last executing test programs: 6.167516905s ago: executing program 3 (id=2147): socket$alg(0x26, 0x5, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000017c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001800)={0x18, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x19) syz_open_dev$usbfs(0x0, 0x10, 0xa702) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) open_tree(0xffffffffffffff9c, 0x0, 0x9801) syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newnexthop={0x18, 0x68, 0x1, 0x2, 0x25dfdbfd}, 0x18}}, 0x4000) add_key$keyring(&(0x7f0000000280), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 5.966024393s ago: executing program 2 (id=2149): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r5 = syz_io_uring_setup(0x711b, &(0x7f0000000380)={0x0, 0x1ffffc, 0x7ffe, 0x0, 0x120, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000043000900fffffffffddbdf25010000000c000280"], 0x20}}, 0x44850) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r10 = syz_open_dev$sg(0x0, 0x0, 0x5) writev(r10, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) recvmmsg(r9, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x100, &(0x7f0000002400)={0x77359400}) 5.427529872s ago: executing program 3 (id=2151): openat$rtc(0xffffffffffffff9c, 0x0, 0x40, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140640101000c0001800800014080ffffff050014000200000005000500020000000500010006"], 0x6c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000010000000000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="0006f8000000000014"], 0x48}, 0x1, 0x2}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0xfffffffd, 0x34324152, 0x0, 0x4, [{}, {0x10}, {}, {0x0, 0x3}, {}, {}, {0x0, 0x800000}], 0x0, 0xff, 0x0, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x8006) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) eventfd(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0xb, 0x1, 0x200, &(0x7f0000000cc0)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a7309000000000000000f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714b5e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a2b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6d07002ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8cd35df2cd7344aa8a9f3432b96fb889c02f484f63520cc3466a3c2903d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000600000000000000000000f80000000000000000000000000000000000000000005593e85f00"}) 4.92919762s ago: executing program 2 (id=2152): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0xcbe) socket$tipc(0x1e, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x1, r3}, 0x38) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000480)={r0, 0x1, 0x8}) bpf$BPF_GET_PROG_INFO(0x15, 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r4, &(0x7f0000000840)=[{0x0}, {&(0x7f00000008c0)=""/143, 0x8f}], 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 4.928737766s ago: executing program 0 (id=2154): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x0, @local, 'bond_slave_0\x00'}}, 0x1e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_settime(0x0, 0x0, 0x0, 0x0) openat$kvm(0x0, 0x0, 0x101180, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r2, &(0x7f0000000080)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) fgetxattr(r2, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', 0x0, 0x80000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sync() sync() 4.795568943s ago: executing program 1 (id=2155): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x1e, 0x1, 0x0) shutdown(r2, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r4 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000180)=0x0, &(0x7f0000000380)) syz_open_procfs(0xffffffffffffffff, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) rseq(0x0, 0x0, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r4, 0x381b, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) 4.707005406s ago: executing program 0 (id=2157): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) lseek(0xffffffffffffffff, 0x0, 0x4) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000100)=[{{&(0x7f0000000000)={0x2, 0x4e24}, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)='P'}, {&(0x7f0000000080)="6356c5cf1b3419574ea180a6d8edd7d1a07d86fc8085eed3d9d5"}]}}], 0x400020d, 0x0) socket$inet(0x2, 0x3, 0x2) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) open(0x0, 0x0, 0x181) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$inet6(0xa, 0x4, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r3, &(0x7f0000001ac0)=[{&(0x7f0000000140)=""/46, 0x2e}], 0x1, 0xfff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x50, 0x4004, @fd, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x5951, 0x7a89, 0x0, 0x0, 0x0) 4.399541257s ago: executing program 3 (id=2158): openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = creat(0x0, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-128\x00'}, 0xffffffffffffff18) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4087, 0xff7, 0x0, &(0x7f0000000000)=""/5, 0x5}, &(0x7f0000001340)=0x40) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x14) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x14) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) 3.72212102s ago: executing program 1 (id=2159): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x24000080) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x20000000000001ca, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xb}]}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) mbind(&(0x7f000057e000/0x2000)=nil, 0x2000, 0x8000, &(0x7f00000000c0)=0x4, 0x6, 0x9) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$cdrom(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CDROM_SEND_PACKET(r2, 0x5393, &(0x7f0000000100)={"4689d4c4841a41c9e4641d9d", 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0}) socket$inet_udp(0x2, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r3, 0x8949, &(0x7f0000000000)) 3.695002577s ago: executing program 0 (id=2160): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xb, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x7, 0xfffffffd}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x102) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3aa755b6) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000600)={0x0, 0xfffffffffffffe57, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x1, [0x0], [], [0x0, 0x0, 0x0, 0x3]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000100)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000800)={0x0, 0x0, r8}) 2.241113148s ago: executing program 2 (id=2161): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x10000000, 0x1, 0xa, 0xb}, {0x1, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r1 = userfaultfd(0x801) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) close(r2) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x1115000, 0x0, 0x0, 0x2}, 0x1c) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, &(0x7f0000000000)=0x6, 0x8, 0x0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) fsopen(&(0x7f0000000040)='cifs\x00', 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 2.221883799s ago: executing program 2 (id=2162): socket$alg(0x26, 0x5, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000017c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001800)={0x18, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x19) syz_open_dev$usbfs(0x0, 0x10, 0xa702) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) open_tree(0xffffffffffffff9c, 0x0, 0x9801) syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newnexthop={0x18, 0x68, 0x1, 0x2, 0x25dfdbfd}, 0x18}}, 0x4000) add_key$keyring(&(0x7f0000000280), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 2.221685193s ago: executing program 3 (id=2163): syz_80211_inject_frame(0x0, 0x0, 0x7b) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(r2, r1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}, {}, {0x0, 0x5}, {}, {}, {}, {0x0, 0x9}], 0x0, 0x0, 0x0, 0x0, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffffff, 0x0, 0xec35333844eb998e) 2.206641368s ago: executing program 0 (id=2164): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20) finit_module(r4, 0x0, 0x3) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) 2.206483076s ago: executing program 1 (id=2165): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x5, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) 1.643012849s ago: executing program 1 (id=2166): syz_open_dev$usbfs(&(0x7f0000000080), 0x4, 0x800) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000180)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}], [], 0x2c}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000140), &(0x7f00000001c0)='%ps \x00'}, 0x1c) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_off}]}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffff7e6, 0xb2ba, 0x8, 0xf, 0xfffffffb, 0x8000}}}}]}, 0x4c}}, 0x44080) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xfff2, 0xa}, {0xffe0}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4, 0x5, 0x8000}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 1.642720746s ago: executing program 2 (id=2167): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg2\x00'}) openat$nvme_fabrics(0xffffff9c, &(0x7f0000000080), 0x600800, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002004000b7080000000000007b8af8ff00000000b708000000020000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xcf}, &(0x7f0000000300)=0x0, &(0x7f0000000280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad0000abfa"], 0x125) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) openat$binder_debug(0xffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000000000000850000000f000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='ext4_writepages\x00', r3}, 0x10) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 1.024237963s ago: executing program 3 (id=2168): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x1e, 0x1, 0x0) shutdown(r2, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r4 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000180)=0x0, &(0x7f0000000380)) syz_open_procfs(0xffffffffffffffff, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) rseq(0x0, 0x0, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r4, 0x381b, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) 1.021706103s ago: executing program 0 (id=2176): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000380)="851666e920db", 0x0, 0xfffffff6, 0x39, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="010027bd7000ffdbdf250800200004000180"], 0x18}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x240007fd, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000180)=0x4a9a, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)}}], 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)={0x14, r5, 0x303, 0x70bd2a, 0x25dfdbff}, 0x14}}, 0x80) 887.223591ms ago: executing program 1 (id=2169): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, &(0x7f0000000000)={'virt_wifi0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socket(0x11, 0xa, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x448d0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/diskstats\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r6, 0x0, 0xfffffffffffffffd}, 0x18) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendfile(r5, r4, 0x0, 0x180000504) 805.498744ms ago: executing program 0 (id=2170): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0xcbe) socket$tipc(0x1e, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x1, r3}, 0x38) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000480)={r0, 0x1, 0x8}) bpf$BPF_GET_PROG_INFO(0x15, 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r4, &(0x7f0000000840)=[{0x0}, {&(0x7f00000008c0)=""/143, 0x8f}], 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 36.051408ms ago: executing program 1 (id=2171): openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = creat(0x0, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-128\x00'}, 0xffffffffffffff18) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4087, 0xff7, 0x0, &(0x7f0000000000)=""/5, 0x5}, &(0x7f0000001340)=0x40) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x14) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x14) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) 33.104719ms ago: executing program 2 (id=2180): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x23f, &(0x7f0000000380)={0x0, 0x1ffffb, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) write$dsp(r1, &(0x7f0000000200)="8a911d014b7bae50ccdbc29bd80a0dc276b1dc575ee96374b247b07ec9853b4d7e8b612efd2f0b98ac4b1bc834af6d13f2522503c23ce6b70de66f2365c4c37f50b76c812fad104d6e53a6f56fed60847324d0804647185a595602ad1a", 0x5d) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r6 = io_uring_setup(0x371f, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r6, 0x17, &(0x7f0000002080)={0x0}, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f0000006840)={0x2020}, 0x2020) memfd_create(&(0x7f0000000080)='\x00', 0x1) syz_fuse_handle_req(r5, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open(0x0, 0x1800, 0x0) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 3 (id=2172): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) dup(0xffffffffffffffff) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fcntl$notify(r1, 0x402, 0x29) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1c94a6fb08bb1fb4, &(0x7f0000000280)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={r2}) io_submit(0x0, 0x1, &(0x7f0000002340)=[&(0x7f0000000040)={0x0, 0x300, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0, 0x2}]) r3 = memfd_create(&(0x7f0000000440)='\x107m\xadJ\xdc:F\xa0\x06\xe6\xbb\xb8\xb0\xe8\xc3\x87\x12+\x8fY\xee\xc7\xd0,\xc6\x01*\x88\x14U\xde\xfa:\xee\xe8\x1d\x91F\x86)', 0x0) finit_module(r3, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r4, 0x3, r0, 0x5}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x1, 0x1, 0xc, 0x2, 0x3}, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1e, 0x200, &(0x7f0000000880)="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"}) kernel console output (not intermixed with test programs): device number 3 [ 91.115302][ T1330] usblp0: removed [ 91.820421][ T6879] netlink: 'syz.3.229': attribute type 9 has an invalid length. [ 91.831813][ T6879] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.229'. [ 92.070986][ T6893] bridge_slave_0: left allmulticast mode [ 92.072883][ T6893] bridge_slave_0: left promiscuous mode [ 92.082079][ T6893] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.096373][ T6893] bridge_slave_1: left allmulticast mode [ 92.098034][ T6893] bridge_slave_1: left promiscuous mode [ 92.099842][ T6893] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.127302][ T6893] bond0: (slave bond_slave_0): Releasing backup interface [ 92.283173][ T6893] bond0: (slave bond_slave_1): Releasing backup interface [ 92.310237][ T6893] team0: Port device team_slave_0 removed [ 92.325207][ T6893] team0: Port device team_slave_1 removed [ 92.328473][ T6893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.330903][ T6893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.336355][ T6893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.338511][ T6893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.186986][ T6913] netlink: 'syz.2.239': attribute type 1 has an invalid length. [ 93.190258][ T6913] netlink: 224 bytes leftover after parsing attributes in process `syz.2.239'. [ 93.367878][ T6917] netlink: 'syz.0.237': attribute type 12 has an invalid length. [ 93.421298][ T6919] Bluetooth: MGMT ver 1.23 [ 93.591442][ T6921] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 93.594077][ T6921] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 93.609257][ T6921] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 93.612098][ T6921] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 93.621529][ T6921] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 93.623817][ T6921] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 93.629997][ T6921] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 93.632549][ T6921] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 93.702331][ T6928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.242'. [ 93.959148][ T84] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 94.939574][ T6953] ISOFS: Unable to identify CD-ROM format. [ 96.226850][ T5947] block nbd2: Receive control failed (result -107) [ 96.322017][ T6972] nbd2: detected capacity change from 0 to 20 [ 96.341302][ T6972] block nbd2: Dead connection, failed to find a fallback [ 96.343454][ T6972] block nbd2: shutting down sockets [ 96.345085][ T6972] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.347812][ T6972] Buffer I/O error on dev nbd2, logical block 0, async page read [ 96.350218][ T6972] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.359846][ T6972] Buffer I/O error on dev nbd2, logical block 0, async page read [ 96.364544][ T6972] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.368081][ T6972] Buffer I/O error on dev nbd2, logical block 0, async page read [ 96.371159][ T6972] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.374690][ T6972] Buffer I/O error on dev nbd2, logical block 0, async page read [ 96.377736][ T6972] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.383513][ T6972] Buffer I/O error on dev nbd2, logical block 0, async page read [ 96.386772][ T6972] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.390311][ T6972] Buffer I/O error on dev nbd2, logical block 0, async page read [ 96.393673][ T6972] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.397940][ T6972] Buffer I/O error on dev nbd2, logical block 0, async page read [ 96.400297][ T6972] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.406008][ T6972] Buffer I/O error on dev nbd2, logical block 0, async page read [ 96.408904][ T6972] ldm_validate_partition_table(): Disk read failed. [ 96.411034][ T6972] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.413914][ T6972] Buffer I/O error on dev nbd2, logical block 0, async page read [ 96.416251][ T6972] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.418866][ T6972] Buffer I/O error on dev nbd2, logical block 0, async page read [ 96.421439][ T6972] Dev nbd2: unable to read RDB block 0 [ 96.423210][ T6972] nbd2: unable to read partition table [ 96.424957][ T6972] nbd2: partition table beyond EOD, truncated [ 96.428927][ T6972] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 96.433958][ T6972] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=9, location=9 [ 96.437263][ T6972] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8, location=8 [ 96.444448][ T5934] ldm_validate_partition_table(): Disk read failed. [ 96.447910][ T5934] Dev nbd2: unable to read RDB block 0 [ 96.449906][ T5934] nbd2: unable to read partition table [ 96.452458][ T6972] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=7, location=7 [ 96.455252][ T6972] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 96.455689][ T5934] nbd2: partition table beyond EOD, truncated [ 96.460409][ T6972] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 96.465430][ T5934] ldm_validate_partition_table(): Disk read failed. [ 96.467478][ T6972] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=4, location=4 [ 96.470392][ T5934] Dev nbd2: unable to read RDB block 0 [ 96.472316][ T6972] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=3, location=3 [ 96.475312][ T5934] nbd2: unable to read partition table [ 96.477052][ T5934] nbd2: partition table beyond EOD, truncated [ 96.477703][ T6972] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=2, location=2 [ 96.483530][ T6972] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 96.490043][ T6972] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 96.493489][ T6972] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=1, location=1 [ 96.496268][ T6972] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=0, location=0 [ 96.500589][ T6972] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 96.508008][ T6972] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 96.616304][ T6992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.260'. [ 98.130967][ T7021] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 98.149704][ T7021] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 98.153418][ T7021] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 98.157129][ T7021] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 98.316799][ T7021] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 98.319491][ T7021] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 98.322465][ T7021] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 98.325188][ T7021] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 98.328508][ T7021] geneve2: entered promiscuous mode [ 98.330320][ T7021] geneve2: entered allmulticast mode [ 98.813830][ T7032] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.873639][ T5947] block nbd1: Receive control failed (result -107) [ 98.961164][ T7031] nbd1: detected capacity change from 0 to 20 [ 98.965031][ T5934] block nbd1: Dead connection, failed to find a fallback [ 98.968043][ T5934] block nbd1: shutting down sockets [ 98.971174][ T5934] ldm_validate_partition_table(): Disk read failed. [ 98.974749][ T5934] Dev nbd1: unable to read RDB block 0 [ 98.977283][ T5934] nbd1: unable to read partition table [ 98.979675][ T5934] nbd1: partition table beyond EOD, truncated [ 98.987873][ T5934] ldm_validate_partition_table(): Disk read failed. [ 98.990028][ T5934] Dev nbd1: unable to read RDB block 0 [ 98.991905][ T5934] nbd1: unable to read partition table [ 98.993652][ T5934] nbd1: partition table beyond EOD, truncated [ 98.998262][ T7031] ldm_validate_partition_table(): Disk read failed. [ 99.000472][ T7031] Dev nbd1: unable to read RDB block 0 [ 99.002398][ T7031] nbd1: unable to read partition table [ 99.004171][ T7031] nbd1: partition table beyond EOD, truncated [ 99.006362][ T7031] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 99.009475][ T7031] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=9, location=9 [ 99.012974][ T7031] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8, location=8 [ 99.018301][ T7031] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=7, location=7 [ 99.022062][ T7031] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 99.026274][ T7031] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 99.030133][ T7031] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=4, location=4 [ 99.034053][ T7031] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=3, location=3 [ 99.066227][ T7031] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=2, location=2 [ 99.072630][ T7031] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 99.078947][ T7031] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 99.087372][ T7031] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1, location=1 [ 99.092736][ T7031] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=0, location=0 [ 99.097352][ T7031] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 99.105113][ T7031] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 100.590239][ T7066] 9pnet_fd: Insufficient options for proto=fd [ 102.855090][ T7092] random: crng reseeded on system resumption [ 105.545454][ T7125] 9pnet_fd: Insufficient options for proto=fd [ 106.521232][ T7143] hub 6-0:1.0: USB hub found [ 106.522742][ T7143] hub 6-0:1.0: 1 port detected [ 110.302515][ T7203] random: crng reseeded on system resumption [ 111.615916][ T7220] nlmon0: Master is either lo or non-ether device [ 111.738666][ T7224] netlink: 20 bytes leftover after parsing attributes in process `syz.2.313'. [ 111.864900][ T7232] infiniband syz1: set down [ 111.866399][ T7232] infiniband syz1: added syzkaller0 [ 111.900052][ T7232] RDS/IB: syz1: added [ 111.901384][ T7232] smc: adding ib device syz1 with port count 1 [ 111.903255][ T7232] smc: ib device syz1 port 1 has pnetid [ 112.779499][ T84] smc: removing ib device syz1 [ 113.208848][ T39] audit: type=1400 audit(1737206181.221:19): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 113.418341][ T7255] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 113.422836][ T7255] vhci_hcd vhci_hcd.0: Device attached [ 113.611485][ T1330] vhci_hcd: vhci_device speed not set [ 113.672931][ T1330] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 114.235865][ T7256] vhci_hcd: connection reset by peer [ 114.238374][ T1249] vhci_hcd: stop threads [ 114.239639][ T1249] vhci_hcd: release socket [ 114.241721][ T1249] vhci_hcd: disconnect device [ 116.211717][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 116.511176][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 116.519064][ T9] usb 6-1: config 7 has an invalid interface number: 161 but max is 0 [ 116.731166][ T9] usb 6-1: config 7 has no interface number 0 [ 116.742934][ T9] usb 6-1: config 7 interface 161 has no altsetting 0 [ 116.775767][ T9] usb 6-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=4e.59 [ 116.778459][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.781971][ T9] usb 6-1: Product: syz [ 116.783346][ T9] usb 6-1: Manufacturer: syz [ 116.784772][ T9] usb 6-1: SerialNumber: syz [ 117.027295][ T9] hub 6-1:7.161: bad descriptor, ignoring hub [ 117.029116][ T9] hub 6-1:7.161: probe with driver hub failed with error -5 [ 117.031708][ T9] cypress_m8 6-1:7.161: HID->COM RS232 Adapter converter detected [ 117.034514][ T9] cyphidcom ttyUSB0: required endpoint is missing [ 117.052707][ T9] usb 6-1: USB disconnect, device number 5 [ 117.055300][ T9] cypress_m8 6-1:7.161: device disconnected [ 117.340372][ T7310] netlink: 20 bytes leftover after parsing attributes in process `syz.0.334'. [ 118.173903][ T7326] 9pnet_fd: Insufficient options for proto=fd [ 118.841205][ T1330] vhci_hcd: vhci_device speed not set [ 119.798567][ T7356] netlink: 'syz.2.343': attribute type 9 has an invalid length. [ 119.824109][ T25] libceph: connect (1)[c::]:6789 error -101 [ 119.832233][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 120.101526][ T25] libceph: connect (1)[c::]:6789 error -101 [ 120.104378][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 120.198833][ T7355] ceph: No mds server is up or the cluster is laggy [ 120.223388][ T7368] 9pnet_fd: Insufficient options for proto=fd [ 121.399330][ T7389] misc userio: Invalid payload size [ 121.402628][ T7389] misc userio: Invalid payload size [ 122.887449][ T7410] infiniband syz1: set down [ 122.889213][ T7410] infiniband syz1: added syzkaller0 [ 122.954146][ T7410] RDS/IB: syz1: added [ 122.957090][ T7410] smc: adding ib device syz1 with port count 1 [ 122.959213][ T7410] smc: ib device syz1 port 1 has pnetid [ 123.429458][ T84] smc: removing ib device syz1 [ 124.873216][ T7444] batadv1: entered promiscuous mode [ 124.874811][ T7444] batadv1: entered allmulticast mode [ 124.928888][ T7446] netlink: 20 bytes leftover after parsing attributes in process `syz.2.371'. [ 124.932228][ T7446] netlink: 28 bytes leftover after parsing attributes in process `syz.2.371'. [ 124.938354][ T7446] bond0: entered promiscuous mode [ 124.939858][ T7446] bond_slave_0: entered promiscuous mode [ 124.943546][ T7446] bond_slave_1: entered promiscuous mode [ 124.951453][ T7446] batadv_slave_1: entered promiscuous mode [ 124.956717][ T7446] bond0: left promiscuous mode [ 124.958519][ T7446] bond_slave_0: left promiscuous mode [ 124.960803][ T7446] bond_slave_1: left promiscuous mode [ 124.980672][ T7446] batadv_slave_1: left promiscuous mode [ 125.797382][ T7456] tc_dump_action: action bad kind [ 126.789002][ T7471] input: syz1 as /devices/virtual/input/input7 [ 127.211829][ T7481] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 127.214679][ T7481] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 127.218518][ T7481] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 127.221399][ T7481] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 127.484039][ T7481] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 127.486764][ T7481] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 127.490028][ T7481] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 127.494524][ T7481] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 127.501526][ T7481] geneve2: entered promiscuous mode [ 127.503751][ T7481] geneve2: entered allmulticast mode [ 128.146959][ C0] vkms_vblank_simulate: vblank timer overrun [ 129.166381][ T7497] siw: device registration error -23 [ 130.251379][ T7510] tc_dump_action: action bad kind [ 131.462608][ T7528] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 131.465195][ T7528] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 131.467959][ T7528] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 131.470495][ T7528] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 131.473694][ T7528] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 131.476345][ T7528] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 131.479105][ T7528] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 131.481728][ T7528] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 131.484650][ T7528] geneve2: entered promiscuous mode [ 131.486187][ T7528] geneve2: entered allmulticast mode [ 132.215573][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.313781][ T7541] netlink: 'syz.0.396': attribute type 9 has an invalid length. [ 133.498039][ T7561] siw: device registration error -23 [ 133.703098][ T7567] batadv1: entered promiscuous mode [ 133.704726][ T7567] batadv1: entered allmulticast mode [ 133.749499][ T7572] netlink: 20 bytes leftover after parsing attributes in process `syz.1.401'. [ 133.753085][ T7572] netlink: 28 bytes leftover after parsing attributes in process `syz.1.401'. [ 133.759022][ T7572] bond0: entered promiscuous mode [ 133.761018][ T7572] bond_slave_0: entered promiscuous mode [ 133.763714][ T7572] bond_slave_1: entered promiscuous mode [ 133.767405][ T7572] batadv_slave_1: entered promiscuous mode [ 133.773045][ T7572] bond0: left promiscuous mode [ 133.774592][ T7572] bond_slave_0: left promiscuous mode [ 133.776167][ T7572] bond_slave_1: left promiscuous mode [ 133.778253][ T7572] batadv_slave_1: left promiscuous mode [ 135.139618][ T7586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.541256][ T30] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 135.751381][ T30] usb 7-1: Using ep0 maxpacket: 8 [ 136.042465][ T30] usb 7-1: config 7 has an invalid interface number: 161 but max is 0 [ 136.046088][ T30] usb 7-1: config 7 has no interface number 0 [ 136.048789][ T30] usb 7-1: config 7 interface 161 has no altsetting 0 [ 136.073118][ T30] usb 7-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=4e.59 [ 136.076040][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.078460][ T30] usb 7-1: Product: syz [ 136.079789][ T30] usb 7-1: Manufacturer: syz [ 136.081498][ T30] usb 7-1: SerialNumber: syz [ 136.407117][ T30] hub 7-1:7.161: bad descriptor, ignoring hub [ 136.408997][ T30] hub 7-1:7.161: probe with driver hub failed with error -5 [ 136.412596][ T30] cypress_m8 7-1:7.161: HID->COM RS232 Adapter converter detected [ 136.415735][ T30] cyphidcom ttyUSB0: required endpoint is missing [ 136.451783][ T30] usb 7-1: USB disconnect, device number 4 [ 136.458580][ T30] cypress_m8 7-1:7.161: device disconnected [ 137.078003][ T7620] random: crng reseeded on system resumption [ 137.515388][ T7634] netlink: 'syz.1.417': attribute type 9 has an invalid length. [ 138.836269][ T7653] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 138.839442][ T7653] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 138.843306][ T7653] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 138.846480][ T7653] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 138.856747][ T7653] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 138.860072][ T7653] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 138.863442][ T7653] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 138.866049][ T7653] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 138.869461][ T7653] geneve2: entered promiscuous mode [ 138.872081][ T7653] geneve2: entered allmulticast mode [ 139.046368][ T7657] bridge0: port 3(team0) entered disabled state [ 139.069672][ T7657] bridge_slave_0: left allmulticast mode [ 139.072421][ T7657] bridge_slave_0: left promiscuous mode [ 139.075381][ T7657] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.081212][ T7659] input: syz1 as /devices/virtual/input/input8 [ 139.090172][ T7657] bridge_slave_1: left allmulticast mode [ 139.092719][ T7657] bridge_slave_1: left promiscuous mode [ 139.094893][ T7657] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.114813][ T7657] bond0: (slave bond_slave_0): Releasing backup interface [ 139.131024][ T7657] bond0: (slave bond_slave_1): Releasing backup interface [ 139.153760][ T7657] team_slave_0: left promiscuous mode [ 139.156765][ T7657] team_slave_0: left allmulticast mode [ 139.184691][ T7657] team0: Port device team_slave_0 removed [ 139.189149][ T7657] team_slave_1: left promiscuous mode [ 139.190931][ T7657] team_slave_1: left allmulticast mode [ 139.205972][ T7657] team0: Port device team_slave_1 removed [ 139.213794][ T7657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.217014][ T7657] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.223683][ T7657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.226912][ T7657] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.470829][ T7678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.432'. [ 141.668663][ T7706] bridge_slave_0: left allmulticast mode [ 141.670784][ T7706] bridge_slave_0: left promiscuous mode [ 141.674377][ T7706] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.683907][ T7706] bridge_slave_1: left allmulticast mode [ 141.686160][ T7706] bridge_slave_1: left promiscuous mode [ 141.688802][ T7706] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.700917][ T7706] bond0: (slave bond_slave_0): Releasing backup interface [ 141.714255][ T7706] bond0: (slave bond_slave_1): Releasing backup interface [ 141.924879][ T7706] team0: Port device team_slave_0 removed [ 141.999749][ T7706] team0: Port device team_slave_1 removed [ 142.003435][ T7706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.006126][ T7706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.018166][ T7706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.020659][ T7706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.743893][ T7722] random: crng reseeded on system resumption [ 148.851480][ T7812] netlink: 12 bytes leftover after parsing attributes in process `syz.1.468'. [ 148.947896][ T7816] netlink: 56 bytes leftover after parsing attributes in process `syz.0.470'. [ 149.040780][ T7821] netlink: 'syz.1.471': attribute type 2 has an invalid length. [ 149.254422][ T7828] netlink: 'syz.0.472': attribute type 12 has an invalid length. [ 152.225344][ T7889] ISOFS: Unable to identify CD-ROM format. [ 152.851469][ T7902] misc userio: Invalid payload size [ 152.855095][ T7902] misc userio: Invalid payload size [ 154.748850][ T7937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.499'. [ 154.753447][ T7937] ipvlan2: entered promiscuous mode [ 154.755539][ T7937] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 155.054673][ T7949] ISOFS: Unable to identify CD-ROM format. [ 156.091451][ T7957] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 156.094113][ T7957] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 156.100259][ T7957] vhci_hcd vhci_hcd.0: Device attached [ 156.332678][ T8] vhci_hcd: vhci_device speed not set [ 156.585928][ T8] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 156.951717][ T7959] vhci_hcd: connection reset by peer [ 156.957050][ T1134] vhci_hcd: stop threads [ 156.959213][ T1134] vhci_hcd: release socket [ 156.961245][ T1134] vhci_hcd: disconnect device [ 159.768698][ T8008] netlink: 40 bytes leftover after parsing attributes in process `syz.3.516'. [ 159.997346][ T8021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.515'. [ 161.731232][ T8] vhci_hcd: vhci_device speed not set [ 163.572142][ T8071] netlink: 56 bytes leftover after parsing attributes in process `syz.1.532'. [ 164.820420][ T8100] netlink: 'syz.3.537': attribute type 9 has an invalid length. [ 167.624178][ T8135] netlink: 'syz.2.547': attribute type 4 has an invalid length. [ 169.149279][ T8162] netlink: 56 bytes leftover after parsing attributes in process `syz.3.553'. [ 169.612191][ T8175] netlink: 40 bytes leftover after parsing attributes in process `syz.2.555'. [ 172.262507][ T8221] netlink: 219 bytes leftover after parsing attributes in process `syz.3.575'. [ 174.184196][ T8251] ISOFS: Unable to identify CD-ROM format. [ 174.912252][ T8264] netlink: 40 bytes leftover after parsing attributes in process `syz.1.578'. [ 178.972251][ T8302] cgroup: fork rejected by pids controller in /syz2 [ 179.048551][ T8340] ISOFS: Unable to identify CD-ROM format. [ 179.227448][ T8346] netlink: 'syz.3.592': attribute type 20 has an invalid length. [ 183.205534][ T8409] netlink: 'syz.3.608': attribute type 10 has an invalid length. [ 183.235467][ T8410] netlink: 'syz.3.608': attribute type 10 has an invalid length. [ 183.237761][ T8410] netlink: 2 bytes leftover after parsing attributes in process `syz.3.608'. [ 183.310411][ T8409] batman_adv: batadv0: Adding interface: team0 [ 183.321142][ T8409] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.328309][ T8409] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 183.370076][ T8410] team0: entered promiscuous mode [ 183.395335][ T8410] team_slave_0: entered promiscuous mode [ 183.398735][ T8410] team_slave_1: entered promiscuous mode [ 183.422701][ T8410] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.425976][ T8410] batman_adv: batadv0: Interface activated: team0 [ 183.428587][ T8410] batman_adv: batadv0: Interface deactivated: team0 [ 183.431214][ T8410] batman_adv: batadv0: Removing interface: team0 [ 183.506603][ T8410] bridge0: port 3(team0) entered blocking state [ 183.527584][ T8410] bridge0: port 3(team0) entered disabled state [ 183.530201][ T8410] team0: entered allmulticast mode [ 183.533065][ T8410] team_slave_0: entered allmulticast mode [ 183.535750][ T8410] team_slave_1: entered allmulticast mode [ 183.583293][ T8410] bridge0: port 3(team0) entered blocking state [ 183.585004][ T8410] bridge0: port 3(team0) entered forwarding state [ 184.686204][ T8447] fuse: Bad value for 'fd' [ 186.140235][ T8466] ISOFS: Unable to identify CD-ROM format. [ 186.792166][ T8475] bridge0: port 1(hsr_slave_1) entered blocking state [ 186.794470][ T8475] bridge0: port 1(hsr_slave_1) entered disabled state [ 186.797814][ T8475] hsr_slave_1: entered allmulticast mode [ 186.810446][ T8475] hsr_slave_1: left allmulticast mode [ 188.188738][ T8498] netlink: 40 bytes leftover after parsing attributes in process `syz.0.631'. [ 189.382624][ T8512] batman_adv: batadv0: Adding interface: vxlan0 [ 189.384486][ T8512] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.392290][ T8512] batman_adv: batadv0: Not using interface vxlan0 (retrying later): interface not active [ 190.310251][ T8525] netlink: 28 bytes leftover after parsing attributes in process `syz.0.649'. [ 191.379098][ T8555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.647'. [ 193.282545][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 193.286206][ T8592] binder: 8591:8592 ioctl 4018620d 20000100 returned -16 [ 193.296351][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 193.298944][ T8592] binder: 8591:8592 ioctl 4018620d 200002c0 returned -16 [ 193.662294][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.259270][ T8628] netlink: 40 bytes leftover after parsing attributes in process `syz.0.678'. [ 195.693966][ T8639] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 195.696226][ T8639] overlayfs: failed to set xattr on upper [ 195.697874][ T8639] overlayfs: ...falling back to redirect_dir=nofollow. [ 195.699918][ T8639] overlayfs: ...falling back to index=off. [ 195.701708][ T8639] overlayfs: ...falling back to uuid=null. [ 197.991239][ T8682] misc userio: Invalid payload size [ 198.010875][ T8682] misc userio: Invalid payload size [ 199.014352][ T8700] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 199.016402][ T8700] overlayfs: failed to set xattr on upper [ 199.018035][ T8700] overlayfs: ...falling back to redirect_dir=nofollow. [ 199.020042][ T8700] overlayfs: ...falling back to index=off. [ 199.022234][ T8700] overlayfs: ...falling back to uuid=null. [ 199.256439][ T39] audit: type=1326 audit(1737206268.271:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8703 comm="syz.0.689" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 199.264523][ T39] audit: type=1326 audit(1737206268.271:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8703 comm="syz.0.689" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 199.272932][ T39] audit: type=1326 audit(1737206268.271:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8703 comm="syz.0.689" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 199.280580][ T39] audit: type=1326 audit(1737206268.271:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8703 comm="syz.0.689" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 199.287815][ T39] audit: type=1326 audit(1737206268.271:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8703 comm="syz.0.689" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 199.295278][ T39] audit: type=1326 audit(1737206268.271:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8703 comm="syz.0.689" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 199.302854][ T39] audit: type=1326 audit(1737206268.271:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8703 comm="syz.0.689" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 199.309647][ T39] audit: type=1326 audit(1737206268.271:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8703 comm="syz.0.689" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 199.322841][ T39] audit: type=1326 audit(1737206268.271:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8703 comm="syz.0.689" exe="/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 199.331816][ T39] audit: type=1326 audit(1737206268.271:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8703 comm="syz.0.689" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 199.711181][ T1463] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 199.874813][ T1463] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.878166][ T1463] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 199.882306][ T1463] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 199.885252][ T1463] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.904588][ T1463] usb 8-1: config 0 descriptor?? [ 200.323441][ T1463] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 200.325649][ T1463] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 200.334894][ T1463] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 200.349138][ T1463] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 200.586524][ T833] usb 8-1: USB disconnect, device number 3 [ 201.573136][ T8742] syz.3.698: attempt to access beyond end of device [ 201.573136][ T8742] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 201.577921][ T8742] FAT-fs (nbd3): unable to read boot sector [ 203.656826][ T8763] input: syz0 as /devices/virtual/input/input10 [ 205.762116][ T8788] syz.3.712 uses obsolete (PF_INET,SOCK_PACKET) [ 206.858089][ T8810] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 208.441476][ T8884] mkiss: ax0: crc mode is auto. [ 208.475422][ T8885] netlink: 32 bytes leftover after parsing attributes in process `syz.0.728'. [ 209.673764][ T8912] netlink: 48 bytes leftover after parsing attributes in process `syz.2.737'. [ 210.863216][ T8938] vlan2: entered promiscuous mode [ 210.865256][ T8938] vlan2: entered allmulticast mode [ 210.867162][ T8938] hsr_slave_1: entered allmulticast mode [ 210.888705][ T8938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.743'. [ 211.039827][ T8938] hsr_slave_1 (unregistering): left allmulticast mode [ 211.079263][ T8938] hsr_slave_1 (unregistering): left promiscuous mode [ 211.908043][ T8955] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 211.910348][ T8955] UDF-fs: Scanning with blocksize 2048 failed [ 211.914907][ T8955] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 211.917108][ T8955] UDF-fs: Scanning with blocksize 4096 failed [ 212.048780][ T39] kauditd_printk_skb: 4 callbacks suppressed [ 212.048790][ T39] audit: type=1800 audit(1737206281.061:34): pid=8958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.748" name="bus" dev="9p" ino=39321942 res=0 errno=0 [ 212.096606][ T8958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.748'. [ 212.111652][ T8958] veth5: entered promiscuous mode [ 215.510856][ T39] audit: type=1326 audit(1737206284.521:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9061 comm="syz.1.773" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70fe579 code=0x0 [ 216.361259][ T9074] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 216.389814][ T9074] kvm: pic: level sensitive irq not supported [ 216.390222][ T9074] kvm: pic: non byte read [ 216.418012][ T9074] kvm: pic: level sensitive irq not supported [ 216.420768][ T9074] kvm: pic: non byte read [ 216.428998][ T9074] kvm: pic: level sensitive irq not supported [ 216.429794][ T9074] kvm: pic: non byte read [ 216.439399][ T9074] kvm: pic: level sensitive irq not supported [ 216.440944][ T9074] kvm: pic: non byte read [ 218.387752][ T9115] hub 2-0:1.0: USB hub found [ 218.389274][ T9115] hub 2-0:1.0: 2 ports detected [ 221.775740][ T9179] ======================================================= [ 221.775740][ T9179] WARNING: The mand mount option has been deprecated and [ 221.775740][ T9179] and is ignored by this kernel. Remove the mand [ 221.775740][ T9179] option from the mount to silence this warning. [ 221.775740][ T9179] ======================================================= [ 222.154615][ T9189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.807'. [ 222.931332][ T5999] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 223.157528][ T9208] tipc: Invalid UDP bearer configuration [ 223.157563][ T9208] tipc: Enabling of bearer rejected, failed to enable media [ 223.421144][ T5999] usb 6-1: Using ep0 maxpacket: 8 [ 223.429339][ T5999] usb 6-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 223.438461][ T5999] usb 6-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 223.444512][ T5999] usb 6-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 223.447125][ T5999] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.449426][ T5999] usb 6-1: Product: syz [ 223.450645][ T5999] usb 6-1: Manufacturer: syz [ 223.452287][ T5999] usb 6-1: SerialNumber: syz [ 223.465585][ T5999] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 223.469287][ T5999] dvb-usb: bulk message failed: -22 (3/0) [ 223.514959][ T5999] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 223.519936][ T5999] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 223.540245][ T5999] usb 6-1: media controller created [ 223.585630][ T5999] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 223.604458][ T5999] dvb-usb: bulk message failed: -22 (6/0) [ 223.606256][ T5999] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 223.624107][ T5999] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input11 [ 223.629635][ T5999] dvb-usb: schedule remote query interval to 150 msecs. [ 223.631671][ T5999] dvb-usb: bulk message failed: -22 (3/0) [ 223.762371][ T5999] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 223.793700][ T5999] dvb-usb: bulk message failed: -22 (1/0) [ 223.795401][ T5999] dvb-usb: error while querying for an remote control event. [ 223.951188][ T5999] dvb-usb: bulk message failed: -22 (1/0) [ 223.954743][ T5999] dvb-usb: error while querying for an remote control event. [ 224.180289][ T5999] dvb-usb: bulk message failed: -22 (1/0) [ 224.191312][ T5999] dvb-usb: error while querying for an remote control event. [ 224.351146][ T5999] dvb-usb: bulk message failed: -22 (1/0) [ 224.352943][ T5999] dvb-usb: error while querying for an remote control event. [ 224.517302][ T5999] dvb-usb: bulk message failed: -22 (1/0) [ 224.525549][ T5999] dvb-usb: error while querying for an remote control event. [ 224.859820][ T5999] dvb-usb: bulk message failed: -22 (1/0) [ 224.866677][ T5999] dvb-usb: error while querying for an remote control event. [ 225.041371][ T5999] dvb-usb: bulk message failed: -22 (1/0) [ 225.043116][ T5999] dvb-usb: error while querying for an remote control event. [ 225.205588][ T5999] dvb-usb: bulk message failed: -22 (1/0) [ 225.207554][ T5999] dvb-usb: error while querying for an remote control event. [ 225.308025][ T9239] netlink: 'syz.2.823': attribute type 10 has an invalid length. [ 225.311183][ T9239] syz_tun: entered promiscuous mode [ 225.319252][ T9239] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 225.362905][ T5999] dvb-usb: bulk message failed: -22 (1/0) [ 225.364652][ T5999] dvb-usb: error while querying for an remote control event. [ 225.521229][ T5999] dvb-usb: bulk message failed: -22 (1/0) [ 225.523201][ T5999] dvb-usb: error while querying for an remote control event. [ 225.633120][ T2289] usb 6-1: USB disconnect, device number 6 [ 225.679953][ T2289] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 225.929689][ T9252] (syz.0.828,9252,0):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "ßÕ~gžœ<+‹€( ™.µ1 1'êÆ‰Ç" or missing value [ 225.936041][ T9252] (syz.0.828,9252,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 226.027495][ T9257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.825'. [ 227.979898][ T9283] netlink: 'syz.1.833': attribute type 4 has an invalid length. [ 228.080889][ T9286] capability: warning: `syz.0.835' uses deprecated v2 capabilities in a way that may be insecure [ 232.778308][ T9352] netlink: 168 bytes leftover after parsing attributes in process `syz.2.850'. [ 240.532435][ T9472] fuse: Bad value for 'fd' [ 240.884969][ T9476] netlink: 'syz.1.882': attribute type 1 has an invalid length. [ 240.909220][ T9476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.882'. [ 240.919959][ T9476] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 240.925881][ T9476] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 240.946429][ T9476] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 240.966721][ T9476] bond1 (unregistering): Released all slaves [ 241.080558][ T9485] uprobe: syz.2.885:9485 failed to unregister, leaking uprobe [ 241.349914][ T9491] bridge0: port 1(hsr_slave_1) entered blocking state [ 241.352137][ T9491] bridge0: port 1(hsr_slave_1) entered disabled state [ 241.356926][ T9491] hsr_slave_1: entered allmulticast mode [ 241.364992][ T9491] hsr_slave_1: left allmulticast mode [ 242.511097][ C0] vkms_vblank_simulate: vblank timer overrun [ 242.968311][ T9513] fuse: Bad value for 'fd' [ 245.273924][ T9556] misc userio: Invalid payload size [ 245.276207][ T9556] misc userio: Invalid payload size [ 245.407831][ T39] audit: type=1326 audit(1737206314.421:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9562 comm="syz.3.905" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 245.432097][ T39] audit: type=1326 audit(1737206314.421:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9562 comm="syz.3.905" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 245.439695][ T39] audit: type=1326 audit(1737206314.421:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9562 comm="syz.3.905" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 245.446880][ T39] audit: type=1326 audit(1737206314.421:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9562 comm="syz.3.905" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 245.453635][ T39] audit: type=1326 audit(1737206314.421:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9562 comm="syz.3.905" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 245.460657][ T39] audit: type=1326 audit(1737206314.421:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9562 comm="syz.3.905" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 245.478743][ T39] audit: type=1326 audit(1737206314.421:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9562 comm="syz.3.905" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 245.513963][ T39] audit: type=1326 audit(1737206314.421:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9562 comm="syz.3.905" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 245.520062][ T39] audit: type=1326 audit(1737206314.421:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9562 comm="syz.3.905" exe="/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 245.531566][ T39] audit: type=1326 audit(1737206314.421:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9562 comm="syz.3.905" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 247.391202][ T35] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 247.542950][ T35] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 247.546393][ T35] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 247.550354][ T35] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 247.553705][ T35] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 247.558043][ T35] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 247.564378][ T35] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 247.569933][ T35] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 247.573495][ T35] usb 7-1: Product: syz [ 247.575149][ T35] usb 7-1: Manufacturer: syz [ 247.587404][ T35] cdc_wdm 7-1:1.0: skipping garbage [ 247.589492][ T35] cdc_wdm 7-1:1.0: skipping garbage [ 247.593683][ T35] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 247.595978][ T35] cdc_wdm 7-1:1.0: Unknown control protocol [ 247.795407][ T6631] usb 7-1: USB disconnect, device number 5 [ 248.746934][ T6631] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 248.892467][ T6631] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 248.894985][ T6631] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 248.897952][ T6631] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 248.900501][ T6631] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 248.903869][ T6631] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 248.908329][ T6631] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 248.909270][ T9603] cgroup: fork rejected by pids controller in /syz1 [ 248.911006][ T6631] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 248.915614][ T6631] usb 7-1: Product: syz [ 248.916948][ T6631] usb 7-1: Manufacturer: syz [ 248.922521][ T6631] cdc_wdm 7-1:1.0: skipping garbage [ 248.924133][ T6631] cdc_wdm 7-1:1.0: skipping garbage [ 248.926907][ T6631] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 248.928688][ T6631] cdc_wdm 7-1:1.0: Unknown control protocol [ 249.477895][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.479615][ C0] cdc_wdm 7-1:1.0: Cannot schedule work [ 249.481778][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.483652][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.485301][ C0] cdc_wdm 7-1:1.0: Cannot schedule work [ 249.487173][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.488961][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.490646][ C0] cdc_wdm 7-1:1.0: Cannot schedule work [ 249.492435][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.494212][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.496494][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.498138][ C0] cdc_wdm 7-1:1.0: Cannot schedule work [ 249.499907][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.501702][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.503498][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.505280][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.507119][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.508896][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.510685][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.512549][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.514338][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.516124][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.517927][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.519726][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.521522][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.523311][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.525088][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.526926][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.528702][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.530487][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.532291][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.534081][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.535868][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.537660][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.539432][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.541200][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.543029][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.544802][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.546617][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.548257][ C0] cdc_wdm 7-1:1.0: Cannot schedule work [ 249.550021][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.551823][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.553653][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.555451][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.557237][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.558899][ C0] cdc_wdm 7-1:1.0: Cannot schedule work [ 249.560647][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.562448][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.564265][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.565950][ C0] cdc_wdm 7-1:1.0: Cannot schedule work [ 249.567717][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.569378][ C0] cdc_wdm 7-1:1.0: Cannot schedule work [ 249.571169][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.572876][ C0] cdc_wdm 7-1:1.0: Cannot schedule work [ 249.574622][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.576252][ C0] cdc_wdm 7-1:1.0: Cannot schedule work [ 249.578006][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.579649][ C0] cdc_wdm 7-1:1.0: Cannot schedule work [ 249.581439][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.583094][ C0] cdc_wdm 7-1:1.0: Cannot schedule work [ 249.584853][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.586542][ C0] cdc_wdm 7-1:1.0: Cannot schedule work [ 249.588317][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.589970][ C0] cdc_wdm 7-1:1.0: Cannot schedule work [ 249.591785][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.593427][ C0] cdc_wdm 7-1:1.0: Cannot schedule work [ 249.595207][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.596919][ C0] cdc_wdm 7-1:1.0: Cannot schedule work [ 249.598703][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.600340][ C0] cdc_wdm 7-1:1.0: Cannot schedule work [ 249.602124][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.603795][ C0] cdc_wdm 7-1:1.0: Cannot schedule work [ 249.605552][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.607211][ C0] cdc_wdm 7-1:1.0: Cannot schedule work [ 249.608945][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.610618][ C0] cdc_wdm 7-1:1.0: Cannot schedule work [ 249.612397][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.614032][ C0] cdc_wdm 7-1:1.0: Cannot schedule work [ 249.615809][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.617454][ C0] cdc_wdm 7-1:1.0: Cannot schedule work [ 249.619240][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.620916][ C0] cdc_wdm 7-1:1.0: Cannot schedule work [ 249.622695][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.624301][ C0] cdc_wdm 7-1:1.0: Cannot schedule work [ 249.626103][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.627749][ C0] cdc_wdm 7-1:1.0: Cannot schedule work [ 249.629547][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.631217][ C0] cdc_wdm 7-1:1.0: Cannot schedule work [ 249.632996][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.634650][ C0] cdc_wdm 7-1:1.0: Cannot schedule work [ 249.636396][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.638028][ C0] cdc_wdm 7-1:1.0: Cannot schedule work [ 249.639787][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.641445][ C0] cdc_wdm 7-1:1.0: Cannot schedule work [ 249.643257][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.644904][ C0] cdc_wdm 7-1:1.0: Cannot schedule work [ 249.646702][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.648350][ C0] cdc_wdm 7-1:1.0: Cannot schedule work [ 249.650140][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.651806][ C0] cdc_wdm 7-1:1.0: Cannot schedule work [ 249.653564][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.655209][ C0] cdc_wdm 7-1:1.0: Cannot schedule work [ 249.656972][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.658615][ C0] cdc_wdm 7-1:1.0: Cannot schedule work [ 249.660361][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.662002][ C0] cdc_wdm 7-1:1.0: Cannot schedule work [ 249.663770][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.665402][ C0] cdc_wdm 7-1:1.0: Cannot schedule work [ 249.667234][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.668870][ C0] cdc_wdm 7-1:1.0: Cannot schedule work [ 249.670642][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.672286][ C0] cdc_wdm 7-1:1.0: Cannot schedule work [ 249.674047][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.675788][ C0] cdc_wdm 7-1:1.0: Cannot schedule work [ 249.677680][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.679483][ C0] cdc_wdm 7-1:1.0: Cannot schedule work [ 249.681240][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.682916][ C0] cdc_wdm 7-1:1.0: Cannot schedule work [ 249.684678][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.686373][ C0] cdc_wdm 7-1:1.0: Cannot schedule work [ 249.688151][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.689799][ C0] cdc_wdm 7-1:1.0: Cannot schedule work [ 249.691573][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.693231][ C0] cdc_wdm 7-1:1.0: Cannot schedule work [ 249.695000][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.696655][ C0] cdc_wdm 7-1:1.0: Cannot schedule work [ 249.698461][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 249.700144][ C0] cdc_wdm 7-1:1.0: Cannot schedule work [ 249.705011][ T35] usb 7-1: USB disconnect, device number 6 [ 252.382081][ T9688] bridge0: port 4(hsr_slave_1) entered blocking state [ 252.384349][ T9688] bridge0: port 4(hsr_slave_1) entered disabled state [ 252.387092][ T9688] hsr_slave_1: entered allmulticast mode [ 252.391900][ T9688] hsr_slave_1: left allmulticast mode [ 254.925138][ T9729] netlink: 'syz.1.938': attribute type 4 has an invalid length. [ 255.092331][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.551123][ T9767] netlink: 'syz.0.954': attribute type 10 has an invalid length. [ 257.567576][ T9767] batman_adv: batadv0: Adding interface: team0 [ 257.569542][ T9767] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.579856][ T9767] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 257.596708][ T9767] netlink: 'syz.0.954': attribute type 10 has an invalid length. [ 257.597687][ T9774] lo speed is unknown, defaulting to 1000 [ 257.599043][ T9767] netlink: 2 bytes leftover after parsing attributes in process `syz.0.954'. [ 257.599116][ T9767] team0: entered promiscuous mode [ 257.610801][ T9767] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.614166][ T9767] batman_adv: batadv0: Interface activated: team0 [ 257.617385][ T9767] batman_adv: batadv0: Interface deactivated: team0 [ 257.619784][ T9767] batman_adv: batadv0: Removing interface: team0 [ 257.634182][ T9767] bridge0: port 1(team0) entered blocking state [ 257.637989][ T9767] bridge0: port 1(team0) entered disabled state [ 257.642366][ T9767] team0: entered allmulticast mode [ 257.786825][ T9774] lo speed is unknown, defaulting to 1000 [ 257.788752][ T9774] lo speed is unknown, defaulting to 1000 [ 257.827802][ T9774] infiniband sz1: set down [ 257.829644][ T35] lo speed is unknown, defaulting to 1000 [ 257.832513][ T9774] infiniband sz1: added lo [ 257.849496][ T9774] RDS/IB: sz1: added [ 257.851426][ T9774] smc: adding ib device sz1 with port count 1 [ 257.853281][ T9774] smc: ib device sz1 port 1 has pnetid [ 257.855076][ T6631] lo speed is unknown, defaulting to 1000 [ 257.859627][ T9774] lo speed is unknown, defaulting to 1000 [ 257.904350][ T9774] lo speed is unknown, defaulting to 1000 [ 257.990285][ T9774] lo speed is unknown, defaulting to 1000 [ 258.060973][ T9774] lo speed is unknown, defaulting to 1000 [ 258.127843][ T9774] lo speed is unknown, defaulting to 1000 [ 258.494999][ T9791] netlink: 'syz.1.953': attribute type 2 has an invalid length. [ 258.497220][ T9791] netlink: 'syz.1.953': attribute type 8 has an invalid length. [ 258.499384][ T9791] netlink: 132 bytes leftover after parsing attributes in process `syz.1.953'. [ 258.805583][ T9797] bridge0: port 2(hsr_slave_1) entered blocking state [ 258.807498][ T9797] bridge0: port 2(hsr_slave_1) entered disabled state [ 258.809740][ T9797] hsr_slave_1: entered allmulticast mode [ 258.811980][ T9797] hsr_slave_1: left allmulticast mode [ 259.465504][ T9806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.956'. [ 259.470513][ T9806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.956'. [ 259.478716][ T9806] netlink: 32 bytes leftover after parsing attributes in process `syz.2.956'. [ 259.651860][ T9810] netlink: 'syz.3.958': attribute type 4 has an invalid length. [ 260.014282][ T9819] netlink: 'syz.1.960': attribute type 2 has an invalid length. [ 260.017233][ T9819] netlink: 'syz.1.960': attribute type 8 has an invalid length. [ 260.019595][ T9819] netlink: 132 bytes leftover after parsing attributes in process `syz.1.960'. [ 260.725354][ T9848] vivid-000: ================= START STATUS ================= [ 260.728861][ T9848] vivid-000: Test Pattern: 75% Colorbar [ 260.730877][ T9848] vivid-000: Fill Percentage of Frame: 100 [ 260.733121][ T9848] vivid-000: Horizontal Movement: No Movement [ 260.735160][ T9848] vivid-000: Vertical Movement: No Movement [ 260.736895][ T9848] vivid-000: OSD Text Mode: All [ 260.738344][ T9848] vivid-000: Show Border: false [ 260.739849][ T9848] vivid-000: Show Square: false [ 260.741923][ T9848] vivid-000: Sensor Flipped Horizontally: false [ 260.743861][ T9848] vivid-000: Sensor Flipped Vertically: false [ 260.746317][ T9848] vivid-000: Insert SAV Code in Image: false [ 260.748782][ T9848] vivid-000: Insert EAV Code in Image: false [ 260.751612][ T9848] vivid-000: Insert Video Guard Band: false [ 260.753535][ T9848] vivid-000: Reduced Framerate: false [ 260.755504][ T9848] vivid-000: HDMI 000-0 Is Connected To: None [ 260.757711][ T9848] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 260.761218][ T9848] vivid-000: Enable Capture Cropping: true [ 260.763672][ T9848] vivid-000: Enable Capture Composing: true [ 260.766026][ T9848] vivid-000: Enable Capture Scaler: true [ 260.768334][ T9848] vivid-000: Timestamp Source: End of Frame [ 260.770569][ T9848] vivid-000: Colorspace: sRGB [ 260.772251][ T9848] vivid-000: Transfer Function: Default [ 260.774055][ T9848] vivid-000: Y'CbCr Encoding: Default [ 260.775975][ T9848] vivid-000: HSV Encoding: Hue 0-179 [ 260.777513][ T9848] vivid-000: Quantization: Default [ 260.780382][ T9848] vivid-000: Apply Alpha To Red Only: false [ 260.782513][ T9848] vivid-000: Standard Aspect Ratio: 4x3 [ 260.784555][ T9848] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 260.787441][ T9848] vivid-000: DV Timings: 640x480p59 inactive [ 260.787916][ T9852] xt_CT: You must specify a L4 protocol and not use inversions on it [ 260.789747][ T9848] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 260.795870][ T9848] vivid-000: Maximum EDID Blocks: 2 [ 260.797760][ T9848] vivid-000: Limited RGB Range (16-235): false [ 260.799682][ T9848] vivid-000: Rx RGB Quantization Range: Automatic [ 260.801920][ T9848] vivid-000: Power Present: 0x00000000 [ 260.803580][ T9848] tpg source WxH: 640x360 (Y'CbCr) [ 260.805610][ T9848] tpg field: 1 [ 260.806647][ T9848] tpg crop: 640x360@0x0 [ 260.807862][ T9848] tpg compose: 640x360@0x0 [ 260.809133][ T9848] tpg colorspace: 8 [ 260.810225][ T9848] tpg transfer function: 0/0 [ 260.812041][ T9852] lo speed is unknown, defaulting to 1000 [ 260.812133][ T9848] tpg Y'CbCr encoding: 0/0 [ 260.815120][ T9848] tpg quantization: 0/0 [ 260.816247][ T9848] tpg RGB range: 0/2 [ 260.817366][ T9848] vivid-000: ================== END STATUS ================== [ 261.932702][ T9895] netlink: 36 bytes leftover after parsing attributes in process `syz.1.975'. [ 263.489095][ T9930] netlink: 'syz.3.985': attribute type 12 has an invalid length. [ 264.437635][ T9979] netlink: 'syz.0.990': attribute type 9 has an invalid length. [ 265.646189][ T9995] lo speed is unknown, defaulting to 1000 [ 265.843453][ T9995] block nbd2: shutting down sockets [ 265.853367][ T9994] block nbd2: server does not support multiple connections per device. [ 265.856103][ T9994] block nbd2: NBD_DISCONNECT [ 265.857422][ T9994] block nbd2: Send disconnect failed -32 [ 265.860474][ T9994] block nbd2: Send disconnect failed -32 [ 267.334204][ T39] kauditd_printk_skb: 4 callbacks suppressed [ 267.334216][ T39] audit: type=1800 audit(1737206336.341:50): pid=10031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1016" name="/" dev="9p" ino=2 res=0 errno=0 [ 268.961001][T10066] netlink: 'syz.3.1018': attribute type 2 has an invalid length. [ 268.964212][T10066] netlink: 'syz.3.1018': attribute type 8 has an invalid length. [ 268.966734][T10069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1019'. [ 268.967151][T10066] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1018'. [ 268.971019][T10069] nbd: nbd0 already in use [ 269.355717][T10078] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1021'. [ 270.377735][T10100] lo speed is unknown, defaulting to 1000 [ 270.656246][T10108] vlan2: entered promiscuous mode [ 270.660329][T10108] vlan2: entered allmulticast mode [ 270.662072][T10108] hsr_slave_1: entered allmulticast mode [ 270.679686][T10108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1029'. [ 270.830285][T10108] hsr_slave_1 (unregistering): left allmulticast mode [ 270.869069][T10108] hsr_slave_1 (unregistering): left promiscuous mode [ 270.892917][ T39] audit: type=1800 audit(1737206339.911:51): pid=10117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1032" name="/" dev="9p" ino=2 res=0 errno=0 [ 274.009525][T10181] vlan2: entered promiscuous mode [ 274.011706][T10181] vlan2: entered allmulticast mode [ 274.013315][T10181] hsr_slave_1: entered allmulticast mode [ 274.036755][T10181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1043'. [ 274.149049][T10181] hsr_slave_1 (unregistering): left allmulticast mode [ 274.171213][T10181] hsr_slave_1 (unregistering): left promiscuous mode [ 276.409411][T10233] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 276.414936][T10233] UDF-fs: Scanning with blocksize 2048 failed [ 276.419346][T10233] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 276.425227][T10233] UDF-fs: Scanning with blocksize 4096 failed [ 279.298600][T10299] netlink: 'syz.2.1066': attribute type 10 has an invalid length. [ 279.307742][T10299] team0: left promiscuous mode [ 279.309488][T10299] team0: left allmulticast mode [ 279.318939][T10299] batman_adv: batadv0: Adding interface: team0 [ 279.321524][T10299] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.328921][T10299] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 279.358705][T10299] netlink: 'syz.2.1066': attribute type 10 has an invalid length. [ 279.361624][T10299] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1066'. [ 279.364429][T10299] team0: entered promiscuous mode [ 279.366318][T10299] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.368487][T10299] batman_adv: batadv0: Interface activated: team0 [ 279.370437][T10299] batman_adv: batadv0: Interface deactivated: team0 [ 279.374854][T10299] batman_adv: batadv0: Removing interface: team0 [ 279.379802][T10299] bridge0: port 1(team0) entered blocking state [ 279.391358][T10299] bridge0: port 1(team0) entered disabled state [ 279.394871][T10299] team0: entered allmulticast mode [ 282.631672][T10370] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 282.643934][T10370] UDF-fs: Scanning with blocksize 2048 failed [ 282.655588][T10370] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 282.658046][T10370] UDF-fs: Scanning with blocksize 4096 failed [ 284.381204][ C0] vkms_vblank_simulate: vblank timer overrun [ 284.471185][ C0] vkms_vblank_simulate: vblank timer overrun [ 287.286746][T10433] netlink: 'syz.1.1098': attribute type 10 has an invalid length. [ 287.298536][T10429] lo speed is unknown, defaulting to 1000 [ 287.337291][T10436] netlink: 'syz.1.1098': attribute type 10 has an invalid length. [ 287.340642][T10436] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1098'. [ 287.348075][T10436] team0: entered promiscuous mode [ 287.350416][T10436] bridge0: port 1(team0) entered blocking state [ 287.353400][T10436] bridge0: port 1(team0) entered disabled state [ 287.355991][T10436] team0: entered allmulticast mode [ 287.412357][T10433] bridge0: port 1(team0) entered disabled state [ 287.463502][T10433] team0: left allmulticast mode [ 287.468699][T10433] team0: left promiscuous mode [ 287.470895][T10433] bridge0: port 1(team0) entered disabled state [ 287.484889][T10442] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1106'. [ 287.510588][T10433] batman_adv: batadv0: Adding interface: team0 [ 287.519535][T10433] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.543767][T10433] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 288.353160][T10452] tipc: Invalid UDP bearer configuration [ 288.353181][T10452] tipc: Enabling of bearer rejected, failed to enable media [ 289.380888][T10463] netlink: 'syz.0.1108': attribute type 1 has an invalid length. [ 289.405272][T10463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1108'. [ 289.407762][T10462] uprobe: syz.3.1107:10462 failed to unregister, leaking uprobe [ 289.410221][T10463] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 289.416876][T10463] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 289.430055][T10463] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 289.439824][T10463] bond1 (unregistering): Released all slaves [ 289.700829][T10471] lo speed is unknown, defaulting to 1000 [ 291.899633][T10526] binder: 10523:10526 ioctl c018620c 20000140 returned -22 [ 293.139391][T10554] netlink: 'syz.0.1129': attribute type 10 has an invalid length. [ 293.144083][T10554] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1129'. [ 293.220468][T10560] overlayfs: missing 'workdir' [ 295.194174][T10595] ptrace attach of "/syz-executor exec"[5941] was attempted by "/syz-executor exec"[10595] [ 295.445630][T10607] netlink: 'syz.2.1140': attribute type 4 has an invalid length. [ 296.257564][T10624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1144'. [ 296.260918][T10624] batman_adv: batadv0: Removing interface: team0 [ 297.684884][T10681] syzkaller0: entered promiscuous mode [ 297.687058][T10681] syzkaller0: entered allmulticast mode [ 299.335245][T10695] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.338265][T10695] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.341424][T10695] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.344599][T10695] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.354554][T10695] vxlan0: entered promiscuous mode [ 299.356235][T10695] vxlan0: entered allmulticast mode [ 299.358225][T10695] team0: Port device vxlan0 added [ 299.361452][ T84] bridge0: port 1(team0) entered blocking state [ 299.364146][ T84] bridge0: port 1(team0) entered forwarding state [ 299.444320][T10708] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 299.483345][T10708] lo speed is unknown, defaulting to 1000 [ 299.673253][T10708] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 299.688558][T10708] block nbd0: shutting down sockets [ 299.702226][T10708] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 299.704972][T10708] block nbd0: NBD_DISCONNECT [ 299.706746][T10708] block nbd0: Send disconnect failed -89 [ 302.178580][T10760] lo speed is unknown, defaulting to 1000 [ 302.252276][T10770] netlink: 'syz.0.1168': attribute type 4 has an invalid length. [ 302.592854][T10767] block nbd3: shutting down sockets [ 302.605151][T10760] block nbd3: server does not support multiple connections per device. [ 302.608986][T10760] block nbd3: NBD_DISCONNECT [ 302.610815][T10760] block nbd3: Send disconnect failed -32 [ 302.616217][T10760] block nbd3: Send disconnect failed -32 [ 302.929096][T10786] veth0_vlan: entered allmulticast mode [ 303.050717][T10786] veth0_vlan: left promiscuous mode [ 303.053367][T10786] veth0_vlan: entered promiscuous mode [ 303.190376][T10783] lo speed is unknown, defaulting to 1000 [ 306.087294][T10857] cgroup: fork rejected by pids controller in /syz0 [ 308.767129][T11042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1197'. [ 310.791275][T11069] netlink: 'syz.1.1204': attribute type 9 has an invalid length. [ 315.095164][T11131] syzkaller0: entered promiscuous mode [ 315.096787][T11131] syzkaller0: entered allmulticast mode [ 315.340380][T11149] ptrace attach of "/syz-executor exec"[5945] was attempted by "/syz-executor exec"[11149] [ 316.537251][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.861773][T11190] netlink: 'syz.2.1233': attribute type 2 has an invalid length. [ 317.864182][T11190] netlink: 'syz.2.1233': attribute type 8 has an invalid length. [ 317.866625][T11190] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1233'. [ 318.068083][T11198] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1235'. [ 319.673872][T11230] ptrace attach of "/syz-executor exec"[5952] was attempted by "/syz-executor exec"[11230] [ 320.576284][T11397] netlink: 'syz.3.1244': attribute type 4 has an invalid length. [ 321.173192][T11410] netlink: 'syz.2.1245': attribute type 9 has an invalid length. [ 322.425610][T11440] ptrace attach of "/syz-executor exec"[5944] was attempted by "/syz-executor exec"[11440] [ 323.637266][T11454] syzkaller0: entered promiscuous mode [ 323.638965][T11454] syzkaller0: entered allmulticast mode [ 323.775878][T11458] random: crng reseeded on system resumption [ 325.264095][T11458] lo speed is unknown, defaulting to 1000 [ 327.656022][T11884] random: crng reseeded on system resumption [ 327.753702][T11884] lo speed is unknown, defaulting to 1000 [ 329.032835][T11904] Cannot find add_set index 3 as target [ 329.331555][T11906] virtio-fs: tag not found [ 329.581254][ T30] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 329.731315][ T30] usb 8-1: Using ep0 maxpacket: 32 [ 329.735716][ T30] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 329.738993][ T30] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 329.746393][ T30] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 329.749916][ T30] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 329.754252][ T30] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 329.758080][ T30] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 329.766346][ T30] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 329.769862][ T30] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.775528][ T30] usb 8-1: config 0 descriptor?? [ 329.780316][T11913] fuse: Bad value for 'fd' [ 329.798988][T11915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1279'. [ 329.806127][T11915] batman_adv: batadv0: Removing interface: vxlan0 [ 330.018566][ T30] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 330.039671][ T30] usb 8-1: USB disconnect, device number 4 [ 330.047534][ T30] usblp0: removed [ 330.539003][ T30] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 330.771278][ T30] usb 8-1: Using ep0 maxpacket: 32 [ 330.777369][ T30] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 330.779918][ T30] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 330.782818][ T30] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 330.785753][ T30] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 330.789065][ T30] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 330.793335][ T30] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 330.797327][ T30] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 330.800034][ T30] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.860901][ T30] usb 8-1: config 0 descriptor?? [ 331.108249][ T30] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 331.703553][ T1463] usb 8-1: USB disconnect, device number 5 [ 331.706179][ T1463] usblp0: removed [ 332.817444][T11964] random: crng reseeded on system resumption [ 332.898170][T11968] fuse: Bad value for 'fd' [ 332.915094][T11964] lo speed is unknown, defaulting to 1000 [ 333.571256][ T1330] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 333.737581][ T1330] usb 7-1: Using ep0 maxpacket: 8 [ 333.765293][ T1330] usb 7-1: config 0 has an invalid interface number: 48 but max is 0 [ 333.775503][ T1330] usb 7-1: config 0 has no interface number 0 [ 333.786045][ T1330] usb 7-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 333.794943][ T1330] usb 7-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 333.800389][ T1330] usb 7-1: config 0 interface 48 has no altsetting 0 [ 333.815223][ T1330] usb 7-1: config 0 has an invalid interface number: 48 but max is 0 [ 333.817604][ T1330] usb 7-1: config 0 has no interface number 0 [ 333.819445][ T1330] usb 7-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 333.823859][ T1330] usb 7-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 333.828749][ T1330] usb 7-1: config 0 interface 48 has no altsetting 0 [ 333.845630][ T1330] usb 7-1: config 0 has an invalid interface number: 48 but max is 0 [ 333.848004][ T1330] usb 7-1: config 0 has no interface number 0 [ 333.849825][ T1330] usb 7-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 333.855611][ T1330] usb 7-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 333.860043][ T1330] usb 7-1: config 0 interface 48 has no altsetting 0 [ 333.867574][ T1330] usb 7-1: config 0 has an invalid interface number: 48 but max is 0 [ 333.870043][ T1330] usb 7-1: config 0 has no interface number 0 [ 333.873641][ T1330] usb 7-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 333.876914][ T1330] usb 7-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 333.881173][ T1330] usb 7-1: config 0 interface 48 has no altsetting 0 [ 333.890720][ T1330] usb 7-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 333.894796][ T1330] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.930210][ T1330] usb 7-1: config 0 descriptor?? [ 334.180582][ T1330] usb 7-1: string descriptor 0 read error: -71 [ 334.300848][ T1330] usb 7-1: USB disconnect, device number 7 [ 337.617707][T12043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1308'. [ 341.068795][T12101] netdevsim netdevsim3: Direct firmware load for . [ 341.068795][T12101] failed with error -2 [ 341.079792][T12101] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 341.079792][T12101] [ 342.009873][T12128] team0: Mode changed to "broadcast" [ 342.018465][T12128] vlan0: entered promiscuous mode [ 342.026132][T12128] team0: Port device vlan0 added [ 342.055144][T12128] tipc: Started in network mode [ 342.056729][T12128] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 342.059996][T12128] tipc: Enabled bearer , priority 0 [ 342.086841][T12133] Cannot find add_set index 3 as target [ 343.343221][ T30] tipc: Node number set to 11578026 [ 343.644076][T12153] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1335'. [ 343.711680][T12155] fuse: Bad value for 'fd' [ 345.451904][T12215] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 348.339681][T12274] binder: BINDER_SET_CONTEXT_MGR already set [ 348.342177][T12274] binder: 12266:12274 ioctl 4018620d 20000100 returned -16 [ 348.845185][T12279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1358'. [ 349.860461][T12277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 352.412328][T12344] random: crng reseeded on system resumption [ 352.501582][T12344] lo speed is unknown, defaulting to 1000 [ 352.920316][T12353] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1376'. [ 354.931286][T12407] netlink: 'syz.2.1381': attribute type 9 has an invalid length. [ 355.597986][T12416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1386'. [ 355.821328][T12416] trusted_key: syz.2.1386 sent an empty control message without MSG_MORE. [ 356.246008][T12433] lo speed is unknown, defaulting to 1000 [ 361.743469][T12541] netlink: 'syz.2.1414': attribute type 16 has an invalid length. [ 361.747105][T12541] netlink: 'syz.2.1414': attribute type 3 has an invalid length. [ 361.750183][T12541] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1414'. [ 363.756803][T12591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1427'. [ 364.638256][T12589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.257400][T12618] netlink: 'syz.0.1431': attribute type 9 has an invalid length. [ 367.710672][T12673] kvm: kvm [12672]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x187) = 0x8000 [ 368.144389][T12690] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 368.147242][T12690] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 369.004430][T12702] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1450'. [ 369.013915][T12702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1450'. [ 369.016770][T12702] random: crng reseeded on system resumption [ 369.866912][T12732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1456'. [ 370.002803][T12737] virtio-fs: tag not found [ 370.311187][ T5999] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 370.621134][ T5999] usb 5-1: Using ep0 maxpacket: 32 [ 370.625581][ T5999] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 370.628296][ T5999] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 370.631334][ T5999] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 370.634119][ T5999] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 370.636976][ T5999] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 370.664265][ T5999] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 370.670216][ T5999] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 370.676247][ T5999] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.682168][ T5999] usb 5-1: config 0 descriptor?? [ 370.905919][ T5999] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 371.338294][ T5999] usb 5-1: USB disconnect, device number 4 [ 371.340646][T12749] netlink: 'syz.1.1461': attribute type 9 has an invalid length. [ 371.343410][ T5999] usblp0: removed [ 372.061260][ T5999] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 372.581265][ T5999] usb 5-1: Using ep0 maxpacket: 32 [ 372.586354][ T5999] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 372.590053][ T5999] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 372.604525][ T5999] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 372.608519][ T5999] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 372.627695][ T5999] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 372.651671][ T5999] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 372.667203][ T5999] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 372.674590][ T5999] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.681686][ T5999] usb 5-1: config 0 descriptor?? [ 372.896784][ T5999] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 373.111158][ T1463] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 373.262971][ T1463] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 373.266262][ T1463] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 373.269501][ T1463] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 373.273123][ T1463] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 373.277338][ T1463] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 373.281376][ T1463] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 373.285218][ T1463] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 373.295235][ T1463] usb 7-1: string descriptor 0 read error: -22 [ 373.297789][ T1463] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 373.301570][ T1463] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.306264][ T1463] usb 7-1: config 0 descriptor?? [ 373.310403][ T1463] hub 7-1:0.0: bad descriptor, ignoring hub [ 373.315248][ T1463] hub 7-1:0.0: probe with driver hub failed with error -5 [ 373.320436][ T1463] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input12 [ 373.450701][ T1463] usb 5-1: USB disconnect, device number 5 [ 373.454873][ T1463] usblp0: removed [ 373.534768][ T1017] usb 7-1: USB disconnect, device number 8 [ 373.733081][T12779] random: crng reseeded on system resumption [ 373.777250][T12780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1477'. [ 373.802507][T12779] lo speed is unknown, defaulting to 1000 [ 376.979434][T12828] lo speed is unknown, defaulting to 1000 [ 377.533061][T12836] virtio-fs: tag not found [ 377.781260][ T2289] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 377.849043][T12844] random: crng reseeded on system resumption [ 377.890716][T12844] lo speed is unknown, defaulting to 1000 [ 377.941178][ T2289] usb 6-1: Using ep0 maxpacket: 32 [ 378.078500][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.102511][ T2289] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 378.104886][ T2289] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 378.108127][ T2289] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 378.112202][ T2289] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 378.116011][ T2289] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 378.120985][ T2289] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 378.124708][ T2289] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 378.127549][ T2289] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.558853][ T2289] usb 6-1: config 0 descriptor?? [ 378.788935][T12855] IPv6: NLM_F_CREATE should be specified when creating new route [ 378.790789][ T2289] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 378.796589][ T2289] usb 6-1: USB disconnect, device number 7 [ 378.810751][ T2289] usblp0: removed [ 378.891237][T12855] can0: slcan on ptm0. [ 379.003210][T12855] can0 (unregistered): slcan off ptm0. [ 379.011549][T12855] mkiss: ax0: crc mode is auto. [ 379.251832][ T1463] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 379.431195][ T1463] usb 6-1: Using ep0 maxpacket: 32 [ 379.437855][ T1463] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 379.440747][ T1463] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 379.443748][ T1463] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 379.446911][ T1463] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 379.450758][ T1463] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 379.454782][ T1463] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 379.459226][ T1463] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 379.463147][ T1463] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.473609][ T1463] usb 6-1: config 0 descriptor?? [ 379.728898][ T1463] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 380.030264][T12883] vivid-007: disconnect [ 380.296754][ T1330] usb 6-1: USB disconnect, device number 8 [ 380.327001][ T1330] usblp0: removed [ 380.370441][T12891] syz.0.1494: attempt to access beyond end of device [ 380.370441][T12891] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 380.376299][T12891] syz.0.1494: attempt to access beyond end of device [ 380.376299][T12891] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 380.380655][T12891] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 380.391413][T12891] syz.0.1494: attempt to access beyond end of device [ 380.391413][T12891] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 380.395287][T12891] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 380.398319][T12891] syz.0.1494: attempt to access beyond end of device [ 380.398319][T12891] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 380.402916][T12891] syz.0.1494: attempt to access beyond end of device [ 380.402916][T12891] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 380.406729][T12891] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 380.409672][T12891] syz.0.1494: attempt to access beyond end of device [ 380.409672][T12891] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 380.416107][T12891] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 380.420561][T12891] syz.0.1494: attempt to access beyond end of device [ 380.420561][T12891] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 380.423541][T12886] block nbd0: shutting down sockets [ 380.424637][T12891] syz.0.1494: attempt to access beyond end of device [ 380.424637][T12891] nbd0: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 380.430395][T12891] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 380.433304][T12891] syz.0.1494: attempt to access beyond end of device [ 380.433304][T12891] nbd0: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 380.437157][T12891] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 380.440614][T12891] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 380.909775][T12882] vivid-007: reconnect [ 381.079957][T12902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1497'. [ 381.523423][T12915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1500'. [ 382.935776][T12937] lo speed is unknown, defaulting to 1000 [ 384.895883][T12968] ptrace attach of "/syz-executor exec"[5952] was attempted by "/syz-executor exec"[12968] [ 384.922537][T12965] lo speed is unknown, defaulting to 1000 [ 386.109636][T13033] lo speed is unknown, defaulting to 1000 [ 386.681208][ T1330] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 386.975133][ T1330] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 386.977633][ T1330] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.994212][ T1330] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 386.996867][ T1330] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 386.999219][ T1330] usb 6-1: Manufacturer: syz [ 387.009044][T13074] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 387.011573][ T1330] usb 6-1: config 0 descriptor?? [ 387.071140][ T1330] rc_core: IR keymap rc-hauppauge not found [ 387.073571][ T1330] Registered IR keymap rc-empty [ 387.076374][ T1330] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 387.080978][ T1330] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input13 [ 387.500670][T13086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1521'. [ 389.867695][ T30] usb 6-1: USB disconnect, device number 9 [ 390.562175][T13131] netlink: 'syz.2.1536': attribute type 10 has an invalid length. [ 390.578631][T13131] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 390.581461][T13131] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 390.585596][T13131] team0: Port device netdevsim0 added [ 390.598425][T13131] netlink: 'syz.2.1536': attribute type 10 has an invalid length. [ 390.604598][T13131] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 390.607024][T13131] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 390.615378][T13131] team0: Port device netdevsim0 removed [ 390.623968][T13131] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 391.972688][T13152] netlink: 'syz.1.1542': attribute type 9 has an invalid length. [ 392.382698][T13155] vxcan1: tx address claim with dlc 1 [ 392.594994][T13158] vivid-007: disconnect [ 392.813478][T13163] netlink: 'syz.3.1545': attribute type 39 has an invalid length. [ 393.422110][T13157] vivid-007: reconnect [ 395.543189][T13172] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1548'. [ 395.556676][T13196] macvtap1: entered promiscuous mode [ 395.558522][T13196] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 395.560983][T13196] macvtap1: entered allmulticast mode [ 395.562737][T13196] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 395.568737][T13196] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 395.570719][T13196] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 395.843758][T13205] vivid-007: disconnect [ 396.777021][T13223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1562'. [ 396.800547][T13204] vivid-007: reconnect [ 397.723302][T13235] syz.2.1565[13235] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 397.723385][T13235] syz.2.1565[13235] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 397.728126][T13235] syz.2.1565[13235] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 397.739412][T13235] random: crng reseeded on system resumption [ 397.979978][T13247] netlink: zone id is out of range [ 397.981778][T13247] netlink: zone id is out of range [ 397.983793][T13247] netlink: zone id is out of range [ 398.686079][T13254] macvtap1: entered promiscuous mode [ 398.687811][T13254] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 398.691431][T13254] macvtap1: entered allmulticast mode [ 398.693124][T13254] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 398.697966][T13254] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 398.700547][T13254] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 400.672370][T13300] netdevsim netdevsim3: Direct firmware load for . [ 400.672370][T13300] failed with error -2 [ 400.678832][T13300] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 400.678832][T13300] [ 401.942993][T13326] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3738224872 (478492783616 ns) > initial count (91121186304 ns). Using initial count to start timer. [ 402.317568][T13330] macvtap1: entered promiscuous mode [ 402.319156][T13330] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 402.322240][T13330] macvtap1: entered allmulticast mode [ 402.323863][T13330] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 402.327749][T13330] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 402.330398][T13330] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 403.666702][T13362] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 404.449246][T13378] netlink: 'syz.0.1595': attribute type 10 has an invalid length. [ 404.463067][T13378] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 404.466341][T13378] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 404.469856][T13378] team0: Port device netdevsim0 added [ 404.541586][T13378] netlink: 'syz.0.1595': attribute type 10 has an invalid length. [ 404.570877][T13378] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 404.573522][T13378] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 404.578764][T13378] team0: Port device netdevsim0 removed [ 404.589435][T13378] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 405.428810][T13400] ata1.00: invalid command format 189 [ 406.782933][T13419] vxcan1: tx address claim with dlc 1 [ 407.720730][T13435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1611'. [ 408.791189][ T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 408.962711][ T9] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 408.966218][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.971433][ T9] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 408.975162][ T9] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 408.978617][ T9] usb 8-1: Manufacturer: syz [ 408.982411][ T9] usb 8-1: config 0 descriptor?? [ 409.021194][ T9] rc_core: IR keymap rc-hauppauge not found [ 409.023654][ T9] Registered IR keymap rc-empty [ 409.026431][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 409.031475][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input14 [ 409.328039][T13466] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1618'. [ 409.331516][T13466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1618'. [ 409.489882][T13473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1616'. [ 411.746980][ T1463] usb 8-1: USB disconnect, device number 6 [ 412.447361][T13504] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 414.961773][T13527] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3738224872 (478492783616 ns) > initial count (91121186304 ns). Using initial count to start timer. [ 415.025046][T13527] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 415.131205][ T1463] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 415.303618][ T1463] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 415.306439][ T1463] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.310685][ T1463] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 415.314142][ T1463] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 415.317522][ T1463] usb 5-1: Manufacturer: syz [ 415.328619][ T1463] usb 5-1: config 0 descriptor?? [ 415.381203][ T1463] rc_core: IR keymap rc-hauppauge not found [ 415.383159][ T1463] Registered IR keymap rc-empty [ 415.390946][ T1463] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 415.396794][ T1463] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input15 [ 415.813889][T13547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1634'. [ 417.918409][ T1017] usb 5-1: USB disconnect, device number 6 [ 417.992097][T13553] netlink: 'syz.2.1639': attribute type 1 has an invalid length. [ 417.995189][T13553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1639'. [ 418.013391][T13553] lo speed is unknown, defaulting to 1000 [ 418.562621][T13557] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 420.247160][T13583] netlink: 'syz.1.1647': attribute type 1 has an invalid length. [ 420.303143][T13583] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 420.312339][T13583] 8021q: adding VLAN 0 to HW filter on device bond1 [ 420.323314][T13583] vlan2: entered promiscuous mode [ 420.327003][T13583] bond1: entered promiscuous mode [ 420.328674][T13583] ip6gretap1: entered promiscuous mode [ 420.344035][T13583] bond1: left promiscuous mode [ 420.351186][T13583] ip6gretap1: left promiscuous mode [ 420.612182][ T11] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 420.731872][ T1249] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 421.897918][T13604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1652'. [ 423.354096][T13644] ata1.00: invalid command format 189 [ 423.402497][T13646] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1662'. [ 423.407366][T13646] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1662'. [ 424.727160][T13647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 425.974172][T13677] lo speed is unknown, defaulting to 1000 [ 426.022064][T13678] 9pnet_fd: Insufficient options for proto=fd [ 430.454115][T13750] can0: slcan on pts0. [ 430.553272][T13750] can0 (unregistered): slcan off pts0. [ 431.304012][T13779] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 431.306558][T13779] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 431.310026][T13779] vhci_hcd vhci_hcd.0: Device attached [ 431.491328][ T2289] vhci_hcd: vhci_device speed not set [ 431.551176][ T2289] usb 39-1: new full-speed USB device number 3 using vhci_hcd [ 432.199049][T13780] vhci_hcd: connection reset by peer [ 432.202465][ T11] vhci_hcd: stop threads [ 432.204229][ T11] vhci_hcd: release socket [ 432.206081][ T11] vhci_hcd: disconnect device [ 432.327936][T13794] netlink: 'syz.3.1696': attribute type 10 has an invalid length. [ 432.492431][T13794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.498678][T13794] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 433.378285][T13805] netlink: 'syz.0.1699': attribute type 1 has an invalid length. [ 433.380643][T13805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1699'. [ 433.391625][T13805] lo speed is unknown, defaulting to 1000 [ 433.738975][T13811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1702'. [ 433.760567][T13813] lo speed is unknown, defaulting to 1000 [ 433.830121][T13815] 9pnet_fd: Insufficient options for proto=fd [ 433.936902][T13822] 9p: Unknown uid 00000000004294967295 [ 433.992113][T13825] overlayfs: failed to resolve './bus': -2 [ 434.011894][T13825] sctp: [Deprecated]: syz.3.1704 (pid 13825) Use of struct sctp_assoc_value in delayed_ack socket option. [ 434.011894][T13825] Use struct sctp_sack_info instead [ 436.681142][ T2289] vhci_hcd: vhci_device speed not set [ 438.473154][T13890] 9p: Unknown uid 00000000004294967295 [ 438.543307][T13894] overlayfs: failed to resolve './bus': -2 [ 438.575303][T13890] sctp: [Deprecated]: syz.1.1722 (pid 13890) Use of struct sctp_assoc_value in delayed_ack socket option. [ 438.575303][T13890] Use struct sctp_sack_info instead [ 439.414700][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.189342][T13967] lo speed is unknown, defaulting to 1000 [ 443.314527][T13967] 9pnet_fd: Insufficient options for proto=fd [ 443.709465][ T30] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 443.882440][ T30] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 443.885802][ T30] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 443.888626][ T30] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 443.891577][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.896138][T13959] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 443.902021][ T30] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 444.161035][ T2289] usb 7-1: USB disconnect, device number 9 [ 444.372959][T13990] netlink: 'syz.0.1746': attribute type 10 has an invalid length. [ 446.661935][T14022] netlink: 'syz.3.1754': attribute type 1 has an invalid length. [ 446.680782][T14022] 8021q: adding VLAN 0 to HW filter on device bond1 [ 446.700842][T14022] bond1: (slave gretap1): making interface the new active one [ 446.705125][T14022] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 446.987885][T14039] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 447.859229][T14052] xt_TCPMSS: Only works on TCP SYN packets [ 448.983898][T14070] binder: 14068:14070 ioctl 40046205 0 returned -22 [ 450.877122][T14109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1773'. [ 450.882818][T14109] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1773'. [ 451.461149][ T30] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 451.670359][ T30] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 451.679971][ T30] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 451.684075][ T30] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 451.686783][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.707263][T14114] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 451.746447][ T30] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 451.975764][ T30] usb 5-1: USB disconnect, device number 7 [ 452.142812][T14125] syz.2.1776 (14125) used greatest stack depth: 20296 bytes left [ 453.358972][T14157] : entered promiscuous mode [ 455.287349][T14202] lo speed is unknown, defaulting to 1000 [ 455.715109][T14213] xt_TCPMSS: Only works on TCP SYN packets [ 456.249288][T14220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1797'. [ 458.887824][T14275] fuse: Bad value for 'fd' [ 459.030751][T14279] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1811'. [ 459.165801][T14282] tipc: Started in network mode [ 459.167420][T14282] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 459.172974][T14282] tipc: Enabled bearer , priority 0 [ 460.296538][ T2289] tipc: Node number set to 11578026 [ 463.070351][T14347] lo speed is unknown, defaulting to 1000 [ 465.248132][T14390] fuse: Bad value for 'fd' [ 467.561942][T14439] fuse: Bad value for 'fd' [ 470.347388][T14490] tipc: Enabled bearer , priority 0 [ 471.341272][ T2289] tipc: Node number set to 3220259634 [ 472.297678][T14521] netlink: 284 bytes leftover after parsing attributes in process `syz.2.1869'. [ 473.401694][ T833] hid (null): unknown global tag 0xe [ 473.403392][ T833] hid (null): unknown global tag 0xe [ 473.405627][ T833] hid (null): unknown global tag 0xc [ 473.408824][ T833] hid (null): unknown global tag 0xd [ 473.435148][ T833] hid-generic 0000:0004:00A9.0003: unknown main item tag 0x0 [ 473.438315][ T833] hid-generic 0000:0004:00A9.0003: unknown global tag 0xe [ 473.441935][ T833] hid-generic 0000:0004:00A9.0003: item 0 2 1 14 parsing failed [ 473.445262][ T833] hid-generic 0000:0004:00A9.0003: probe with driver hid-generic failed with error -22 [ 473.814934][T14549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1875'. [ 473.820614][T14549] netlink: 'syz.2.1875': attribute type 30 has an invalid length. [ 474.519465][ T9] IPVS: starting estimator thread 0... [ 474.522649][T14566] 9pnet_fd: Insufficient options for proto=fd [ 474.611662][T14567] IPVS: using max 36 ests per chain, 86400 per kthread [ 477.140063][T14615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1890'. [ 477.143547][T14615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1890'. [ 477.147188][T14615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1890'. [ 477.150206][T14615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1890'. [ 477.153167][T14615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1890'. [ 477.155897][T14615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1890'. [ 477.158603][T14615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1890'. [ 477.161459][T14615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1890'. [ 478.746620][T14641] __nla_validate_parse: 28 callbacks suppressed [ 478.746706][T14641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1905'. [ 480.546946][T14682] syz.2.1903: attempt to access beyond end of device [ 480.546946][T14682] nbd2: rw=4096, sector=0, nr_sectors = 2 limit=0 [ 480.563574][T14682] XFS (nbd2): SB validate failed with error -5. [ 480.895080][T14694] netlink: zone id is out of range [ 483.207074][T14735] 9pnet_fd: Insufficient options for proto=fd [ 483.222125][T14735] netlink: 'syz.3.1917': attribute type 1 has an invalid length. [ 483.246879][T14735] 8021q: adding VLAN 0 to HW filter on device bond2 [ 483.307763][T14735] 8021q: adding VLAN 0 to HW filter on device bond2 [ 483.312974][T14735] bond2: (slave vcan0): The slave device specified does not support setting the MAC address [ 483.341715][T14735] bond2: (slave vcan0): Error -95 calling set_mac_address [ 483.669819][T14744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1920'. [ 483.674667][T14747] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1921'. [ 483.678664][T14747] netlink: 59 bytes leftover after parsing attributes in process `syz.3.1921'. [ 484.142797][T14756] ptrace attach of "/syz-executor exec"[5952] was attempted by "/syz-executor exec"[14756] [ 490.696534][T14912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1950'. [ 492.895009][T14964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1963'. [ 492.899136][T14964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1963'. [ 492.903500][T14964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1963'. [ 494.030393][T15002] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1969'. [ 494.033868][T15002] netlink: 59 bytes leftover after parsing attributes in process `syz.2.1969'. [ 495.291259][ T9] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 495.451221][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 495.454731][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 103, changing to 10 [ 495.459076][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34304, setting to 1024 [ 495.463350][ T9] usb 8-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 495.466838][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.481979][ T9] usb 8-1: config 0 descriptor?? [ 495.484928][T15021] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 495.900176][ T9] input: HID 05ac:8241 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:05AC:8241.0004/input/input17 [ 495.972500][ T9] appleir 0003:05AC:8241.0004: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 496.111961][T15021] batadv0: mtu greater than device maximum [ 497.749459][T15074] program syz.2.1987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 498.028095][ T5999] usb 8-1: USB disconnect, device number 7 [ 499.903278][T15122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1996'. [ 499.907759][T15122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1996'. [ 499.913299][T15122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1996'. [ 499.916138][T15122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1996'. [ 499.919821][T15122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1996'. [ 499.922982][T15122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1996'. [ 499.925914][T15122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1996'. [ 499.928882][T15122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1996'. [ 499.931816][T15122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1996'. [ 499.934734][T15122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1996'. [ 500.571124][T15129] wireguard0: entered promiscuous mode [ 500.720550][T15137] lo speed is unknown, defaulting to 1000 [ 500.852240][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.881869][T15174] netlink: zone id is out of range [ 502.984368][T15174] bridge0: port 1(team0) entered disabled state [ 503.531358][T15185] program syz.1.2011 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 504.458553][T15196] IPVS: Unknown mcast interface: geneve0 [ 507.447964][T15249] __nla_validate_parse: 30 callbacks suppressed [ 507.447980][T15249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2023'. [ 507.454827][T15249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2023'. [ 507.458198][T15249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2023'. [ 507.461682][T15249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2023'. [ 507.465111][T15249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2023'. [ 507.468541][T15249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2023'. [ 507.472004][T15249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2023'. [ 507.475430][T15249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2023'. [ 507.478848][T15249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2023'. [ 507.482448][T15249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2023'. [ 507.566988][T15250] program syz.0.2022 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 508.059431][T15259] syz.1.2026: attempt to access beyond end of device [ 508.059431][T15259] nbd1: rw=4096, sector=0, nr_sectors = 2 limit=0 [ 508.063800][T15259] XFS (nbd1): SB validate failed with error -5. [ 508.996398][T15278] netlink: zone id is out of range [ 509.099299][T15278] bridge0: port 3(team0) entered disabled state [ 509.102180][T15278] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.106384][T15278] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.855442][T15298] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 509.931419][ T9] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 510.101884][ T9] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 510.147481][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 510.150070][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 510.156809][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 510.159357][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 510.168876][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 510.173947][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 510.178226][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 510.180817][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 510.187184][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 510.189741][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 510.524861][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 510.527591][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 510.530671][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 510.533515][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 510.537286][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 510.539948][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 510.544033][ T9] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 510.546685][ T9] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 510.549121][ T9] usb 8-1: Product: syz [ 510.550380][ T9] usb 8-1: Manufacturer: syz [ 510.551864][ T9] usb 8-1: SerialNumber: syz [ 510.555419][ T9] usb 8-1: config 0 descriptor?? [ 510.558843][ T9] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 510.812484][ T833] usb 8-1: USB disconnect, device number 8 [ 510.821674][ T833] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 511.953228][T15335] input: syz0 as /devices/virtual/input/input18 [ 511.987710][T15335] ip6gre0: entered allmulticast mode [ 511.992140][T15335] ip6gre0: left allmulticast mode [ 512.271256][ T5999] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 512.441626][T15338] lo speed is unknown, defaulting to 1000 [ 512.464279][ T5999] usb 5-1: Using ep0 maxpacket: 16 [ 512.515714][ T5999] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 103, changing to 10 [ 512.519049][ T5999] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34304, setting to 1024 [ 512.522889][ T5999] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 512.527119][ T5999] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.559054][ T5999] usb 5-1: config 0 descriptor?? [ 512.600215][T15337] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 513.173388][ T5999] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:05AC:8241.0005/input/input19 [ 513.296561][ T5999] appleir 0003:05AC:8241.0005: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 514.008259][T15372] [U]  [ 514.974059][T15377] __nla_validate_parse: 29 callbacks suppressed [ 514.974071][T15377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2053'. [ 515.602912][T15401] syz.0.2058: attempt to access beyond end of device [ 515.602912][T15401] nbd0: rw=4096, sector=0, nr_sectors = 2 limit=0 [ 515.606724][T15401] XFS (nbd0): SB validate failed with error -5. [ 515.825762][ T833] usb 5-1: USB disconnect, device number 8 [ 516.108481][T15416] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 516.531609][T15426] loop2: detected capacity change from 0 to 524287999 [ 517.956300][ T39] audit: type=1326 audit(1737206587.977:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15442 comm="syz.2.2069" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x0 [ 521.780322][T15512] bridge0: port 1(team0) entered blocking state [ 521.782213][T15512] bridge0: port 1(team0) entered forwarding state [ 521.796535][T15512] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 522.318660][T15522] ubi0: attaching mtd0 [ 522.320947][T15522] ubi0: scanning is finished [ 522.323939][T15522] ubi0: empty MTD device detected [ 522.427462][T15522] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 522.429729][T15522] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 522.434152][T15522] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 522.436244][T15522] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 522.438343][T15522] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 522.440509][T15522] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 522.444717][T15522] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1638315704 [ 522.447584][T15522] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 522.450472][T15525] ubi0: background thread "ubi_bgt0d" started, PID 15525 [ 522.747622][T15539] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2091'. [ 522.911259][ T833] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 523.071191][ T833] usb 7-1: Using ep0 maxpacket: 16 [ 523.078778][ T833] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 103, changing to 10 [ 523.082209][ T833] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34304, setting to 1024 [ 523.085577][ T833] usb 7-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 523.088336][ T833] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.096116][ T833] usb 7-1: config 0 descriptor?? [ 523.098505][T15532] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 523.458323][ T5999] IPVS: starting estimator thread 0... [ 523.527182][ T833] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:05AC:8241.0006/input/input20 [ 523.561222][T15546] IPVS: using max 37 ests per chain, 88800 per kthread [ 523.600249][ T833] appleir 0003:05AC:8241.0006: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 524.971211][T15571] program syz.3.2096 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 525.329199][ T35] usb 7-1: USB disconnect, device number 10 [ 525.621365][T15585] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2108'. [ 525.751756][T15591] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 525.754274][T15591] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 525.757703][T15591] vhci_hcd vhci_hcd.0: Device attached [ 526.173898][ T35] vhci_hcd: vhci_device speed not set [ 526.231172][ T35] usb 43-1: new full-speed USB device number 3 using vhci_hcd [ 527.641291][T15592] vhci_hcd: connection reset by peer [ 527.643010][ T1143] vhci_hcd: stop threads [ 527.644647][ T1143] vhci_hcd: release socket [ 527.646837][ T1143] vhci_hcd: disconnect device [ 527.665011][T15621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2107'. [ 528.047443][T15632] program syz.3.2111 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 528.343001][ T39] audit: type=1800 audit(1737206598.367:53): pid=15631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2109" name="bus" dev="overlay" ino=2827 res=0 errno=0 [ 529.144580][T15635] lo speed is unknown, defaulting to 1000 [ 529.542909][T15659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2118'. [ 529.545588][T15659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2118'. [ 529.754731][ T39] audit: type=1326 audit(1737206599.777:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15660 comm="syz.1.2119" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x0 [ 530.346805][T15678] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 530.351368][T15678] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 530.356477][T15678] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 530.706212][T15685] program syz.1.2123 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 531.072520][T15667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 531.321158][ T35] vhci_hcd: vhci_device speed not set [ 531.452992][T15692] fuse: Bad value for 'fd' [ 534.662526][T15777] netlink: 'syz.0.2141': attribute type 10 has an invalid length. [ 534.717009][T15782] netlink: 'syz.0.2141': attribute type 10 has an invalid length. [ 534.866787][T15777] bond0: (slave netdevsim0): Releasing backup interface [ 534.875617][T15777] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 534.877898][T15777] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 534.880268][T15777] team0: Port device netdevsim0 added [ 534.892632][T15782] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 534.894747][T15782] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 534.898251][T15782] team0: Port device netdevsim0 removed [ 534.901512][T15782] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 534.926135][T15764] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.934937][T15764] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 535.631241][T15821] fuse: Bad value for 'fd' [ 537.511831][T15843] vlan2: entered allmulticast mode [ 537.514211][T15843] bond0: entered allmulticast mode [ 537.516335][T15843] syz_tun: entered allmulticast mode [ 537.518240][T15843] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 537.522886][T15843] bond0: left allmulticast mode [ 537.524761][T15843] syz_tun: left allmulticast mode [ 537.526667][T15843] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 537.641874][T15843] hub 9-0:1.0: USB hub found [ 537.644368][T15843] hub 9-0:1.0: 1 port detected [ 537.807084][T15849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2145'. [ 538.531304][T15858] fuse: Bad value for 'fd' [ 538.619649][T15857] bridge0: port 3(team0) entered blocking state [ 538.621715][T15857] bridge0: port 3(team0) entered forwarding state [ 538.623652][T15857] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.625839][T15857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.628060][T15857] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.630544][T15857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 538.649537][T15857] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 538.721783][T15865] netlink: 'syz.2.2149': attribute type 1 has an invalid length. [ 538.761009][T15865] bond1: entered promiscuous mode [ 538.763073][T15865] 8021q: adding VLAN 0 to HW filter on device bond1 [ 538.953626][T15868] netlink: 'syz.2.2149': attribute type 2 has an invalid length. [ 538.983596][T15865] 8021q: adding VLAN 0 to HW filter on device bond2 [ 538.987703][T15865] bond1: (slave bond2): making interface the new active one [ 538.990405][T15865] bond2: entered promiscuous mode [ 538.997146][T15865] bond1: (slave bond2): Enslaving as an active interface with an up link [ 539.140944][T15873] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2151'. [ 539.145452][T15873] geneve0: entered allmulticast mode [ 539.151715][T15871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2150'. [ 539.155019][T15871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2150'. [ 541.321739][ T1017] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 541.995867][T15944] infiniband sz1: set active [ 541.998933][T15944] infiniband sz1: set active [ 542.000767][T15944] infiniband sz1: set active [ 542.015728][T15944] syz_tun: left promiscuous mode [ 542.021003][T15944] tipc: Resetting bearer [ 542.024591][T15944] tipc: Resetting bearer [ 542.040094][T15944] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 542.045487][ T6631] lo speed is unknown, defaulting to 1000 [ 542.050606][ T833] lo speed is unknown, defaulting to 1000 [ 542.128103][ T25] lo speed is unknown, defaulting to 1000 [ 542.130728][ T6631] lo speed is unknown, defaulting to 1000 [ 542.932286][T15936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 543.068621][T15976] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 543.081283][T15976] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 543.089381][T15976] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 544.587346][ T6631] [ 544.588326][ T6631] ====================================================== [ 544.590900][ T6631] WARNING: possible circular locking dependency detected [ 544.593467][ T6631] 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 Not tainted [ 544.597322][ T6631] ------------------------------------------------------ [ 544.600203][ T6631] kworker/2:4/6631 is trying to acquire lock: [ 544.602421][ T6631] ffff888023acec78 (&q->q_usage_counter(queue)#51){++++}-{0:0}, at: blk_mq_alloc_request+0x59b/0x950 [ 544.606363][ T6631] [ 544.606363][ T6631] but task is already holding lock: [ 544.609044][ T6631] ffff888023acf290 (&q->limits_lock){+.+.}-{4:4}, at: sd_revalidate_disk.isra.0+0x52c/0xa8d0 [ 544.612783][ T6631] [ 544.612783][ T6631] which lock already depends on the new lock. [ 544.612783][ T6631] [ 544.616562][ T6631] [ 544.616562][ T6631] the existing dependency chain (in reverse order) is: [ 544.619832][ T6631] [ 544.619832][ T6631] -> #5 (&q->limits_lock){+.+.}-{4:4}: [ 544.622806][ T6631] __mutex_lock+0x19b/0xa60 [ 544.624777][ T6631] __nbd_set_size+0x2c0/0x730 [ 544.626723][ T6631] nbd_start_device+0x8fd/0xd70 [ 544.628813][ T6631] nbd_ioctl+0x21a/0xfd0 [ 544.630704][ T6631] compat_blkdev_ioctl+0x2f7/0x750 [ 544.632736][ T6631] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 544.634505][ T6631] __do_fast_syscall_32+0x73/0x120 [ 544.636210][ T6631] do_fast_syscall_32+0x32/0x80 [ 544.638166][ T6631] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 544.640240][ T6631] [ 544.640240][ T6631] -> #4 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 544.642753][ T6631] blk_mq_submit_bio+0x1fb6/0x24c0 [ 544.644498][ T6631] __submit_bio+0x384/0x540 [ 544.645935][ T6631] submit_bio_noacct_nocheck+0x698/0xd70 [ 544.647696][ T6631] submit_bio_noacct+0x93a/0x1e20 [ 544.649278][ T6631] block_read_full_folio+0x812/0xa50 [ 544.651025][ T6631] filemap_read_folio+0xc6/0x2a0 [ 544.652614][ T6631] filemap_get_pages+0x155f/0x1be0 [ 544.654351][ T6631] filemap_read+0x3ca/0xd70 [ 544.655829][ T6631] blkdev_read_iter+0x187/0x480 [ 544.657421][ T6631] vfs_read+0x87f/0xbe0 [ 544.658805][ T6631] ksys_read+0x12b/0x250 [ 544.660290][ T6631] do_syscall_64+0xcd/0x250 [ 544.661783][ T6631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.663727][ T6631] [ 544.663727][ T6631] -> #3 (mapping.invalidate_lock#2){++++}-{4:4}: [ 544.666207][ T6631] down_read+0x9a/0x330 [ 544.667688][ T6631] page_cache_ra_unbounded+0x173/0x750 [ 544.669455][ T6631] page_cache_ra_order+0x8f2/0xc80 [ 544.671197][ T6631] filemap_fault+0x14a5/0x2820 [ 544.672740][ T6631] __do_fault+0x10a/0x490 [ 544.674153][ T6631] do_pte_missing+0x99f/0x3e00 [ 544.675718][ T6631] __handle_mm_fault+0x103c/0x2a40 [ 544.677405][ T6631] handle_mm_fault+0x3fa/0xaa0 [ 544.678980][ T6631] __get_user_pages+0x8d9/0x3b50 [ 544.680645][ T6631] __gup_longterm_locked+0x5ff/0x1870 [ 544.682406][ T6631] pin_user_pages+0x13f/0x160 [ 544.684080][ T6631] xdp_umem_create+0x73c/0x1270 [ 544.686400][ T6631] xsk_setsockopt+0x7e7/0xac0 [ 544.688507][ T6631] do_sock_setsockopt+0x222/0x480 [ 544.690251][ T6631] __sys_setsockopt+0x1a0/0x230 [ 544.691857][ T6631] __ia32_sys_setsockopt+0xbc/0x160 [ 544.693552][ T6631] __do_fast_syscall_32+0x73/0x120 [ 544.695238][ T6631] do_fast_syscall_32+0x32/0x80 [ 544.696829][ T6631] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 544.698815][ T6631] [ 544.698815][ T6631] -> #2 (&mm->mmap_lock){++++}-{4:4}: [ 544.701162][ T6631] __might_fault+0x11b/0x190 [ 544.702671][ T6631] _copy_from_user+0x29/0xd0 [ 544.704209][ T6631] compat_blk_trace_setup+0xc9/0x200 [ 544.705883][ T6631] blk_trace_ioctl+0x24a/0x290 [ 544.707751][ T6631] compat_blkdev_ioctl+0x13c/0x750 [ 544.709578][ T6631] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 544.711406][ T6631] __do_fast_syscall_32+0x73/0x120 [ 544.713102][ T6631] do_fast_syscall_32+0x32/0x80 [ 544.714668][ T6631] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 544.716743][ T6631] [ 544.716743][ T6631] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}: [ 544.719008][ T6631] __mutex_lock+0x19b/0xa60 [ 544.720588][ T6631] blk_mq_init_sched+0x42b/0x640 [ 544.722231][ T6631] elevator_init_mq+0x2cd/0x420 [ 544.723807][ T6631] add_disk_fwnode+0x113/0x1300 [ 544.725398][ T6631] sd_probe+0xa66/0xfa0 [ 544.726959][ T6631] really_probe+0x23e/0xa90 [ 544.728663][ T6631] __driver_probe_device+0x1de/0x440 [ 544.730453][ T6631] driver_probe_device+0x4c/0x1b0 [ 544.732113][ T6631] __device_attach_driver+0x1df/0x310 [ 544.733881][ T6631] bus_for_each_drv+0x157/0x1e0 [ 544.735443][ T6631] __device_attach_async_helper+0x1d3/0x290 [ 544.737557][ T6631] async_run_entry_fn+0x9c/0x530 [ 544.739153][ T6631] process_one_work+0x958/0x1b30 [ 544.740847][ T6631] worker_thread+0x6c8/0xf00 [ 544.742742][ T6631] kthread+0x2c1/0x3a0 [ 544.744422][ T6631] ret_from_fork+0x45/0x80 [ 544.746134][ T6631] ret_from_fork_asm+0x1a/0x30 [ 544.748258][ T6631] [ 544.748258][ T6631] -> #0 (&q->q_usage_counter(queue)#51){++++}-{0:0}: [ 544.751868][ T6631] __lock_acquire+0x249e/0x3c40 [ 544.753833][ T6631] lock_acquire.part.0+0x11b/0x380 [ 544.756042][ T6631] blk_queue_enter+0x50f/0x640 [ 544.758096][ T6631] blk_mq_alloc_request+0x59b/0x950 [ 544.760368][ T6631] scsi_execute_cmd+0x20a/0xf30 [ 544.762460][ T6631] read_capacity_16+0x21a/0xe20 [ 544.763952][ T6631] sd_revalidate_disk.isra.0+0x1a06/0xa8d0 [ 544.765735][ T6631] scsi_rescan_device+0x243/0x340 [ 544.767834][ T6631] ata_scsi_dev_rescan+0x1cb/0x470 [ 544.770054][ T6631] process_one_work+0x958/0x1b30 [ 544.772131][ T6631] worker_thread+0x6c8/0xf00 [ 544.774008][ T6631] kthread+0x2c1/0x3a0 [ 544.775755][ T6631] ret_from_fork+0x45/0x80 [ 544.777695][ T6631] ret_from_fork_asm+0x1a/0x30 [ 544.779633][ T6631] [ 544.779633][ T6631] other info that might help us debug this: [ 544.779633][ T6631] [ 544.782550][ T6631] Chain exists of: [ 544.782550][ T6631] &q->q_usage_counter(queue)#51 --> &q->q_usage_counter(io)#51 --> &q->limits_lock [ 544.782550][ T6631] [ 544.788386][ T6631] Possible unsafe locking scenario: [ 544.788386][ T6631] [ 544.790919][ T6631] CPU0 CPU1 [ 544.793017][ T6631] ---- ---- [ 544.795112][ T6631] lock(&q->limits_lock); [ 544.796899][ T6631] lock(&q->q_usage_counter(io)#51); [ 544.799991][ T6631] lock(&q->limits_lock); [ 544.802688][ T6631] rlock(&q->q_usage_counter(queue)#51); [ 544.804952][ T6631] [ 544.804952][ T6631] *** DEADLOCK *** [ 544.804952][ T6631] [ 544.808144][ T6631] 5 locks held by kworker/2:4/6631: [ 544.810087][ T6631] #0: ffff88801ac88948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12cd/0x1b30 [ 544.813567][ T6631] #1: ffffc90026367d80 ((work_completion)(&(&ap->scsi_rescan_task)->work)){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 [ 544.818509][ T6631] #2: ffff888024d9c358 (&ap->scsi_scan_mutex){+.+.}-{4:4}, at: ata_scsi_dev_rescan+0x3e/0x470 [ 544.822600][ T6631] #3: ffff888044168378 (&dev->mutex){....}-{4:4}, at: scsi_rescan_device+0x27/0x340 [ 544.826325][ T6631] #4: ffff888023acf290 (&q->limits_lock){+.+.}-{4:4}, at: sd_revalidate_disk.isra.0+0x52c/0xa8d0 [ 544.830468][ T6631] [ 544.830468][ T6631] stack backtrace: [ 544.832831][ T6631] CPU: 2 UID: 0 PID: 6631 Comm: kworker/2:4 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 544.836216][ T6631] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 544.840445][ T6631] Workqueue: events ata_scsi_dev_rescan [ 544.842644][ T6631] Call Trace: [ 544.843983][ T6631] [ 544.845161][ T6631] dump_stack_lvl+0x116/0x1f0 [ 544.847042][ T6631] print_circular_bug+0x41c/0x610 [ 544.849063][ T6631] check_noncircular+0x31a/0x400 [ 544.851062][ T6631] ? __pfx_check_noncircular+0x10/0x10 [ 544.853233][ T6631] ? __pfx_try_to_wake_up+0x10/0x10 [ 544.855305][ T6631] ? lockdep_lock+0xc6/0x200 [ 544.857117][ T6631] ? __pfx_lockdep_lock+0x10/0x10 [ 544.859048][ T6631] __lock_acquire+0x249e/0x3c40 [ 544.860959][ T6631] ? __pfx___lock_acquire+0x10/0x10 [ 544.862881][ T6631] lock_acquire.part.0+0x11b/0x380 [ 544.864791][ T6631] ? blk_mq_alloc_request+0x59b/0x950 [ 544.866795][ T6631] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 544.868536][ T6631] ? rcu_is_watching+0x12/0xc0 [ 544.869884][ T6631] ? trace_lock_acquire+0x14e/0x1f0 [ 544.871361][ T6631] ? blk_mq_alloc_request+0x59b/0x950 [ 544.872877][ T6631] ? lock_acquire+0x2f/0xb0 [ 544.874157][ T6631] ? blk_mq_alloc_request+0x59b/0x950 [ 544.875702][ T6631] blk_queue_enter+0x50f/0x640 [ 544.877091][ T6631] ? blk_mq_alloc_request+0x59b/0x950 [ 544.878591][ T6631] ? __pfx_blk_queue_enter+0x10/0x10 [ 544.880165][ T6631] ? save_trace+0x42/0xa10 [ 544.881417][ T6631] ? add_lock_to_list+0x17d/0x390 [ 544.882830][ T6631] ? lockdep_unlock+0x11a/0x290 [ 544.884198][ T6631] blk_mq_alloc_request+0x59b/0x950 [ 544.885640][ T6631] ? __pfx_blk_mq_alloc_request+0x10/0x10 [ 544.887483][ T6631] ? __pfx___lock_acquire+0x10/0x10 [ 544.888978][ T6631] scsi_execute_cmd+0x20a/0xf30 [ 544.890485][ T6631] ? lock_acquire.part.0+0x11b/0x380 [ 544.891944][ T6631] ? __mutex_trylock_common+0xea/0x250 [ 544.893477][ T6631] ? __pfx_scsi_execute_cmd+0x10/0x10 [ 544.895011][ T6631] ? sd_revalidate_disk.isra.0+0x52c/0xa8d0 [ 544.896852][ T6631] ? rcu_is_watching+0x12/0xc0 [ 544.898607][ T6631] read_capacity_16+0x21a/0xe20 [ 544.900007][ T6631] ? __pfx_read_capacity_16+0x10/0x10 [ 544.901521][ T6631] ? __pfx___mutex_lock+0x10/0x10 [ 544.902954][ T6631] ? __pfx_scsi_execute_cmd+0x10/0x10 [ 544.904488][ T6631] sd_revalidate_disk.isra.0+0x1a06/0xa8d0 [ 544.906134][ T6631] ? find_held_lock+0x2d/0x110 [ 544.908011][ T6631] ? mark_held_locks+0x9f/0xe0 [ 544.909950][ T6631] ? __pfx_sd_revalidate_disk.isra.0+0x10/0x10 [ 544.912247][ T6631] ? kasan_save_stack+0x42/0x60 [ 544.913634][ T6631] ? kasan_save_stack+0x33/0x60 [ 544.915025][ T6631] ? kasan_save_track+0x14/0x30 [ 544.916493][ T6631] ? kasan_save_free_info+0x3b/0x60 [ 544.918011][ T6631] ? __kasan_slab_free+0x51/0x70 [ 544.919430][ T6631] ? kfree+0x14f/0x4b0 [ 544.920604][ T6631] ? scsi_attach_vpd+0x4dc/0x580 [ 544.922015][ T6631] ? scsi_rescan_device+0xf5/0x340 [ 544.923482][ T6631] ? ata_scsi_dev_rescan+0x1cb/0x470 [ 544.925016][ T6631] ? process_one_work+0x958/0x1b30 [ 544.926564][ T6631] ? worker_thread+0x6c8/0xf00 [ 544.928292][ T6631] ? hlock_class+0x4e/0x130 [ 544.929591][ T6631] ? mark_lock+0xb5/0xc60 [ 544.930853][ T6631] ? mark_held_locks+0x9f/0xe0 [ 544.932281][ T6631] ? kasan_quarantine_put+0x10a/0x240 [ 544.933831][ T6631] ? lockdep_hardirqs_on+0x7c/0x110 [ 544.935311][ T6631] ? kfree+0x14f/0x4b0 [ 544.936550][ T6631] ? lockdep_hardirqs_on+0x7c/0x110 [ 544.938035][ T6631] ? scsi_attach_vpd+0x4dc/0x580 [ 544.939475][ T6631] ? scsi_attach_vpd+0x4dc/0x580 [ 544.940916][ T6631] ? __pfx_sd_rescan+0x10/0x10 [ 544.942284][ T6631] scsi_rescan_device+0x243/0x340 [ 544.943730][ T6631] ata_scsi_dev_rescan+0x1cb/0x470 [ 544.945206][ T6631] process_one_work+0x958/0x1b30 [ 544.946782][ T6631] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 544.948878][ T6631] ? __pfx_process_one_work+0x10/0x10 [ 544.950401][ T6631] ? rcu_is_watching+0x12/0xc0 [ 544.951788][ T6631] ? assign_work+0x1a0/0x250 [ 544.953165][ T6631] worker_thread+0x6c8/0xf00 [ 544.954717][ T6631] ? __kthread_parkme+0x148/0x220 [ 544.956297][ T6631] ? __pfx_worker_thread+0x10/0x10 [ 544.958315][ T6631] kthread+0x2c1/0x3a0 [ 544.959981][ T6631] ? _raw_spin_unlock_irq+0x23/0x50 [ 544.962035][ T6631] ? __pfx_kthread+0x10/0x10 [ 544.963917][ T6631] ret_from_fork+0x45/0x80 [ 544.965745][ T6631] ? __pfx_kthread+0x10/0x10 [ 544.967468][ T6631] ret_from_fork_asm+0x1a/0x30 [ 544.969420][ T6631] VM DIAGNOSIS: 13:23:31 Registers: info registers vcpu 0 CPU#0 RAX=00000000016f285c RBX=0000000000000000 RCX=ffffffff8b1a9889 RDX=ffffed1005686fee RSI=ffffffff8bb17300 RDI=ffffffff81703079 RBP=fffffbfff1b52ef8 RSP=ffffffff8da07e20 R8 =0000000000000000 R9 =ffffed1005686fed R10=ffff88802b437f6b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8da977c0 R14=ffffffff901cfcd0 R15=0000000000000000 RIP=ffffffff8b1aac6f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7465008 CR3=000000004b138000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000060c00000000 0000001200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=1ffffd1ff5871201 RBX=ffff88806528c000 RCX=0000000000000027 RDX=1ffffffff1b0619d RSI=0000000000000001 RDI=ffffe8ffac389008 RBP=ffffe8ffac389000 RSP=ffffc90002f0fa60 R8 =0000000000000000 R9 =fffffbfff2039f9a R10=ffffffff901cfcd7 R11=000000000000e14f R12=0000000000000028 R13=0000000000000001 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff8203dedf RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f955c0 CR3=000000004af8a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001d000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85146410 RDI=ffffffff9a66a200 RBP=ffffffff9a66a1c0 RSP=ffffc900263669c8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e33312e36 R12=0000000000000000 R13=0000000000000060 R14=fffffbfff34cd492 R15=dffffc0000000000 RIP=ffffffff85146437 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000005738d4c0 CR3=000000004b82c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 47339fa565841ed5 a52997e751e8836f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 172ed8d33f008279 b8a9e2f2187b56c1 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f779085af8b50deb 7045e8a36ceb2cab ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5891bd147829cd0b 07fe1936ccd50f53 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004640 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 014acb4301000000 e3c0008001000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 014acec4014acf40 014acf4901000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 60b60080014acefc 010000001eb40000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 014acf4507500080 647e008049e80000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f6bb001dbf8cab54 933d3f330ff66bc0 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b6221a1e8f6c9dce 07889b11d0abc19c ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000084f03c RBX=0000000000000003 RCX=ffffffff8b1a9889 RDX=ffffed10056e6fee RSI=ffffffff8bb17300 RDI=ffffffff81703079 RBP=ffffed1003a59488 RSP=ffffc9000049fe08 R8 =0000000000000000 R9 =ffffed10056e6fed R10=ffff88802b737f6b R11=0000000000000001 R12=0000000000000003 R13=ffff88801d2ca440 R14=ffffffff901cfcd0 R15=0000000000000000 RIP=ffffffff8b1aac6f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020001580 CR3=000000004b9e6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000