last executing test programs: 3.355512026s ago: executing program 2 (id=283): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x81, 0xfffffffb}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prlimit64(r0, 0x3, &(0x7f0000000280)={0xffffffffffffffff, 0x2}, &(0x7f00000002c0)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000240)=0x214) read(r1, &(0x7f0000000080)=""/241, 0xf1) r2 = gettid() tkill(r2, 0x14) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$TCSETAF(r1, 0x5402, &(0x7f0000000300)={0xe1e, 0x3, 0xffff, 0x0, 0x8, "fafd0001000000dd"}) 3.257118556s ago: executing program 2 (id=284): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c4a1f9625a9d3b89982e1ccc3"]) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000140), 0x4) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000200), 0x2, 0x8901) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r2, 0xc0245720, &(0x7f00000001c0)) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000)) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/120, 0x78}], 0x1, 0x0, 0x0) syz_usb_disconnect(r0) 2.866518997s ago: executing program 1 (id=287): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x28, 0x6, 0x3) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, r3, 0x1, 0x123, 0x234}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4], 0x48}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00O'], 0x28}}, 0x0) 2.797171195s ago: executing program 1 (id=288): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpgrp(0xffffffffffffffff) ptrace$poke(0x5, r0, &(0x7f0000000100), 0x81f) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = timerfd_create(0x1, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004000)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x4}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8512}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x200}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6c}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x9}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x30, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x100}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x30}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44000000100001041300"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e000100697036677265746170000000040002800a000100"], 0x44}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) pread64(r7, &(0x7f0000000040)=""/172, 0xac, 0x0) r8 = getpid() ptrace$setopts(0x4206, r8, 0x7d2, 0x22) 2.206853587s ago: executing program 0 (id=297): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_dccp(0xa, 0x6, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) pipe(&(0x7f0000000040)) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) unshare(0x400) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x1000000}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) dup(0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$BATADV_CMD_TP_METER(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.734782005s ago: executing program 2 (id=298): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000020000020000000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x0, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x37, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r2, &(0x7f0000000400)=[{0x46, 0xf9, 0x1, 0xc0, @time={0x4, 0x8}, {0x6, 0x6}, {0x7, 0x10}, @note={0x7, 0x5, 0x8, 0x7, 0xfffffff9}}], 0x1c) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x10, &(0x7f0000000000)=0x8000, 0x4) syz_io_uring_setup(0x5e67, &(0x7f0000000380)={0x0, 0x32fc, 0x1, 0x80000000, 0x23e}, 0x0, &(0x7f0000000440)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6021a}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000400)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x6, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @multicast2}, "00186371ae9b1c03"}}}}}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x5}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad3164e14aa9d4eafc2ae39ce2be18d63433b7dfc78608200e69639ab1530087488555d6d92591d54b3a4b2d398d", 0x63, 0x0, 0x0, &(0x7f00000015c0)="89ef1284c86555bfe69b541fc18b8f329814") getpid() 1.734311594s ago: executing program 1 (id=299): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRES64, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = inotify_init() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffffffffffff16) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000004000000000000087b78c71f1bcffc1ba8b4d208562d30000"], 0x1c}}, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x6) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) request_key(0x0, &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)=',\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0xb, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000200)="7f00000018002507b9409b14ffff0b7a0204be04050714056406040c5c0005003f0006182a0000000d0085a102000000000000003610648d49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160008030a000000", 0x60, 0x0, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0xc683c000) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') close(0xffffffffffffffff) pread64(r4, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000140), 0x4) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000000000000008000000020000000000011062726f6164636173742d6c696e6b0000"], 0x2c}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0x140, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x12c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7827}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa4fa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbed}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4938}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x40020}, 0x20004004) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x208) umount2(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 1.646953066s ago: executing program 2 (id=300): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000002700)=ANY=[@ANYBLOB="9feb010018000000000000004200000040000000020000000000000000000083"], 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 1.64659176s ago: executing program 2 (id=301): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fsopen(&(0x7f0000000080)='hugetlbfs\x00', 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x5) write$binfmt_elf64(r0, &(0x7f0000001340)=ANY=[], 0xa89) shutdown(r0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$OBJ_GET_PROG(0x9, &(0x7f0000000100)=@generic={0x0, 0x22}, 0x18) fallocate(0xffffffffffffffff, 0x0, 0x400000000000000, 0x7) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x0, 0x0, 0x81, 0x0, 0x10000, 0xffffffffffffffff, 0xffff7fff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2, 0x0, @void, @value, @value}, 0x50) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) epoll_create(0x7fff) r1 = socket(0x40000000015, 0x5, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x44}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x34, 0x10, 0x401, 0x7ffffffd, 0x25dfdbfe, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x34}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$tipc(0x1e, 0x2, 0x0) 1.367336315s ago: executing program 3 (id=303): socket$kcm(0x10, 0x2, 0x0) r0 = openat$vcs(0xffffff9c, &(0x7f0000000100), 0x3b1080, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES64=0x0, @ANYRES64], &(0x7f0000000000)='GPL\x00', 0x8, 0xca, &(0x7f0000000480)=""/202, 0x41000, 0x3, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0x0, 0x2, 0xa, 0xb}, {0x2, 0x2, 0xf}, {0x5, 0x2, 0x13, 0xc}, {0x3, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') (async) chdir(&(0x7f0000000140)='./bus\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x58) (async) getdents(r1, 0x0, 0x58) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r2 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) (async) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) sched_setaffinity(r2, 0x8, &(0x7f00000000c0)=0x9) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x7, 0x1, 0x9, 0x0, 0x0, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048c4) execve(&(0x7f0000000700)='./file0\x00', 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$bt_hci(r5, 0x11e, 0x1, 0x0, &(0x7f0000000080)) socket$unix(0x1, 0x1, 0x0) (async) socket$unix(0x1, 0x1, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) (async) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) 1.367125937s ago: executing program 0 (id=304): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001214010000000f000000000008004f000000000008004b00120000000800030000000001080015000000000008000100"], 0x38}}, 0x0) 1.303149041s ago: executing program 0 (id=305): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@fadd={0x58, 0x114, 0x6, {{0x4, 0x80000000}, 0x0, 0x0, 0x0, 0x2, 0xffff, 0x2, 0x80, 0x7ff}}], 0x58}, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0xc, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x10, 0xfffffffb, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x24, 0x0, 0x0) 836.967706ms ago: executing program 2 (id=306): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c4a1f9625a9d3b89982e1ccc3"]) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000140), 0x4) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000200), 0x2, 0x8901) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r2, 0xc0245720, &(0x7f00000001c0)) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000)) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/120, 0x78}], 0x1, 0x0, 0x0) syz_usb_disconnect(r0) 647.024242ms ago: executing program 3 (id=307): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x54, 0x0, 0x0, {0x8, 0x1}, {0x4b, 0x2}, @rumble={0x101, 0xffff}}) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) (fail_nth: 37) 613.884275ms ago: executing program 1 (id=308): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000020000020000000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x0, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x37, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r2, &(0x7f0000000400)=[{0x46, 0xf9, 0x1, 0xc0, @time={0x4, 0x8}, {0x6, 0x6}, {0x7, 0x10}, @note={0x7, 0x5, 0x8, 0x7, 0xfffffff9}}], 0x1c) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x10, &(0x7f0000000000)=0x8000, 0x4) syz_io_uring_setup(0x5e67, &(0x7f0000000380)={0x0, 0x32fc, 0x1, 0x80000000, 0x23e}, 0x0, &(0x7f0000000440)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6021a}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000400)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x6, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @multicast2}, "00186371ae9b1c03"}}}}}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x5}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad3164e14aa9d4eafc2ae39ce2be18d63433b7dfc78608200e69639ab1530087488555d6d92591d54b3a4b2d398d", 0x63, 0x0, 0x0, &(0x7f00000015c0)="89ef1284c86555bfe69b541fc18b8f329814") getpid() 539.260164ms ago: executing program 3 (id=309): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpgrp(0xffffffffffffffff) ptrace$poke(0x5, r0, &(0x7f0000000100), 0x81f) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = timerfd_create(0x1, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004000)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x4}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8512}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x200}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6c}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x9}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x30, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x100}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x30}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44000000100001041300"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e000100697036677265746170000000040002800a000100"], 0x44}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) pread64(r7, &(0x7f0000000040)=""/172, 0xac, 0x0) r8 = getpid() ptrace$setopts(0x4206, r8, 0x7d2, 0x22) 426.859517ms ago: executing program 0 (id=310): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 426.6382ms ago: executing program 0 (id=311): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 408.22644ms ago: executing program 0 (id=312): r0 = socket$inet(0xa, 0x801, 0x84) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x81, 0x722c, 0x2, @mcast2, @local, 0x10, 0x700, 0x1, 0xb42}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000280)={{0x2, 0x4e22, @local}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, 0x1e, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'syzkaller1\x00'}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000140)={0x0, 0x0}) r5 = syz_open_procfs(r4, &(0x7f0000000600)='fd/4\x00') write$binfmt_script(r5, &(0x7f0000000400)={'#! ', './file0', [{0x20, '\xaa\xaa\xaa\xaa\xaa'}, {0x20, '\x00'}, {0x20, 'task\x00'}], 0xa, "0d4e709835d387d5acc6df345561b46fcb0028b310d1f0cc2688e18be76f42bb5dc580e1aa6a832a069cf916b414ffb3ac1cb298823246d7e12d900f0ca68a8ba74d81056bff38d21a87141918efed0c42d2f36d5eb18d20bcd1018caf6f69cd940628f22ccfd926d3911e5ee5074352da319aac4e57e95064"}, 0x92) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r5, 0x81009431, &(0x7f0000000180)={@id={0x2, 0x0, @d}}) 117.237253ms ago: executing program 1 (id=313): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="2e06000000001c0000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) chdir(&(0x7f00000000c0)='./bus\x00') r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 116.910081ms ago: executing program 1 (id=314): r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/560]}, 0x280) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x11, 0x3, &(0x7f0000001140)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0x80dc5521, &(0x7f0000000080)) r3 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x1, 0x6, 0x101}) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, 0x0, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000240)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') io_setup(0x8, &(0x7f0000004200)=0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r7, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r3, &(0x7f0000000140)=""/4096, 0x1000, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc000000190001000000000000000000ffffffff000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008668e203059dc1e6cb0000000000000000000000000000000000000000000000000000000100000044000500ac141400000000000000000000000000000000003c00"/176], 0xfc}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000000000000fe800000200002000a00000000000000ff020000000000000000000000000001000000000d0001007564703a73797affff000000024e9163c3bbcceaaecb"], 0x6c}}, 0x0) 44.609879ms ago: executing program 3 (id=315): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x2c00, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000dfffd00ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) 32.486915ms ago: executing program 3 (id=316): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x18, r1, 0x28543634fae43ad, 0x0, 0x0, {0xd}, [@HEADER={0x4}]}, 0x18}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x10, 0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x1864, &(0x7f00000003c0), &(0x7f0000000000)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, 0x0, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x40, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=317): r0 = syz_open_dev$sg(&(0x7f0000000300), 0x0, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000240)) r1 = getpgid(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000280)='./file1\x00', 0x8) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r6, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) close(0xffffffffffffffff) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, 0x0) r8 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r8, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x7}}, 0x10) sendmmsg$inet(r8, &(0x7f0000002f40), 0x0, 0x40) r9 = openat$cachefiles(0xffffff9c, &(0x7f0000000040), 0x4100, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r9, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x2c, 0x4, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x9001}, 0x80) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:34290' (ED25519) to the list of known hosts. [ 33.984470][ T5332] cgroup: Unknown subsys name 'net' [ 34.108724][ T5332] cgroup: Unknown subsys name 'cpuset' [ 34.112063][ T5332] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 34.855939][ T5332] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.989514][ T5347] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.991374][ T5350] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 36.994081][ T5350] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.996197][ T5350] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 36.998265][ T5350] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.000676][ T5350] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.000690][ T5353] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.002801][ T5350] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.004767][ T5353] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.007630][ T5350] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.008137][ T5353] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.010478][ T5350] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 37.011932][ T5353] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.013761][ T5350] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.015950][ T5353] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 37.019720][ T5353] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.021929][ T5353] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 37.022452][ T66] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.026462][ T66] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.026555][ T5354] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 37.029173][ T5357] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.033789][ T5357] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.034286][ T66] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 37.037775][ T5353] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.178046][ T5344] chnl_net:caif_netlink_parms(): no params data found [ 37.224411][ T5345] chnl_net:caif_netlink_parms(): no params data found [ 37.274200][ T5355] chnl_net:caif_netlink_parms(): no params data found [ 37.286423][ T5351] chnl_net:caif_netlink_parms(): no params data found [ 37.301823][ T5344] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.303650][ T5344] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.305524][ T5344] bridge_slave_0: entered allmulticast mode [ 37.308233][ T5344] bridge_slave_0: entered promiscuous mode [ 37.311344][ T5344] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.313233][ T5344] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.315116][ T5344] bridge_slave_1: entered allmulticast mode [ 37.319267][ T5344] bridge_slave_1: entered promiscuous mode [ 37.332545][ T5345] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.334440][ T5345] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.337385][ T5345] bridge_slave_0: entered allmulticast mode [ 37.339471][ T5345] bridge_slave_0: entered promiscuous mode [ 37.373315][ T5345] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.375206][ T5345] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.377166][ T5345] bridge_slave_1: entered allmulticast mode [ 37.379592][ T5345] bridge_slave_1: entered promiscuous mode [ 37.430215][ T5345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.437038][ T5344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.456041][ T5345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.473793][ T5344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.495390][ T5351] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.497414][ T5351] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.499615][ T5351] bridge_slave_0: entered allmulticast mode [ 37.501619][ T5351] bridge_slave_0: entered promiscuous mode [ 37.540338][ T5355] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.542919][ T5355] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.545517][ T5355] bridge_slave_0: entered allmulticast mode [ 37.548747][ T5355] bridge_slave_0: entered promiscuous mode [ 37.564314][ T5351] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.569219][ T5351] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.571872][ T5351] bridge_slave_1: entered allmulticast mode [ 37.574089][ T5351] bridge_slave_1: entered promiscuous mode [ 37.590676][ T5345] team0: Port device team_slave_0 added [ 37.592654][ T5355] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.594412][ T5355] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.597890][ T5355] bridge_slave_1: entered allmulticast mode [ 37.600629][ T5355] bridge_slave_1: entered promiscuous mode [ 37.617782][ T5344] team0: Port device team_slave_0 added [ 37.634966][ T5345] team0: Port device team_slave_1 added [ 37.645476][ T5355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.649898][ T5344] team0: Port device team_slave_1 added [ 37.667500][ T5351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.688975][ T5355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.712180][ T5344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.714678][ T5344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.723302][ T5344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.729274][ T5351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.732111][ T5345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.733973][ T5345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.741713][ T5345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.752835][ T5344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.755217][ T5344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.765713][ T5344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.778360][ T5345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.780329][ T5345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.787128][ T5345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.794070][ T5355] team0: Port device team_slave_0 added [ 37.798613][ T5355] team0: Port device team_slave_1 added [ 37.810141][ T5351] team0: Port device team_slave_0 added [ 37.812844][ T5351] team0: Port device team_slave_1 added [ 37.850360][ T5351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.852249][ T5351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.860451][ T5351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.878404][ T5355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.880328][ T5355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.887969][ T5355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.909250][ T5351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.911165][ T5351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.918682][ T5351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.924404][ T5345] hsr_slave_0: entered promiscuous mode [ 37.926784][ T5345] hsr_slave_1: entered promiscuous mode [ 37.929274][ T5355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.931459][ T5355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.938364][ T5355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.945876][ T5344] hsr_slave_0: entered promiscuous mode [ 37.948419][ T5344] hsr_slave_1: entered promiscuous mode [ 37.951585][ T5344] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.953736][ T5344] Cannot create hsr debugfs directory [ 38.018256][ T5351] hsr_slave_0: entered promiscuous mode [ 38.020133][ T5351] hsr_slave_1: entered promiscuous mode [ 38.021901][ T5351] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.023901][ T5351] Cannot create hsr debugfs directory [ 38.039893][ T5355] hsr_slave_0: entered promiscuous mode [ 38.042121][ T5355] hsr_slave_1: entered promiscuous mode [ 38.043959][ T5355] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.046505][ T5355] Cannot create hsr debugfs directory [ 38.218708][ T5345] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.224842][ T5345] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.228408][ T5345] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.231437][ T5345] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.245533][ T5344] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.250889][ T5344] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.253819][ T5344] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.257349][ T5344] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.280150][ T5355] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.287707][ T5355] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.291022][ T5355] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.294318][ T5355] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.316010][ T5351] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.320168][ T5351] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.323507][ T5351] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.327464][ T5351] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.345159][ T5345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.366909][ T5345] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.387864][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.389811][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.393272][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.395091][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.420723][ T5355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.425252][ T5344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.434256][ T5351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.443302][ T5355] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.453087][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.455583][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.462191][ T5344] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.467336][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.469715][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.479736][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.482221][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.489100][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.491356][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.494349][ T5351] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.506677][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.508798][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.515023][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.517012][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.539961][ T5344] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.542742][ T5344] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.553643][ T5355] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.576320][ T5345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.581234][ T5351] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.622686][ T5345] veth0_vlan: entered promiscuous mode [ 38.629192][ T5345] veth1_vlan: entered promiscuous mode [ 38.640375][ T5345] veth0_macvtap: entered promiscuous mode [ 38.645730][ T5345] veth1_macvtap: entered promiscuous mode [ 38.655521][ T5345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.662092][ T5355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.665587][ T5345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.669794][ T5344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.677865][ T5345] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.680441][ T5345] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.682646][ T5345] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.684907][ T5345] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.698424][ T5351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.739336][ T5344] veth0_vlan: entered promiscuous mode [ 38.743169][ T5351] veth0_vlan: entered promiscuous mode [ 38.751955][ T5344] veth1_vlan: entered promiscuous mode [ 38.766810][ T5355] veth0_vlan: entered promiscuous mode [ 38.770503][ T5355] veth1_vlan: entered promiscuous mode [ 38.779729][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.781868][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.784251][ T5355] veth0_macvtap: entered promiscuous mode [ 38.786656][ T5351] veth1_vlan: entered promiscuous mode [ 38.797986][ T5355] veth1_macvtap: entered promiscuous mode [ 38.805765][ T5344] veth0_macvtap: entered promiscuous mode [ 38.808779][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.810505][ T5344] veth1_macvtap: entered promiscuous mode [ 38.811012][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.817889][ T5355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.820874][ T5355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.824495][ T5355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.831909][ T5351] veth0_macvtap: entered promiscuous mode [ 38.834754][ T5351] veth1_macvtap: entered promiscuous mode [ 38.842502][ T5355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.845352][ T5355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.849222][ T5355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.854760][ T5344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.855846][ T5345] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.858103][ T5344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.864392][ T5344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.867340][ T5344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.870855][ T5344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.875033][ T5344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.878021][ T5344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.880560][ T5344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.883272][ T5344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.886382][ T5344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.891925][ T5344] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.894197][ T5344] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.897203][ T5344] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.899490][ T5344] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.907832][ T5355] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.911099][ T5355] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.914206][ T5355] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.918072][ T5355] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.923399][ T5351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.926982][ T5351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.930400][ T5351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.931168][ T5405] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 38.934055][ T5351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.934068][ T5351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.942062][ T5351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.945910][ T5351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.954408][ T5351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.957520][ T5351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.960306][ T5351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.963664][ T5351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.967570][ T5351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.970915][ T5351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.975775][ T5351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.984160][ T5351] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.987414][ T5351] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.998199][ T5351] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.000970][ T5351] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.023170][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.025289][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.045513][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.048306][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.067126][ T66] Bluetooth: hci1: command tx timeout [ 39.068301][ T5350] Bluetooth: hci0: command tx timeout [ 39.072211][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.074254][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.076627][ T66] Bluetooth: hci2: command tx timeout [ 39.076781][ T5350] Bluetooth: hci3: command tx timeout [ 39.092890][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.094907][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.103748][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.107490][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.135327][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.138540][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.186217][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 39.290090][ T5420] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.357480][ T5420] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.362071][ T5425] loop0: detected capacity change from 0 to 16384 [ 39.462194][ T5420] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.726208][ T5410] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 39.893302][ T5410] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 39.895639][ T5410] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.898431][ T5410] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 39.900859][ T5410] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.905359][ T5410] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 39.908237][ T5410] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 39.910362][ T5410] usb 7-1: Product: syz [ 39.910446][ T5430] syz.0.9 uses obsolete (PF_INET,SOCK_PACKET) [ 39.911521][ T5410] usb 7-1: Manufacturer: syz [ 39.921358][ T5410] cdc_wdm 7-1:1.0: skipping garbage [ 39.923262][ T5410] cdc_wdm 7-1:1.0: skipping garbage [ 39.929276][ T5410] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 39.930911][ T5410] cdc_wdm 7-1:1.0: Unknown control protocol [ 40.057335][ T5432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10'. [ 40.131440][ T5428] 9pnet_fd: Insufficient options for proto=fd [ 40.208509][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 40.209892][ T5409] usb 7-1: USB disconnect, device number 2 [ 40.211070][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 40.214715][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 40.731729][ T66] Bluetooth: hci0: unexpected event 0x06 length: 4 > 3 [ 41.138637][ T5459] netlink: 'syz.2.19': attribute type 7 has an invalid length. [ 41.142629][ T5459] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.19'. [ 41.146611][ T66] Bluetooth: hci3: command tx timeout [ 41.148056][ T66] Bluetooth: hci0: command tx timeout [ 41.149511][ T66] Bluetooth: hci2: command tx timeout [ 41.150935][ T66] Bluetooth: hci1: command tx timeout [ 41.151576][ T5459] tipc: Started in network mode [ 41.153701][ T5459] tipc: Node identity , cluster identity 4711 [ 41.155309][ T5459] tipc: Failed to set node id, please configure manually [ 41.157379][ T5459] tipc: Enabling of bearer rejected, failed to enable media [ 41.165870][ T5459] netlink: 'syz.2.19': attribute type 3 has an invalid length. [ 41.168474][ T5459] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.19'. [ 41.200537][ T58] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 41.213790][ T5420] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.231121][ T5467] loop0: detected capacity change from 0 to 6 [ 41.234871][ T5467] Dev loop0: unable to read RDB block 6 [ 41.237365][ T5467] loop0: unable to read partition table [ 41.239001][ T5467] loop0: partition table beyond EOD, truncated [ 41.240605][ T5467] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 41.240605][ T5467] ) failed (rc=-5) [ 41.351764][ T58] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 41.354798][ T58] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.358859][ T58] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 41.361939][ T58] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.368437][ T58] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 41.371575][ T58] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 41.374053][ T58] usb 5-1: Product: syz [ 41.375361][ T58] usb 5-1: Manufacturer: syz [ 41.381562][ T58] cdc_wdm 5-1:1.0: skipping garbage [ 41.383545][ T58] cdc_wdm 5-1:1.0: skipping garbage [ 41.387834][ T58] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 41.389959][ T58] cdc_wdm 5-1:1.0: Unknown control protocol [ 41.666413][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 41.666889][ T5410] usb 5-1: USB disconnect, device number 2 [ 41.668336][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 41.671591][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 42.035896][ T5485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24'. [ 42.106362][ T5485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 42.356196][ T5409] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 42.515241][ T5409] usb 8-1: Using ep0 maxpacket: 8 [ 42.521806][ T5409] usb 8-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 42.524161][ T5409] usb 8-1: config 246 descriptor has 1 excess byte, ignoring [ 42.528738][ T5409] usb 8-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 42.532067][ T5409] usb 8-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 42.534925][ T5409] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 42.538555][ T5409] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 42.541634][ T5409] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 42.546659][ T5409] usb 8-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 42.550625][ T5409] usb 8-1: config 246 descriptor has 1 excess byte, ignoring [ 42.552615][ T5409] usb 8-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 42.555158][ T5409] usb 8-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 42.564509][ T5409] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 42.567982][ T5409] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 42.571513][ T5409] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 42.592224][ T5409] usb 8-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 42.594694][ T5409] usb 8-1: config 246 descriptor has 1 excess byte, ignoring [ 42.596922][ T5409] usb 8-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 42.599867][ T5409] usb 8-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 42.602954][ T5409] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 42.605788][ T5409] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 42.609201][ T5409] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 42.615583][ T5409] usb 8-1: string descriptor 0 read error: -22 [ 42.617677][ T5409] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 42.620011][ T5409] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.631098][ T5409] adutux 8-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 42.714245][ T5494] netlink: 14 bytes leftover after parsing attributes in process `syz.0.26'. [ 42.719410][ T5494] netlink: 'syz.0.26': attribute type 10 has an invalid length. [ 42.758892][ T5494] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 43.052585][ T5411] usb 8-1: USB disconnect, device number 2 [ 43.200915][ T5420] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.205884][ T5420] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.210208][ T5420] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.215721][ T5420] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.238220][ T5350] Bluetooth: hci1: command tx timeout [ 43.239627][ T5350] Bluetooth: hci2: command tx timeout [ 43.241036][ T5350] Bluetooth: hci0: command tx timeout [ 43.242470][ T5353] Bluetooth: hci3: command tx timeout [ 43.281278][ T4329] IPVS: starting estimator thread 0... [ 43.366264][ T5500] IPVS: using max 35 ests per chain, 84000 per kthread [ 43.496181][ T8] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 43.647385][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.651142][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.654442][ T8] usb 7-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 43.656853][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.660811][ T8] usb 7-1: config 0 descriptor?? [ 43.781239][ T5508] netlink: 168 bytes leftover after parsing attributes in process `syz.3.31'. [ 43.784322][ T5508] netlink: 168 bytes leftover after parsing attributes in process `syz.3.31'. [ 43.878882][ T8] usbhid 7-1:0.0: can't add hid device: -71 [ 43.880532][ T8] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 43.883939][ T8] usb 7-1: USB disconnect, device number 3 [ 44.595349][ T5523] block device autoloading is deprecated and will be removed. [ 44.600490][ T5522] md: md2 stopped. [ 44.689757][ T5527] random: crng reseeded on system resumption [ 44.701600][ T5527] Restarting kernel threads ... done. [ 45.126430][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 45.218336][ T5534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.37'. [ 45.223477][ T5534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.37'. [ 45.306521][ T66] Bluetooth: hci0: command 0x0419 tx timeout [ 45.308272][ T66] Bluetooth: hci3: command tx timeout [ 45.309846][ T66] Bluetooth: hci2: command tx timeout [ 45.311819][ T66] Bluetooth: hci1: command tx timeout [ 45.346702][ T5536] input: syz0 as /devices/virtual/input/input5 [ 45.438572][ T5538] block nbd0: shutting down sockets [ 45.514051][ T5545] i2c i2c-1: Invalid block write size 34 [ 45.558841][ T5547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.41'. [ 45.563088][ T5547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.41'. [ 45.616954][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 45.991807][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 46.137909][ T39] audit: type=1326 audit(1729434941.257:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5550 comm="syz.1.43" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7fc00000 [ 46.214879][ T5557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.44'. [ 46.424334][ T5565] tipc: Started in network mode [ 46.425769][ T5565] tipc: Node identity 8000, cluster identity 4711 [ 46.427747][ T5565] tipc: Node number set to 32768 [ 46.478638][ T5565] cdrom: dropping to single frame dma [ 46.811025][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 46.813225][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 46.815388][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 46.859833][ T39] audit: type=1326 audit(1729434941.987:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5550 comm="syz.1.43" exe="/syz-executor" sig=0 arch=40000003 syscall=247 compat=1 ip=0xf7fb0579 code=0x7fc00000 [ 46.913421][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 46.915642][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 47.015868][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 47.396155][ T66] Bluetooth: hci0: command 0x0419 tx timeout [ 47.398658][ T5350] Bluetooth: hci3: command tx timeout [ 48.072052][ T5406] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 48.247527][ T5406] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 48.250689][ T5406] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 48.253294][ T5406] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 48.255999][ T5406] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.261637][ T5406] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 48.264110][ T5406] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 48.266492][ T5406] usb 5-1: Product: syz [ 48.267951][ T5406] usb 5-1: Manufacturer: syz [ 48.272763][ T5406] cdc_wdm 5-1:1.0: skipping garbage [ 48.274302][ T5406] cdc_wdm 5-1:1.0: skipping garbage [ 48.276930][ T5406] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 48.278569][ T5406] cdc_wdm 5-1:1.0: Unknown control protocol [ 48.480223][ T5591] 9pnet_fd: Insufficient options for proto=fd [ 48.542818][ T59] usb 5-1: USB disconnect, device number 3 [ 48.690889][ T5598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.56'. [ 48.693305][ T5598] netlink: 20 bytes leftover after parsing attributes in process `syz.1.56'. [ 48.695705][ T5601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.56'. [ 49.085078][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 49.086202][ T66] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 49.087689][ T5615] Bluetooth: hci4: Frame reassembly failed (-84) [ 49.467068][ T66] Bluetooth: hci0: command 0x0419 tx timeout [ 49.683352][ T5632] Zero length message leads to an empty skb [ 49.883064][ T5641] tipc: Started in network mode [ 49.884878][ T5641] tipc: Node identity 8000, cluster identity 4711 [ 49.887337][ T5641] tipc: Node number set to 32768 [ 50.836777][ T59] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 50.855886][ T5653] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.856177][ T5410] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 50.928720][ T5653] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.975978][ T5653] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.008525][ T5410] usb 5-1: config 255 has an invalid interface number: 225 but max is 0 [ 51.011111][ T59] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 51.013361][ T59] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.015979][ T5410] usb 5-1: config 255 has no interface number 0 [ 51.017888][ T5410] usb 5-1: config 255 interface 225 altsetting 10 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 51.020794][ T5410] usb 5-1: config 255 interface 225 has no altsetting 0 [ 51.022685][ T59] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 51.025068][ T59] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.029735][ T59] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 51.032310][ T59] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 51.034422][ T5410] usb 5-1: string descriptor 0 read error: -22 [ 51.036123][ T59] usb 6-1: Product: syz [ 51.037416][ T5653] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.037621][ T59] usb 6-1: Manufacturer: syz [ 51.042286][ T5410] usb 5-1: New USB device found, idVendor=045e, idProduct=045a, bcdDevice=a1.60 [ 51.044700][ T5410] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.051518][ T59] cdc_wdm 6-1:1.0: skipping garbage [ 51.052853][ T59] cdc_wdm 6-1:1.0: skipping garbage [ 51.054940][ T59] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 51.056724][ T59] cdc_wdm 6-1:1.0: Unknown control protocol [ 51.098368][ T5653] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.103457][ T5653] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.109450][ T5653] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.116754][ T5653] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.157179][ T5350] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 51.158099][ T66] Bluetooth: hci4: command 0x1003 tx timeout [ 51.253975][ T977] usb 5-1: USB disconnect, device number 4 [ 51.259181][ T5649] 9pnet_fd: Insufficient options for proto=fd [ 51.317718][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 51.318021][ T58] usb 6-1: USB disconnect, device number 2 [ 51.320070][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 51.320089][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 51.706500][ T8] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 51.799655][ T5665] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.876007][ T5665] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.881349][ T8] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 51.884380][ T8] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.889365][ T8] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 51.891868][ T8] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.895924][ T8] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 51.898423][ T8] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 51.900971][ T8] usb 7-1: Product: syz [ 51.902505][ T8] usb 7-1: Manufacturer: syz [ 51.907605][ T8] cdc_wdm 7-1:1.0: skipping garbage [ 51.909390][ T8] cdc_wdm 7-1:1.0: skipping garbage [ 51.912168][ T8] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 51.913749][ T8] cdc_wdm 7-1:1.0: Unknown control protocol [ 51.944881][ T5665] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.030660][ T5665] bond0: (slave netdevsim0): Releasing backup interface [ 52.035599][ T5665] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.113587][ T5665] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.119261][ T5665] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.130208][ T5665] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.138215][ T5665] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.173036][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 52.174966][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 52.176800][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 52.178510][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 52.180384][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 52.182266][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 52.184836][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 52.186600][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 52.188464][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 52.190178][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 52.191917][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 52.193631][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 52.195381][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 52.197092][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 52.199211][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 52.201564][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 52.204434][ T5663] usb 7-1: USB disconnect, device number 4 [ 52.206141][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 52.206151][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 52.206159][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 52.209014][ T5677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.85'. [ 52.223783][ T5677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.85'. [ 52.285291][ T5683] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.341396][ T5683] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.363821][ T5687] lo: entered allmulticast mode [ 52.367140][ T5687] tunl0: entered allmulticast mode [ 52.369586][ T5687] gre0: entered allmulticast mode [ 52.373567][ T5687] gretap0: entered allmulticast mode [ 52.378078][ T5687] erspan0: entered allmulticast mode [ 52.381641][ T5687] ip_vti0: entered allmulticast mode [ 52.383939][ T5687] ip6_vti0: entered allmulticast mode [ 52.386627][ T5687] sit0: entered allmulticast mode [ 52.389397][ T5687] ip6tnl0: entered allmulticast mode [ 52.391810][ T5687] ip6gre0: entered allmulticast mode [ 52.395509][ T5687] syz_tun: entered allmulticast mode [ 52.399105][ T5687] ip6gretap0: entered allmulticast mode [ 52.402388][ T5687] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.404723][ T5687] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.408202][ T5687] bridge0: entered allmulticast mode [ 52.411300][ T5687] vcan0: entered allmulticast mode [ 52.414335][ T5687] bond0: entered allmulticast mode [ 52.415744][ T5687] bond_slave_0: entered allmulticast mode [ 52.417484][ T5687] bond_slave_1: entered allmulticast mode [ 52.421846][ T5687] team0: entered allmulticast mode [ 52.423775][ T5687] team_slave_0: entered allmulticast mode [ 52.425865][ T5687] team_slave_1: entered allmulticast mode [ 52.432378][ T5687] dummy0: entered allmulticast mode [ 52.435554][ T5687] nlmon0: entered allmulticast mode [ 52.438838][ T5687] caif0: entered allmulticast mode [ 52.442172][ T5687] batadv0: entered allmulticast mode [ 52.445667][ T5687] vxcan0: entered allmulticast mode [ 52.448939][ T5687] vxcan1: entered allmulticast mode [ 52.451482][ T5687] veth0: entered allmulticast mode [ 52.454689][ T5687] veth1: entered allmulticast mode [ 52.459341][ T5687] wg0: entered allmulticast mode [ 52.462603][ T5687] wg1: entered allmulticast mode [ 52.465324][ T5687] wg2: entered allmulticast mode [ 52.468819][ T5687] veth0_to_bridge: entered allmulticast mode [ 52.473463][ T5687] veth1_to_bridge: entered allmulticast mode [ 52.478873][ T5687] veth0_to_bond: entered allmulticast mode [ 52.482894][ T5687] veth1_to_bond: entered allmulticast mode [ 52.487094][ T5687] veth0_to_team: entered allmulticast mode [ 52.491228][ T5687] veth1_to_team: entered allmulticast mode [ 52.495001][ T5687] veth0_to_batadv: entered allmulticast mode [ 52.496733][ T5687] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.498833][ T5687] batadv_slave_0: entered allmulticast mode [ 52.501903][ T5687] veth1_to_batadv: entered allmulticast mode [ 52.505152][ T5687] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.509368][ T5687] batadv_slave_1: entered allmulticast mode [ 52.513143][ T5687] xfrm0: entered allmulticast mode [ 52.516049][ T5687] veth0_to_hsr: entered allmulticast mode [ 52.519195][ T5687] hsr_slave_0: entered allmulticast mode [ 52.522177][ T5687] veth1_to_hsr: entered allmulticast mode [ 52.525058][ T5687] hsr_slave_1: entered allmulticast mode [ 52.530200][ T5687] hsr0: entered allmulticast mode [ 52.534193][ T5687] veth1_virt_wifi: entered allmulticast mode [ 52.538314][ T5687] veth0_virt_wifi: entered allmulticast mode [ 52.540882][ T5687] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 52.543574][ T5687] veth1_vlan: entered allmulticast mode [ 52.548172][ T5687] veth0_vlan: entered allmulticast mode [ 52.553382][ T5687] vlan0: entered allmulticast mode [ 52.554834][ T5687] vlan1: entered allmulticast mode [ 52.556858][ T5687] macvlan0: entered allmulticast mode [ 52.560348][ T5687] macvlan1: entered allmulticast mode [ 52.563025][ T5687] ipvlan0: entered allmulticast mode [ 52.564538][ T5687] ipvlan1: entered allmulticast mode [ 52.567892][ T5687] veth1_macvtap: entered allmulticast mode [ 52.571744][ T5687] veth0_macvtap: entered allmulticast mode [ 52.574999][ T5687] macvtap0: entered allmulticast mode [ 52.578838][ T5687] macsec0: entered allmulticast mode [ 52.581798][ T5687] geneve0: entered allmulticast mode [ 52.584670][ T5687] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.587231][ T5687] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.589443][ T5687] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.591665][ T5687] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.594191][ T5687] geneve1: entered allmulticast mode [ 52.604938][ T5687] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 52.611122][ T5687] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 52.613934][ T5687] netdevsim netdevsim3 eth0: entered allmulticast mode [ 52.615840][ T5687] netdevsim netdevsim3 eth1: entered allmulticast mode [ 52.617872][ T5687] netdevsim netdevsim3 eth2: entered allmulticast mode [ 52.619718][ T5687] netdevsim netdevsim3 eth3: entered allmulticast mode [ 52.622808][ T5683] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.689812][ T5683] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.737693][ T5683] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.742714][ T5683] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.747634][ T5683] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.752415][ T5683] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.792719][ T5695] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.870078][ T5695] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.932681][ T5695] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.941547][ T5705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.96'. [ 52.945013][ T5705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.96'. [ 52.979578][ T5695] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.011143][ T5707] ======================================================= [ 53.011143][ T5707] WARNING: The mand mount option has been deprecated and [ 53.011143][ T5707] and is ignored by this kernel. Remove the mand [ 53.011143][ T5707] option from the mount to silence this warning. [ 53.011143][ T5707] ======================================================= [ 53.027678][ T5707] ntfs3(sr0): Primary boot signature is not NTFS. [ 53.029593][ T5707] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 53.034210][ T5707] input: syz0 as /devices/virtual/input/input6 [ 53.043621][ T5338] udevd[5338]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 53.123646][ T5715] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.187914][ T5715] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.245238][ T5715] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.313949][ T5715] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.388610][ T5715] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.395068][ T5715] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.400746][ T5715] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.405078][ T5715] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.452066][ T5718] ata1.00: invalid cdb length 6 [ 53.519579][ T5728] xt_CT: You must specify a L4 protocol and not use inversions on it [ 53.746253][ T59] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 53.897859][ T59] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 53.900161][ T59] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.902919][ T59] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 53.905309][ T59] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.911117][ T59] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 53.913531][ T59] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 53.915645][ T59] usb 8-1: Product: syz [ 53.916817][ T59] usb 8-1: Manufacturer: syz [ 53.921293][ T59] cdc_wdm 8-1:1.0: skipping garbage [ 53.923117][ T59] cdc_wdm 8-1:1.0: skipping garbage [ 53.926817][ T59] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 53.928382][ T59] cdc_wdm 8-1:1.0: Unknown control protocol [ 54.176754][ T75] usb 8-1: USB disconnect, device number 3 [ 54.176874][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 54.266263][ T5350] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 54.266286][ T66] Bluetooth: hci4: command 0x1003 tx timeout [ 54.403282][ T39] audit: type=1326 audit(1729434949.527:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5751 comm="syz.0.114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 54.409289][ T39] audit: type=1326 audit(1729434949.527:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5751 comm="syz.0.114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 54.415320][ T39] audit: type=1326 audit(1729434949.537:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5751 comm="syz.0.114" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 54.421713][ T39] audit: type=1326 audit(1729434949.537:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5751 comm="syz.0.114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 54.427725][ T39] audit: type=1326 audit(1729434949.537:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5751 comm="syz.0.114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 54.433276][ T39] audit: type=1326 audit(1729434949.537:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5751 comm="syz.0.114" exe="/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 54.440075][ T39] audit: type=1326 audit(1729434949.537:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5751 comm="syz.0.114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 54.445708][ T39] audit: type=1326 audit(1729434949.537:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5751 comm="syz.0.114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 54.451282][ T39] audit: type=1326 audit(1729434949.547:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5751 comm="syz.0.114" exe="/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 54.456749][ T39] audit: type=1326 audit(1729434949.547:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5751 comm="syz.0.114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 54.906229][ T5350] Bluetooth: hci0: command 0x0419 tx timeout [ 55.458435][ T5774] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 55.460259][ T5774] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 55.465334][ T5774] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 55.467225][ T5774] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 55.469448][ T5774] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 55.472122][ T5774] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 55.473882][ T5774] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 55.476877][ T5774] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 55.480341][ T5774] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 55.481931][ T5774] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 55.484890][ T5774] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 56.428072][ T5783] FAULT_INJECTION: forcing a failure. [ 56.428072][ T5783] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 56.431724][ T5783] CPU: 2 UID: 0 PID: 5783 Comm: syz.0.123 Not tainted 6.12.0-rc3-syzkaller-00420-g715ca9dd687f #0 [ 56.434421][ T5783] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 56.437403][ T5783] Call Trace: [ 56.438620][ T5783] [ 56.439689][ T5783] dump_stack_lvl+0x16c/0x1f0 [ 56.441392][ T5783] should_fail_ex+0x497/0x5b0 [ 56.443127][ T5783] ? fs_reclaim_acquire+0xae/0x150 [ 56.445017][ T5783] should_fail_alloc_page+0xe7/0x130 [ 56.446964][ T5783] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 56.449164][ T5783] ? __pfx_stack_trace_save+0x10/0x10 [ 56.451113][ T5783] __alloc_pages_noprof+0x190/0x25a0 [ 56.453014][ T5783] ? save_trace+0x42/0xa10 [ 56.454735][ T5783] ? add_lock_to_list+0x17d/0x390 [ 56.456564][ T5783] ? lockdep_unlock+0x11a/0x290 [ 56.458450][ T5783] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 56.460527][ T5783] ? __pfx___lock_acquire+0x10/0x10 [ 56.462477][ T5783] ? save_trace+0x42/0xa10 [ 56.464121][ T5783] ? add_lock_to_list+0x17d/0x390 [ 56.465946][ T5783] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 56.468079][ T5783] ? policy_nodemask+0xea/0x4e0 [ 56.469846][ T5783] alloc_pages_mpol_noprof+0x2c9/0x610 [ 56.471744][ T5783] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 56.473883][ T5783] ? do_raw_spin_lock+0x12d/0x2c0 [ 56.475502][ T5783] ? lock_acquire+0x2f/0xb0 [ 56.476696][ T5783] ? kasan_populate_vmalloc_pte+0xfb/0x160 [ 56.478216][ T5783] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 56.479876][ T5783] get_free_pages_noprof+0xc/0x40 [ 56.481195][ T5783] kasan_populate_vmalloc_pte+0x2d/0x160 [ 56.482682][ T5783] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 56.484317][ T5783] __apply_to_page_range+0x5fd/0xd30 [ 56.485686][ T5783] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 56.487331][ T5783] ? __pfx___apply_to_page_range+0x10/0x10 [ 56.488994][ T5783] ? insert_vmap_area+0x2ef/0x4d0 [ 56.490396][ T5783] alloc_vmap_area+0x93e/0x2a70 [ 56.491744][ T5783] ? __pfx_alloc_vmap_area+0x10/0x10 [ 56.493140][ T5783] __get_vm_area_node+0x17e/0x2d0 [ 56.494467][ T5783] ? netlink_rcv_skb+0x165/0x410 [ 56.495764][ T5783] __vmalloc_node_range_noprof+0x26a/0x15a0 [ 56.497298][ T5783] ? hash_mac_create+0x3f0/0xff0 [ 56.498605][ T5783] ? hash_mac_create+0x3f0/0xff0 [ 56.499865][ T5783] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 56.501467][ T5783] ? trace_kmalloc+0x2d/0xe0 [ 56.502763][ T5783] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 56.504251][ T5783] ? hash_mac_create+0x3f0/0xff0 [ 56.505539][ T5783] __kvmalloc_node_noprof+0x14f/0x1a0 [ 56.506954][ T5783] ? hash_mac_create+0x3f0/0xff0 [ 56.508217][ T5783] hash_mac_create+0x3f0/0xff0 [ 56.509479][ T5783] ? __pfx_hash_mac_create+0x10/0x10 [ 56.510866][ T5783] ip_set_create+0x62a/0x1400 [ 56.512107][ T5783] ? __pfx_ip_set_create+0x10/0x10 [ 56.513443][ T5783] ? rcu_is_watching+0x12/0xc0 [ 56.514717][ T5783] nfnetlink_rcv_msg+0x9c3/0x11e0 [ 56.516164][ T5783] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 56.517616][ T5783] ? find_held_lock+0x2d/0x110 [ 56.518890][ T5783] netlink_rcv_skb+0x165/0x410 [ 56.520140][ T5783] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 56.521549][ T5783] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 56.522940][ T5783] ? __pfx_aa_get_newest_label+0x10/0x10 [ 56.524402][ T5783] ? bpf_lsm_capable+0x9/0x10 [ 56.525639][ T5783] ? security_capable+0x7e/0x260 [ 56.526963][ T5783] ? ns_capable+0xd7/0x110 [ 56.528128][ T5783] nfnetlink_rcv+0x1b4/0x430 [ 56.529335][ T5783] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 56.530689][ T5783] ? netlink_deliver_tap+0x1ae/0xcf0 [ 56.532068][ T5783] netlink_unicast+0x53c/0x7f0 [ 56.533332][ T5783] ? __pfx_netlink_unicast+0x10/0x10 [ 56.534715][ T5783] ? __phys_addr_symbol+0x30/0x80 [ 56.536024][ T5783] ? __check_object_size+0x488/0x710 [ 56.537401][ T5783] netlink_sendmsg+0x8b8/0xd70 [ 56.538660][ T5783] ? __pfx_netlink_sendmsg+0x10/0x10 [ 56.540045][ T5783] ? lock_acquire+0x2f/0xb0 [ 56.541244][ T5783] ____sys_sendmsg+0x9ae/0xb40 [ 56.542520][ T5783] ? __pfx_____sys_sendmsg+0x10/0x10 [ 56.543890][ T5783] ? get_compat_msghdr+0x11b/0x170 [ 56.545222][ T5783] ? __pfx___lock_acquire+0x10/0x10 [ 56.546584][ T5783] ___sys_sendmsg+0x135/0x1e0 [ 56.547817][ T5783] ? __pfx____sys_sendmsg+0x10/0x10 [ 56.549132][ T5783] ? lock_acquire+0x2f/0xb0 [ 56.550251][ T5783] ? __fget_files+0x40/0x3f0 [ 56.551465][ T5783] ? fdget+0x176/0x210 [ 56.552531][ T5783] __sys_sendmsg+0x117/0x1f0 [ 56.553686][ T5783] ? __pfx___sys_sendmsg+0x10/0x10 [ 56.554939][ T5783] ? __fget_files+0x244/0x3f0 [ 56.556127][ T5783] __do_fast_syscall_32+0x73/0x120 [ 56.557395][ T5783] do_fast_syscall_32+0x32/0x80 [ 56.558578][ T5783] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 56.560106][ T5783] RIP: 0023:0xf743e579 [ 56.561178][ T5783] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 56.566188][ T5783] RSP: 002b:00000000f572656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 56.568360][ T5783] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000140 [ 56.570408][ T5783] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 56.572462][ T5783] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 56.574504][ T5783] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 56.576550][ T5783] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 56.578612][ T5783] [ 56.580816][ T5783] syz.0.123: vmalloc error: size 4194328, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 56.585015][ T5783] CPU: 1 UID: 0 PID: 5783 Comm: syz.0.123 Not tainted 6.12.0-rc3-syzkaller-00420-g715ca9dd687f #0 [ 56.587743][ T5783] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 56.590742][ T5783] Call Trace: [ 56.591624][ T5783] [ 56.592401][ T5783] dump_stack_lvl+0x16c/0x1f0 [ 56.593642][ T5783] warn_alloc+0x24d/0x3a0 [ 56.594788][ T5783] ? __pfx_warn_alloc+0x10/0x10 [ 56.596068][ T5783] ? kfree+0x14f/0x4b0 [ 56.597155][ T5783] ? __get_vm_area_node+0x1bc/0x2d0 [ 56.598524][ T5783] __vmalloc_node_range_noprof+0xd27/0x15a0 [ 56.600066][ T5783] ? hash_mac_create+0x3f0/0xff0 [ 56.601383][ T5783] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 56.603046][ T5783] ? trace_kmalloc+0x2d/0xe0 [ 56.604263][ T5783] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 56.605757][ T5783] ? hash_mac_create+0x3f0/0xff0 [ 56.607067][ T5783] __kvmalloc_node_noprof+0x14f/0x1a0 [ 56.608477][ T5783] ? hash_mac_create+0x3f0/0xff0 [ 56.609749][ T5783] hash_mac_create+0x3f0/0xff0 [ 56.611290][ T5783] ? __pfx_hash_mac_create+0x10/0x10 [ 56.612673][ T5783] ip_set_create+0x62a/0x1400 [ 56.613906][ T5783] ? __pfx_ip_set_create+0x10/0x10 [ 56.615633][ T5783] ? rcu_is_watching+0x12/0xc0 [ 56.617275][ T5783] nfnetlink_rcv_msg+0x9c3/0x11e0 [ 56.618639][ T5783] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 56.620058][ T5783] ? find_held_lock+0x2d/0x110 [ 56.621329][ T5783] netlink_rcv_skb+0x165/0x410 [ 56.622615][ T5783] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 56.624033][ T5783] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 56.625407][ T5783] ? __pfx_aa_get_newest_label+0x10/0x10 [ 56.626913][ T5783] ? bpf_lsm_capable+0x9/0x10 [ 56.628144][ T5783] ? security_capable+0x7e/0x260 [ 56.629435][ T5783] ? ns_capable+0xd7/0x110 [ 56.630614][ T5783] nfnetlink_rcv+0x1b4/0x430 [ 56.631824][ T5783] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 56.633153][ T5783] ? netlink_deliver_tap+0x1ae/0xcf0 [ 56.634534][ T5783] netlink_unicast+0x53c/0x7f0 [ 56.635783][ T5783] ? __pfx_netlink_unicast+0x10/0x10 [ 56.637154][ T5783] ? __phys_addr_symbol+0x30/0x80 [ 56.638471][ T5783] ? __check_object_size+0x488/0x710 [ 56.639843][ T5783] netlink_sendmsg+0x8b8/0xd70 [ 56.641092][ T5783] ? __pfx_netlink_sendmsg+0x10/0x10 [ 56.642493][ T5783] ? lock_acquire+0x2f/0xb0 [ 56.643684][ T5783] ____sys_sendmsg+0x9ae/0xb40 [ 56.644937][ T5783] ? __pfx_____sys_sendmsg+0x10/0x10 [ 56.646306][ T5783] ? get_compat_msghdr+0x11b/0x170 [ 56.647647][ T5783] ? __pfx___lock_acquire+0x10/0x10 [ 56.649006][ T5783] ___sys_sendmsg+0x135/0x1e0 [ 56.650239][ T5783] ? __pfx____sys_sendmsg+0x10/0x10 [ 56.651614][ T5783] ? lock_acquire+0x2f/0xb0 [ 56.652807][ T5783] ? __fget_files+0x40/0x3f0 [ 56.654013][ T5783] ? fdget+0x176/0x210 [ 56.655096][ T5783] __sys_sendmsg+0x117/0x1f0 [ 56.656303][ T5783] ? __pfx___sys_sendmsg+0x10/0x10 [ 56.657633][ T5783] ? __fget_files+0x244/0x3f0 [ 56.658877][ T5783] __do_fast_syscall_32+0x73/0x120 [ 56.660221][ T5783] do_fast_syscall_32+0x32/0x80 [ 56.661498][ T5783] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 56.663157][ T5783] RIP: 0023:0xf743e579 [ 56.664227][ T5783] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 56.669160][ T5783] RSP: 002b:00000000f572656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 56.671454][ T5783] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000140 [ 56.673508][ T5783] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 56.675575][ T5783] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 56.677612][ T5783] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 56.679656][ T5783] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 56.681694][ T5783] [ 56.683271][ T5783] Mem-Info: [ 56.684163][ T5783] active_anon:4990 inactive_anon:0 isolated_anon:0 [ 56.684163][ T5783] active_file:11308 inactive_file:38067 isolated_file:0 [ 56.684163][ T5783] unevictable:768 dirty:1658 writeback:0 [ 56.684163][ T5783] slab_reclaimable:8654 slab_unreclaimable:49673 [ 56.684163][ T5783] mapped:17795 shmem:1321 pagetables:624 [ 56.684163][ T5783] sec_pagetables:297 bounce:0 [ 56.684163][ T5783] kernel_misc_reclaimable:0 [ 56.684163][ T5783] free:83090 free_pcp:5437 free_cma:0 [ 56.695905][ T5783] Node 0 active_anon:3108kB inactive_anon:0kB active_file:0kB inactive_file:17368kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:6504kB dirty:32kB writeback:0kB shmem:2280kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8848kB pagetables:748kB sec_pagetables:1144kB all_unreclaimable? yes [ 56.704178][ T5783] Node 1 active_anon:16852kB inactive_anon:0kB active_file:45232kB inactive_file:134900kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:64676kB dirty:6600kB writeback:0kB shmem:3004kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:2364kB pagetables:1748kB sec_pagetables:44kB all_unreclaimable? no [ 56.712469][ T5783] Node 0 DMA free:2936kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:1360kB inactive_anon:0kB active_file:0kB inactive_file:252kB unevictable:0kB writepending:4kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:240kB local_pcp:32kB free_cma:0kB [ 56.722086][ T5783] lowmem_reserve[]: 0 273 0 0 0 [ 56.723792][ T5783] Node 0 DMA32 free:40136kB boost:20480kB min:34384kB low:37860kB high:41336kB reserved_highatomic:4096KB active_anon:1748kB inactive_anon:0kB active_file:0kB inactive_file:17116kB unevictable:1536kB writepending:28kB present:1032196kB managed:306284kB mlocked:0kB bounce:0kB free_pcp:1648kB local_pcp:148kB free_cma:0kB [ 56.732956][ T5783] lowmem_reserve[]: 0 0 0 0 0 [ 56.734211][ T5783] Node 1 DMA32 free:289216kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB active_anon:16848kB inactive_anon:0kB active_file:45232kB inactive_file:134900kB unevictable:1536kB writepending:6600kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:19804kB local_pcp:12188kB free_cma:0kB [ 56.742124][ T5783] lowmem_reserve[]: 0 0 0 0 0 [ 56.743890][ T5783] Node 0 DMA: 46*4kB (UME) 14*8kB (UE) 97*16kB (U) 32*32kB (UE) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2936kB [ 56.748553][ T5783] Node 0 DMA32: 1170*4kB (UMH) 340*8kB (UMEH) 130*16kB (UMEH) 360*32kB (UMEH) 155*64kB (UMEH) 22*128kB (UMEH) 3*256kB (U) 5*512kB (UE) 3*1024kB (UE) 0*2048kB 0*4096kB = 40136kB [ 56.753590][ T5783] Node 1 DMA32: 72*4kB (UM) 8*8kB (ME) 10*16kB (ME) 139*32kB (UME) 408*64kB (UME) 50*128kB (UME) 23*256kB (UME) 22*512kB (UM) 13*1024kB (M) 8*2048kB (UM) 50*4096kB (UM) = 289120kB [ 56.759057][ T5783] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 56.761749][ T5783] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 56.764773][ T5783] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 56.767794][ T5783] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 56.770541][ T5783] 50712 total pagecache pages [ 56.772020][ T5783] 0 pages in swap cache [ 56.773403][ T5783] Free swap = 124984kB [ 56.774789][ T5783] Total swap = 124996kB [ 56.776298][ T5783] 524155 pages RAM [ 56.777311][ T5783] 0 pages HighMem/MovableOnly [ 56.778670][ T5783] 206681 pages reserved [ 56.780006][ T5783] 0 pages cma reserved [ 57.092508][ T5695] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.097288][ T5695] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.101835][ T5695] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.106508][ T5695] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.226195][ T5357] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 57.226220][ T5350] Bluetooth: hci4: command 0x1003 tx timeout [ 57.470798][ T5357] Bluetooth: hci1: command 0x0c1a tx timeout [ 57.470826][ T5350] Bluetooth: hci0: command 0x0419 tx timeout [ 57.556442][ T5350] Bluetooth: hci3: command 0x0c1a tx timeout [ 57.556564][ T5357] Bluetooth: hci2: command 0x0c1a tx timeout [ 57.588835][ T5802] netlink: 'syz.2.129': attribute type 33 has an invalid length. [ 58.168261][ T5822] netlink: 'syz.3.137': attribute type 4 has an invalid length. [ 58.173105][ T5822] netlink: 'syz.3.137': attribute type 4 has an invalid length. [ 58.671132][ T5832] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 58.673633][ T5832] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 58.677786][ T5832] vhci_hcd vhci_hcd.0: Device attached [ 58.725463][ T5838] lo: entered allmulticast mode [ 58.731162][ T5833] vhci_hcd: connection closed [ 58.733708][ T70] vhci_hcd: stop threads [ 58.737617][ T5838] tunl0: entered allmulticast mode [ 58.747226][ T70] vhci_hcd: release socket [ 58.748878][ T70] vhci_hcd: disconnect device [ 58.750783][ T5838] gre0: entered allmulticast mode [ 58.759379][ T5838] gretap0: entered allmulticast mode [ 58.764405][ T5838] erspan0: entered allmulticast mode [ 58.768009][ T5838] ip_vti0: entered allmulticast mode [ 58.770653][ T5838] ip6_vti0: entered allmulticast mode [ 58.774411][ T5838] sit0: entered allmulticast mode [ 58.779169][ T5838] ip6tnl0: entered allmulticast mode [ 58.784123][ T5838] ip6gre0: entered allmulticast mode [ 58.789397][ T5838] syz_tun: entered allmulticast mode [ 58.796937][ T5838] ip6gretap0: entered allmulticast mode [ 58.801040][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.804427][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.807886][ T5838] bridge0: entered allmulticast mode [ 58.812123][ T5838] vcan0: entered allmulticast mode [ 58.816904][ T5838] bond0: entered allmulticast mode [ 58.818740][ T5838] bond_slave_0: entered allmulticast mode [ 58.820738][ T5838] bond_slave_1: entered allmulticast mode [ 58.824760][ T5838] team0: entered allmulticast mode [ 58.827454][ T5838] team_slave_0: entered allmulticast mode [ 58.829460][ T5838] team_slave_1: entered allmulticast mode [ 58.832060][ T5838] dummy0: entered allmulticast mode [ 58.836043][ T5838] nlmon0: entered allmulticast mode [ 58.838791][ T5838] caif0: entered allmulticast mode [ 58.840513][ T5838] batadv0: entered allmulticast mode [ 58.843322][ T5838] vxcan0: entered allmulticast mode [ 58.845375][ T5838] vxcan1: entered allmulticast mode [ 58.850143][ T5838] veth0: entered allmulticast mode [ 58.855214][ T5838] veth1: entered allmulticast mode [ 58.859980][ T5838] wg0: entered allmulticast mode [ 58.864592][ T5838] wg1: entered allmulticast mode [ 58.868092][ T5838] wg2: entered allmulticast mode [ 58.871982][ T5838] veth0_to_bridge: entered allmulticast mode [ 58.879356][ T5838] veth1_to_bridge: entered allmulticast mode [ 58.884903][ T5838] veth0_to_bond: entered allmulticast mode [ 58.904273][ T5838] veth1_to_bond: entered allmulticast mode [ 58.924276][ T5838] veth0_to_team: entered allmulticast mode [ 58.930561][ T5838] veth1_to_team: entered allmulticast mode [ 58.936215][ T5838] veth0_to_batadv: entered allmulticast mode [ 58.952380][ T5838] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.967901][ T5838] batadv_slave_0: entered allmulticast mode [ 58.971703][ T5838] veth1_to_batadv: entered allmulticast mode [ 58.974503][ T5838] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.979598][ T5838] batadv_slave_1: entered allmulticast mode [ 58.982817][ T5838] xfrm0: entered allmulticast mode [ 58.985948][ T5838] veth0_to_hsr: entered allmulticast mode [ 58.989349][ T5838] hsr_slave_0: entered allmulticast mode [ 58.992648][ T5838] veth1_to_hsr: entered allmulticast mode [ 58.995615][ T5838] hsr_slave_1: entered allmulticast mode [ 59.001214][ T5838] hsr0: entered allmulticast mode [ 59.004508][ T5838] veth1_virt_wifi: entered allmulticast mode [ 59.008373][ T5838] veth0_virt_wifi: entered allmulticast mode [ 59.010951][ T5838] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 59.013902][ T5838] veth1_vlan: entered allmulticast mode [ 59.018568][ T5838] veth0_vlan: entered allmulticast mode [ 59.023578][ T5838] vlan0: entered allmulticast mode [ 59.025040][ T5838] vlan1: entered allmulticast mode [ 59.027188][ T5838] macvlan0: entered allmulticast mode [ 59.030321][ T5838] macvlan1: entered allmulticast mode [ 59.036026][ T5838] ipvlan0: entered allmulticast mode [ 59.040084][ T5838] ipvlan1: entered allmulticast mode [ 59.042501][ T5838] veth1_macvtap: entered allmulticast mode [ 59.045969][ T5838] veth0_macvtap: entered allmulticast mode [ 59.051060][ T5838] macvtap0: entered allmulticast mode [ 59.053877][ T5838] macsec0: entered allmulticast mode [ 59.058038][ T5838] geneve0: entered allmulticast mode [ 59.061547][ T5838] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.063850][ T5838] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.070186][ T5838] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.072468][ T5838] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.074855][ T5838] geneve1: entered allmulticast mode [ 59.197495][ T5838] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 59.207916][ T5838] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 59.211886][ T5838] netdevsim netdevsim2 eth0: entered allmulticast mode [ 59.214514][ T5838] netdevsim netdevsim2 eth1: entered allmulticast mode [ 59.216913][ T5838] netdevsim netdevsim2 eth2: entered allmulticast mode [ 59.218836][ T5838] netdevsim netdevsim2 eth3: entered allmulticast mode [ 59.547049][ T5350] Bluetooth: hci1: command 0x0c1a tx timeout [ 59.556242][ T5350] Bluetooth: hci0: command 0x0419 tx timeout [ 59.626199][ T5357] Bluetooth: hci2: command 0x0c1a tx timeout [ 59.628363][ T5350] Bluetooth: hci3: command 0x0c1a tx timeout [ 61.009871][ T5910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.162'. [ 61.023491][ T5910] 8021q: adding VLAN 0 to HW filter on device team1 [ 61.045625][ T5910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.162'. [ 61.239131][ T5929] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.434321][ T5931] tipc: Started in network mode [ 61.435779][ T5931] tipc: Node identity ac1414aa, cluster identity 4711 [ 61.439570][ T5931] tipc: Enabled bearer , priority 10 [ 61.582293][ T5933] program syz.0.170 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.626402][ T5350] Bluetooth: hci1: command 0x0c1a tx timeout [ 61.677618][ T5938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.172'. [ 61.701622][ T5940] netlink: 'syz.0.173': attribute type 11 has an invalid length. [ 61.706773][ T5350] Bluetooth: hci3: command 0x0c1a tx timeout [ 61.706796][ T5357] Bluetooth: hci2: command 0x0c1a tx timeout [ 61.711117][ T5940] netlink: 'syz.0.173': attribute type 11 has an invalid length. [ 61.781799][ T5944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.175'. [ 61.793047][ T5944] 8021q: adding VLAN 0 to HW filter on device team1 [ 61.799570][ T5944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.175'. [ 61.824567][ T5946] netlink: 24 bytes leftover after parsing attributes in process `syz.0.176'. [ 61.848711][ T5948] i2c i2c-1: Invalid block write size 34 [ 62.019028][ T5357] Bluetooth: hci0: unexpected event for opcode 0x1002 [ 62.020305][ T5958] netlink: 12 bytes leftover after parsing attributes in process `syz.3.182'. [ 62.039314][ T5960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.183'. [ 62.061603][ T5962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.184'. [ 62.114876][ T5962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.184'. [ 62.122776][ T5966] openvswitch: netlink: EtherType 0 is less than min 600 [ 62.136279][ T59] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 62.168137][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 62.168152][ T39] audit: type=1326 audit(1729434957.297:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5965 comm="syz.2.186" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f88579 code=0x0 [ 62.227962][ T5980] lo: entered allmulticast mode [ 62.233208][ T5980] tunl0: entered allmulticast mode [ 62.238807][ T5980] gre0: entered allmulticast mode [ 62.249224][ T5980] gretap0: entered allmulticast mode [ 62.254196][ T5980] erspan0: entered allmulticast mode [ 62.259655][ T5980] ip_vti0: entered allmulticast mode [ 62.263621][ T5980] ip6_vti0: entered allmulticast mode [ 62.269043][ T5980] sit0: entered allmulticast mode [ 62.275473][ T5980] ip6tnl0: entered allmulticast mode [ 62.280833][ T5980] ip6gre0: entered allmulticast mode [ 62.288422][ T59] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 62.291450][ T59] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.295467][ T5980] syz_tun: entered allmulticast mode [ 62.295933][ T59] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 62.301391][ T59] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.307125][ T5980] ip6gretap0: entered allmulticast mode [ 62.308378][ T59] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 62.311804][ T59] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 62.314666][ T59] usb 5-1: Product: syz [ 62.316265][ T59] usb 5-1: Manufacturer: syz [ 62.318516][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.320499][ T59] cdc_wdm 5-1:1.0: skipping garbage [ 62.320637][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.322294][ T59] cdc_wdm 5-1:1.0: skipping garbage [ 62.323198][ T59] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 62.324602][ T5980] bridge0: entered allmulticast mode [ 62.326348][ T59] cdc_wdm 5-1:1.0: Unknown control protocol [ 62.332236][ T5980] vcan0: entered allmulticast mode [ 62.336196][ T5980] bond0: entered allmulticast mode [ 62.337627][ T5980] bond_slave_0: entered allmulticast mode [ 62.339161][ T5980] bond_slave_1: entered allmulticast mode [ 62.342004][ T5980] team0: entered allmulticast mode [ 62.343506][ T5980] team_slave_0: entered allmulticast mode [ 62.345080][ T5980] team_slave_1: entered allmulticast mode [ 62.350101][ T5980] dummy0: entered allmulticast mode [ 62.354245][ T5980] nlmon0: entered allmulticast mode [ 62.356959][ T5980] caif0: entered allmulticast mode [ 62.359673][ T5980] batadv0: entered allmulticast mode [ 62.369243][ T5980] vxcan0: entered allmulticast mode [ 62.372088][ T5980] vxcan1: entered allmulticast mode [ 62.377175][ T5980] veth0: entered allmulticast mode [ 62.382296][ T5980] veth1: entered allmulticast mode [ 62.386605][ T5980] wg0: entered allmulticast mode [ 62.389627][ T5980] wg1: entered allmulticast mode [ 62.393596][ T5980] wg2: entered allmulticast mode [ 62.397580][ T5980] veth0_to_bridge: entered allmulticast mode [ 62.403175][ T5980] veth1_to_bridge: entered allmulticast mode [ 62.409166][ T5980] veth0_to_bond: entered allmulticast mode [ 62.416856][ T5980] veth1_to_bond: entered allmulticast mode [ 62.425390][ T5980] veth0_to_team: entered allmulticast mode [ 62.432102][ T5980] veth1_to_team: entered allmulticast mode [ 62.436941][ T5411] tipc: Node number set to 2886997162 [ 62.439239][ T5980] veth0_to_batadv: entered allmulticast mode [ 62.441779][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.445154][ T5980] batadv_slave_0: entered allmulticast mode [ 62.449881][ T5980] veth1_to_batadv: entered allmulticast mode [ 62.454273][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.458418][ T5980] batadv_slave_1: entered allmulticast mode [ 62.463836][ T5980] xfrm0: entered allmulticast mode [ 62.468159][ T5980] veth0_to_hsr: entered allmulticast mode [ 62.473176][ T5980] hsr_slave_0: entered allmulticast mode [ 62.480034][ T5980] veth1_to_hsr: entered allmulticast mode [ 62.483964][ T5980] hsr_slave_1: entered allmulticast mode [ 62.487267][ T5980] hsr0: entered allmulticast mode [ 62.492775][ T5980] veth1_virt_wifi: entered allmulticast mode [ 62.496864][ T5980] veth0_virt_wifi: entered allmulticast mode [ 62.500014][ T5980] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 62.503528][ T5980] veth1_vlan: entered allmulticast mode [ 62.507495][ T5980] veth0_vlan: entered allmulticast mode [ 62.514094][ T5980] vlan0: entered allmulticast mode [ 62.515920][ T5980] vlan1: entered allmulticast mode [ 62.518508][ T5980] macvlan0: entered allmulticast mode [ 62.522634][ T5980] macvlan1: entered allmulticast mode [ 62.525387][ T5980] ipvlan0: entered allmulticast mode [ 62.525446][ T5952] 9pnet_fd: Insufficient options for proto=fd [ 62.527448][ T5980] ipvlan1: entered allmulticast mode [ 62.531653][ T5980] veth1_macvtap: entered allmulticast mode [ 62.535691][ T5980] veth0_macvtap: entered allmulticast mode [ 62.540844][ T5980] macvtap0: entered allmulticast mode [ 62.544484][ T5980] macsec0: entered allmulticast mode [ 62.548265][ T5980] geneve0: entered allmulticast mode [ 62.551779][ T5980] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.554502][ T5980] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.557571][ T5980] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.560080][ T5980] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.563526][ T5980] geneve1: entered allmulticast mode [ 62.572129][ T5980] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 62.580604][ T5980] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 62.584396][ T5980] netdevsim netdevsim1 eth0: entered allmulticast mode [ 62.586403][ T5980] netdevsim netdevsim1 eth1: entered allmulticast mode [ 62.588212][ T5980] netdevsim netdevsim1 eth2: entered allmulticast mode [ 62.590023][ T5980] netdevsim netdevsim1 eth3: entered allmulticast mode [ 62.592163][ C0] wdm_int_callback: 5 callbacks suppressed [ 62.592173][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 62.592393][ T5411] usb 5-1: USB disconnect, device number 5 [ 62.593720][ C0] wdm_int_callback: 5 callbacks suppressed [ 62.593728][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 62.599881][ T5980] team1: entered allmulticast mode [ 62.599992][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 62.862011][ T5997] Cannot find map_set index 0 as target [ 63.041600][ T6002] netlink: 'syz.2.195': attribute type 7 has an invalid length. [ 63.043690][ T6002] netlink: 'syz.2.195': attribute type 8 has an invalid length. [ 63.311520][ T6013] team1: entered allmulticast mode [ 64.526268][ T977] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 64.697880][ T977] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 64.700940][ T977] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.704633][ T977] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 64.707936][ T977] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.713038][ T977] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 64.716407][ T977] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 64.723330][ T977] usb 8-1: Product: syz [ 64.726653][ T977] usb 8-1: Manufacturer: syz [ 64.736127][ T977] cdc_wdm 8-1:1.0: skipping garbage [ 64.738946][ T977] cdc_wdm 8-1:1.0: skipping garbage [ 64.743961][ T977] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 64.746452][ T977] cdc_wdm 8-1:1.0: Unknown control protocol [ 64.937348][ T6042] 9pnet_fd: Insufficient options for proto=fd [ 64.991802][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 64.993494][ T59] usb 8-1: USB disconnect, device number 4 [ 64.993581][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 64.997350][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 66.016226][ T977] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 66.156169][ T977] usb 8-1: device descriptor read/64, error -71 [ 66.406194][ T977] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 66.640043][ T6084] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 66.644504][ T6084] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 66.751293][ T977] usb 8-1: device descriptor read/64, error -71 [ 66.868112][ T977] usb usb8-port1: attempt power cycle [ 67.109984][ T6092] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 67.117345][ T6092] netlink: 'syz.0.222': attribute type 10 has an invalid length. [ 67.206213][ T977] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 67.229421][ T977] usb 8-1: device descriptor read/8, error -71 [ 67.289561][ T6096] syz.2.224 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 67.466729][ T977] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 67.486673][ T977] usb 8-1: device descriptor read/8, error -71 [ 67.597123][ T977] usb usb8-port1: unable to enumerate USB device [ 68.136232][ T977] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 68.297894][ T977] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 68.301013][ T977] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.304674][ T977] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 68.308197][ T977] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.313485][ T977] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 68.316996][ T977] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 68.319843][ T977] usb 5-1: Product: syz [ 68.321456][ T977] usb 5-1: Manufacturer: syz [ 68.327886][ T977] cdc_wdm 5-1:1.0: skipping garbage [ 68.329826][ T977] cdc_wdm 5-1:1.0: skipping garbage [ 68.332416][ T977] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 68.334594][ T977] cdc_wdm 5-1:1.0: Unknown control protocol [ 68.451983][ T6109] __nla_validate_parse: 2 callbacks suppressed [ 68.451993][ T6109] netlink: 64 bytes leftover after parsing attributes in process `syz.2.228'. [ 68.533637][ T6101] 9pnet_fd: Insufficient options for proto=fd [ 68.591989][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 68.593289][ T8] usb 5-1: USB disconnect, device number 6 [ 68.594358][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 68.598479][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 69.095751][ T6127] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 69.384351][ T6134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.235'. [ 69.395485][ T6134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.235'. [ 69.442987][ T5411] IPVS: starting estimator thread 0... [ 69.526196][ T6137] IPVS: using max 35 ests per chain, 84000 per kthread [ 70.162187][ T6153] fuse: Bad value for 'fd' [ 70.386185][ T59] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 70.538867][ T59] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 70.542009][ T59] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.545424][ T59] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 70.547829][ T59] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.551823][ T59] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 70.554139][ T59] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 70.556441][ T59] usb 7-1: Product: syz [ 70.557506][ T59] usb 7-1: Manufacturer: syz [ 70.563833][ T59] cdc_wdm 7-1:1.0: skipping garbage [ 70.565205][ T59] cdc_wdm 7-1:1.0: skipping garbage [ 70.568175][ T59] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 70.569723][ T59] cdc_wdm 7-1:1.0: Unknown control protocol [ 70.678203][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.680093][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.769250][ T6151] 9pnet_fd: Insufficient options for proto=fd [ 70.823910][ T59] usb 7-1: USB disconnect, device number 5 [ 71.205503][ T6167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.246'. [ 71.569184][ T6169] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 71.680772][ T6180] FAULT_INJECTION: forcing a failure. [ 71.680772][ T6180] name failslab, interval 1, probability 0, space 0, times 0 [ 71.684302][ T6180] CPU: 0 UID: 0 PID: 6180 Comm: syz.3.251 Not tainted 6.12.0-rc3-syzkaller-00420-g715ca9dd687f #0 [ 71.687101][ T6180] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.690716][ T6180] Call Trace: [ 71.691657][ T6180] [ 71.692665][ T6180] dump_stack_lvl+0x16c/0x1f0 [ 71.694275][ T6180] should_fail_ex+0x497/0x5b0 [ 71.695876][ T6180] ? fs_reclaim_acquire+0xae/0x150 [ 71.697604][ T6180] should_failslab+0xc2/0x120 [ 71.699214][ T6180] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 71.701014][ T6180] ? __kernfs_new_node+0xd3/0x890 [ 71.702751][ T6180] __kernfs_new_node+0xd3/0x890 [ 71.704409][ T6180] ? __pfx___kernfs_new_node+0x10/0x10 [ 71.706277][ T6180] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 71.708072][ T6180] ? rwsem_read_trylock+0x12d/0x250 [ 71.709438][ T6180] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 71.710948][ T6180] kernfs_new_node+0x186/0x240 [ 71.712211][ T6180] __kernfs_create_file+0x53/0x350 [ 71.713555][ T6180] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 71.714972][ T6180] sysfs_merge_group+0x1b1/0x340 [ 71.716274][ T6180] ? __pfx_sysfs_merge_group+0x10/0x10 [ 71.717703][ T6180] ? __pfx_dev_add_physical_location+0x10/0x10 [ 71.719329][ T6180] ? bus_to_subsys+0x12d/0x160 [ 71.720684][ T6180] dpm_sysfs_add+0x237/0x280 [ 71.722349][ T6180] device_add+0x9a8/0x1a70 [ 71.723603][ T6180] ? __pfx_device_add+0x10/0x10 [ 71.724947][ T6180] ? up_write+0x1b2/0x520 [ 71.726101][ T6180] hci_register_dev+0x328/0xc60 [ 71.727414][ T6180] hci_uart_tty_ioctl+0x7d0/0xc10 [ 71.728700][ T6180] ? __pfx_hci_uart_tty_ioctl+0x10/0x10 [ 71.730166][ T6180] tty_compat_ioctl+0x381/0x4d0 [ 71.731456][ T6180] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 71.732874][ T6180] __do_compat_sys_ioctl+0x259/0x2b0 [ 71.734276][ T6180] __do_fast_syscall_32+0x73/0x120 [ 71.735633][ T6180] do_fast_syscall_32+0x32/0x80 [ 71.736916][ T6180] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 71.738582][ T6180] RIP: 0023:0xf7f33579 [ 71.739663][ T6180] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 71.744560][ T6180] RSP: 002b:00000000f56b656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 71.746690][ T6180] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000400455c8 [ 71.748738][ T6180] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 71.750788][ T6180] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 71.752834][ T6180] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 71.754887][ T6180] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 71.757030][ T6180] [ 71.764788][ T6180] Bluetooth: Can't register HCI device [ 71.797511][ T6182] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.886945][ T6189] warning: `syz.3.252' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 72.146251][ T5411] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 72.216290][ T59] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 72.286128][ T5411] usb 8-1: device descriptor read/64, error -71 [ 72.377646][ T59] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 72.380166][ T59] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.383732][ T59] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 72.386977][ T59] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.391656][ T59] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 72.394259][ T59] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 72.397223][ T59] usb 5-1: Product: syz [ 72.398741][ T59] usb 5-1: Manufacturer: syz [ 72.404865][ T59] cdc_wdm 5-1:1.0: skipping garbage [ 72.406895][ T59] cdc_wdm 5-1:1.0: skipping garbage [ 72.409459][ T59] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 72.411962][ T59] cdc_wdm 5-1:1.0: Unknown control protocol [ 72.546144][ T5411] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 72.554841][ T6196] syztnl0: entered allmulticast mode [ 72.557580][ T6196] syztnl1: entered allmulticast mode [ 72.608258][ T6194] 9pnet_fd: Insufficient options for proto=fd [ 72.618927][ T6202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.260'. [ 72.621904][ T6202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.260'. [ 72.663004][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 72.663239][ T8] usb 5-1: USB disconnect, device number 7 [ 72.665254][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 72.669301][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 72.676433][ T5411] usb 8-1: device descriptor read/64, error -71 [ 72.707746][ T6205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.261'. [ 72.710117][ T6205] netlink: 'syz.2.261': attribute type 15 has an invalid length. [ 72.786384][ T5411] usb usb8-port1: attempt power cycle [ 73.146145][ T5411] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 73.176571][ T5411] usb 8-1: device descriptor read/8, error -71 [ 73.416275][ T5411] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 73.447011][ T5411] usb 8-1: device descriptor read/8, error -71 [ 73.517705][ T6214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.264'. [ 73.566698][ T5411] usb usb8-port1: unable to enumerate USB device [ 73.780593][ T6227] netlink: 28 bytes leftover after parsing attributes in process `syz.0.268'. [ 73.782965][ T6227] netlink: 28 bytes leftover after parsing attributes in process `syz.0.268'. [ 73.822673][ T6229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.269'. [ 73.827293][ T6229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.269'. [ 74.096206][ T59] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 74.248244][ T59] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 74.251206][ T59] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.254772][ T59] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 74.257394][ T59] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.261367][ T59] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 74.264405][ T59] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 74.266896][ T59] usb 5-1: Product: syz [ 74.268012][ T59] usb 5-1: Manufacturer: syz [ 74.272196][ T59] cdc_wdm 5-1:1.0: skipping garbage [ 74.273595][ T59] cdc_wdm 5-1:1.0: skipping garbage [ 74.275488][ T59] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 74.277102][ T59] cdc_wdm 5-1:1.0: Unknown control protocol [ 74.439527][ T6233] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.271'. [ 74.442744][ T6233] netlink: zone id is out of range [ 74.444545][ T6233] netlink: zone id is out of range [ 74.473799][ T6231] 9pnet_fd: Insufficient options for proto=fd [ 74.528666][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 74.529014][ T977] usb 5-1: USB disconnect, device number 8 [ 74.530950][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 74.534650][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 75.100528][ T6245] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 75.474393][ T5350] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.479058][ T5350] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.481792][ T5350] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.484642][ T5350] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.489756][ T5350] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 75.493984][ T5350] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.671143][ T6260] chnl_net:caif_netlink_parms(): no params data found [ 75.797371][ T1291] cfg80211: failed to load regulatory.db [ 75.800995][ T6260] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.805747][ T6260] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.810965][ T6260] bridge_slave_0: entered allmulticast mode [ 75.816444][ T6260] bridge_slave_0: entered promiscuous mode [ 75.821840][ T6260] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.826147][ T6260] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.828770][ T6260] bridge_slave_1: entered allmulticast mode [ 75.831200][ T6260] bridge_slave_1: entered promiscuous mode [ 75.850496][ T6260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.854977][ T6260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.876720][ T6260] team0: Port device team_slave_0 added [ 75.879996][ T6260] team0: Port device team_slave_1 added [ 75.899712][ T6260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.901561][ T6260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.908364][ T6260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.911960][ T6260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.914326][ T6260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.923306][ T6260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.948343][ T6260] hsr_slave_0: entered promiscuous mode [ 75.950932][ T6260] hsr_slave_1: entered promiscuous mode [ 75.953072][ T6260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.955616][ T6260] Cannot create hsr debugfs directory [ 76.186173][ T6274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.277'. [ 76.189939][ T6274] netlink: 16 bytes leftover after parsing attributes in process `syz.0.277'. [ 76.245328][ T6276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.278'. [ 76.258485][ T6276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.278'. [ 76.332351][ T6260] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.335423][ T6260] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.342841][ T6260] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.349366][ T6260] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.363556][ T6260] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.365911][ T6260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.367987][ T6260] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.369965][ T6260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.395868][ T6260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.407633][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.408732][ T6284] capability: warning: `syz.2.283' uses deprecated v2 capabilities in a way that may be insecure [ 76.413294][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.430272][ T6260] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.436711][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.438581][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.444503][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.446371][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.549174][ T6260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.581146][ T6260] veth0_vlan: entered promiscuous mode [ 76.585458][ T6260] veth1_vlan: entered promiscuous mode [ 76.600640][ T6260] veth0_macvtap: entered promiscuous mode [ 76.603576][ T6260] veth1_macvtap: entered promiscuous mode [ 76.612391][ T6260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.615265][ T6260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.668177][ T6260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.672486][ T6260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.675224][ T6260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.681988][ T6260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.689219][ T6260] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.692882][ T6260] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.695296][ T6260] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.699770][ T6260] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.745247][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.747567][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.757574][ T1291] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 76.793618][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.795794][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.877192][ T6303] tmpfs: Bad value for 'mpol' [ 76.937587][ T1291] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 76.943115][ T1291] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.948028][ T1291] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 76.951601][ T1291] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.959919][ T1291] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 76.963464][ T1291] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 76.967776][ T1291] usb 7-1: Product: syz [ 76.970084][ T1291] usb 7-1: Manufacturer: syz [ 76.975580][ T1291] cdc_wdm 7-1:1.0: skipping garbage [ 76.978625][ T1291] cdc_wdm 7-1:1.0: skipping garbage [ 76.981668][ T1291] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 76.987078][ T1291] cdc_wdm 7-1:1.0: Unknown control protocol [ 77.177935][ T6291] 9pnet_fd: Insufficient options for proto=fd [ 77.231862][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 77.233539][ T5386] usb 7-1: USB disconnect, device number 6 [ 77.234218][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 77.238461][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 77.468231][ T6334] binder: 6333:6334 ioctl 4018aee3 20000240 returned -22 [ 77.557111][ T5357] Bluetooth: hci4: command tx timeout [ 78.082511][ T6348] fuse: Bad value for 'fd' [ 78.384677][ T6356] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 79.084027][ T6371] FAULT_INJECTION: forcing a failure. [ 79.084027][ T6371] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 79.087724][ T6371] CPU: 1 UID: 0 PID: 6371 Comm: syz.3.307 Not tainted 6.12.0-rc3-syzkaller-00420-g715ca9dd687f #0 [ 79.090434][ T6371] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.093341][ T6371] Call Trace: [ 79.094247][ T6371] [ 79.095266][ T6371] dump_stack_lvl+0x16c/0x1f0 [ 79.096906][ T6371] should_fail_ex+0x497/0x5b0 [ 79.098538][ T6371] _copy_from_user+0x30/0xf0 [ 79.100112][ T6371] input_event_from_user+0x22d/0x3b0 [ 79.101927][ T6371] ? __pfx_input_event_from_user+0x10/0x10 [ 79.103962][ T6371] ? input_inject_event+0x193/0x370 [ 79.105740][ T6371] evdev_write+0x377/0x750 [ 79.107472][ T6371] ? __pfx_evdev_write+0x10/0x10 [ 79.108798][ T6371] ? bpf_lsm_file_permission+0x9/0x10 [ 79.110233][ T6371] ? security_file_permission+0x71/0x210 [ 79.111730][ T6371] ? __pfx_evdev_write+0x10/0x10 [ 79.113052][ T6371] vfs_write+0x28e/0x1140 [ 79.114220][ T6371] ? __fget_files+0x23a/0x3f0 [ 79.115475][ T6371] ? __pfx_lock_release+0x10/0x10 [ 79.116140][ T5410] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 79.116800][ T6371] ? trace_lock_acquire+0x14a/0x1d0 [ 79.120197][ T6371] ? __pfx_vfs_write+0x10/0x10 [ 79.121492][ T6371] ? lock_acquire+0x2f/0xb0 [ 79.122726][ T6371] ? __fget_files+0x40/0x3f0 [ 79.123920][ T6371] ? __fget_files+0x244/0x3f0 [ 79.125178][ T6371] ksys_write+0x1fa/0x260 [ 79.126304][ T6371] ? __pfx_ksys_write+0x10/0x10 [ 79.127601][ T6371] __do_fast_syscall_32+0x73/0x120 [ 79.128952][ T6371] do_fast_syscall_32+0x32/0x80 [ 79.130232][ T6371] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 79.131907][ T6371] RIP: 0023:0xf7f33579 [ 79.133015][ T6371] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 79.139655][ T6371] RSP: 002b:00000000f56b656c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 79.142428][ T6371] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000040 [ 79.144549][ T6371] RDX: 00000000000012d8 RSI: 0000000000000000 RDI: 0000000000000000 [ 79.146704][ T6371] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 79.148789][ T6371] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 79.150962][ T6371] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 79.153037][ T6371] [ 79.164291][ T6373] lo: entered allmulticast mode [ 79.167179][ T6373] tunl0: entered allmulticast mode [ 79.172869][ T6373] gre0: entered allmulticast mode [ 79.178427][ T6373] gretap0: entered allmulticast mode [ 79.182826][ T6373] erspan0: entered allmulticast mode [ 79.186530][ T6373] ip_vti0: entered allmulticast mode [ 79.189792][ T6373] ip6_vti0: entered allmulticast mode [ 79.193156][ T6373] sit0: entered allmulticast mode [ 79.201267][ T6373] ip6tnl0: entered allmulticast mode [ 79.204316][ T6373] ip6gre0: entered allmulticast mode [ 79.210077][ T6373] syz_tun: entered allmulticast mode [ 79.217990][ T6373] ip6gretap0: entered allmulticast mode [ 79.221267][ T6373] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.223882][ T6373] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.226532][ T6373] bridge0: entered allmulticast mode [ 79.229997][ T6373] vcan0: entered allmulticast mode [ 79.235246][ T6373] bond0: entered allmulticast mode [ 79.237409][ T6373] bond_slave_0: entered allmulticast mode [ 79.239439][ T6373] bond_slave_1: entered allmulticast mode [ 79.243555][ T6373] team0: entered allmulticast mode [ 79.245321][ T6373] team_slave_0: entered allmulticast mode [ 79.267895][ T5410] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 79.270291][ T5410] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.272340][ T6373] team_slave_1: entered allmulticast mode [ 79.273872][ T5410] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 79.278482][ T5410] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.280264][ T6373] dummy0: entered allmulticast mode [ 79.283620][ T5410] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 79.287362][ T5410] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 79.290101][ T5410] usb 7-1: Product: syz [ 79.291533][ T5410] usb 7-1: Manufacturer: syz [ 79.292633][ T6373] nlmon0: entered allmulticast mode [ 79.295302][ T6373] caif0: entered allmulticast mode [ 79.297175][ T6373] batadv0: entered allmulticast mode [ 79.300167][ T6373] vxcan0: entered allmulticast mode [ 79.302218][ T6373] vxcan1: entered allmulticast mode [ 79.309087][ T6373] veth0: entered allmulticast mode [ 79.313990][ T5410] cdc_wdm 7-1:1.0: skipping garbage [ 79.315428][ T5410] cdc_wdm 7-1:1.0: skipping garbage [ 79.317276][ T5410] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 79.318909][ T5410] cdc_wdm 7-1:1.0: Unknown control protocol [ 79.322597][ T6373] veth1: entered allmulticast mode [ 79.332603][ T6373] wg0: entered allmulticast mode [ 79.337414][ T6373] wg1: entered allmulticast mode [ 79.340945][ T6373] wg2: entered allmulticast mode [ 79.350431][ T6373] veth0_to_bridge: entered allmulticast mode [ 79.355779][ T6373] veth1_to_bridge: entered allmulticast mode [ 79.366622][ T6373] veth0_to_bond: entered allmulticast mode [ 79.371261][ T6373] veth1_to_bond: entered allmulticast mode [ 79.376020][ T6373] veth0_to_team: entered allmulticast mode [ 79.381644][ T6373] veth1_to_team: entered allmulticast mode [ 79.389437][ T6373] veth0_to_batadv: entered allmulticast mode [ 79.392153][ T6373] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.395324][ T6373] batadv_slave_0: entered allmulticast mode [ 79.399813][ T6373] veth1_to_batadv: entered allmulticast mode [ 79.402527][ T6373] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.405571][ T6373] batadv_slave_1: entered allmulticast mode [ 79.411500][ T6373] xfrm0: entered allmulticast mode [ 79.414944][ T6373] veth0_to_hsr: entered allmulticast mode [ 79.418365][ T6373] hsr_slave_0: entered allmulticast mode [ 79.422287][ T6373] veth1_to_hsr: entered allmulticast mode [ 79.425168][ T6373] hsr_slave_1: entered allmulticast mode [ 79.429705][ T6373] hsr0: entered allmulticast mode [ 79.433013][ T6373] veth1_virt_wifi: entered allmulticast mode [ 79.436670][ T6373] veth0_virt_wifi: entered allmulticast mode [ 79.439243][ T6373] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 79.442309][ T6373] veth1_vlan: entered allmulticast mode [ 79.445715][ T6373] veth0_vlan: entered allmulticast mode [ 79.451281][ T6373] vlan0: entered allmulticast mode [ 79.452775][ T6373] vlan1: entered allmulticast mode [ 79.454578][ T6373] macvlan0: entered allmulticast mode [ 79.458285][ T6373] macvlan1: entered allmulticast mode [ 79.460648][ T6373] ipvlan0: entered allmulticast mode [ 79.462136][ T6373] ipvlan1: entered allmulticast mode [ 79.464674][ T6373] veth1_macvtap: entered allmulticast mode [ 79.469066][ T6373] veth0_macvtap: entered allmulticast mode [ 79.475316][ T6373] macvtap0: entered allmulticast mode [ 79.478281][ T6373] macsec0: entered allmulticast mode [ 79.481713][ T6373] geneve0: entered allmulticast mode [ 79.484860][ T6373] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.489240][ T6373] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.491519][ T6373] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.493819][ T6373] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.496420][ T6373] geneve1: entered allmulticast mode [ 79.499379][ T6373] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 79.502444][ T6373] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 79.505740][ T6373] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 79.508919][ T6373] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 79.514309][ T6373] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 79.515231][ T6369] 9pnet_fd: Insufficient options for proto=fd [ 79.521584][ T6373] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 79.571878][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 79.571975][ T5410] usb 7-1: USB disconnect, device number 7 [ 79.573632][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 79.577061][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 79.626259][ T5357] Bluetooth: hci4: command tx timeout [ 79.638607][ T6397] __nla_validate_parse: 5 callbacks suppressed [ 79.638617][ T6397] netlink: 16 bytes leftover after parsing attributes in process `syz.1.314'. [ 79.670715][ T6399] netlink: 'syz.3.315': attribute type 10 has an invalid length. [ 79.672766][ T6399] team0: left allmulticast mode [ 79.674403][ T6399] batman_adv: batadv0: Adding interface: team0 [ 79.676266][ T6399] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.682979][ T6399] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 79.687849][ T6399] netlink: 'syz.3.315': attribute type 10 has an invalid length. [ 79.689898][ T6399] netlink: 2 bytes leftover after parsing attributes in process `syz.3.315'. [ 79.692247][ T6399] team0: entered promiscuous mode [ 79.693574][ T6399] team_slave_0: entered promiscuous mode [ 79.695235][ T6399] team_slave_1: entered promiscuous mode [ 79.697508][ T6399] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.699351][ T6399] batman_adv: batadv0: Interface activated: team0 [ 79.701067][ T6399] batman_adv: batadv0: Interface deactivated: team0 [ 79.702826][ T6399] batman_adv: batadv0: Removing interface: team0 SYZFAIL: ShmemBuilder: too large output offset size=773857571 consumed=1818846767 (errno 9: Bad file descriptor) [ 79.790985][ T1138] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.868624][ T1138] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.962984][ T1138] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.048798][ T1138] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.120989][ T1138] bridge_slave_1: left allmulticast mode [ 80.123063][ T1138] bridge_slave_1: left promiscuous mode [ 80.125704][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.131886][ T1138] bridge_slave_0: left allmulticast mode [ 80.133701][ T1138] bridge_slave_0: left promiscuous mode [ 80.135653][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.369372][ T1138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.373358][ T1138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.376714][ T1138] bond0 (unregistering): Released all slaves [ 80.447710][ T1138] tipc: Left network mode [ 80.682395][ T1138] hsr_slave_0: left promiscuous mode [ 80.684700][ T1138] hsr_slave_1: left promiscuous mode [ 80.687074][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.689524][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.693082][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.695529][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.723296][ T1138] veth1_macvtap: left promiscuous mode [ 80.725305][ T1138] veth0_macvtap: left promiscuous mode [ 80.727796][ T1138] veth1_vlan: left promiscuous mode [ 80.729646][ T1138] veth0_vlan: left promiscuous mode [ 81.255734][ T1138] team0 (unregistering): Port device team_slave_1 removed [ 81.311029][ T1138] team0 (unregistering): Port device team_slave_0 removed [ 82.065079][ T1138] IPVS: stop unused estimator thread 0... [ 82.760810][ T1138] bridge_slave_1: left promiscuous mode [ 82.762412][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.765613][ T1138] bridge_slave_0: left promiscuous mode [ 82.768057][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.771042][ T1138] bridge_slave_1: left promiscuous mode [ 82.772541][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.775015][ T1138] bridge_slave_0: left promiscuous mode [ 82.776541][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.093582][ T1138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.097139][ T1138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.099853][ T1138] bond0 (unregistering): Released all slaves [ 83.160431][ T1138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.163643][ T1138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.166450][ T1138] bond0 (unregistering): Released all slaves [ 83.269980][ T1138] tipc: Left network mode [ 83.278247][ T1138] tipc: Disabling bearer [ 83.280727][ T1138] tipc: Left network mode [ 83.629925][ T1138] hsr_slave_0: left promiscuous mode [ 83.632439][ T1138] hsr_slave_1: left promiscuous mode [ 83.634540][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.638341][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.643126][ T1138] hsr_slave_0: left promiscuous mode [ 83.645013][ T1138] hsr_slave_1: left promiscuous mode [ 83.649184][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.651421][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.129432][ T1138] team_slave_1 (unregistering): left promiscuous mode [ 84.133748][ T1138] team0 (unregistering): Port device team_slave_1 removed [ 84.189308][ T1138] team_slave_0 (unregistering): left promiscuous mode [ 84.192471][ T1138] team0 (unregistering): Port device team_slave_0 removed [ 84.998201][ T1138] team0 (unregistering): Port device team_slave_1 removed [ 85.058069][ T1138] team0 (unregistering): Port device team_slave_0 removed [ 86.470367][ T1138] bridge_slave_1: left promiscuous mode [ 86.471974][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.475385][ T1138] bridge_slave_0: left promiscuous mode [ 86.477052][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.672482][ T1138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.675385][ T1138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.678315][ T1138] bond0 (unregistering): Released all slaves [ 86.924692][ T1138] hsr_slave_0: left promiscuous mode [ 86.926659][ T1138] hsr_slave_1: left promiscuous mode [ 86.928470][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.930605][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.388954][ T1138] team0 (unregistering): Port device team_slave_1 removed [ 87.446146][ T1138] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 14:36:15 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=0000000000000022 RCX=ffffffff81694fde RDX=0000000000000000 RSI=0000000000000008 RDI=ffffffff96990c40 RBP=fffffbfff2d32188 RSP=ffffc90002aaf7a0 R8 =0000000000000000 R9 =1ffffffff2d32188 R10=ffffffff96990c47 R11=0000000000000002 R12=ffff8880296a8000 R13=0000000000000200 R14=0000000000000009 R15=1ffff92000555f00 RIP=ffffffff81ee0734 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f2490bacd00 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005594314bf000 CR3=0000000000748000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=9364d9139364d913 9364d9139364d913 9364d9139364d913 9364d9139364d913 9364d9139364d913 9364d9139364d913 9364d9139364d913 9364d9139364d913 ZMM22=0e1b27bf0e1b27bf 0e1b27bf0e1b27bf 0e1b27bf0e1b27bf 0e1b27bf0e1b27bf 0e1b27bf0e1b27bf 0e1b27bf0e1b27bf 0e1b27bf0e1b27bf 0e1b27bf0e1b27bf ZMM23=7edfbe9d7edfbe9d 7edfbe9d7edfbe9d 7edfbe9d7edfbe9d 7edfbe9d7edfbe9d 7edfbe9d7edfbe9d 7edfbe9d7edfbe9d 7edfbe9d7edfbe9d 7edfbe9d7edfbe9d ZMM24=3a24c9f73a24c9f7 3a24c9f73a24c9f7 3a24c9f73a24c9f7 3a24c9f73a24c9f7 3a24c9f73a24c9f7 3a24c9f73a24c9f7 3a24c9f73a24c9f7 3a24c9f73a24c9f7 ZMM25=30872acd30872acd 30872acd30872acd 30872acd30872acd 30872acd30872acd 30872acd30872acd 30872acd30872acd 30872acd30872acd 30872acd30872acd ZMM26=76324ff376324ff3 76324ff376324ff3 76324ff376324ff3 76324ff376324ff3 76324ff376324ff3 76324ff376324ff3 76324ff376324ff3 76324ff376324ff3 ZMM27=270d74c5270d74c5 270d74c5270d74c5 270d74c5270d74c5 270d74c5270d74c5 270d74c5270d74c5 270d74c5270d74c5 270d74c5270d74c5 270d74c5270d74c5 ZMM28=000001900000018f 0000018e0000018d 0000018c0000018b 0000018a00000189 0000018800000187 0000018600000185 0000018400000183 0000018200000181 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=2806000028060000 2806000028060000 2806000028060000 2806000028060000 2806000028060000 2806000028060000 2806000028060000 2806000028060000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=000000000004cf25 RCX=ffffffff81f9ea94 RDX=000000000000000f RSI=ffffffff8bb12ca0 RDI=ffffffff8ddc2a30 RBP=ffff88803fffa660 RSP=ffffc90004e37778 R8 =0000000000000007 R9 =000000000007ffff R10=0000000000000009 R11=0000000000000000 R12=ffff88803f180000 R13=0000000000000000 R14=0000000000000001 R15=ffffea000133c940 RIP=ffffffff81730b58 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7fb55b8 CR3=000000004a49a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffffd0 Opmask01=0000000000004211 Opmask02=000000000000ffdf Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff558ec890 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a2a2a2a2a2a2a 2a2a2a2a2a2a2a2a ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff0000ff000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff00000000ff00 00ff00ff00000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff0000ff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656c696620732520 6465746165726300 0a73253a47000a73 253d73253a45000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40494c4305560005 4140514440574600 0a56001f47000a56 001856001f45000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000002e1 0000000000000000 31706f6f6c2f6b63 6f6c622f6c617574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000558f00627375 0000000000000021 000000000000302e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a2433273f397b27 697a787c69303b7e 69305f474f5b647c 69303a2433273f39 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 383a3a263d383a3a 263c383a3a263f38 3a3a263e383a3a26 39383a3a2638383a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=1ffff92000c13eff RCX=0000000000000002 RDX=dffffc0000000000 RSI=0000000000000000 RDI=ffffffff8ddb7780 RBP=000000000006f4ca RSP=ffffc9000609f710 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff901ce54f R11=0000000000000000 R12=0000000000000000 R13=ffffffff8ddb7780 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff816a4477 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000000db7c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b1ca0364cdcced78 458056e1af676bbb ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cb7376b8677991bc 06643014e3531d3e ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8d464673e901313a b9dad66993e807e3 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2b2eefc511df6498 f1bc4767bbd09cd1 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003140 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0075e65166d3a7f0 0000003100000031 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 651ef3a6674391a8 67dc24f86ce17a93 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 008f7b5700000000 0000003100000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000003100000000 67781a4800000031 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 363fd5d4362c08c7 dcdfb581d4558e8d ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e937a234bcf5eb4 e43e0b5647b1ea0f ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=00000000f6c00000 RCX=ffffffff81d51bcd RDX=ffff88801f5aa440 RSI=ffffffff81d51996 RDI=0000000000000006 RBP=00000000f6b97000 RSP=ffffc9000445f880 R8 =0000000000000006 R9 =00000000f6c00000 R10=00000000f6b97000 R11=0000000000000000 R12=dffffc0000000000 R13=0000000000000000 R14=ffffc9000445f9a8 R15=00000000f6b97000 RIP=ffffffff818cba11 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f715df90 CR3=0000000044e12000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000020210058 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000