last executing test programs: 3m39.752924612s ago: executing program 2 (id=1358): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0xec5, &(0x7f0000000c00)={0x0, 0x0, 0x2}, &(0x7f0000001080), &(0x7f0000000600)) io_uring_enter(r0, 0x12ed, 0x10a5, 0x3, &(0x7f0000000040)={[0xce]}, 0x8) 3m39.583537245s ago: executing program 2 (id=1373): r0 = socket(0x10, 0x3, 0x9) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001580)={0x0, 0x0, 0x0}, &(0x7f00000015c0)=0xc) sendmmsg$unix(r0, &(0x7f0000005b80)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)='|', 0x1}], 0x1, 0x0, 0x0, 0x4044804}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f00000016c0)=' ', 0x1}], 0x1, &(0x7f0000002c40)=[@cred={{0x18, 0x1, 0x2, {0x0, 0x0, r1}}}], 0x18, 0x8000}}], 0x2, 0x24004800) 3m39.549720353s ago: executing program 2 (id=1376): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x7) 3m39.465499197s ago: executing program 2 (id=1382): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04070620"], 0x7) 3m39.416407133s ago: executing program 2 (id=1384): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) fcntl$setstatus(r0, 0x4, 0x400) 3m39.413355385s ago: executing program 2 (id=1386): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x6, 0x10, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 3m24.133357045s ago: executing program 32 (id=1386): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x6, 0x10, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 54.979860215s ago: executing program 1 (id=6186): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000600)={0x18, 0x0, {0x4, @multicast, 'macvlan1\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000b80)) recvmsg(r0, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x20000) 54.920160409s ago: executing program 1 (id=6187): symlink(&(0x7f0000000480)='.\x00', &(0x7f0000000040)='./file0\x00') mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x273) 54.919767348s ago: executing program 1 (id=6188): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r0, r1, 0x6, 0x0, @val=@netfilter={0xa, 0x0, 0x3}}, 0x3c) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=r1, 0x6, 0x1, 0x0, &(0x7f0000000240)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 54.911419707s ago: executing program 1 (id=6189): mkdir(&(0x7f0000001c00)='./file0\x00', 0x8) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, 0x0) 54.877282986s ago: executing program 1 (id=6191): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x23f) setuid(0xee01) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f00000006c0)=@known='user.syz\x00') 54.681252929s ago: executing program 1 (id=6193): pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = dup(r0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) sendfile(r1, r2, 0x0, 0x0) 54.643955777s ago: executing program 33 (id=6193): pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = dup(r0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) sendfile(r1, r2, 0x0, 0x0) 45.162323186s ago: executing program 4 (id=6448): ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000040)={0x0, 0x2, "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"}) dup(0xffffffffffffffff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 43.974066982s ago: executing program 4 (id=6473): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000540)=0x1) 43.899607907s ago: executing program 4 (id=6475): symlink(&(0x7f0000000480)='.\x00', &(0x7f0000000040)='./file0\x00') mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x273) 43.878961407s ago: executing program 4 (id=6478): mkdir(&(0x7f0000001c00)='./file0\x00', 0x8) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, 0x0) 43.824478539s ago: executing program 4 (id=6479): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x40) 43.501996777s ago: executing program 4 (id=6488): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x4c, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 43.399662684s ago: executing program 34 (id=6488): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x4c, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 39.835618728s ago: executing program 6 (id=6526): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) 39.835301378s ago: executing program 6 (id=6527): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) 39.750138774s ago: executing program 6 (id=6528): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000040), r1, 0x0, 0x0, 0x1}}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 39.7199228s ago: executing program 6 (id=6530): mkdir(&(0x7f0000001c00)='./file0\x00', 0x8) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, 0x0) 39.56239032s ago: executing program 6 (id=6533): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000380)={r1, r1, 0x1, 0x0, 0x0, 0x9, 0xff, 0x16c0, 0x5e2, 0x8b, 0x0, 0x3, 'syz0\x00'}) 38.190469936s ago: executing program 6 (id=6537): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) 38.086983818s ago: executing program 35 (id=6537): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) 5.67972207s ago: executing program 0 (id=7226): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='fd', &(0x7f00000000c0)='2', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.679196137s ago: executing program 0 (id=7227): r0 = memfd_secret(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r1, r0, 0x2e, 0x4608, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r2, 0x4) 5.609679684s ago: executing program 0 (id=7228): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000080)=0xd, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) 5.606276261s ago: executing program 0 (id=7236): setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x808, &(0x7f0000007000/0x4000)=nil) 5.354413675s ago: executing program 0 (id=7238): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) 5.31562174s ago: executing program 0 (id=7230): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x101000, 0x118) fcntl$setpipe(r0, 0x407, 0x1000000) 2.998855463s ago: executing program 7 (id=7279): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x25dfdbfe, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}}, 0x0) 2.945476902s ago: executing program 7 (id=7281): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xffffffff}]}}]}, 0x38}}, 0x0) 2.898577266s ago: executing program 7 (id=7283): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000000380)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x2000c000) close(0x3) 2.007166941s ago: executing program 7 (id=7304): r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0xea, &(0x7f0000000000)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x80, 0x8f}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}}, 0x20000000) 1.940417065s ago: executing program 7 (id=7306): timer_create(0x3, 0x0, &(0x7f00000003c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe5e) timer_delete(0x0) 1.057155369s ago: executing program 7 (id=7318): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) 482.338762ms ago: executing program 5 (id=7334): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000e1"]) 338.420744ms ago: executing program 3 (id=7336): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty}, @ib={0x1b, 0x0, 0x0, {"7d0300000000000000000300"}, 0x0, 0x0, 0x6}}}, 0x118) 332.136865ms ago: executing program 5 (id=7337): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x100006, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r1, 0x0, 0x80, 0x5, 0x9, 0x0, {0xa, 0xff, 0x1c, 0x7, 0x7, 0x401, 0xfff5, 0xa, 0x0, 0x53, 0x8001, 0x7e9, 0x401, 0x5, "cb630dab3a0338057401a192419598961f50dc45c87d55b42a28b8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r1}) 247.01738ms ago: executing program 3 (id=7338): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = openat$sndseq(0xffffff9c, &(0x7f0000000240), 0x80003) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f00000002c0)={0x44, 0x2, {0x2, 0x0, 0xfffffffb, 0x3, 0x2}, 0x7ff}) 245.44175ms ago: executing program 5 (id=7339): r0 = gettid() r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r1, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0}], 0x20000000000000d6) tkill(r0, 0x7) 222.114974ms ago: executing program 3 (id=7340): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) open(&(0x7f0000000180)='./file0\x00', 0x4f0602, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x18) getdents64(r0, &(0x7f0000000a00)=""/4089, 0xff9) 131.954998ms ago: executing program 3 (id=7341): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xb}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 131.635409ms ago: executing program 5 (id=7342): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x70bd28, 0x0, {{@in6=@private2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x80004}, [@migrate={0x50, 0x11, [{@in=@local, @in6=@mcast1, @in=@loopback, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0x2, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40180}, 0x880) 131.235573ms ago: executing program 3 (id=7343): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x8, 0x12) 60.397786ms ago: executing program 3 (id=7344): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902"], 0x0) ioctl$EVIOCRMFF(r0, 0x40045506, 0xfffffffffffffffe) 59.56314ms ago: executing program 5 (id=7345): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000000300)={'trans=virtio,', {[{@dfltgid}]}}) read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) 0s ago: executing program 5 (id=7346): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017000000000008001d00040000000c002200060000000002000008000400810000000500240001000000050016000100000005002c0002"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) kernel console output (not intermixed with test programs): 4745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3902" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 175.486329][T14755] netlink: 'syz.4.3907': attribute type 21 has an invalid length. [ 175.489433][T14755] netlink: 16166 bytes leftover after parsing attributes in process `syz.4.3907'. [ 175.558736][T14771] netlink: 'syz.0.3915': attribute type 2 has an invalid length. [ 175.565638][T14773] loop6: detected capacity change from 0 to 4194304 [ 175.625064][T14783] syz.3.3920 uses obsolete (PF_INET,SOCK_PACKET) [ 175.768159][T14800] netlink: 'syz.4.3926': attribute type 1 has an invalid length. [ 176.657900][T14861] misc userio: Begin command sent, but we're already running [ 176.749095][ T40] audit: type=1326 audit(1749767870.565:2922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14867 comm="syz.1.3961" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70de598 code=0x7ffc0000 [ 176.755763][ T40] audit: type=1326 audit(1749767870.565:2923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14867 comm="syz.1.3961" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70de598 code=0x7ffc0000 [ 176.762399][ T40] audit: type=1326 audit(1749767870.565:2924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14867 comm="syz.1.3961" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70de598 code=0x7ffc0000 [ 176.770202][ T40] audit: type=1326 audit(1749767870.565:2925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14867 comm="syz.1.3961" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70de598 code=0x7ffc0000 [ 176.777002][ T40] audit: type=1326 audit(1749767870.565:2926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14867 comm="syz.1.3961" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70de598 code=0x7ffc0000 [ 176.783643][ T40] audit: type=1326 audit(1749767870.565:2927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14867 comm="syz.1.3961" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70de598 code=0x7ffc0000 [ 176.790437][ T40] audit: type=1326 audit(1749767870.565:2928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14867 comm="syz.1.3961" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70de598 code=0x7ffc0000 [ 176.924415][T14872] : entered promiscuous mode [ 177.514582][T14913] netlink: 'syz.4.3983': attribute type 10 has an invalid length. [ 177.518197][T14913] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3983'. [ 177.521314][T14915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3984'. [ 177.536206][T14913] team0: Port device geneve0 added [ 177.610169][T14925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3989'. [ 177.634134][T14927] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3990'. [ 178.330288][T14990] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 14990 comm: syz.0.4018) [ 178.335580][ T40] kauditd_printk_skb: 492 callbacks suppressed [ 178.335591][ T40] audit: type=1800 audit(1749767872.145:3421): pid=14990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4018" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=51349 res=0 errno=0 [ 178.569366][T15012] netlink: 'syz.4.4029': attribute type 1 has an invalid length. [ 178.652448][T15022] kernel read not supported for file /eth0 (pid: 15022 comm: syz.3.4032) [ 178.655243][ T40] audit: type=1800 audit(1749767872.465:3422): pid=15022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4032" name="eth0" dev="mqueue" ino=15413 res=0 errno=0 [ 178.739220][T15034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4038'. [ 178.981518][T15062] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4051'. [ 179.094521][T15070] netlink: 'syz.1.4055': attribute type 1 has an invalid length. [ 179.456492][ T53] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 179.609428][ T53] usb 5-1: unable to get BOS descriptor or descriptor too short [ 179.612595][ T53] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 179.615166][ T53] usb 5-1: can't read configurations, error -71 [ 179.691678][T15087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4063'. [ 180.063287][ T5956] Bluetooth: hci3: unexpected event for opcode 0x2005 [ 180.118729][T15116] netlink: 133 bytes leftover after parsing attributes in process `syz.3.4076'. [ 180.280235][T15128] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4081'. [ 180.318753][ T40] audit: type=1800 audit(1749767874.135:3423): pid=15132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4083" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 180.508982][T15160] random: crng reseeded on system resumption [ 180.624757][T15170] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4101'. [ 181.253458][ T1247] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 181.289864][ T40] audit: type=1326 audit(1749767875.105:3424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15196 comm="syz.3.4113" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 181.296972][ T40] audit: type=1326 audit(1749767875.105:3425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15196 comm="syz.3.4113" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 181.303418][ T40] audit: type=1326 audit(1749767875.115:3426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15196 comm="syz.3.4113" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 181.311745][ T40] audit: type=1326 audit(1749767875.115:3427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15196 comm="syz.3.4113" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 181.318999][ T40] audit: type=1326 audit(1749767875.115:3428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15196 comm="syz.3.4113" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 181.325349][ T40] audit: type=1326 audit(1749767875.135:3429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15196 comm="syz.3.4113" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 181.332793][ T40] audit: type=1326 audit(1749767875.135:3430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15196 comm="syz.3.4113" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 181.607000][ T5951] Bluetooth: hci4: command 0x1003 tx timeout [ 181.610943][ T5945] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 182.379219][T15251] random: crng reseeded on system resumption [ 182.732189][T15280] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 183.579599][T15336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4177'. [ 183.745743][T15353] ip6gretap0: entered promiscuous mode [ 183.785443][ T40] kauditd_printk_skb: 110 callbacks suppressed [ 183.785454][ T40] audit: type=1800 audit(1749767877.595:3541): pid=15357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4186" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 183.875893][T15379] trusted_key: syz.0.4197 sent an empty control message without MSG_MORE. [ 184.550145][T15455] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4232'. [ 184.553653][T15455] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4232'. [ 185.234258][T15468] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4238'. [ 185.490975][T15487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4247'. [ 185.646461][ T5979] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 185.808554][ T5979] usb 5-1: config 0 has no interfaces? [ 185.810308][ T5979] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 185.813121][ T5979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.817024][ T5979] usb 5-1: config 0 descriptor?? [ 186.025366][ T34] usb 5-1: USB disconnect, device number 9 [ 186.545856][ T3230] kernel write not supported for file [eventfd] (pid: 3230 comm: kworker/1:2) [ 186.796570][T15561] netlink: 'syz.0.4281': attribute type 3 has an invalid length. [ 187.135660][T15597] ip6gre1: entered allmulticast mode [ 187.324603][T15618] overlayfs: failed to clone lowerpath [ 187.480777][ T34] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 187.488092][ T34] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [syz0] on syz0 [ 187.509195][ T40] audit: type=1326 audit(1749767881.325:3542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.4.4312" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 187.519254][ T40] audit: type=1326 audit(1749767881.325:3543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.4.4312" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 187.529157][ T40] audit: type=1326 audit(1749767881.325:3544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.4.4312" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 187.546380][ T40] audit: type=1326 audit(1749767881.325:3545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.4.4312" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 187.552984][ T40] audit: type=1326 audit(1749767881.325:3546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.4.4312" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 187.565786][ T40] audit: type=1326 audit(1749767881.325:3547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.4.4312" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 187.573173][ T40] audit: type=1326 audit(1749767881.325:3548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.4.4312" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ee598 code=0x7ffc0000 [ 187.580641][ T40] audit: type=1326 audit(1749767881.325:3549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.4.4312" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ee598 code=0x7ffc0000 [ 187.587298][ T40] audit: type=1326 audit(1749767881.325:3550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.4.4312" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 187.686778][T15645] netlink: 'syz.0.4318': attribute type 10 has an invalid length. [ 187.689156][T15645] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4318'. [ 187.699236][T15645] team0: Port device geneve0 added [ 187.876224][T15673] bond0: entered promiscuous mode [ 187.878671][T15673] bond_slave_0: entered promiscuous mode [ 187.880551][T15673] bond_slave_1: entered promiscuous mode [ 187.883576][T15673] bond0: left promiscuous mode [ 187.885090][T15673] bond_slave_0: left promiscuous mode [ 187.887883][T15673] bond_slave_1: left promiscuous mode [ 188.037004][T15690] macsec0: entered promiscuous mode [ 188.039373][T15690] macsec1: entered allmulticast mode [ 188.041003][T15690] macsec0: entered allmulticast mode [ 188.042620][T15690] veth1_macvtap: entered allmulticast mode [ 188.231801][T15720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4353'. [ 188.306960][T15731] random: crng reseeded on system resumption [ 188.315753][T15734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4361'. [ 188.424898][T15753] Failed to get privilege flags for destination (handle=0x2:0xd) [ 188.623953][T15778] netlink: 'syz.3.4382': attribute type 107 has an invalid length. [ 188.816492][ T54] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 188.842992][T15801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4393'. [ 188.854866][T15805] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 188.875212][T15807] overlayfs: missing 'workdir' [ 188.989498][ T54] usb 5-1: unable to get BOS descriptor or descriptor too short [ 188.991882][ T54] usb 5-1: no configurations [ 188.993302][ T54] usb 5-1: can't read configurations, error -22 [ 189.555376][T15845] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 15845 comm: syz.3.4413) [ 189.561247][ T40] kauditd_printk_skb: 59 callbacks suppressed [ 189.561258][ T40] audit: type=1800 audit(1749767883.375:3610): pid=15845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4413" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=56487 res=0 errno=0 [ 189.721082][ T53] kernel read not supported for file /snd/midiC2D0 (pid: 53 comm: kworker/3:1) [ 189.786545][ T40] audit: type=1326 audit(1749767883.595:3611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15868 comm="syz.3.4424" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 189.793047][ T40] audit: type=1326 audit(1749767883.595:3612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15868 comm="syz.3.4424" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 189.800347][ T40] audit: type=1326 audit(1749767883.595:3613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15868 comm="syz.3.4424" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 189.803231][T15875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4427'. [ 189.807960][ T40] audit: type=1326 audit(1749767883.595:3614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15868 comm="syz.3.4424" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 189.816703][ T40] audit: type=1326 audit(1749767883.595:3615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15868 comm="syz.3.4424" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 189.823075][ T40] audit: type=1326 audit(1749767883.595:3616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15868 comm="syz.3.4424" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 189.829603][ T40] audit: type=1326 audit(1749767883.595:3617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15868 comm="syz.3.4424" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf712e598 code=0x7ffc0000 [ 189.836087][ T40] audit: type=1326 audit(1749767883.595:3618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15868 comm="syz.3.4424" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf712e598 code=0x7ffc0000 [ 189.842759][ T40] audit: type=1326 audit(1749767883.595:3619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15868 comm="syz.3.4424" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf712e598 code=0x7ffc0000 [ 189.933816][T15888] loop9: detected capacity change from 0 to 8 [ 189.938210][T15888] Dev loop9: unable to read RDB block 8 [ 189.939939][T15888] loop9: unable to read partition table [ 189.941858][T15888] loop9: partition table beyond EOD, truncated [ 189.943805][T15888] loop_reread_partitions: partition scan of loop9 (þ被xüÿÿÿÿÿÿÿ ) failed (rc=-5) [ 190.016879][T15903] vlan2: entered promiscuous mode [ 190.018487][T15903] bridge0: entered promiscuous mode [ 190.020359][T15903] vlan2: entered allmulticast mode [ 190.021983][T15903] bridge0: entered allmulticast mode [ 190.049644][T15906] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4443'. [ 190.131432][T15922] gretap0: entered promiscuous mode [ 190.137588][T15922] netlink: 31 bytes leftover after parsing attributes in process `syz.3.4448'. [ 190.280348][T15934] dummy0: entered promiscuous mode [ 190.282501][T15933] dummy0: left promiscuous mode [ 190.487779][T15955] geneve1: entered promiscuous mode [ 190.539997][T15964] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 190.542494][T15964] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 190.595813][T15969] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4470'. [ 190.600449][T15969] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4470'. [ 190.603130][T15969] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4470'. [ 190.765610][T15981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4476'. [ 190.918259][T15997] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 190.922933][T15997] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.002364][ T9] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 191.004717][ T9] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 191.007401][ T9] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 191.009668][ T9] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 191.011916][ T9] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 191.014195][ T9] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 191.016562][ T9] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 191.018868][ T9] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 191.021164][ T9] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 191.023433][ T9] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 191.025678][ T9] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 191.027992][ T9] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 191.030229][ T9] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 191.032513][ T9] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 191.034762][ T9] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 191.037128][ T9] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 191.039393][ T9] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 191.041603][ T9] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 191.043836][ T9] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 191.046062][ T9] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 191.051438][ T9] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 191.053719][ T9] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 191.055951][ T9] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 191.058400][ T9] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 191.060885][ T9] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 191.063296][ T9] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 191.065523][ T9] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 191.067865][ T9] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 191.070182][ T9] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 191.074878][ T9] hid-generic 0001:0000:0000.0006: hidraw1: HID vffffff.ff Device [syz0] on syz0 [ 191.111118][T16010] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4490'. [ 191.646115][T16059] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4513'. [ 191.675585][ T9] kernel read not supported for file /snd/midiC2D0 (pid: 9 comm: kworker/0:0) [ 192.413395][ T5979] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 192.416085][ T5979] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 192.418773][ T5979] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 192.421071][ T5979] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 192.423339][ T5979] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 192.425597][ T5979] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 192.429937][ T5979] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 192.432225][ T5979] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 192.434484][ T5979] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 192.436785][ T5979] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 192.439012][ T5979] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 192.441296][ T5979] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 192.443524][ T5979] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 192.445762][ T5979] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 192.449027][ T5979] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 192.456664][ T5979] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 192.459056][ T5979] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 192.461365][ T5979] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 192.464534][ T5979] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 192.467492][ T5979] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 192.469886][ T5979] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 192.472246][ T5979] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 192.474871][ T5979] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 192.477869][ T5979] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 192.480124][ T5979] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 192.482367][ T5979] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 192.484615][ T5979] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 192.486911][ T5979] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 192.489160][ T5979] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 192.493942][ T5979] hid-generic 0001:0000:0000.0007: hidraw1: HID vffffff.ff Device [syz0] on syz0 [ 192.726386][ T6027] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 193.066358][ T6027] usb 9-1: device not accepting address 6, error -71 [ 193.454403][ T54] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 193.457503][ T54] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 193.460285][ T54] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 193.463050][ T54] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 193.465823][ T54] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 193.470213][ T54] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 193.472986][ T54] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 193.475760][ T54] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 193.478654][ T54] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 193.481557][ T54] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 193.484307][ T54] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 193.487355][ T54] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 193.490139][ T54] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 193.493021][ T54] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 193.495800][ T54] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 193.499389][ T54] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 193.502218][ T54] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 193.505103][ T54] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 193.515754][ T54] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 193.518789][ T54] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 193.521601][ T54] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 193.524438][ T54] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 193.527440][ T54] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 193.530294][ T54] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 193.533170][ T54] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 193.536034][ T54] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 193.539657][ T54] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 193.542896][ T54] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 193.545763][ T54] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 193.554677][ T54] hid-generic 0001:0000:0000.0008: hidraw1: HID vffffff.ff Device [syz0] on syz0 [ 193.694499][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.013937][T16293] ip6gretap0: entered promiscuous mode [ 194.267525][T16323] loop9: detected capacity change from 0 to 7 [ 194.274515][T16323] Dev loop9: unable to read RDB block 7 [ 194.276301][T16323] loop9: unable to read partition table [ 194.278080][T16323] loop9: partition table beyond EOD, truncated [ 194.279928][T16323] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 195.077818][ T40] kauditd_printk_skb: 197 callbacks suppressed [ 195.077830][ T40] audit: type=1326 audit(1749767888.895:3817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16320 comm="syz.0.4635" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7fc00000 [ 195.294124][T16382] binder: 16381:16382 ioctl c0306201 80000540 returned -14 [ 195.336498][ T40] audit: type=1326 audit(1749767889.155:3818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16388 comm="syz.4.4664" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 195.343093][ T40] audit: type=1326 audit(1749767889.155:3819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16388 comm="syz.4.4664" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 195.350268][ T40] audit: type=1326 audit(1749767889.155:3820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16388 comm="syz.4.4664" exe="/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 195.358196][ T40] audit: type=1326 audit(1749767889.155:3821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16388 comm="syz.4.4664" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 195.364926][ T40] audit: type=1326 audit(1749767889.155:3822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16388 comm="syz.4.4664" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 195.373286][ T40] audit: type=1326 audit(1749767889.155:3823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16388 comm="syz.4.4664" exe="/syz-executor" sig=0 arch=40000003 syscall=282 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 195.382982][ T40] audit: type=1326 audit(1749767889.155:3824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16388 comm="syz.4.4664" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 195.396784][ T40] audit: type=1326 audit(1749767889.155:3825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16388 comm="syz.4.4664" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 195.459029][T16411] binder: 16410:16411 ioctl c0306201 80000540 returned -14 [ 196.191132][T16449] netlink: 'syz.1.4692': attribute type 3 has an invalid length. [ 196.350648][T16469] tipc: New replicast peer: 255.255.255.255 [ 196.354332][T16469] tipc: Enabled bearer , priority 10 [ 196.357310][T16469] __nla_validate_parse: 7 callbacks suppressed [ 196.357319][T16469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4702'. [ 196.362052][T16469] tipc: Disabling bearer [ 196.394903][ T40] audit: type=1326 audit(1749767890.205:3826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16474 comm="syz.0.4705" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 196.432961][T16481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4708'. [ 196.440155][T16481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4708'. [ 196.653227][T16491] overlayfs: failed to clone lowerpath [ 196.692169][T16493] overlayfs: failed to clone lowerpath [ 196.834659][T16507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4719'. [ 196.837718][T16507] ipvlan1: vlans aren't supported yet for dev_uc|mc_add() [ 196.927996][T16517] netlink: 292 bytes leftover after parsing attributes in process `syz.0.4724'. [ 197.126241][T16532] ip6gre1: entered allmulticast mode [ 197.270940][ T34] kernel write not supported for file /sg0 (pid: 34 comm: kworker/3:0) [ 197.319432][T16553] raw_sendmsg: syz.0.4742 forgot to set AF_INET. Fix it! [ 197.472042][T16564] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4753'. [ 197.480007][T16564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4753'. [ 198.079845][ T34] kernel read not supported for file /dsp1 (pid: 34 comm: kworker/3:0) [ 198.386149][T16595] PKCS7: Unknown OID: [5] 0.0 [ 198.389088][T16595] PKCS7: Only support pkcs7_signedData type [ 198.703880][T16615] netlink: 'syz.4.4776': attribute type 8 has an invalid length. [ 198.733150][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 198.738366][ T24] hid-generic 0000:0000:0000.0009: hidraw1: HID v0.00 Device [syz0] on syz0 [ 199.005002][T16645] Invalid ELF header magic: != ELF [ 199.182928][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 199.189148][ T24] hid-generic 0000:0000:0000.000A: hidraw1: HID v0.00 Device [syz0] on syz0 [ 200.067963][T16673] netlink: 'syz.0.4794': attribute type 25 has an invalid length. [ 200.070451][T16673] netlink: 'syz.0.4794': attribute type 7 has an invalid length. [ 200.098019][T16679] netlink: 'syz.0.4798': attribute type 8 has an invalid length. [ 200.111952][ T13] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 200.116056][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 200.324046][T16696] vlan0: entered promiscuous mode [ 200.325690][T16696] bridge0: entered promiscuous mode [ 200.327572][T16696] vlan0: entered allmulticast mode [ 200.329158][T16696] bridge0: entered allmulticast mode [ 200.463414][ T40] kauditd_printk_skb: 82 callbacks suppressed [ 200.463425][ T40] audit: type=1326 audit(1749767894.275:3909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16709 comm="syz.0.4813" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f36579 code=0x0 [ 201.275235][ T40] audit: type=1326 audit(1749767895.085:3910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16707 comm="syz.1.4812" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7fc00000 [ 201.332205][T16718] dummy0: entered promiscuous mode [ 201.334269][T16717] dummy0: left promiscuous mode [ 201.357488][T16714] block nbd1: NBD_DISCONNECT [ 201.362489][T16714] block nbd1: Send disconnect failed -22 [ 201.365312][T16713] block nbd1: Disconnected due to user request. [ 201.367811][T16713] block nbd1: shutting down sockets [ 201.432096][T16726] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4819'. [ 201.633184][ T40] audit: type=1326 audit(1749767895.445:3911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16737 comm="syz.1.4828" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70de579 code=0x0 [ 201.640377][T16740] bond0: entered promiscuous mode [ 201.641974][T16740] bond_slave_0: entered promiscuous mode [ 201.643805][T16740] bond_slave_1: entered promiscuous mode [ 201.647708][T16740] bond0: left promiscuous mode [ 201.649218][T16740] bond_slave_0: left promiscuous mode [ 201.651209][T16740] bond_slave_1: left promiscuous mode [ 201.717323][T16742] block nbd4: NBD_DISCONNECT [ 201.721567][T16742] block nbd4: Send disconnect failed -22 [ 201.723930][T16741] block nbd4: Disconnected due to user request. [ 201.727256][T16741] block nbd4: shutting down sockets [ 201.800814][T16752] 9pnet: p9_errstr2errno: server reported unknown error [ 201.824245][T16754] loop9: detected capacity change from 0 to 8 [ 201.828666][T16754] Dev loop9: unable to read RDB block 8 [ 201.830428][T16754] loop9: unable to read partition table [ 201.832226][T16754] loop9: partition table beyond EOD, truncated [ 201.834515][T16754] loop_reread_partitions: partition scan of loop9 (þ被xüÿÿÿÿÿÿÿ ) failed (rc=-5) [ 201.875832][T16760] 9pnet: p9_errstr2errno: server reported unknown error [ 202.166549][ T5956] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 202.166567][ T5945] Bluetooth: hci4: command 0x1003 tx timeout [ 202.258968][T16777] block nbd3: NBD_DISCONNECT [ 202.261697][T16777] block nbd3: Send disconnect failed -22 [ 202.265462][T16774] block nbd3: Disconnected due to user request. [ 202.268095][T16774] block nbd3: shutting down sockets [ 202.329298][T16786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4848'. [ 202.463524][ T46] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 202.468214][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 202.876971][T16820] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4861'. [ 203.276382][ T5996] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 203.436442][ T5996] usb 6-1: Using ep0 maxpacket: 8 [ 203.439689][ T5996] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.443046][ T5996] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 203.447874][ T5996] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 203.450645][ T5996] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.453055][ T5996] usb 6-1: Product: syz [ 203.454285][ T5996] usb 6-1: Manufacturer: syz [ 203.455663][ T5996] usb 6-1: SerialNumber: syz [ 203.666079][ T5996] cdc_ncm 6-1:1.0: bind() failure [ 203.670204][ T5996] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 203.672298][ T5996] cdc_ncm 6-1:1.1: bind() failure [ 203.675467][ T5996] usb 6-1: USB disconnect, device number 4 [ 204.486405][ T5945] Bluetooth: hci4: command 0x1003 tx timeout [ 204.486777][ T5956] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 204.646390][T16891] blkio.reset_stats is deprecated [ 204.764127][T16908] gretap0: entered promiscuous mode [ 204.767623][T16908] vlan3: entered promiscuous mode [ 204.864355][T16923] binder: 16922:16923 ioctl c00c620f 80000040 returned -22 [ 205.109882][T16963] vxcan1: tx address claim with dest, not broadcast [ 205.344477][T16983] kvm: kvm [16982]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000001b) [ 205.556972][T16998] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4945'. [ 205.619450][T17008] netlink: 'syz.0.4950': attribute type 5 has an invalid length. [ 205.991056][T17036] wlan1 speed is unknown, defaulting to 1000 [ 206.896170][T17078] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 206.898377][T17078] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 206.900592][T17078] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 207.024113][T17095] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4989'. [ 207.092614][T17104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4993'. [ 207.320314][T17132] ptp: physical clock is free running [ 207.424740][T17140] serio: Serial port ptm0 [ 208.085022][T17167] netlink: 'syz.0.5022': attribute type 8 has an invalid length. [ 208.183093][ T40] audit: type=1804 audit(1749767901.995:3912): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5024" name="/newroot/1277/file0" dev="tmpfs" ino=6514 res=1 errno=0 [ 208.196128][ T40] audit: type=1804 audit(1749767901.995:3913): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.5024" name="/newroot/1277/file0" dev="tmpfs" ino=6514 res=1 errno=0 [ 208.605552][T17240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5057'. [ 208.610861][T17240] IPVS: Error joining to the multicast group [ 208.668227][T17252] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5063'. [ 208.676023][T17252] vlan3: entered allmulticast mode [ 208.677765][T17252] gretap0: entered allmulticast mode [ 208.807826][ T5945] Bluetooth: hci1: command 0x0406 tx timeout [ 208.931133][T17300] netlink: 'syz.3.5086': attribute type 3 has an invalid length. [ 208.962655][T17305] macsec2: entered allmulticast mode [ 208.964391][T17305] veth1_macvtap: entered allmulticast mode [ 208.966415][ T5945] Bluetooth: hci2: command 0x0c1a tx timeout [ 208.966430][ T5956] Bluetooth: hci3: command 0x0406 tx timeout [ 208.967788][T17305] veth1_macvtap: left allmulticast mode [ 209.028593][T17315] netlink: 11 bytes leftover after parsing attributes in process `syz.4.5092'. [ 209.137039][T17336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5104'. [ 209.140197][T17336] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5104'. [ 209.275518][T17358] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5114'. [ 209.281374][T17358] bridge0: port 4(vlan5) entered blocking state [ 209.283906][T17358] bridge0: port 4(vlan5) entered disabled state [ 209.286066][T17358] vlan5: entered allmulticast mode [ 209.289914][T17358] vlan5: left allmulticast mode [ 209.295736][T17360] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5116'. [ 209.324166][T17369] IPv6: NLM_F_CREATE should be specified when creating new route [ 209.325138][T17362] netlink: 'syz.4.5115': attribute type 30 has an invalid length. [ 209.329184][T17362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5115'. [ 209.329325][T17369] netlink: 'syz.3.5118': attribute type 8 has an invalid length. [ 209.692620][T17403] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 209.694464][T17403] syzkaller0: owner set to 1 [ 209.738097][T17406] Failed to get privilege flags for destination (handle=0x2:0x0) [ 210.196181][T17447] ptrace attach of "/syz-executor exec"[5940] was attempted by "/syz-executor exec"[17447] [ 210.610762][T17498] loop9: detected capacity change from 0 to 7 [ 210.613163][T17498] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 210.614879][T17498] loop9: partition table partially beyond EOD, truncated [ 210.618706][T17498] loop9: p1 size 2437361653 extends beyond EOD, truncated [ 210.870658][ T34] hid-generic 0000:0004:0000.000B: unknown main item tag 0x0 [ 210.873204][ T34] hid-generic 0000:0004:0000.000B: unknown main item tag 0x0 [ 210.875615][ T34] hid-generic 0000:0004:0000.000B: unknown main item tag 0x0 [ 210.880791][ T34] hid-generic 0000:0004:0000.000B: hidraw1: HID v0.00 Device [syz0] on syz1 [ 211.088261][T17547] Process accounting resumed [ 212.357178][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 212.382512][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 221.217067][ T1247] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 222.893314][T17712] __nla_validate_parse: 3 callbacks suppressed [ 222.893325][T17712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5255'. [ 222.899422][T17712] netlink: 'syz.0.5255': attribute type 30 has an invalid length. [ 222.906241][T17712] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.909468][T17712] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.912807][T17712] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.915491][T17712] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.049034][T17729] bridge0: entered promiscuous mode [ 223.131822][T17741] macvlan0: entered promiscuous mode [ 223.133661][T17741] macvlan0: entered allmulticast mode [ 223.135782][T17741] veth1_vlan: entered allmulticast mode [ 223.545548][T17774] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5285'. [ 224.013986][T17838] netlink: 'syz.1.5316': attribute type 1 has an invalid length. [ 224.017694][T17838] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.5316'. [ 224.093947][T17852] trusted_key: encrypted_key: keyword 'upd\rõðdefault' not recognized [ 224.121645][T17854] netlink: 92 bytes leftover after parsing attributes in process `syz.3.5324'. [ 224.124549][T17854] netem: unknown loss type 0 [ 224.127829][T17854] netem: change failed [ 224.241347][T17876] netlink: 196 bytes leftover after parsing attributes in process `syz.0.5335'. [ 224.315173][T17887] could not open pipe file descriptor [ 224.344454][ T40] audit: type=1326 audit(1749767918.155:3914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17890 comm="syz.4.5342" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ee579 code=0x0 [ 224.387969][T17889] netlink: 'syz.3.5341': attribute type 1 has an invalid length. [ 224.390407][T17889] nbd: error processing sock list [ 224.392275][T17889] block nbd1: shutting down sockets [ 224.571140][T17914] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 224.574389][T17914] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 224.837947][T17928] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5358'. [ 224.959586][T17932] kvm: apic: phys broadcast and lowest prio [ 225.706337][ T5976] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 225.866356][ T5976] usb 9-1: Using ep0 maxpacket: 16 [ 225.869850][ T5976] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.873187][ T5976] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.877236][ T5976] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 225.881432][ T5976] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 225.884252][ T5976] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.889395][ T5976] usb 9-1: config 0 descriptor?? [ 226.109588][ T5976] usbhid 9-1:0.0: can't add hid device: -71 [ 226.112602][ T5976] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 226.116520][ T5976] usb 9-1: USB disconnect, device number 8 [ 226.143746][T17983] input: syz0 as /devices/virtual/input/input29 [ 226.157718][ T5996] kernel read not supported for file /dsp1 (pid: 5996 comm: kworker/1:5) [ 226.351474][T18013] input: syz0 as /devices/virtual/input/input30 [ 226.385528][T18017] vxcan0: tx address claim with dlc 0 [ 226.539948][T18045] block nbd1: Unsupported socket: shutdown callout must be supported. [ 226.709113][T18074] netlink: 'syz.0.5428': attribute type 7 has an invalid length. [ 226.831262][T18100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5441'. [ 227.218211][T18173] gretap0: entered promiscuous mode [ 227.219928][T18173] vlan2: entered promiscuous mode [ 227.243885][T18178] binder: 18175:18178 ioctl c00c620f 80000040 returned -22 [ 227.387281][T18195] kvm: kvm [18192]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000001b) [ 227.803991][T18247] vxcan1: tx address claim with dest, not broadcast [ 227.881107][T18255] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5514'. [ 227.979699][T18262] netlink: 'syz.1.5518': attribute type 5 has an invalid length. [ 228.376503][ T34] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 228.475283][ T5956] Bluetooth: hci1: unexpected event for opcode 0x040e [ 228.496431][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 228.527245][ T34] usb 9-1: Using ep0 maxpacket: 8 [ 228.537694][ T34] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.541123][ T34] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 228.546785][ T34] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 228.549630][ T34] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.552129][ T34] usb 9-1: Product: syz [ 228.553460][ T34] usb 9-1: Manufacturer: syz [ 228.555124][ T34] usb 9-1: SerialNumber: syz [ 228.637429][T18311] wlan1 speed is unknown, defaulting to 1000 [ 228.775759][ T34] cdc_ncm 9-1:1.0: bind() failure [ 228.780601][ T34] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 228.782820][ T34] cdc_ncm 9-1:1.1: bind() failure [ 228.787356][ T34] usb 9-1: USB disconnect, device number 9 [ 228.945148][T18341] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5552'. [ 229.019158][T18349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5556'. [ 229.408845][T18364] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 229.411481][T18364] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 229.413939][T18364] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 229.511062][T18388] serio: Serial port ptm0 [ 230.851836][T18461] vlan0: entered promiscuous mode [ 231.334700][T18479] binder: 18476:18479 ioctl c00c620f 80000040 returned -22 [ 231.366385][ T5956] Bluetooth: hci1: command 0x0406 tx timeout [ 231.446699][ T5945] Bluetooth: hci3: command 0x0406 tx timeout [ 231.446710][ T5956] Bluetooth: hci2: command 0x0c1a tx timeout [ 233.389235][T18537] Failed to get privilege flags for destination (handle=0x2:0x0) [ 233.756221][T18569] netlink: 'syz.4.5658': attribute type 5 has an invalid length. [ 234.117217][ T5945] Bluetooth: hci2: unexpected event for opcode 0x040e [ 234.122074][T18599] wlan1 speed is unknown, defaulting to 1000 [ 234.670334][T18655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5696'. [ 234.818270][T18678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5708'. [ 234.977305][T18707] netlink: 'syz.0.5723': attribute type 3 has an invalid length. [ 235.088606][T18723] netlink: 11 bytes leftover after parsing attributes in process `syz.1.5729'. [ 235.250282][ T1247] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.252538][ T1247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.321670][T18744] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.815319][T18753] serio: Serial port ptm0 [ 235.979964][T18756] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 235.982018][T18756] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 235.984035][T18756] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 236.113279][ T1247] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.115556][ T1247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.287742][T18792] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5759'. [ 236.293306][T18792] bridge0: port 3(vlan4) entered blocking state [ 236.295448][T18792] bridge0: port 3(vlan4) entered disabled state [ 236.298262][T18792] vlan4: entered allmulticast mode [ 236.300955][T18792] vlan4: left allmulticast mode [ 236.533955][T18818] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5772'. [ 236.564566][T18820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5773'. [ 236.588435][T18822] IPv6: NLM_F_CREATE should be specified when creating new route [ 236.590954][T18822] netlink: 'syz.0.5774': attribute type 8 has an invalid length. [ 237.362248][T18883] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5808'. [ 237.372156][T18883] vlan2: entered allmulticast mode [ 237.373801][T18883] gretap0: entered allmulticast mode [ 237.524995][T18907] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5815'. [ 237.530969][T18907] vlan0: entered allmulticast mode [ 237.532716][T18907] gretap0: entered allmulticast mode [ 237.748578][T18936] netlink: 11 bytes leftover after parsing attributes in process `syz.0.5829'. [ 237.762956][T18940] macsec4: entered allmulticast mode [ 237.764670][T18940] veth1_macvtap: entered allmulticast mode [ 237.769803][T18940] veth1_macvtap: left allmulticast mode [ 237.937209][ T5945] Bluetooth: hci1: command 0x0406 tx timeout [ 237.982285][T18971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5842'. [ 238.018158][ T5945] Bluetooth: hci2: command 0x0c1a tx timeout [ 238.018179][ T5956] Bluetooth: hci3: command 0x0406 tx timeout [ 238.074616][T18981] netlink: 'syz.0.5858': attribute type 30 has an invalid length. [ 238.080030][T18981] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.106173][T18988] bridge0: port 3(vlan2) entered blocking state [ 238.108467][T18988] bridge0: port 3(vlan2) entered disabled state [ 238.110600][T18988] vlan2: entered allmulticast mode [ 238.112215][T18988] bridge0: entered allmulticast mode [ 238.115241][T18988] vlan2: left allmulticast mode [ 238.117868][T18988] bridge0: left allmulticast mode [ 238.272112][T19002] IPv6: NLM_F_CREATE should be specified when creating new route [ 238.428779][T19020] Failed to get privilege flags for destination (handle=0x2:0x0) [ 238.435671][T19024] ptrace attach of "/syz-executor exec"[11776] was attempted by "/syz-executor exec"[19024] [ 238.663040][T19053] ptrace attach of "/syz-executor exec"[5942] was attempted by "/syz-executor exec"[19053] [ 239.235626][ T5976] hid-generic 0000:0004:0000.000C: unknown main item tag 0x0 [ 239.239061][ T5976] hid-generic 0000:0004:0000.000C: unknown main item tag 0x0 [ 239.241321][ T5976] hid-generic 0000:0004:0000.000C: unknown main item tag 0x0 [ 239.244988][ T5976] hid-generic 0000:0004:0000.000C: hidraw1: HID v0.00 Device [syz0] on syz1 [ 239.462998][ T34] hid-generic 0000:0004:0000.000D: unknown main item tag 0x0 [ 239.465729][ T34] hid-generic 0000:0004:0000.000D: unknown main item tag 0x0 [ 239.468411][ T34] hid-generic 0000:0004:0000.000D: unknown main item tag 0x0 [ 239.471438][ T34] hid-generic 0000:0004:0000.000D: hidraw1: HID v0.00 Device [syz0] on syz1 [ 239.505830][T19136] Process accounting resumed [ 239.663683][T19160] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.715881][T19166] Process accounting resumed [ 240.511266][T19226] block nbd1: Unsupported socket: shutdown callout must be supported. [ 240.716012][T19255] block nbd1: Unsupported socket: shutdown callout must be supported. [ 240.771968][T19268] vxcan0: tx address claim with dlc 0 [ 240.802412][T19276] input: syz0 as /devices/virtual/input/input33 [ 240.834600][T19279] vxcan0: tx address claim with dlc 0 [ 240.895327][T19295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.899506][T19295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.966205][T19311] input: syz0 as /devices/virtual/input/input34 [ 241.132362][T19336] input: syz0 as /devices/virtual/input/input35 [ 241.389353][T19362] input: syz0 as /devices/virtual/input/input36 [ 241.598744][T19388] input: syz0 as /devices/virtual/input/input37 [ 241.666356][ T34] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 241.816327][ T34] usb 5-1: Using ep0 maxpacket: 16 [ 241.819165][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.822468][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.825372][ T34] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 241.829248][ T34] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 241.831967][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.835458][ T34] usb 5-1: config 0 descriptor?? [ 242.054963][ T34] usbhid 5-1:0.0: can't add hid device: -71 [ 242.057290][ T34] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 242.060872][ T34] usb 5-1: USB disconnect, device number 12 [ 242.137245][T19407] kvm: apic: phys broadcast and lowest prio [ 242.307302][ T34] kernel read not supported for file /dsp1 (pid: 34 comm: kworker/3:0) [ 242.494176][T19429] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 242.498729][T19429] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 243.137963][ T54] kernel read not supported for file /dsp1 (pid: 54 comm: kworker/2:1) [ 243.207794][ T60] wlan1: Trigger new scan to find an IBSS to join [ 244.024811][ T40] audit: type=1326 audit(1749767937.835:3915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19471 comm="syz.3.6077" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf712e579 code=0x0 [ 244.076652][T19474] netlink: 'syz.0.6078': attribute type 1 has an invalid length. [ 244.079127][T19474] nbd: error processing sock list [ 244.080822][T19474] block nbd1: shutting down sockets [ 244.089763][T19478] could not open pipe file descriptor [ 244.129668][T19485] __nla_validate_parse: 5 callbacks suppressed [ 244.129679][T19485] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6084'. [ 244.350235][T19500] netlink: 92 bytes leftover after parsing attributes in process `syz.1.6092'. [ 244.353035][T19500] netem: unknown loss type 0 [ 244.354928][T19500] netem: change failed [ 244.385921][T19504] could not open pipe file descriptor [ 244.426447][T19503] netlink: 'syz.1.6093': attribute type 1 has an invalid length. [ 244.430564][T19503] nbd: error processing sock list [ 244.432532][T19503] block nbd1: shutting down sockets [ 244.504866][T19510] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6096'. [ 244.532333][T19513] netlink: 196 bytes leftover after parsing attributes in process `syz.1.6105'. [ 244.886577][ T40] audit: type=1326 audit(1749767938.695:3916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19518 comm="syz.0.6109" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f36579 code=0x0 [ 245.178822][T19536] netlink: 92 bytes leftover after parsing attributes in process `syz.4.6102'. [ 245.181757][T19536] netem: unknown loss type 0 [ 245.183767][T19536] netem: change failed [ 246.246878][ T60] wlan1: Trigger new scan to find an IBSS to join [ 246.612880][T19662] macvlan0: entered promiscuous mode [ 246.614625][T19662] macvlan0: entered allmulticast mode [ 246.616546][T19662] veth1_vlan: entered allmulticast mode [ 246.725743][T19669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6170'. [ 246.729603][T19669] netlink: 'syz.4.6170': attribute type 30 has an invalid length. [ 246.735097][T19669] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.737922][T19669] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.740693][T19669] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.743456][T19669] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.177775][ T46] wlan1: Creating new IBSS network, BSSID ce:d7:bd:76:0b:d9 [ 247.340448][ T6443] team0: Port device syz_tun removed [ 247.444841][ T46] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.533144][ T46] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.608105][ T5945] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 247.612150][ T5945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 247.616088][ T5945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 247.624243][ T5945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 247.632541][ T5945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 247.635386][ T46] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.653497][T19719] wlan1 speed is unknown, defaulting to 1000 [ 247.729860][T19719] chnl_net:caif_netlink_parms(): no params data found [ 247.733359][ T40] audit: type=1326 audit(1749767941.545:3917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19724 comm="syz.3.6197" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf712e579 code=0x0 [ 247.817331][ T46] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.827167][T19719] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.829743][T19719] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.832186][T19719] bridge_slave_0: entered allmulticast mode [ 247.835084][T19719] bridge_slave_0: entered promiscuous mode [ 247.839752][T19719] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.842866][T19719] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.845181][T19719] bridge_slave_1: entered allmulticast mode [ 247.848052][T19719] bridge_slave_1: entered promiscuous mode [ 247.882928][T19719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.887605][T19719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.939822][T19719] team0: Port device team_slave_0 added [ 247.944198][T19719] team0: Port device team_slave_1 added [ 247.980931][T19719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.983204][T19719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.991586][T19719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.003111][T19719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.005231][T19719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.013001][T19719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.030118][ T46] dummy0: left allmulticast mode [ 248.032020][ T46] bridge0: port 3(dummy0) entered disabled state [ 248.035054][ T46] bridge_slave_1: left allmulticast mode [ 248.036931][ T46] bridge_slave_1: left promiscuous mode [ 248.038766][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.042309][ T46] bridge_slave_0: left allmulticast mode [ 248.044085][ T46] bridge_slave_0: left promiscuous mode [ 248.045879][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.321661][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.327860][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.331711][ T46] bond0 (unregistering): Released all slaves [ 248.374741][T19719] hsr_slave_0: entered promiscuous mode [ 248.377393][T19719] hsr_slave_1: entered promiscuous mode [ 248.379449][T19719] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 248.381842][T19719] Cannot create hsr debugfs directory [ 248.423329][ T46] : left promiscuous mode [ 248.485851][ T46] tipc: Left network mode [ 248.536704][T19719] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 248.541457][T19719] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 248.545912][T19719] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 248.550860][T19719] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 248.604483][T19737] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6198'. [ 248.607608][T19737] bond_slave_0: entered allmulticast mode [ 248.627573][T19719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.640028][T19719] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.644691][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.646989][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.660348][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.662572][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.679004][ T46] hsr_slave_0: left promiscuous mode [ 248.681210][ T46] hsr_slave_1: left promiscuous mode [ 248.683243][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.685610][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.689304][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.691666][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.713841][ T46] veth1_to_batadv: left promiscuous mode [ 248.717048][ T46] veth1_macvtap: left promiscuous mode [ 248.718875][ T46] veth0_macvtap: left allmulticast mode [ 248.720644][ T46] veth0_macvtap: left promiscuous mode [ 248.722471][ T46] veth1_vlan: left promiscuous mode [ 248.724161][ T46] veth0_vlan: left promiscuous mode [ 248.835291][T19748] netlink: 161716 bytes leftover after parsing attributes in process `syz.3.6202'. [ 248.838621][T19748] netlink: zone id is out of range [ 248.840316][T19748] netlink: zone id is out of range [ 248.841938][T19748] netlink: zone id is out of range [ 248.843616][T19748] netlink: zone id is out of range [ 248.887303][T19683] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 249.504828][T19782] netlink: 'syz.3.6219': attribute type 9 has an invalid length. [ 249.516199][ T46] team0 (unregistering): Port device team_slave_1 removed [ 249.616193][ T46] team0 (unregistering): Port device team_slave_0 removed [ 249.625745][T19784] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6220'. [ 249.686421][ T5945] Bluetooth: hci1: command tx timeout [ 250.139845][T19719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 250.267191][T19719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.411655][ T40] audit: type=1326 audit(1749767944.225:3918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19811 comm="syz.4.6229" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 250.418350][ T40] audit: type=1326 audit(1749767944.225:3919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19811 comm="syz.4.6229" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 250.424942][ T40] audit: type=1326 audit(1749767944.225:3920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19811 comm="syz.4.6229" exe="/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 250.432108][ T40] audit: type=1326 audit(1749767944.225:3921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19811 comm="syz.4.6229" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 250.442631][ T40] audit: type=1326 audit(1749767944.225:3922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19811 comm="syz.4.6229" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 250.456332][ T40] audit: type=1326 audit(1749767944.225:3923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19811 comm="syz.4.6229" exe="/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 250.466190][ T40] audit: type=1326 audit(1749767944.225:3924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19811 comm="syz.4.6229" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 250.475821][ T40] audit: type=1326 audit(1749767944.225:3925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19811 comm="syz.4.6229" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 250.479114][ T46] IPVS: stop unused estimator thread 0... [ 250.484546][ T40] audit: type=1326 audit(1749767944.225:3926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19811 comm="syz.4.6229" exe="/syz-executor" sig=0 arch=40000003 syscall=232 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 250.495295][ T40] audit: type=1326 audit(1749767944.225:3927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19811 comm="syz.4.6229" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 250.499622][T19719] veth0_vlan: entered promiscuous mode [ 250.522631][T19719] veth1_vlan: entered promiscuous mode [ 250.544102][T19719] veth0_macvtap: entered promiscuous mode [ 250.549882][T19719] veth1_macvtap: entered promiscuous mode [ 250.559257][T19719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.566221][T19719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.570967][T19719] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.573682][T19719] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.578323][T19719] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.581046][T19719] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.627834][ T89] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.630744][ T89] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.649970][ T94] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.652393][ T94] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.675120][T19836] 8021q: adding VLAN 0 to HW filter on device bond1 [ 250.679347][T19836] bond1: entered promiscuous mode [ 250.682037][T19836] bond0: (slave bond1): Enslaving as an active interface with a down link [ 250.769480][T19848] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6243'. [ 250.772192][T19848] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6243'. [ 251.386671][T19907] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 251.391134][T19907] overlayfs: overlapping lowerdir path [ 251.643320][ T54] kernel read not supported for file /dsp (pid: 54 comm: kworker/2:1) [ 251.768679][ T5945] Bluetooth: hci1: command tx timeout [ 252.030225][T19972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6303'. [ 252.033022][T19972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6303'. [ 252.161418][T19988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6309'. [ 252.566581][ T94] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 253.179985][T20032] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6329'. [ 253.847007][ T5945] Bluetooth: hci1: command tx timeout [ 253.986889][T20060] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 254.185864][T20088] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 254.339623][T20114] mkiss: ax0: crc mode is auto. [ 254.489632][T20131] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6377'. [ 254.496354][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 254.543904][T20137] kvm: kvm [20136]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x98b5 [ 254.629451][ T5976] kernel write not supported for file /uhid (pid: 5976 comm: kworker/0:2) [ 254.905288][T20190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6405'. [ 254.910071][T20190] netlink: 'syz.3.6405': attribute type 18 has an invalid length. [ 254.912526][T20190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6405'. [ 255.058666][T20202] rtc_cmos 00:05: Alarms can be up to one day in the future [ 255.131761][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.194134][ T838] rtc_cmos 00:05: Alarms can be up to one day in the future [ 255.200405][ T838] rtc_cmos 00:05: Alarms can be up to one day in the future [ 255.204221][ T838] rtc_cmos 00:05: Alarms can be up to one day in the future [ 255.209775][ T838] rtc_cmos 00:05: Alarms can be up to one day in the future [ 255.213022][ T838] rtc rtc0: __rtc_set_alarm: err=-22 [ 255.729185][T20233] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.913912][T20253] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6433'. [ 255.936565][ T5945] Bluetooth: hci1: command tx timeout [ 256.071007][T20259] netlink: 236 bytes leftover after parsing attributes in process `syz.5.6434'. [ 256.796419][ T10] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 256.968255][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 256.970956][ T10] usb 8-1: no configurations [ 256.972874][ T10] usb 8-1: can't read configurations, error -22 [ 257.092689][T20292] input: syz1 as /devices/virtual/input/input40 [ 257.218094][ T838] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 257.369192][ T838] usb 9-1: Using ep0 maxpacket: 16 [ 257.378900][ T838] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 46, changing to 9 [ 257.383230][ T838] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26247, setting to 1024 [ 257.389246][ T838] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 257.394217][ T838] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 257.399059][ T838] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.405620][ T838] usb 9-1: config 0 descriptor?? [ 257.409798][T20287] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 257.618034][T20311] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input41 [ 257.629863][ T838] usbhid 9-1:0.0: can't add hid device: -71 [ 257.633114][ T838] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 257.640729][ T838] usb 9-1: USB disconnect, device number 10 [ 257.675697][T20316] GUP no longer grows the stack in syz.5.6461 (20316): 80004000-80005000 (80001000) [ 257.680101][T20316] CPU: 1 UID: 0 PID: 20316 Comm: syz.5.6461 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 257.680119][T20316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 257.680126][T20316] Call Trace: [ 257.680157][T20316] [ 257.680162][T20316] dump_stack_lvl+0x16c/0x1f0 [ 257.680184][T20316] gup_vma_lookup+0x1d2/0x220 [ 257.680198][T20316] __get_user_pages+0x271/0x3b80 [ 257.680215][T20316] ? process_vm_rw_core.constprop.0+0x1d8/0x9a0 [ 257.680233][T20316] ? kasan_save_stack+0x42/0x60 [ 257.680248][T20316] ? __pfx___get_user_pages+0x10/0x10 [ 257.680259][T20316] ? register_lock_class+0x41/0x4c0 [ 257.680274][T20316] ? __ia32_sys_process_vm_writev+0xdf/0x1b0 [ 257.680290][T20316] ? __do_fast_syscall_32+0x7c/0x3a0 [ 257.680304][T20316] __gup_longterm_locked+0x20d/0x1850 [ 257.680317][T20316] ? __lock_acquire+0xb8a/0x1c90 [ 257.680332][T20316] ? __pfx___gup_longterm_locked+0x10/0x10 [ 257.680351][T20316] pin_user_pages_remote+0xed/0x140 [ 257.680369][T20316] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 257.680384][T20316] ? mm_access+0x22d/0x2e0 [ 257.680408][T20316] process_vm_rw_core.constprop.0+0x41b/0x9a0 [ 257.680433][T20316] ? rcu_is_watching+0x12/0xc0 [ 257.680467][T20316] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 257.680493][T20316] ? iovec_from_user+0xbb/0x140 [ 257.680518][T20316] ? iovec_from_user+0xbb/0x140 [ 257.680530][T20316] process_vm_rw+0x216/0x2c0 [ 257.680548][T20316] ? __pfx_process_vm_rw+0x10/0x10 [ 257.680568][T20316] ? __pfx___mm_populate+0x10/0x10 [ 257.680594][T20316] ? xfd_validate_state+0x61/0x180 [ 257.680611][T20316] __ia32_sys_process_vm_writev+0xdf/0x1b0 [ 257.680628][T20316] ? lockdep_hardirqs_on+0x7c/0x110 [ 257.680644][T20316] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 257.680660][T20316] __do_fast_syscall_32+0x7c/0x3a0 [ 257.680671][T20316] do_fast_syscall_32+0x32/0x80 [ 257.680681][T20316] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 257.680693][T20316] RIP: 0023:0xf70ee579 [ 257.680703][T20316] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 257.680712][T20316] RSP: 002b:00000000f50de55c EFLAGS: 00000296 ORIG_RAX: 000000000000015c [ 257.680744][T20316] RAX: ffffffffffffffda RBX: 000000000000007a RCX: 0000000080c22000 [ 257.680751][T20316] RDX: 000000000000002b RSI: 0000000080c22fa0 RDI: 0000000000000001 [ 257.680757][T20316] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 257.680764][T20316] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 257.680771][T20316] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 257.680785][T20316] [ 257.918802][T20322] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 258.674727][ T46] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.684193][ T46] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.794771][ T46] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.799457][ T46] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.882730][ T46] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.890121][ T46] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.924155][ T5956] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 258.937068][ T5956] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 258.941795][ T5956] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 258.946773][ T5956] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 258.949722][ T5956] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 258.985694][ T46] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.990312][ T46] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.004003][T20380] wlan1 speed is unknown, defaulting to 1000 [ 259.125030][ T46] bridge_slave_1: left promiscuous mode [ 259.128143][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.134322][ T46] bridge_slave_0: left allmulticast mode [ 259.137271][ T46] bridge_slave_0: left promiscuous mode [ 259.139959][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.388970][ T46] team0: Port device geneve0 removed [ 259.478413][T20396] netlink: 161716 bytes leftover after parsing attributes in process `syz.0.6495'. [ 259.481454][T20396] netlink: zone id is out of range [ 259.483073][T20396] netlink: zone id is out of range [ 259.484696][T20396] netlink: zone id is out of range [ 259.486235][T20396] netlink: zone id is out of range [ 259.527925][ T46] bond0 (unregistering): left promiscuous mode [ 259.530470][ T46] bond_slave_0: left promiscuous mode [ 259.532786][ T46] bond_slave_1: left promiscuous mode [ 259.535111][ T46] bond1 (unregistering): left promiscuous mode [ 259.555987][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.564056][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.570248][ T46] bond0 (unregistering): (slave bond1): Releasing backup interface [ 259.573980][ T46] bond0 (unregistering): Released all slaves [ 259.683915][ T46] bond1 (unregistering): Released all slaves [ 259.697437][T20400] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6496'. [ 259.700454][T20400] bond_slave_0: entered allmulticast mode [ 259.705298][T20380] chnl_net:caif_netlink_parms(): no params data found [ 259.867236][T20380] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.870558][T20380] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.873546][T20380] bridge_slave_0: entered allmulticast mode [ 259.877434][T20380] bridge_slave_0: entered promiscuous mode [ 259.882101][T20380] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.885233][T20380] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.892219][T20380] bridge_slave_1: entered allmulticast mode [ 259.894322][T20418] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 259.895891][T20380] bridge_slave_1: entered promiscuous mode [ 259.900045][T20418] overlayfs: overlapping lowerdir path [ 259.968357][T20380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.975104][T20380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.046150][T20380] team0: Port device team_slave_0 added [ 260.058344][T20380] team0: Port device team_slave_1 added [ 260.122182][T20380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.125129][T20380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.135665][T20380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.143999][T20380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.147062][T20380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.157556][T20380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.227759][T20380] hsr_slave_0: entered promiscuous mode [ 260.231473][T20380] hsr_slave_1: entered promiscuous mode [ 260.234717][T20380] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.240176][T20380] Cannot create hsr debugfs directory [ 260.402791][T20380] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 260.409586][T20380] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 260.414678][T20380] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 260.419607][T20380] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 260.436630][T20380] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.439075][T20380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.441476][T20380] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.443768][T20380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.483350][T20380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.493283][ T89] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.498817][ T89] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.513973][T20380] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.522616][ T89] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.525500][ T89] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.532744][ T94] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.535907][ T94] bridge0: port 2(bridge_slave_1) entered forwarding state acpid: input device has been disconnected, fd 9 [ 260.694556][T20380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.863811][T20380] veth0_vlan: entered promiscuous mode [ 260.869131][T20380] veth1_vlan: entered promiscuous mode [ 260.884496][T20380] veth0_macvtap: entered promiscuous mode [ 260.891292][T20380] veth1_macvtap: entered promiscuous mode [ 260.901053][T20380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.913606][T20380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.919445][T20380] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.922445][T20380] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.925173][T20380] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.928627][T20380] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.967713][ T5945] Bluetooth: hci2: command tx timeout [ 260.969468][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.973674][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.977665][ T94] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.980810][ T94] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.213418][T20462] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 261.221584][T20462] overlayfs: overlapping lowerdir path [ 261.370375][T20468] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6518'. [ 261.587830][ T46] hsr_slave_0: left promiscuous mode [ 261.591446][ T46] hsr_slave_1: left promiscuous mode [ 261.594411][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.598551][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.601748][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.635713][ T46] macsec0: left allmulticast mode [ 261.638235][ T46] veth1_macvtap: left allmulticast mode [ 261.640743][ T46] veth1_macvtap: left promiscuous mode [ 261.643062][ T46] veth0_macvtap: left promiscuous mode [ 261.645480][ T46] veth1_vlan: left allmulticast mode [ 261.648358][ T46] veth1_vlan: left promiscuous mode [ 261.650694][ T46] veth0_vlan: left promiscuous mode [ 261.691669][ T838] kernel read not supported for file /dsp (pid: 838 comm: kworker/2:2) [ 261.846535][T20408] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 262.796525][ T46] team0 (unregistering): Port device team_slave_1 removed [ 262.927770][ T46] team0 (unregistering): Port device team_slave_0 removed [ 263.742115][T20508] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 263.752729][T20508] overlayfs: overlapping lowerdir path [ 263.803778][T20510] kvm: kvm [20509]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x98b5 [ 264.225130][ T5956] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 264.232800][ T5956] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 264.237816][ T5956] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 264.241594][ T5956] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 264.245620][ T5956] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 264.277964][T20524] wlan1 speed is unknown, defaulting to 1000 [ 264.343421][ T46] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.444745][T20524] chnl_net:caif_netlink_parms(): no params data found [ 264.510391][T20524] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.513727][T20524] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.516044][T20524] bridge_slave_0: entered allmulticast mode [ 264.519484][T20524] bridge_slave_0: entered promiscuous mode [ 264.523198][T20524] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.525580][T20524] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.527970][T20524] bridge_slave_1: entered allmulticast mode [ 264.530636][T20524] bridge_slave_1: entered promiscuous mode [ 264.570772][T20524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.575530][T20524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.611894][T20524] team0: Port device team_slave_0 added [ 264.615528][T20524] team0: Port device team_slave_1 added [ 264.649897][T20524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.652114][T20524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.664458][T20524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.670592][T20524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.672781][T20524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.681361][T20524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.723131][T20524] hsr_slave_0: entered promiscuous mode [ 264.725573][T20524] hsr_slave_1: entered promiscuous mode [ 264.728837][T20524] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.731206][T20524] Cannot create hsr debugfs directory [ 264.917561][T20524] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 264.924148][T20524] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 264.931500][T20524] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 264.938696][T20524] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 265.018354][T20524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.034804][T20524] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.044577][ T1247] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.047549][ T1247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.059861][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.062197][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.197206][T20524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.373939][T20524] veth0_vlan: entered promiscuous mode [ 265.382157][T20524] veth1_vlan: entered promiscuous mode [ 265.409625][T20524] veth0_macvtap: entered promiscuous mode [ 265.415851][T20524] veth1_macvtap: entered promiscuous mode [ 265.433439][T20524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.441385][T20524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.447874][T20524] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.450687][T20524] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.453476][T20524] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.456186][T20524] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.498520][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.501690][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.519073][ T1247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.522262][ T1247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.630954][ T46] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.645739][T20557] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 265.652247][T20557] overlayfs: overlapping lowerdir path [ 265.670702][ T5945] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 265.684284][ T5945] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 265.689949][ T5945] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 265.695566][ T5945] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 265.700414][ T5945] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 265.755951][T20558] wlan1 speed is unknown, defaulting to 1000 [ 265.789009][ T46] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.895818][ T46] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.048999][T20558] chnl_net:caif_netlink_parms(): no params data found [ 266.134195][ T46] bridge_slave_1: left allmulticast mode [ 266.136736][ T46] bridge_slave_1: left promiscuous mode [ 266.139551][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.157620][ T46] bridge_slave_0: left allmulticast mode [ 266.160537][ T46] bridge_slave_0: left promiscuous mode [ 266.165925][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.326493][ T5956] Bluetooth: hci1: command tx timeout [ 266.441347][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 266.441359][ T40] audit: type=1326 audit(1749767960.255:3933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20611 comm="syz.0.6570" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 266.451272][ T40] audit: type=1326 audit(1749767960.255:3934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20611 comm="syz.0.6570" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f365a7 code=0x7ffc0000 [ 266.476359][ T40] audit: type=1326 audit(1749767960.255:3935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20611 comm="syz.0.6570" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 266.483472][ T40] audit: type=1326 audit(1749767960.255:3936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20611 comm="syz.0.6570" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f365a7 code=0x7ffc0000 [ 266.490564][ T40] audit: type=1326 audit(1749767960.255:3937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20611 comm="syz.0.6570" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 266.497191][ T40] audit: type=1326 audit(1749767960.255:3938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20611 comm="syz.0.6570" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f365a7 code=0x7ffc0000 [ 266.504460][ T40] audit: type=1326 audit(1749767960.255:3939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20611 comm="syz.0.6570" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 266.511310][ T40] audit: type=1326 audit(1749767960.255:3940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20611 comm="syz.0.6570" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f365a7 code=0x7ffc0000 [ 266.518225][ T40] audit: type=1326 audit(1749767960.255:3941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20611 comm="syz.0.6570" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 266.525563][ T40] audit: type=1326 audit(1749767960.255:3942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20611 comm="syz.0.6570" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f365a7 code=0x7ffc0000 [ 266.626143][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.632361][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.637269][ T46] bond0 (unregistering): Released all slaves [ 266.697909][T20621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6574'. [ 266.733453][T20558] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.735883][T20558] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.738309][T20558] bridge_slave_0: entered allmulticast mode [ 266.741360][T20558] bridge_slave_0: entered promiscuous mode [ 266.744539][T20558] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.748783][T20558] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.751497][T20558] bridge_slave_1: entered allmulticast mode [ 266.754652][T20558] bridge_slave_1: entered promiscuous mode [ 266.822782][T20558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.832112][T20558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.959806][T20558] team0: Port device team_slave_0 added [ 266.976614][T20558] team0: Port device team_slave_1 added [ 267.088669][ T46] hsr_slave_0: left promiscuous mode [ 267.092371][ T46] hsr_slave_1: left promiscuous mode [ 267.095249][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.099667][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.103829][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.107771][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.136746][ T46] veth1_macvtap: left promiscuous mode [ 267.138817][ T46] veth0_macvtap: left promiscuous mode [ 267.140775][ T46] veth1_vlan: left promiscuous mode [ 267.142515][ T46] veth0_vlan: left promiscuous mode [ 267.379990][T20653] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 267.382969][T20653] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 267.637322][T20662] netlink: 236 bytes leftover after parsing attributes in process `syz.3.6591'. [ 267.774345][ T5956] Bluetooth: hci2: command tx timeout [ 268.416362][ T5956] Bluetooth: hci1: command tx timeout [ 268.417122][ T46] team0 (unregistering): Port device team_slave_1 removed [ 268.600090][ T46] team0 (unregistering): Port device team_slave_0 removed [ 269.402094][T20558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.404368][T20558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.413514][T20558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.418171][T20558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.420502][T20558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.429664][T20558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.542342][T20558] hsr_slave_0: entered promiscuous mode [ 269.544701][T20558] hsr_slave_1: entered promiscuous mode [ 269.548152][T20558] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.550688][T20558] Cannot create hsr debugfs directory [ 269.845904][T20558] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.849288][ T5956] Bluetooth: hci2: command tx timeout [ 269.971845][T20558] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.070356][T20558] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.081763][T20703] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6609'. [ 270.166212][T20558] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.193405][T20700] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 270.196005][T20700] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 270.202539][T20700] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 270.218402][T20700] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 270.221313][T20712] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6613'. [ 270.222785][T20700] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 270.229196][T20700] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 270.235802][T20700] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 270.278799][ T46] bridge_slave_1: left allmulticast mode [ 270.280682][ T46] bridge_slave_1: left promiscuous mode [ 270.282534][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.286602][ T46] bridge_slave_0: left allmulticast mode [ 270.288473][ T46] bridge_slave_0: left promiscuous mode [ 270.290240][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.496598][T20447] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 270.582864][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.589025][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.592978][ T46] bond0 (unregistering): Released all slaves [ 270.666431][T20447] usb 8-1: Using ep0 maxpacket: 16 [ 270.674330][T20447] usb 8-1: config 1 interface 0 has no altsetting 0 [ 270.674628][T20558] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 270.683217][T20447] usb 8-1: New USB device found, idVendor=046d, idProduct=c091, bcdDevice= 0.40 [ 270.687021][T20447] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.690218][T20447] usb 8-1: Product: syz [ 270.691911][T20447] usb 8-1: Manufacturer: syz [ 270.692303][T20558] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 270.693795][T20447] usb 8-1: SerialNumber: syz [ 270.702067][T20558] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 270.751584][T20558] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 270.914709][T20558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.931433][T20558] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.933538][T20447] usbhid 8-1:1.0: can't add hid device: -71 [ 270.936420][T20447] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 270.941974][T20447] usb 8-1: USB disconnect, device number 8 [ 270.952214][ T94] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.954721][ T94] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.965617][ T46] hsr_slave_0: left promiscuous mode [ 270.969863][ T46] hsr_slave_1: left promiscuous mode [ 270.979223][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.982228][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.986405][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.989565][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.023752][ T46] veth1_macvtap: left promiscuous mode [ 271.026032][ T46] veth0_macvtap: left promiscuous mode [ 271.028614][ T46] veth1_vlan: left promiscuous mode [ 271.031258][ T46] veth0_vlan: left promiscuous mode [ 271.642788][T20745] bio_check_eod: 14 callbacks suppressed [ 271.642806][T20745] syz.3.6624: attempt to access beyond end of device [ 271.642806][T20745] loop7: rw=0, sector=64, nr_sectors = 2 limit=0 [ 271.661286][T20745] isofs_fill_super: bread failed, dev=loop7, iso_blknum=16, block=32 [ 272.166518][ T5956] Bluetooth: hci3: command 0x0406 tx timeout [ 272.242916][ T46] team0 (unregistering): Port device team_slave_1 removed [ 272.256392][ T5956] Bluetooth: hci2: command 0x0419 tx timeout [ 272.256461][ T5945] Bluetooth: hci1: command 0x0419 tx timeout [ 272.282480][T20737] Falling back ldisc for ttyprintk. [ 272.439663][ T46] team0 (unregistering): Port device team_slave_0 removed [ 272.721937][T20755] binder: 20754:20755 ioctl c018620c 80000000 returned -1 [ 273.450033][T20775] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6638'. [ 273.469246][ T94] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.472365][ T94] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.570356][T20785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6642'. [ 273.675770][T20558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.725201][T20797] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6646'. [ 273.913710][T20558] veth0_vlan: entered promiscuous mode [ 273.930402][T20558] veth1_vlan: entered promiscuous mode [ 273.974272][T20558] veth0_macvtap: entered promiscuous mode [ 273.985022][T20558] veth1_macvtap: entered promiscuous mode [ 274.000241][T20558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.011204][T20558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.021188][T20558] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.025326][T20558] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.030688][T20558] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.034617][T20558] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.089817][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.093053][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.093537][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.102383][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.326524][ T5945] Bluetooth: hci1: command 0x0419 tx timeout [ 274.326682][ T5956] Bluetooth: hci2: command 0x0419 tx timeout [ 274.617245][ T838] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 274.769143][ T838] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.773614][ T838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 274.779213][ T838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 274.783400][ T838] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 274.791270][ T838] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 274.795273][ T838] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 274.799741][ T838] usb 5-1: Manufacturer: syz [ 274.803811][ T838] usb 5-1: config 0 descriptor?? [ 275.059862][ T838] rc_core: IR keymap rc-hauppauge not found [ 275.062569][ T838] Registered IR keymap rc-empty [ 275.065156][ T838] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 275.099758][ T838] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 275.130302][ T838] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 275.136359][T20867] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 275.138821][ T838] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input42 [ 275.150735][ T838] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 275.167140][ T838] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 275.187124][ T838] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 275.208786][ T838] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 275.227492][ T838] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 275.248701][ T838] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 275.267584][ T838] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 275.287633][ T838] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 275.308735][ T838] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 275.329102][ T838] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 275.349517][ T838] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 275.353311][ T838] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 275.362249][ T838] usb 5-1: USB disconnect, device number 13 acpid: input device has been disconnected, fd 3 [ 275.606162][T20905] netlink: 232 bytes leftover after parsing attributes in process `syz.3.6692'. [ 275.796654][ T5996] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 275.957265][ T5996] usb 12-1: Using ep0 maxpacket: 16 [ 275.964597][ T5996] usb 12-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 275.968450][ T5996] usb 12-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 275.971630][ T5996] usb 12-1: Product: syz [ 275.973972][ T5996] usb 12-1: Manufacturer: syz [ 275.975556][ T5996] usb 12-1: SerialNumber: syz [ 275.978287][ T5996] usb 12-1: config 0 descriptor?? [ 276.188830][ T5996] usb 12-1: USB disconnect, device number 2 [ 276.406503][ T5945] Bluetooth: hci1: command 0x0419 tx timeout [ 276.409157][ T5956] Bluetooth: hci2: command 0x0419 tx timeout [ 276.446695][T20945] syz.5.6710: attempt to access beyond end of device [ 276.446695][T20945] loop11: rw=0, sector=0, nr_sectors = 1 limit=0 [ 276.451720][T20945] FAT-fs (loop11): unable to read boot sector [ 276.480637][T20947] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6711'. [ 276.641000][T20959] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6717'. [ 276.687861][T20963] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6719'. [ 276.703367][T20963] macvlan2: entered allmulticast mode [ 276.705760][T20963] veth1_vlan: entered allmulticast mode [ 277.035212][T20992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6733'. [ 277.142332][T21001] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.150377][T21001] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.215729][T21001] netlink: 'syz.5.6737': attribute type 16 has an invalid length. [ 277.222694][T21001] netlink: 'syz.5.6737': attribute type 17 has an invalid length. [ 277.243395][T21001] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.246196][T21001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.250344][T21001] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.252642][T21001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.279377][T21010] serio: Serial port ptm0 [ 277.476384][ T53] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 277.626389][ T53] usb 12-1: Using ep0 maxpacket: 8 [ 277.637858][ T53] usb 12-1: config 0 has no interfaces? [ 277.643369][ T53] usb 12-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 277.647343][ T53] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.650816][ T53] usb 12-1: Product: syz [ 277.652866][ T53] usb 12-1: Manufacturer: syz [ 277.655114][ T53] usb 12-1: SerialNumber: syz [ 277.671118][ T53] usb 12-1: config 0 descriptor?? [ 277.879939][ T6027] usb 12-1: USB disconnect, device number 3 [ 278.497632][ T5956] Bluetooth: hci2: command 0x0419 tx timeout [ 278.497667][ T5945] Bluetooth: hci1: command 0x0419 tx timeout [ 278.723172][ T5996] kernel read not supported for file /dsp (pid: 5996 comm: kworker/1:5) [ 278.813444][ T40] kauditd_printk_skb: 156 callbacks suppressed [ 278.813456][ T40] audit: type=1326 audit(1749767972.625:4099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21064 comm="syz.3.6766" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 278.832713][ T40] audit: type=1326 audit(1749767972.625:4100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21064 comm="syz.3.6766" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf712e5a7 code=0x7ffc0000 [ 278.842494][ T40] audit: type=1326 audit(1749767972.625:4101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21064 comm="syz.3.6766" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 278.851758][ T40] audit: type=1326 audit(1749767972.625:4102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21064 comm="syz.3.6766" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 278.864733][ T40] audit: type=1326 audit(1749767972.625:4103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21064 comm="syz.3.6766" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 278.874051][ T40] audit: type=1326 audit(1749767972.625:4104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21064 comm="syz.3.6766" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf712e5a7 code=0x7ffc0000 [ 278.882744][ T40] audit: type=1326 audit(1749767972.625:4105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21064 comm="syz.3.6766" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 278.894627][ T40] audit: type=1326 audit(1749767972.625:4106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21064 comm="syz.3.6766" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 278.903084][ T40] audit: type=1326 audit(1749767972.625:4107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21064 comm="syz.3.6766" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf712e5a7 code=0x7ffc0000 [ 278.912456][ T40] audit: type=1326 audit(1749767972.625:4108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21064 comm="syz.3.6766" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 280.090651][T21119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6788'. [ 280.564260][T21148] serio: Serial port ptm0 [ 280.711722][T21155] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 280.901530][T21161] wlan1 speed is unknown, defaulting to 1000 [ 281.521122][ T29] kernel read not supported for file /swradio6 (pid: 29 comm: kworker/1:0) [ 281.724951][ T5945] Bluetooth: hci2: adv larger than maximum supported [ 281.724993][ T5945] Bluetooth: hci2: Malformed LE Event: 0x0d [ 281.962409][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 281.965556][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 281.969391][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 281.972579][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 281.975696][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 281.979229][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 281.982377][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 281.985487][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 281.994593][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 281.999601][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 282.002742][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 282.005861][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 282.011316][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 282.015042][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 282.019336][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 282.022535][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 282.025657][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 282.030177][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 282.033416][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 282.040638][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 282.043840][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 282.048086][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 282.051293][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 282.054367][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 282.064460][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 282.068951][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 282.072108][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 282.075244][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 282.079548][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 282.082725][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 282.085831][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 282.090315][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 282.093455][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 282.097618][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 282.100823][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 282.103957][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 282.110222][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 282.113393][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 282.123398][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 282.127833][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 282.132288][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 282.135380][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 282.139723][ T24] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 282.144236][ T24] hid-generic 0000:007F:FFFFFFFE.000E: hidraw1: HID v0.00 Device [syz1] on syz0 [ 283.366559][ T53] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 283.526385][ T53] usb 10-1: Using ep0 maxpacket: 8 [ 283.529768][ T53] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 283.533960][ T53] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 283.538162][ T53] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 283.542463][ T53] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 283.548241][ T53] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 283.552395][ T53] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.763950][ T53] usb 10-1: GET_CAPABILITIES returned 0 [ 283.766048][ T53] usbtmc 10-1:16.0: can't read capabilities [ 283.918713][ T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 283.964919][ T53] usb 10-1: USB disconnect, device number 2 [ 284.067057][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 284.070582][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.074609][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 284.080721][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 284.084249][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.089848][ T24] usb 5-1: config 0 descriptor?? [ 284.730309][T21321] can0: slcan on ptm0. [ 284.797180][T21320] can0 (unregistered): slcan off ptm0. [ 284.850747][T21323] sp0: Synchronizing with TNC [ 285.014470][T21328] netlink: 72 bytes leftover after parsing attributes in process `syz.7.6881'. [ 285.260283][T21339] netem: incorrect ge model size [ 285.263315][T21339] netem: change failed [ 285.367531][ T54] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 285.527542][ T54] usb 10-1: config 0 has an invalid interface number: 153 but max is 0 [ 285.530921][ T54] usb 10-1: config 0 has no interface number 0 [ 285.533446][ T54] usb 10-1: config 0 interface 153 has no altsetting 0 [ 285.549734][ T54] usb 10-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 285.553376][ T54] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.557770][ T54] usb 10-1: Product: syz [ 285.559585][ T54] usb 10-1: Manufacturer: syz [ 285.561550][ T54] usb 10-1: SerialNumber: syz [ 285.569248][ T54] usb 10-1: config 0 descriptor?? [ 285.574086][ T54] sierra 10-1:0.153: Sierra USB modem converter detected [ 285.779342][ T54] usb 10-1: USB disconnect, device number 3 [ 285.787952][ T54] sierra 10-1:0.153: device disconnected [ 285.847084][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 286.734807][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 286.738092][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 286.743287][ T24] usb 5-1: USB disconnect, device number 14 [ 286.938799][T21408] Process accounting resumed [ 286.982269][T21413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6923'. [ 287.948199][T21500] batadv_slave_1: entered promiscuous mode [ 287.953821][T21499] batadv_slave_1: left promiscuous mode [ 287.980132][T21504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6966'. [ 287.983291][T21504] netlink: 'syz.0.6966': attribute type 5 has an invalid length. [ 288.661444][T21570] o2cb: This node has not been configured. [ 288.663917][T21570] o2cb: Cluster check failed. Fix errors before retrying. [ 288.666950][T21570] (syz.0.6999,21570,3):user_dlm_register:674 ERROR: status = -22 [ 288.670536][T21570] (syz.0.6999,21570,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 288.954111][T21600] futex_wake_op: syz.3.7012 tries to shift op by 36; fix this program [ 289.262138][T21624] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7021'. [ 289.265113][T21624] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7021'. [ 289.323550][T21628] netlink: 80 bytes leftover after parsing attributes in process `syz.3.7024'. [ 289.329281][T21630] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7025'. [ 289.329621][T21628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7024'. [ 289.366388][ T29] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 289.528231][ T29] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.532884][ T29] usb 12-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 289.537035][ T29] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.542749][ T29] usb 12-1: config 0 descriptor?? [ 289.759994][ T29] usbhid 12-1:0.0: can't add hid device: -71 [ 289.763006][ T29] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 289.769503][ T29] usb 12-1: USB disconnect, device number 4 [ 290.479285][T21716] kvm: kvm [21714]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0x4000007c) = 0x0 [ 290.820006][T21741] binder: 21740:21741 ioctl 4018620d 0 returned -22 [ 291.051989][T21751] netlink: 112 bytes leftover after parsing attributes in process `syz.0.7082'. [ 291.439533][T21759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7086'. [ 291.732879][T21774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7094'. [ 292.868185][T21860] sp0: Synchronizing with TNC [ 293.313845][T21876] usb 1-1: USB disconnect, device number 2 [ 293.365690][T21876] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 293.726112][T21906] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7156'. [ 293.786389][ T29] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 293.911905][T21919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7162'. [ 293.946807][ T29] usb 10-1: Using ep0 maxpacket: 16 [ 293.951375][ T29] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 293.954675][ T29] usb 10-1: config 0 has no interface number 0 [ 293.957259][ T29] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 293.961998][ T29] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 293.967683][ T29] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 293.971524][ T29] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 293.978683][ T29] usb 10-1: Product: syz [ 293.980994][ T29] usb 10-1: SerialNumber: syz [ 293.984991][ T29] usb 10-1: config 0 descriptor?? [ 293.991426][ T29] cm109 10-1:0.8: invalid payload size 0, expected 4 [ 293.996660][ T29] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.8/input/input43 [ 294.200724][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 294.405161][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 294.410992][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 294.414098][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 294.416902][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 294.419975][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 294.422885][ T6027] usb 10-1: USB disconnect, device number 4 [ 294.423031][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 294.423048][ C0] cm109 10-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 294.438953][ T6027] cm109 10-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 acpid: input device has been disconnected, fd 3 [ 295.335488][T21991] mkiss: ax0: crc mode is auto. [ 295.889381][T22034] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 295.921177][ T40] kauditd_printk_skb: 2400 callbacks suppressed [ 295.921194][ T40] audit: type=1326 audit(1749767989.735:6509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22037 comm="syz.5.7219" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x0 [ 296.046427][ T6027] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 296.196500][ T6027] usb 12-1: Using ep0 maxpacket: 8 [ 296.200530][ T6027] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 296.204346][ T6027] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 296.208488][ T6027] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 296.212654][ T6027] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 296.217131][ T6027] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 296.222726][ T6027] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 296.226680][ T6027] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.438602][ T6027] usb 12-1: GET_CAPABILITIES returned 0 [ 296.441021][ T6027] usbtmc 12-1:16.0: can't read capabilities [ 296.548526][T22060] hugetlbfs: syz.0.7236 (22060): Using mlock ulimits for SHM_HUGETLB is obsolete [ 296.646628][ T6027] usb 12-1: USB disconnect, device number 5 [ 297.293911][T22076] netlink: 'syz.5.7235': attribute type 12 has an invalid length. [ 297.299607][T22076] netlink: 'syz.5.7235': attribute type 28 has an invalid length. [ 297.302911][T22076] netlink: 148 bytes leftover after parsing attributes in process `syz.5.7235'. [ 297.349148][T22078] usb usb8: usbfs: process 22078 (syz.5.7237) did not claim interface 0 before use [ 297.354605][T22078] usb usb8: selecting invalid altsetting 63 [ 297.469507][T22085] macvlan0: entered promiscuous mode [ 297.473282][T22085] netlink: 'syz.5.7241': attribute type 1 has an invalid length. [ 297.593739][T22093] netlink: 56 bytes leftover after parsing attributes in process `syz.5.7246'. [ 297.886835][ T34] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 298.063600][ T34] usb 12-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 298.077615][ T34] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.081101][ T34] usb 12-1: Product: syz [ 298.082827][ T34] usb 12-1: Manufacturer: syz [ 298.084825][ T34] usb 12-1: SerialNumber: syz [ 298.091769][ T34] usb 12-1: config 0 descriptor?? [ 298.302156][ T5996] usb 12-1: USB disconnect, device number 6 [ 299.037533][T22151] input: syz0 as /devices/virtual/input/input44 [ 299.682257][T22197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7295'. [ 300.187429][ T40] audit: type=1326 audit(1749767994.005:6510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22219 comm="syz.7.7306" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x0 [ 300.366135][T22230] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7310'. [ 301.296976][ T24] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 301.458563][ T24] usb 12-1: Using ep0 maxpacket: 16 [ 301.468933][ T24] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.478702][ T24] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.482722][ T24] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 301.489319][ T24] usb 12-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 301.493100][ T24] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.507902][ T24] usb 12-1: config 0 descriptor?? [ 301.676589][T22276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7333'. [ 301.689533][T22276] team_slave_0: entered promiscuous mode [ 301.693049][T22276] team_slave_1: entered promiscuous mode [ 301.925105][ T24] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 301.929610][ T24] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 301.931850][ T24] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 301.934012][ T24] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 301.937292][ T24] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 301.943541][ T24] input: HID 0955:7214 Haptics as /devices/virtual/input/input45 [ 301.981745][ T24] shield 0003:0955:7214.000F: Registered Thunderstrike controller [ 301.984734][ T24] shield 0003:0955:7214.000F: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.7-1/input0 [ 302.010895][T22294] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7342'. [ 302.125995][T22247] random: crng reseeded on system resumption [ 302.147014][ T53] usb 12-1: USB disconnect, device number 7 [ 302.147025][ T838] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 302.153291][ T838] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 302.157616][ T53] ------------[ cut here ]------------ [ 302.160175][ T838] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 302.160296][ T53] workqueue: work disable count underflowed [ 302.160371][ T53] WARNING: CPU: 3 PID: 53 at kernel/workqueue.c:4328 enable_work+0x2f8/0x340 [ 302.167928][ T838] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 302.171104][ T53] Modules linked in: [ 302.171142][ T53] CPU: 3 UID: 0 PID: 53 Comm: kworker/3:1 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 302.171162][ T53] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 302.171173][ T53] Workqueue: usb_hub_wq hub_event [ 302.189820][T22302] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.190536][ T53] RIP: 0010:enable_work+0x2f8/0x340 [ 302.195517][ T53] Code: 89 ee e8 bb 02 38 00 45 84 ed 0f 85 29 fe ff ff e8 cd 07 38 00 c6 05 ca 0d ed 0e 01 90 48 c7 c7 80 fe 8b 8b e8 d9 1f f7 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 67 e0 9d 00 e9 aa fe ff ff [ 302.196038][T22302] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.202919][ T53] RSP: 0018:ffffc9000074f3c0 EFLAGS: 00010086 [ 302.202969][ T53] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a92c8 [ 302.202979][ T53] RDX: ffff88801fe50000 RSI: ffffffff817a92d5 RDI: 0000000000000001 [ 302.203010][ T53] RBP: ffff888023245730 R08: 0000000000000001 R09: 0000000000000000 [ 302.217549][ T53] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff920000e9e79 [ 302.220748][ T53] R13: 0000000000000000 R14: ffff888023245728 R15: ffffffff8fc69aa0 [ 302.223874][ T53] FS: 0000000000000000(0000) GS:ffff888097a61000(0000) knlGS:0000000000000000 [ 302.227362][ T53] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 302.229941][ T53] CR2: 000000002e206ffc CR3: 00000000648e0000 CR4: 0000000000352ef0 [ 302.233073][ T53] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 302.236204][ T53] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 302.239331][ T53] Call Trace: [ 302.240739][ T53] [ 302.241965][ T53] ? __pfx_enable_work+0x10/0x10 [ 302.243888][ T53] ? __thermal_zone_cdev_unbind+0x6c/0x6a0 [ 302.246212][ T53] __cancel_work_sync+0xe7/0x130 [ 302.248175][ T53] thermal_zone_device_unregister+0x239/0x450 [ 302.250621][ T53] ? __pfx_shield_remove+0x10/0x10 [ 302.252697][ T53] power_supply_unregister+0x10a/0x150 [ 302.254860][ T53] shield_remove+0x75/0x130 [ 302.256708][ T53] ? __pfx_shield_remove+0x10/0x10 [ 302.258764][ T53] hid_device_remove+0xd1/0x260 [ 302.260777][ T53] ? __pfx_hid_device_remove+0x10/0x10 [ 302.263033][ T53] device_remove+0xcb/0x170 [ 302.265016][ T53] device_release_driver_internal+0x44b/0x620 [ 302.267555][ T53] bus_remove_device+0x22f/0x420 [ 302.269633][ T53] device_del+0x396/0x9f0 [ 302.271430][ T53] ? __pfx_device_del+0x10/0x10 [ 302.273418][ T53] ? do_raw_spin_lock+0x12c/0x2b0 [ 302.275474][ T53] ? find_held_lock+0x2b/0x80 [ 302.277290][ T53] hid_destroy_device+0x19c/0x240 [ 302.279327][ T53] usbhid_disconnect+0xa0/0xe0 [ 302.281288][ T53] usb_unbind_interface+0x1dd/0x9a0 [ 302.283465][ T53] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 302.285704][ T53] ? __pfx_usb_unbind_interface+0x10/0x10 [ 302.287806][ T53] device_remove+0x122/0x170 [ 302.289261][ T53] device_release_driver_internal+0x44b/0x620 [ 302.291218][ T53] bus_remove_device+0x22f/0x420 [ 302.292820][ T53] device_del+0x396/0x9f0 [ 302.294185][ T53] ? __pfx_device_del+0x10/0x10 [ 302.295760][ T53] ? kobject_put+0x210/0x5a0 [ 302.297298][ T53] usb_disable_device+0x355/0x7d0 [ 302.298912][ T53] usb_disconnect+0x2e1/0x920 [ 302.300473][ T53] hub_event+0x1c57/0x4fa0 [ 302.301921][ T53] ? __lock_acquire+0xb8a/0x1c90 [ 302.303520][ T53] ? __pfx_hub_event+0x10/0x10 [ 302.305055][ T53] ? sm3_block_generic+0x27c0/0x35e0 [ 302.306730][ T53] ? finish_task_switch.isra.0+0x221/0xc10 [ 302.308587][ T53] ? rcu_is_watching+0x12/0xc0 [ 302.310131][ T53] process_one_work+0x9cf/0x1b70 [ 302.311722][ T53] ? __pfx_process_one_work+0x10/0x10 [ 302.313426][ T53] ? assign_work+0x1a0/0x250 [ 302.314911][ T53] worker_thread+0x6c8/0xf10 [ 302.316396][ T53] ? __kthread_parkme+0x19e/0x250 [ 302.317990][ T53] ? __pfx_worker_thread+0x10/0x10 [ 302.319636][ T53] kthread+0x3c2/0x780 [ 302.320960][ T53] ? __pfx_kthread+0x10/0x10 [ 302.322434][ T53] ? rcu_is_watching+0x12/0xc0 [ 302.323970][ T53] ? __pfx_kthread+0x10/0x10 [ 302.325457][ T53] ret_from_fork+0x5d4/0x6f0 [ 302.326933][ T53] ? __pfx_kthread+0x10/0x10 [ 302.328431][ T53] ret_from_fork_asm+0x1a/0x30 [ 302.329981][ T53] [ 302.331006][ T53] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 302.333351][ T53] CPU: 3 UID: 0 PID: 53 Comm: kworker/3:1 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 302.337020][ T53] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 302.340417][ T53] Workqueue: usb_hub_wq hub_event [ 302.342030][ T53] Call Trace: [ 302.343113][ T53] [ 302.344069][ T53] dump_stack_lvl+0x3d/0x1f0 [ 302.345556][ T53] panic+0x71c/0x800 [ 302.346812][ T53] ? __pfx_panic+0x10/0x10 [ 302.348228][ T53] ? show_trace_log_lvl+0x29b/0x3e0 [ 302.349930][ T53] ? check_panic_on_warn+0x1f/0xb0 [ 302.351573][ T53] ? enable_work+0x2f8/0x340 [ 302.353054][ T53] check_panic_on_warn+0xab/0xb0 [ 302.354634][ T53] __warn+0xf6/0x3c0 [ 302.355895][ T53] ? __pfx_vprintk_emit+0x10/0x10 [ 302.357546][ T53] ? enable_work+0x2f8/0x340 [ 302.359063][ T53] report_bug+0x3c3/0x580 [ 302.360768][ T53] ? enable_work+0x2f8/0x340 [ 302.362623][ T53] handle_bug+0x184/0x210 [ 302.364255][ T53] exc_invalid_op+0x17/0x50 [ 302.365710][ T53] asm_exc_invalid_op+0x1a/0x20 [ 302.367264][ T53] RIP: 0010:enable_work+0x2f8/0x340 [ 302.368925][ T53] Code: 89 ee e8 bb 02 38 00 45 84 ed 0f 85 29 fe ff ff e8 cd 07 38 00 c6 05 ca 0d ed 0e 01 90 48 c7 c7 80 fe 8b 8b e8 d9 1f f7 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 67 e0 9d 00 e9 aa fe ff ff [ 302.375398][ T53] RSP: 0018:ffffc9000074f3c0 EFLAGS: 00010086 [ 302.377346][ T53] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a92c8 [ 302.379876][ T53] RDX: ffff88801fe50000 RSI: ffffffff817a92d5 RDI: 0000000000000001 [ 302.382354][ T53] RBP: ffff888023245730 R08: 0000000000000001 R09: 0000000000000000 [ 302.384767][ T53] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff920000e9e79 [ 302.387155][ T53] R13: 0000000000000000 R14: ffff888023245728 R15: ffffffff8fc69aa0 [ 302.389695][ T53] ? __warn_printk+0x198/0x350 [ 302.391219][ T53] ? __warn_printk+0x1a5/0x350 [ 302.392755][ T53] ? __pfx_enable_work+0x10/0x10 [ 302.394327][ T53] ? __thermal_zone_cdev_unbind+0x6c/0x6a0 [ 302.396172][ T53] __cancel_work_sync+0xe7/0x130 [ 302.397708][ T53] thermal_zone_device_unregister+0x239/0x450 [ 302.399620][ T53] ? __pfx_shield_remove+0x10/0x10 [ 302.401257][ T53] power_supply_unregister+0x10a/0x150 [ 302.403002][ T53] shield_remove+0x75/0x130 [ 302.404469][ T53] ? __pfx_shield_remove+0x10/0x10 [ 302.406081][ T53] hid_device_remove+0xd1/0x260 [ 302.407645][ T53] ? __pfx_hid_device_remove+0x10/0x10 [ 302.409344][ T53] device_remove+0xcb/0x170 [ 302.410822][ T53] device_release_driver_internal+0x44b/0x620 [ 302.412754][ T53] bus_remove_device+0x22f/0x420 [ 302.414334][ T53] device_del+0x396/0x9f0 [ 302.415728][ T53] ? __pfx_device_del+0x10/0x10 [ 302.417253][ T53] ? do_raw_spin_lock+0x12c/0x2b0 [ 302.418855][ T53] ? find_held_lock+0x2b/0x80 [ 302.420396][ T53] hid_destroy_device+0x19c/0x240 [ 302.421989][ T53] usbhid_disconnect+0xa0/0xe0 [ 302.423513][ T53] usb_unbind_interface+0x1dd/0x9a0 [ 302.425170][ T53] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 302.426953][ T53] ? __pfx_usb_unbind_interface+0x10/0x10 [ 302.428793][ T53] device_remove+0x122/0x170 [ 302.430305][ T53] device_release_driver_internal+0x44b/0x620 [ 302.432220][ T53] bus_remove_device+0x22f/0x420 [ 302.433785][ T53] device_del+0x396/0x9f0 [ 302.435235][ T53] ? __pfx_device_del+0x10/0x10 [ 302.436860][ T53] ? kobject_put+0x210/0x5a0 [ 302.438396][ T53] usb_disable_device+0x355/0x7d0 [ 302.440073][ T53] usb_disconnect+0x2e1/0x920 [ 302.441590][ T53] hub_event+0x1c57/0x4fa0 [ 302.443046][ T53] ? __lock_acquire+0xb8a/0x1c90 [ 302.444635][ T53] ? __pfx_hub_event+0x10/0x10 [ 302.446166][ T53] ? sm3_block_generic+0x27c0/0x35e0 [ 302.447845][ T53] ? finish_task_switch.isra.0+0x221/0xc10 [ 302.449645][ T53] ? rcu_is_watching+0x12/0xc0 [ 302.451151][ T53] process_one_work+0x9cf/0x1b70 [ 302.452753][ T53] ? __pfx_process_one_work+0x10/0x10 [ 302.454478][ T53] ? assign_work+0x1a0/0x250 [ 302.455978][ T53] worker_thread+0x6c8/0xf10 [ 302.457464][ T53] ? __kthread_parkme+0x19e/0x250 [ 302.459090][ T53] ? __pfx_worker_thread+0x10/0x10 [ 302.460759][ T53] kthread+0x3c2/0x780 [ 302.462075][ T53] ? __pfx_kthread+0x10/0x10 [ 302.463571][ T53] ? rcu_is_watching+0x12/0xc0 [ 302.465095][ T53] ? __pfx_kthread+0x10/0x10 [ 302.466569][ T53] ret_from_fork+0x5d4/0x6f0 [ 302.468047][ T53] ? __pfx_kthread+0x10/0x10 [ 302.469556][ T53] ret_from_fork_asm+0x1a/0x30 [ 302.471104][ T53] [ 302.472734][ T53] Kernel Offset: disabled [ 302.474163][ T53] Rebooting in 86400 seconds.. VM DIAGNOSIS: 22:35:40 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000055 RCX=ffffffff848ee64c RDX=ffff888023b54880 RSI=0000000000000100 RDI=0000000000000003 RBP=dffffc0000000000 RSP=ffffc90003dafbd0 R8 =0000000000000003 R9 =0000000000000100 R10=0000000000000055 R11=0000000000000001 R12=ffffc90003dafc90 R13=ffff8880231423b0 R14=0000000000000054 R15=0000000000000000 RIP=ffffffff848ee5f6 RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097761000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7480d84 CR3=0000000068228000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000003 RBX=ffff888040a7c628 RCX=dffffc0000000000 RDX=0000000000000000 RSI=0000000000000004 RDI=ffff888040a7c628 RBP=0000000000000000 RSP=ffffc9000c8c7420 R8 =0000000000000000 R9 =ffffed100814f8c5 R10=ffff888040a7c62b R11=0000000000000001 R12=ffff888040a7c5e0 R13=0000000000000001 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff822d0396 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097861000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f755c0 CR3=000000006fac1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000044 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8557d555 RDI=ffffffff9ae6da80 RBP=ffffffff9ae6da40 RSP=ffffc90004a9f5e0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000044 R14=ffffffff9ae6da40 R15=ffffffff8557d4f0 RIP=ffffffff8557d57f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097961000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7413230 CR3=000000006dac8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000007000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=000000000000001f RCX=ffffffff819afc42 RDX=ffff88801fe50000 RSI=ffffffff819afc30 RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc9000074ef20 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=1ffff920000e9de6 R13=0000000000000000 R14=ffff888024cac880 R15=ffffc9000074efe8 RIP=ffffffff819afc32 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097a61000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000002e206ffc CR3=00000000648e0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000007000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000