435][T24552] _raw_read_lock_irqsave+0x74/0x90 [ 364.337446][T24552] ? kill_fasync+0x138/0x510 [ 364.337461][T24552] kill_fasync+0x138/0x510 [ 364.337477][T24552] evdev_pass_values+0x619/0x9b0 [ 364.337494][T24552] evdev_events+0x1bb/0x390 [ 364.337510][T24552] input_pass_values+0x74e/0x880 [ 364.337526][T24552] input_handle_event+0xf00/0x14d0 [ 364.337542][T24552] ? _copy_from_user+0x59/0xd0 [ 364.337559][T24552] input_inject_event+0x1e8/0x3b0 [ 364.337575][T24552] evdev_write+0x2e1/0x440 [ 364.337591][T24552] ? __pfx_evdev_write+0x10/0x10 [ 364.337605][T24552] ? common_file_perm+0x1a9/0x340 [ 364.337618][T24552] ? bpf_lsm_file_permission+0x9/0x10 [ 364.337634][T24552] ? security_file_permission+0x71/0x210 [ 364.337647][T24552] ? rw_verify_area+0xcf/0x6c0 [ 364.337658][T24552] ? __pfx_evdev_write+0x10/0x10 [ 364.337672][T24552] vfs_write+0x29d/0x1150 [ 364.337686][T24552] ? __pfx_vfs_write+0x10/0x10 [ 364.337697][T24552] ? find_held_lock+0x2b/0x80 [ 364.337707][T24552] ? __fget_files+0x204/0x3c0 [ 364.337720][T24552] ? __fget_files+0x20e/0x3c0 [ 364.337733][T24552] ksys_write+0x1f8/0x250 [ 364.337745][T24552] ? __pfx_ksys_write+0x10/0x10 [ 364.337758][T24552] ? rcu_is_watching+0x12/0xc0 [ 364.337770][T24552] __do_fast_syscall_32+0x7c/0x3a0 [ 364.337783][T24552] do_fast_syscall_32+0x32/0x80 [ 364.337799][T24552] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 364.337813][T24552] RIP: 0023:0xf70ae579 [ 364.337822][T24552] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 364.337832][T24552] RSP: 002b:00000000f549e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 364.337843][T24552] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 364.337849][T24552] RDX: 0000000000001068 RSI: 0000000000000000 RDI: 0000000000000000 [ 364.337856][T24552] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 364.337862][T24552] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 364.337868][T24552] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 364.337878][T24552] [ 364.422623][ C1] vkms_vblank_simulate: vblank timer overrun [ 364.424895][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 364.427160][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 364.437223][ T6052] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 364.467708][ T6052] usb 9-1: USB disconnect, device number 20 [ 364.471521][ T6052] usblp0: removed [ 364.885594][ T60] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.955284][ T60] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.065719][ T60] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.106306][ T60] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.181127][ T60] bridge_slave_1: left allmulticast mode [ 365.183618][ T60] bridge_slave_1: left promiscuous mode [ 365.186008][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.190190][ T60] bridge_slave_0: left allmulticast mode [ 365.192697][ T60] bridge_slave_0: left promiscuous mode [ 365.195042][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.325184][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 365.328863][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 365.332132][ T60] bond0 (unregistering): Released all slaves [ 365.442636][ T60] tipc: Left network mode [ 365.728154][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.731099][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.734510][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.737408][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.743355][ T60] veth1_macvtap: left promiscuous mode [ 365.745557][ T60] veth0_macvtap: left promiscuous mode [ 365.747830][ T60] veth1_vlan: left promiscuous mode [ 365.749957][ T60] veth0_vlan: left promiscuous mode [ 365.982984][ T60] team0 (unregistering): Port device team_slave_1 removed [ 366.024459][ T60] team0 (unregistering): Port device team_slave_0 removed [ 366.634026][ T60] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.674124][ T60] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.714262][ T60] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.763898][ T60] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.822660][ T60] bridge_slave_1: left allmulticast mode [ 366.824470][ T60] bridge_slave_1: left promiscuous mode [ 366.826220][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.829207][ T60] bridge_slave_0: left allmulticast mode [ 366.831130][ T60] bridge_slave_0: left promiscuous mode [ 366.832959][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.944322][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.948021][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.951546][ T60] bond0 (unregistering): Released all slaves [ 367.217097][ T60] hsr_slave_0: left promiscuous mode [ 367.219595][ T60] hsr_slave_1: left promiscuous mode [ 367.222011][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.224891][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.228017][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.231041][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.235906][ T60] veth1_macvtap: left promiscuous mode [ 367.237668][ T60] veth0_macvtap: left promiscuous mode [ 367.239445][ T60] veth1_vlan: left promiscuous mode [ 367.241211][ T60] veth0_vlan: left promiscuous mode [ 367.378783][ T60] team0 (unregistering): Port device team_slave_1 removed [ 367.416088][ T60] team0 (unregistering): Port device team_slave_0 removed [ 372.890545][ T98] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 372.960073][ T98] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 373.059388][ T98] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 373.109952][ T98] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 373.176852][ T98] bridge_slave_1: left allmulticast mode [ 373.178687][ T98] bridge_slave_1: left promiscuous mode [ 373.180464][ T98] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.183296][ T98] bridge_slave_0: left allmulticast mode [ 373.185042][ T98] bridge_slave_0: left promiscuous mode [ 373.186838][ T98] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.458710][ T98]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 373.461882][ T98]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.464887][ T98]  (unregistering): (slave batadv0): Releasing backup interface [ 373.467949][ T98]  (unregistering): Released all slaves [ 373.547879][ T98] tipc: Disabling bearer [ 373.549496][ T98] tipc: Left network mode VM DIAGNOSIS: 23:39:40 Registers: info registers vcpu 0 CPU#0 RAX=0000000000329fd4 RBX=0000000000000000 RCX=ffffffff8b8f7bf9 RDX=ffffed1005646656 RSI=ffffffff8c161500 RDI=ffffffff8190cd41 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000000 R9 =ffffed1005646655 R10=ffff88802b2332ab R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90ab3290 R15=0000000000000000 RIP=ffffffff8b8f675f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880974cc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c37ca98 CR3=00000000685c4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85609ad5 RDI=ffffffff9b0f07c0 RBP=ffffffff9b0f0780 RSP=ffffc900034372f0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=0000000000000037 R14=ffffffff9b0f0780 R15=ffffffff85609a70 RIP=ffffffff85609aff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880975cc000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7442000 CR3=000000005d749000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffff00 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88802b341d40 RCX=ffffffff81af13b1 RDX=ffff88802151a440 RSI=ffffffff81af138b RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc900033e74b8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=dffffc0000000000 R13=ffffed10056683a9 R14=0000000000000001 R15=0000000000000001 RIP=ffffffff81af138d RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976cc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f06e40 CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f73a4ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000002f221c RBX=0000000000000003 RCX=ffffffff8b8f7bf9 RDX=ffffed10056a6656 RSI=ffffffff8c161500 RDI=ffffffff8190cd41 RBP=ffffed1003867000 RSP=ffffc9000048fdf8 R8 =0000000000000000 R9 =ffffed10056a6655 R10=ffff88802b5332ab R11=0000000000000000 R12=0000000000000003 R13=ffff88801c338000 R14=ffffffff90ab3290 R15=0000000000000000 RIP=ffffffff8b8f675f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977cc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7446288 CR3=000000005d749000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000