last executing test programs: 1m14.65522845s ago: executing program 1 (id=1174): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000600"], 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) 1m14.587065507s ago: executing program 1 (id=1175): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x8, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x2d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x111, 0x0, &(0x7f0000000700)="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", 0x0, 0xf0}, 0x4c) 1m14.373288886s ago: executing program 1 (id=1176): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002600)=ANY=[@ANYBLOB="5800000041000701fcffffff02000000057c000004003680b389cf727b332376d6e0d15ebd98b2857de968aab69c6057ef8cf9135d3c55f1e58146a85d5c8d340d98bfc0ed65fced2ca97a4c561609a6b2f83c0940000000"], 0x58}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000200000000000000c8290000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8fd00000000bfa200000010000007020000f8ffffffb703000008000000b70400", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000852000000200000085000000aa000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @timestamp, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x5b) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 1m8.808945545s ago: executing program 1 (id=1176): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002600)=ANY=[@ANYBLOB="5800000041000701fcffffff02000000057c000004003680b389cf727b332376d6e0d15ebd98b2857de968aab69c6057ef8cf9135d3c55f1e58146a85d5c8d340d98bfc0ed65fced2ca97a4c561609a6b2f83c0940000000"], 0x58}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000200000000000000c8290000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8fd00000000bfa200000010000007020000f8ffffffb703000008000000b70400", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000852000000200000085000000aa000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @timestamp, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x5b) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 59.474335224s ago: executing program 1 (id=1176): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002600)=ANY=[@ANYBLOB="5800000041000701fcffffff02000000057c000004003680b389cf727b332376d6e0d15ebd98b2857de968aab69c6057ef8cf9135d3c55f1e58146a85d5c8d340d98bfc0ed65fced2ca97a4c561609a6b2f83c0940000000"], 0x58}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000200000000000000c8290000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8fd00000000bfa200000010000007020000f8ffffffb703000008000000b70400", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000852000000200000085000000aa000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @timestamp, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x5b) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 48.263243885s ago: executing program 1 (id=1176): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002600)=ANY=[@ANYBLOB="5800000041000701fcffffff02000000057c000004003680b389cf727b332376d6e0d15ebd98b2857de968aab69c6057ef8cf9135d3c55f1e58146a85d5c8d340d98bfc0ed65fced2ca97a4c561609a6b2f83c0940000000"], 0x58}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000200000000000000c8290000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8fd00000000bfa200000010000007020000f8ffffffb703000008000000b70400", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000852000000200000085000000aa000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @timestamp, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x5b) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 2.254952695s ago: executing program 3 (id=1549): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002600)=ANY=[@ANYBLOB="5800000041000701fcffffff02000000057c000004003680b389cf727b332376d6e0d15ebd98b2857de968aab69c6057ef8cf9135d3c55f1e58146a85d5c8d340d98bfc0ed65fced2ca97a4c561609a6b2f83c0940000000"], 0x58}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000200000000000000c8290000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8fd00000000bfa200000010000007020000f8ffffffb703000008000000b70400", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000852000000200000085000000aa000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @timestamp, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x5b) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 2.212840141s ago: executing program 3 (id=1550): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000400)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYBLOB="00000000a61976a4aec41b7c5100000000000000", @ANYRES32=r2], 0x50) 2.1698645s ago: executing program 3 (id=1552): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) sendmsg$key(0xffffffffffffffff, 0x0, 0x20008810) write(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r2, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 2.131904469s ago: executing program 2 (id=1554): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea00000000", 0x85) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 2.12837544s ago: executing program 3 (id=1555): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) syslog(0x3, &(0x7f0000000700)=""/231, 0xe7) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r5, 0xaea3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00') r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x13c, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x1b}, 0x4e23, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x33}, {0x0, 0x0, 0x8, 0xa, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc, 0x0, 0x2}, 0x70bd28, 0x0, 0xa, 0x4, 0x80}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.078793814s ago: executing program 2 (id=1558): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, 0x0, 0x0) socket$kcm(0x21, 0x2, 0xa) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001300)=""/241, 0xf1}], 0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 1.218067934s ago: executing program 3 (id=1567): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$video(0x0, 0x7f, 0x503000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "d4dfeb1ceb40eeefe68d6cf265b68e88a8bb314f3c0f82df67e25dad70d6b31e036f9f20b70c42a4dc5b21aa28f606af1557115f56805a217afe6b467cb413b3"}, 0x48, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2000000, 0xe2001) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x41e43, 0x8) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0xfffffffffffffff8]}}) 1.153719004s ago: executing program 2 (id=1569): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000019c0)) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, 0x0, 0x0) socket$kcm(0x21, 0x2, 0xa) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x2) readv(r4, &(0x7f0000000000)=[{&(0x7f0000001300)=""/241, 0xf1}], 0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.153287222s ago: executing program 0 (id=1570): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvfrom$inet(r0, 0x0, 0x0, 0xc9100120, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) 239.795558ms ago: executing program 3 (id=1571): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000180), 0x200, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f00000006c0)=[{0x50, 0xf5, 0x0, 0x0}, {0x6, 0x8000, 0x60, &(0x7f0000000500)="23156dfd09a218a19f932960d6811ad465e6acb233e4a57adfb654f5e49e0ee67d0f1b3f83eb86e4a3d62694bf3d6c9d3bda0336d76e139ceaa0058b3defa5d5d6fc493285dc2e260cab1b32e9de192844084b433478e78909f1a976634542f3"}], 0x2}) 219.86697ms ago: executing program 0 (id=1572): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 219.28868ms ago: executing program 2 (id=1573): socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x20, 0xd, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 159.877509ms ago: executing program 2 (id=1574): socket$nl_netfilter(0x10, 0x3, 0xc) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x420002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x10fff6) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@RTM_NEWMDB={0x58, 0x54, 0x1e5, 0x0, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x0, 0x4, {@ip4=@broadcast}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x1, 0x2, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x86dd}}}]}, 0x58}}, 0x20044050) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 159.520039ms ago: executing program 0 (id=1575): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002600)=ANY=[@ANYBLOB="5800000041000701fcffffff02000000057c000004003680b389cf727b332376d6e0d15ebd98b2857de968aab69c6057ef8cf9135d3c55f1e58146a85d5c8d340d98bfc0ed65fced2ca97a4c561609a6b2f83c0940000000"], 0x58}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000200000000000000c8290000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8fd00000000bfa200000010000007020000f8ffffffb703000008000000b70400", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000852000000200000085000000aa000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @timestamp, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x5b) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 154.847944ms ago: executing program 0 (id=1576): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c0800"], 0xec}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d73c826d8bce62cb84c8b765cbac71c46bc4718"], 0x398}}, 0x0) 13.925821ms ago: executing program 0 (id=1577): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002600)=ANY=[@ANYBLOB="5800000041000701fcffffff02000000057c000004003680b389cf727b332376d6e0d15ebd98b2857de968aab69c6057ef8cf9135d3c55f1e58146a85d5c8d340d98bfc0ed65fced2ca97a4c561609a6b2f83c0940000000"], 0x58}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000200000000000000c8290000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000600000018110000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000852000000200000085000000aa000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @timestamp, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x5b) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 6.144345ms ago: executing program 2 (id=1578): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, 0x0, 0x0) socket$kcm(0x21, 0x2, 0xa) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001300)=""/241, 0xf1}], 0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 0s ago: executing program 0 (id=1579): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[], 0x398}}, 0x0) kernel console output (not intermixed with test programs): 10 has an invalid length. [ 161.242941][ T7238] veth0_vlan: left promiscuous mode [ 161.245382][ T7238] veth0_vlan: entered promiscuous mode [ 161.248155][ T7238] team0: Device veth0_vlan failed to register rx_handler [ 161.560127][ T54] vhci_hcd: vhci_device speed not set [ 162.172111][ T7242] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 162.592843][ T7255] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 162.594956][ T7255] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 162.597907][ T7255] vhci_hcd vhci_hcd.0: Device attached [ 162.791783][ T7257] vhci_hcd: connection closed [ 162.792027][ T12] vhci_hcd: stop threads [ 162.798136][ T12] vhci_hcd: release socket [ 162.799722][ T12] vhci_hcd: disconnect device [ 162.941743][ T7261] netlink: 'syz.1.256': attribute type 10 has an invalid length. [ 162.945477][ T7261] veth0_vlan: left promiscuous mode [ 162.949938][ T7261] veth0_vlan: entered promiscuous mode [ 162.956520][ T7261] team0: Device veth0_vlan failed to register rx_handler [ 163.756207][ T7263] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 164.042704][ T5953] Bluetooth: hci0: command 0x0401 tx timeout [ 164.163495][ T7271] input: syz1 as /devices/virtual/input/input44 [ 164.280873][ T7275] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 164.283622][ T7275] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 164.287886][ T7275] vhci_hcd vhci_hcd.0: Device attached [ 164.739553][ T839] vhci_hcd: vhci_device speed not set [ 164.853947][ T29] usb 37-1: new high-speed USB device number 7 using vhci_hcd [ 165.030492][ T7288] input: syz1 as /devices/virtual/input/input45 [ 165.482269][ T7276] vhci_hcd: connection reset by peer [ 165.485028][ T219] vhci_hcd: stop threads [ 165.486669][ T219] vhci_hcd: release socket [ 165.488678][ T219] vhci_hcd: disconnect device [ 166.122746][ T5953] Bluetooth: hci0: command 0x0401 tx timeout [ 166.377558][ T7300] input: syz1 as /devices/virtual/input/input46 [ 167.466541][ T7308] ubi: mtd0 is already attached to ubi31 [ 169.995233][ T29] vhci_hcd: vhci_device speed not set [ 170.150448][ T40] audit: type=1800 audit(1750828614.706:84): pid=7354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.279" name="file1" dev="overlay" ino=486 res=0 errno=0 [ 170.728251][ T7369] input: syz1 as /devices/virtual/input/input49 [ 170.855021][ T7377] warning: `syz.3.290' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 171.105426][ T40] audit: type=1800 audit(1750828615.666:85): pid=7390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.288" name="file1" dev="overlay" ino=406 res=0 errno=0 [ 171.250570][ T40] audit: type=1800 audit(1750828615.806:86): pid=7393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.289" name="file1" dev="overlay" ino=503 res=0 errno=0 [ 171.252719][ T840] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 171.414314][ T840] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.418854][ T840] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 171.420378][ T7394] netlink: 'syz.0.294': attribute type 10 has an invalid length. [ 171.424494][ T840] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 171.425649][ T7394] veth0_vlan: left promiscuous mode [ 171.428774][ T840] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.431917][ T7394] veth0_vlan: entered promiscuous mode [ 171.435996][ T840] usb 8-1: config 0 descriptor?? [ 171.438947][ T7394] team0: Device veth0_vlan failed to register rx_handler [ 171.441876][ T840] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 171.450120][ T840] dvb-usb: bulk message failed: -22 (3/0) [ 171.470517][ T840] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 171.478138][ T840] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 171.481292][ T840] usb 8-1: media controller created [ 171.488931][ T840] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 171.506771][ T840] dvb-usb: bulk message failed: -22 (6/0) [ 171.509141][ T840] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 171.516961][ T840] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input50 [ 171.527907][ T840] dvb-usb: schedule remote query interval to 150 msecs. [ 171.530340][ T840] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 171.644759][ T7389] dibusb: i2c wr: len=198 is too big! [ 171.644759][ T7389] [ 171.649241][ T10] usb 8-1: USB disconnect, device number 5 [ 171.715609][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 171.761090][ T7397] input: syz1 as /devices/virtual/input/input51 [ 172.712242][ T7421] input: syz1 as /devices/virtual/input/input52 [ 173.013002][ T6033] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 173.057379][ T40] audit: type=1800 audit(1750828617.616:87): pid=7427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.305" name="file1" dev="overlay" ino=522 res=0 errno=0 [ 173.164163][ T6033] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.167897][ T6033] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 173.171695][ T6033] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 173.175298][ T6033] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 173.182241][ T6033] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 173.185740][ T6033] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 173.188394][ T6033] usb 7-1: Manufacturer: syz [ 173.191753][ T6033] usb 7-1: config 0 descriptor?? [ 173.403151][ T5952] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 173.406949][ T5952] Bluetooth: hci3: Injecting HCI hardware error event [ 173.493573][ T5952] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 173.496706][ T5952] Bluetooth: hci2: Injecting HCI hardware error event [ 173.632492][ T7433] input: syz1 as /devices/virtual/input/input53 [ 173.853335][ T7441] input: syz1 as /devices/virtual/input/input54 [ 174.237540][ T5952] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 174.343969][ T7455] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 174.345923][ T7455] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 174.348611][ T7455] vhci_hcd vhci_hcd.0: Device attached [ 174.551348][ T7462] syz.3.315 uses obsolete (PF_INET,SOCK_PACKET) [ 174.554734][ T7462] syzkaller1: entered promiscuous mode [ 174.557073][ T7462] syzkaller1: entered allmulticast mode [ 174.602772][ T29] usb 39-1: new high-speed USB device number 5 using vhci_hcd [ 174.621731][ T7464] input: syz1 as /devices/virtual/input/input55 [ 174.782842][ T7456] vhci_hcd: connection reset by peer [ 174.785279][ T1140] vhci_hcd: stop threads [ 174.787057][ T1140] vhci_hcd: release socket [ 174.788585][ T1140] vhci_hcd: disconnect device [ 174.812755][ T7472] syzkaller1: entered promiscuous mode [ 174.814600][ T7472] syzkaller1: entered allmulticast mode [ 174.990812][ T5952] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 175.402794][ T5952] Bluetooth: hci3: command 0x0406 tx timeout [ 175.405237][ T5952] Bluetooth: hci2: command 0x0406 tx timeout [ 175.407346][ T5952] Bluetooth: hci0: command 0x0401 tx timeout [ 175.425018][ T5953] Bluetooth: hci2: hardware error 0x00 [ 175.428297][ T63] Bluetooth: hci3: hardware error 0x00 [ 175.456195][ T53] Process accounting resumed [ 175.520131][ T7487] input: syz1 as /devices/virtual/input/input56 [ 175.822809][ T53] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 175.834150][ T6033] rc_core: IR keymap rc-hauppauge not found [ 175.836362][ T6033] Registered IR keymap rc-empty [ 175.838703][ T6033] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 175.852726][ T6033] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 175.873400][ T6033] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 175.879230][ T6033] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input57 [ 175.891422][ T6033] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 175.912659][ T6033] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 175.932632][ T6033] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 175.952689][ T6033] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 175.973109][ T6033] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 175.977165][ T53] usb 6-1: Using ep0 maxpacket: 32 [ 175.981132][ T53] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 175.981148][ T53] usb 6-1: config 0 has no interface number 0 [ 175.984378][ T53] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 175.984403][ T53] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.984419][ T53] usb 6-1: Product: syz [ 175.984432][ T53] usb 6-1: Manufacturer: syz [ 175.984444][ T53] usb 6-1: SerialNumber: syz [ 175.988575][ T53] usb 6-1: config 0 descriptor?? [ 175.991953][ T53] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 175.991977][ T53] usb 6-1: selecting invalid altsetting 1 [ 175.991990][ T53] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 175.993670][ T6033] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 175.996758][ T53] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 175.996953][ T53] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 175.996984][ T53] usb 6-1: media controller created [ 176.008769][ T53] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 176.013074][ T6033] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 176.084030][ T6033] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 176.102747][ T6033] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 176.122820][ T6033] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 176.145454][ T6033] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 176.148606][ T6033] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 176.167381][ T6033] usb 7-1: USB disconnect, device number 3 [ 176.194732][ T53] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 176.198235][ T53] zl10353_read_register: readreg error (reg=127, ret==-71) [ 176.202289][ T53] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 176.246617][ T53] usb 6-1: USB disconnect, device number 2 [ 177.341194][ T7537] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 177.344052][ T7537] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 177.346900][ T7537] vhci_hcd vhci_hcd.0: Device attached [ 177.482741][ T5953] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 177.485286][ T63] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 177.602687][ T6034] usb 43-1: new high-speed USB device number 5 using vhci_hcd [ 177.633384][ T7548] netlink: 'syz.2.344': attribute type 2 has an invalid length. [ 177.866001][ T7561] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.349'. [ 177.930794][ T7540] vhci_hcd: connection reset by peer [ 177.934732][ T89] vhci_hcd: stop threads [ 177.936340][ T89] vhci_hcd: release socket [ 177.938027][ T89] vhci_hcd: disconnect device [ 177.942638][ T54] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 178.017381][ T7568] Bluetooth: MGMT ver 1.23 [ 178.061636][ T7570] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 178.081227][ T7570] netlink: 28 bytes leftover after parsing attributes in process `syz.2.352'. [ 178.084310][ T7570] netlink: 28 bytes leftover after parsing attributes in process `syz.2.352'. [ 178.122977][ T7572] netlink: 204 bytes leftover after parsing attributes in process `syz.2.353'. [ 178.182690][ T54] usb 6-1: Using ep0 maxpacket: 32 [ 178.187886][ T54] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.193185][ T54] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.196552][ T54] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 178.206438][ T54] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 178.210509][ T54] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 178.213942][ T54] usb 6-1: Product: syz [ 178.215574][ T54] usb 6-1: Manufacturer: syz [ 178.217213][ T54] usb 6-1: SerialNumber: syz [ 178.230243][ T54] input: appletouch as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/input/input58 [ 178.284382][ T63] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 178.288394][ T63] Bluetooth: hci1: Injecting HCI hardware error event [ 178.293461][ T63] Bluetooth: hci1: hardware error 0x00 [ 178.537296][ T840] usb 6-1: USB disconnect, device number 3 [ 178.561847][ T840] appletouch 6-1:1.0: input: appletouch disconnected [ 179.123651][ T7602] input: syz1 as /devices/virtual/input/input59 [ 179.172784][ T10] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 179.248841][ T7604] netlink: 'syz.1.363': attribute type 2 has an invalid length. [ 179.336069][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 179.342099][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.348899][ T10] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 179.359108][ T10] usb 8-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 179.362477][ T10] usb 8-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 179.368937][ T10] usb 8-1: Product: syz [ 179.370365][ T10] usb 8-1: Manufacturer: syz [ 179.371994][ T10] usb 8-1: SerialNumber: syz [ 179.381818][ T10] appletouch 8-1:1.0: Could not find int-in endpoint [ 179.394435][ T10] appletouch 8-1:1.0: probe with driver appletouch failed with error -5 [ 179.397857][ T10] usbhid 8-1:1.0: couldn't find an input interrupt endpoint [ 179.587341][ T24] usb 8-1: USB disconnect, device number 6 [ 179.683160][ T7612] netlink: 212 bytes leftover after parsing attributes in process `syz.2.366'. [ 179.722655][ T29] vhci_hcd: vhci_device speed not set [ 179.962690][ T6033] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 179.993292][ T7616] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 179.995843][ T7616] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 179.999624][ T7616] vhci_hcd vhci_hcd.0: Device attached [ 180.112712][ T6033] usb 7-1: Using ep0 maxpacket: 32 [ 180.122186][ T6033] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.127280][ T6033] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.141673][ T6033] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.149507][ T6033] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 180.153327][ T6033] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 180.156775][ T6033] usb 7-1: Product: syz [ 180.158535][ T6033] usb 7-1: Manufacturer: syz [ 180.160304][ T6033] usb 7-1: SerialNumber: syz [ 180.171893][ T6033] input: appletouch as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/input/input60 [ 180.252773][ T54] usb 37-1: new high-speed USB device number 8 using vhci_hcd [ 180.294422][ T7624] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 180.372711][ T63] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 180.380378][ T6033] usb 7-1: USB disconnect, device number 4 [ 180.397687][ T7626] input: syz1 as /devices/virtual/input/input61 [ 180.410791][ T6033] appletouch 7-1:1.0: input: appletouch disconnected [ 180.428581][ T7628] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 180.431387][ T7628] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 180.434891][ T7628] vhci_hcd vhci_hcd.0: Device attached [ 180.441701][ T7629] vhci_hcd: connection closed [ 180.451083][ T1140] vhci_hcd: stop threads [ 180.456680][ T1140] vhci_hcd: release socket [ 180.458195][ T1140] vhci_hcd: disconnect device [ 180.496096][ T7617] vhci_hcd: connection reset by peer [ 180.499431][ T1140] vhci_hcd: stop threads [ 180.501217][ T1140] vhci_hcd: release socket [ 180.503823][ T1140] vhci_hcd: disconnect device [ 180.652776][ T29] vhci_hcd: vhci_device speed not set [ 181.216541][ T7645] syzkaller1: entered promiscuous mode [ 181.219212][ T7645] syzkaller1: entered allmulticast mode [ 181.486626][ T7652] input: syz1 as /devices/virtual/input/input62 [ 181.627754][ T7658] netlink: 28 bytes leftover after parsing attributes in process `syz.0.384'. [ 181.631507][ T7658] netlink: 28 bytes leftover after parsing attributes in process `syz.0.384'. [ 181.956833][ T7668] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 181.959274][ T7668] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 181.963076][ T7668] vhci_hcd vhci_hcd.0: Device attached [ 182.585757][ T7669] vhci_hcd: connection closed [ 182.585915][ T46] vhci_hcd: stop threads [ 182.589704][ T46] vhci_hcd: release socket [ 182.591391][ T46] vhci_hcd: disconnect device [ 182.797413][ T6034] vhci_hcd: vhci_device speed not set [ 182.931309][ T7691] nbd: nbd0 already in use [ 183.494822][ T7699] netlink: 28 bytes leftover after parsing attributes in process `syz.1.398'. [ 183.501181][ T7699] netlink: 28 bytes leftover after parsing attributes in process `syz.1.398'. [ 183.883944][ T7718] netlink: 'syz.1.404': attribute type 2 has an invalid length. [ 184.646977][ T7735] netlink: 'syz.2.409': attribute type 2 has an invalid length. [ 185.002383][ T7740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.410'. [ 185.017992][ T7740] loop2: detected capacity change from 0 to 7 [ 185.037688][ T7740] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 185.039820][ T7740] loop2: partition table partially beyond EOD, truncated [ 185.043906][ T7740] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 185.621768][ T7749] nbd: nbd0 already in use [ 185.622593][ T54] vhci_hcd: vhci_device speed not set [ 185.623483][ T7756] nbd: nbd0 already in use [ 185.636498][ T7756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.416'. [ 185.757179][ T7756] loop2: detected capacity change from 0 to 7 [ 185.769125][ T7756] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 185.770945][ T7756] loop2: partition table partially beyond EOD, truncated [ 185.774185][ T7756] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 185.961753][ T5354] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 185.964925][ T5354] loop2: partition table partially beyond EOD, truncated [ 185.968480][ T5354] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 185.974086][ T7757] nbd: nbd0 already in use [ 186.091099][ T5354] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 186.093435][ T5354] loop2: partition table partially beyond EOD, truncated [ 186.097084][ T5354] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 186.239886][ T5947] udevd[5947]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 186.669707][ T7779] loop2: detected capacity change from 0 to 7 [ 186.687878][ T7779] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 186.689703][ T7779] loop2: partition table partially beyond EOD, truncated [ 186.694108][ T7779] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 187.358348][ T5947] udevd[5947]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 188.154256][ T7787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.426'. [ 188.260646][ T7796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.428'. [ 188.314185][ T7796] loop2: detected capacity change from 0 to 7 [ 188.356296][ T7796] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 188.358193][ T7796] loop2: partition table partially beyond EOD, truncated [ 188.361062][ T7796] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 188.607789][ T5354] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 188.610463][ T5354] loop2: partition table partially beyond EOD, truncated [ 188.614008][ T5354] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 188.632021][ T5354] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 188.634250][ T5354] loop2: partition table partially beyond EOD, truncated [ 188.637008][ T5354] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 188.739337][ T7802] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 188.754674][ T219] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 189.072816][ T6033] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 189.244359][ T6033] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.247970][ T6033] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 189.255127][ T6033] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 189.258769][ T6033] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.263742][ T6033] usb 6-1: config 0 descriptor?? [ 189.272390][ T6033] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 189.276486][ T6033] dvb-usb: bulk message failed: -22 (3/0) [ 189.282660][ T6033] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 189.288599][ T6033] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 189.292287][ T6033] usb 6-1: media controller created [ 189.295687][ T6033] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 189.305717][ T6033] dvb-usb: bulk message failed: -22 (6/0) [ 189.308096][ T6033] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 189.322961][ T6033] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input65 [ 189.332346][ T6033] dvb-usb: schedule remote query interval to 150 msecs. [ 189.349449][ T6033] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 189.352837][ T7815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.434'. [ 189.481698][ T10] usb 6-1: USB disconnect, device number 4 [ 189.538681][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 190.650987][ T7837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.442'. [ 190.651988][ T7838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.441'. [ 190.676055][ T7837] loop2: detected capacity change from 0 to 7 [ 190.687074][ T7837] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 190.688804][ T7837] loop2: partition table partially beyond EOD, truncated [ 190.691324][ T7837] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 190.957599][ T5354] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 190.959808][ T5354] loop2: partition table partially beyond EOD, truncated [ 190.962394][ T5354] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 191.601520][ T40] audit: type=1326 audit(1750828636.156:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7842 comm="syz.1.444" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 191.612637][ T40] audit: type=1326 audit(1750828636.156:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7842 comm="syz.1.444" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 191.633162][ T40] audit: type=1326 audit(1750828636.166:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7842 comm="syz.1.444" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 191.652637][ T40] audit: type=1326 audit(1750828636.166:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7842 comm="syz.1.444" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 191.672622][ T40] audit: type=1326 audit(1750828636.166:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7842 comm="syz.1.444" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 191.682759][ T40] audit: type=1326 audit(1750828636.176:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7842 comm="syz.1.444" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 191.697023][ T40] audit: type=1326 audit(1750828636.186:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7842 comm="syz.1.444" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 191.712737][ T40] audit: type=1326 audit(1750828636.186:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7842 comm="syz.1.444" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 191.729742][ T40] audit: type=1326 audit(1750828636.196:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7842 comm="syz.1.444" exe="/syz-executor" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 191.742595][ T40] audit: type=1326 audit(1750828636.196:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7842 comm="syz.1.444" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 192.012087][ T7849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.445'. [ 192.015491][ T7853] nbd: nbd0 already in use [ 192.052832][ T5953] Bluetooth: hci0: command 0x0401 tx timeout [ 192.575273][ T7871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.451'. [ 192.586330][ T7871] loop2: detected capacity change from 0 to 7 [ 192.607853][ T7871] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 192.610134][ T7871] loop2: partition table partially beyond EOD, truncated [ 192.614003][ T7871] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 192.895642][ T7877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.454'. [ 193.293877][ T5354] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 193.295800][ T5354] loop2: partition table partially beyond EOD, truncated [ 193.298778][ T5354] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 193.335576][ T5354] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 193.337529][ T5354] loop2: partition table partially beyond EOD, truncated [ 193.352257][ T5354] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 193.529441][ T5354] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 193.531524][ T5354] loop2: partition table partially beyond EOD, truncated [ 193.535539][ T5354] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 193.617530][ T7880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'. [ 193.638149][ T5947] udevd[5947]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 193.670486][ T7880] loop2: detected capacity change from 0 to 7 [ 193.711392][ T7880] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 193.713718][ T7880] loop2: partition table partially beyond EOD, truncated [ 193.716733][ T7880] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 193.772792][ T7896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.458'. [ 194.057170][ T5354] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 194.059731][ T5354] loop2: partition table partially beyond EOD, truncated [ 194.064570][ T5354] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 195.422726][ T7921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.469'. [ 195.433029][ T7928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.472'. [ 195.435809][ T7921] loop2: detected capacity change from 0 to 7 [ 195.448793][ T7928] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 195.451725][ T7928] loop2: partition table partially beyond EOD, truncated [ 195.455118][ T7928] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 195.474790][ T7921] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 195.477177][ T7921] loop2: partition table partially beyond EOD, truncated [ 195.481337][ T7921] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 195.649688][ T7931] netlink: 28 bytes leftover after parsing attributes in process `syz.0.473'. [ 195.653060][ T7931] netlink: 28 bytes leftover after parsing attributes in process `syz.0.473'. [ 195.659614][ T5354] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 195.661435][ T5354] loop2: partition table partially beyond EOD, truncated [ 195.668997][ T5354] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 195.687461][ T5354] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 195.690389][ T5354] loop2: partition table partially beyond EOD, truncated [ 195.694622][ T5354] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 195.775594][ T5947] udevd[5947]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 195.805524][ T5947] udevd[5947]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 196.304461][ T7952] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 196.307227][ T7952] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 196.317223][ T7952] vhci_hcd vhci_hcd.0: Device attached [ 197.377520][ T7953] vhci_hcd: connection closed [ 197.377735][ T12] vhci_hcd: stop threads [ 197.382401][ T12] vhci_hcd: release socket [ 197.391889][ T12] vhci_hcd: disconnect device [ 197.432659][ T839] usb 37-1: new high-speed USB device number 9 using vhci_hcd [ 197.435595][ T839] usb 37-1: enqueue for inactive port 0 [ 197.583389][ T839] vhci_hcd: vhci_device speed not set [ 197.850822][ T7982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.489'. [ 197.861291][ T7982] loop2: detected capacity change from 0 to 7 [ 197.874361][ T7982] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 197.876271][ T7982] loop2: partition table partially beyond EOD, truncated [ 197.879787][ T7982] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 198.211667][ T5354] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 198.214792][ T5354] loop2: partition table partially beyond EOD, truncated [ 198.218968][ T5354] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 198.581226][ T7994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.493'. [ 198.586920][ T7994] loop2: detected capacity change from 0 to 7 [ 198.594614][ T7994] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 198.596854][ T7994] loop2: partition table partially beyond EOD, truncated [ 198.600078][ T7994] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 198.926432][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.929289][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.932145][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 198.932155][ T40] audit: type=1326 audit(1750828643.486:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7995 comm="syz.3.495" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 198.946398][ T40] audit: type=1326 audit(1750828643.486:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7995 comm="syz.3.495" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 198.954176][ T40] audit: type=1326 audit(1750828643.486:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7995 comm="syz.3.495" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 198.961457][ T40] audit: type=1326 audit(1750828643.486:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7995 comm="syz.3.495" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 198.972004][ T40] audit: type=1326 audit(1750828643.486:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7995 comm="syz.3.495" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 198.981905][ T40] audit: type=1326 audit(1750828643.496:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7995 comm="syz.3.495" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 198.989388][ T40] audit: type=1326 audit(1750828643.496:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7995 comm="syz.3.495" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 198.996309][ T40] audit: type=1326 audit(1750828643.496:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7995 comm="syz.3.495" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 199.003665][ T40] audit: type=1326 audit(1750828643.506:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7995 comm="syz.3.495" exe="/syz-executor" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 199.011518][ T40] audit: type=1326 audit(1750828643.506:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7995 comm="syz.3.495" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 199.445751][ T8010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.496'. [ 199.456912][ T8010] loop2: detected capacity change from 0 to 7 [ 199.464845][ T8010] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 199.466886][ T8010] loop2: partition table partially beyond EOD, truncated [ 199.469677][ T8010] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 200.252966][ T8022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.502'. [ 200.258493][ T8022] loop2: detected capacity change from 0 to 7 [ 200.266449][ T8022] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 200.268788][ T8022] loop2: partition table partially beyond EOD, truncated [ 200.271181][ T8022] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 200.297390][ T5354] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 200.300479][ T5354] loop2: partition table partially beyond EOD, truncated [ 200.303230][ T5354] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 200.341229][ T8023] nbd: nbd0 already in use [ 200.382132][ T8033] netlink: 'syz.1.507': attribute type 2 has an invalid length. [ 200.493790][ T5947] udevd[5947]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 200.906561][ T34] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 201.055702][ T34] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.060107][ T34] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 201.064309][ T34] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 201.067868][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.097046][ T34] usb 5-1: config 0 descriptor?? [ 201.104371][ T34] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 201.108915][ T34] dvb-usb: bulk message failed: -22 (3/0) [ 201.118194][ T34] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 201.126764][ T34] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 201.129224][ T34] usb 5-1: media controller created [ 201.131733][ T34] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 201.141059][ T34] dvb-usb: bulk message failed: -22 (6/0) [ 201.147934][ T34] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 201.153940][ T34] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input67 [ 201.165597][ T34] dvb-usb: schedule remote query interval to 150 msecs. [ 201.171250][ T34] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 201.304068][ T8043] dibusb: i2c wr: len=198 is too big! [ 201.304068][ T8043] [ 201.307892][ T34] usb 5-1: USB disconnect, device number 3 [ 201.335575][ T34] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 201.806329][ T8077] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 201.809209][ T8077] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 201.812022][ T8077] vhci_hcd vhci_hcd.0: Device attached [ 201.925208][ T8087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.528'. [ 202.242638][ T839] usb 41-1: new high-speed USB device number 8 using vhci_hcd [ 202.290777][ T8079] vhci_hcd: connection reset by peer [ 202.292829][ T1139] vhci_hcd: stop threads [ 202.294176][ T1139] vhci_hcd: release socket [ 202.295805][ T1139] vhci_hcd: disconnect device [ 202.317076][ T8098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.526'. [ 202.324282][ T8098] loop2: detected capacity change from 0 to 7 [ 202.333501][ T8098] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 202.343309][ T8098] loop2: partition table partially beyond EOD, truncated [ 202.347744][ T8098] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 202.973669][ T8130] overlayfs: missing 'lowerdir' [ 203.385015][ T8151] nbd: nbd0 already in use [ 204.043318][ T8153] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 204.045450][ T8153] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 204.048624][ T8153] vhci_hcd vhci_hcd.0: Device attached [ 204.292675][ T53] usb 43-1: new high-speed USB device number 6 using vhci_hcd [ 204.558159][ T8155] vhci_hcd: connection reset by peer [ 204.560237][ T1139] vhci_hcd: stop threads [ 204.561654][ T1139] vhci_hcd: release socket [ 204.563890][ T1139] vhci_hcd: disconnect device [ 206.338995][ T8194] nbd: nbd0 already in use [ 206.576986][ T8203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.566'. [ 207.472818][ T839] vhci_hcd: vhci_device speed not set [ 207.763461][ T8235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.577'. [ 208.812131][ T8248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.579'. [ 208.818634][ T8248] loop2: detected capacity change from 0 to 7 [ 208.826673][ T8248] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 208.828414][ T8248] loop2: partition table partially beyond EOD, truncated [ 208.830847][ T8248] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 208.848302][ T8251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.580'. [ 209.016964][ T5354] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 209.018944][ T5354] loop2: partition table partially beyond EOD, truncated [ 209.021504][ T5354] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 209.094435][ T5947] udevd[5947]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 209.220790][ T8271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.590'. [ 209.402716][ T53] vhci_hcd: vhci_device speed not set [ 209.417466][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 209.420375][ T40] audit: type=1326 audit(1750828653.976:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8261 comm="syz.0.587" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 209.431124][ T40] audit: type=1326 audit(1750828653.976:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8261 comm="syz.0.587" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 209.439609][ T40] audit: type=1326 audit(1750828653.976:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8261 comm="syz.0.587" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 209.449157][ T40] audit: type=1326 audit(1750828653.976:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8261 comm="syz.0.587" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 209.457041][ T40] audit: type=1326 audit(1750828653.976:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8261 comm="syz.0.587" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 209.466054][ T40] audit: type=1326 audit(1750828653.976:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8261 comm="syz.0.587" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 209.474743][ T40] audit: type=1326 audit(1750828653.976:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8261 comm="syz.0.587" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 209.482036][ T40] audit: type=1326 audit(1750828653.976:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8261 comm="syz.0.587" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 209.488782][ T40] audit: type=1326 audit(1750828653.986:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8261 comm="syz.0.587" exe="/syz-executor" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 209.495828][ T40] audit: type=1326 audit(1750828653.996:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8261 comm="syz.0.587" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 209.520986][ T8277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.591'. [ 209.530823][ T8277] loop2: detected capacity change from 0 to 7 [ 209.538168][ T8277] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 209.539969][ T8277] loop2: partition table partially beyond EOD, truncated [ 209.542777][ T8277] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 209.663132][ T8278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.588'. [ 210.034359][ T5354] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 210.036778][ T5354] loop2: partition table partially beyond EOD, truncated [ 210.039450][ T5354] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 210.373177][ T8301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.597'. [ 210.382699][ T8301] loop2: detected capacity change from 0 to 7 [ 210.390395][ T8301] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 210.392213][ T8301] loop2: partition table partially beyond EOD, truncated [ 210.394756][ T8301] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 211.260117][ T8310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.601'. [ 211.270187][ T8310] loop2: detected capacity change from 0 to 7 [ 211.279931][ T8310] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 211.281794][ T8310] loop2: partition table partially beyond EOD, truncated [ 211.286652][ T8310] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 211.815287][ T5354] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 211.817166][ T5354] loop2: partition table partially beyond EOD, truncated [ 211.819486][ T5354] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 213.001485][ T8347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.610'. [ 213.008529][ T8347] loop2: detected capacity change from 0 to 7 [ 213.035873][ T8347] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 213.037668][ T8347] loop2: partition table partially beyond EOD, truncated [ 213.040458][ T8347] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 213.368500][ T8357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.619'. [ 213.373341][ T8357] loop2: detected capacity change from 0 to 7 [ 213.389989][ T8357] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 213.393374][ T8357] loop2: partition table partially beyond EOD, truncated [ 213.396309][ T8357] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 214.205789][ T8378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.625'. [ 214.242257][ T8380] 9pnet_fd: Insufficient options for proto=fd [ 215.544182][ T8408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.635'. [ 215.588849][ T8410] 9pnet_fd: Insufficient options for proto=fd [ 215.873937][ T8414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.637'. [ 215.882216][ T8414] loop2: detected capacity change from 0 to 7 [ 215.889375][ T8414] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 215.891212][ T8414] loop2: partition table partially beyond EOD, truncated [ 215.894428][ T8414] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 216.456953][ T8426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.640'. [ 216.697916][ T5354] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 216.699829][ T5354] loop2: partition table partially beyond EOD, truncated [ 216.702953][ T5354] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 216.751163][ T5354] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 216.758033][ T5354] loop2: partition table partially beyond EOD, truncated [ 216.761989][ T5354] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 216.954413][ T8430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.642'. [ 217.044932][ T5354] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 217.047300][ T5354] loop2: partition table partially beyond EOD, truncated [ 217.049731][ T5354] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 217.229419][ T8438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.645'. [ 218.404527][ T8464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.652'. [ 218.413871][ T8464] loop2: detected capacity change from 0 to 7 [ 218.424148][ T8464] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 218.426134][ T8464] loop2: partition table partially beyond EOD, truncated [ 218.429078][ T8464] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 218.893910][ T5354] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 218.895670][ T5354] loop2: partition table partially beyond EOD, truncated [ 218.898502][ T5354] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 218.945526][ T5947] udevd[5947]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 219.062351][ T8473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.656'. [ 219.623865][ T8471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.655'. [ 219.848374][ T8471] loop2: detected capacity change from 0 to 7 [ 219.855381][ T8471] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 219.857444][ T8471] loop2: partition table partially beyond EOD, truncated [ 219.860110][ T8471] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 220.134433][ T8498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.666'. [ 220.862025][ T8512] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 220.864147][ T8512] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 220.866806][ T8512] vhci_hcd vhci_hcd.0: Device attached [ 221.030062][ T8513] vhci_hcd: connection closed [ 221.032777][ T1143] vhci_hcd: stop threads [ 221.042674][ T1143] vhci_hcd: release socket [ 221.044220][ T1143] vhci_hcd: disconnect device [ 221.120049][ T839] vhci_hcd: vhci_device speed not set [ 221.983617][ T8548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.680'. [ 223.182033][ T8584] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 223.184483][ T8584] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 223.187731][ T8584] vhci_hcd vhci_hcd.0: Device attached [ 223.356791][ T8585] vhci_hcd: connection closed [ 223.357287][ T46] vhci_hcd: stop threads [ 223.361327][ T46] vhci_hcd: release socket [ 223.363992][ T46] vhci_hcd: disconnect device [ 223.412634][ T839] vhci_hcd: vhci_device speed not set [ 223.974499][ T8599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.696'. [ 223.983344][ T8599] loop2: detected capacity change from 0 to 7 [ 223.997429][ T8599] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 223.999367][ T8599] loop2: partition table partially beyond EOD, truncated [ 224.002072][ T8599] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 224.981520][ T8619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.701'. [ 225.237493][ T8620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.702'. [ 225.245661][ T8620] loop2: detected capacity change from 0 to 7 [ 225.257008][ T8620] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 225.259607][ T8620] loop2: partition table partially beyond EOD, truncated [ 225.264025][ T8620] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 225.614677][ T5354] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 225.616495][ T5354] loop2: partition table partially beyond EOD, truncated [ 225.619117][ T5354] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 225.757297][ T5947] udevd[5947]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 225.779662][ T5947] udevd[5947]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 226.025396][ T8649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.709'. [ 226.036474][ T8649] loop2: detected capacity change from 0 to 7 [ 226.050970][ T8649] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 226.052862][ T8649] loop2: partition table partially beyond EOD, truncated [ 226.055684][ T8649] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 226.842750][ T6033] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 226.924341][ T8664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.714'. [ 226.934165][ T8664] loop2: detected capacity change from 0 to 7 [ 226.944568][ T8664] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 226.946554][ T8664] loop2: partition table partially beyond EOD, truncated [ 226.949334][ T8664] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 227.262636][ T6033] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.266655][ T6033] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 227.269896][ T6033] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 227.274036][ T6033] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.278500][ T6033] usb 5-1: config 0 descriptor?? [ 227.282806][ T6033] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 227.284945][ T6033] dvb-usb: bulk message failed: -22 (3/0) [ 227.287918][ T6033] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 227.291095][ T6033] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 227.293820][ T6033] usb 5-1: media controller created [ 227.297398][ T6033] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 227.303272][ T6033] dvb-usb: bulk message failed: -22 (6/0) [ 227.305632][ T6033] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 227.310966][ T6033] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input68 [ 227.316994][ T6033] dvb-usb: schedule remote query interval to 150 msecs. [ 227.319758][ T6033] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 227.476695][ T6033] dvb-usb: bulk message failed: -22 (1/0) [ 227.479722][ T6033] dvb-usb: error while querying for an remote control event. [ 227.489155][ T8657] dvb-usb: bulk message failed: -22 (2/0) [ 227.492791][ T6034] usb 5-1: USB disconnect, device number 4 [ 227.507743][ T5354] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 227.509478][ T5354] loop2: partition table partially beyond EOD, truncated [ 227.511930][ T5354] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 227.586303][ T8674] netlink: 40 bytes leftover after parsing attributes in process `syz.3.719'. [ 227.966159][ T5354] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 227.968052][ T5354] loop2: partition table partially beyond EOD, truncated [ 227.970333][ T5354] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 228.028295][ T6034] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 228.053204][ T8681] fuse: Bad value for 'fd' [ 228.657165][ T6034] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 228.828134][ T8704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.729'. [ 228.837551][ T8704] loop2: detected capacity change from 0 to 7 [ 228.848562][ T8704] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 228.850655][ T8704] loop2: partition table partially beyond EOD, truncated [ 228.854950][ T8704] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 228.928023][ T8708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.730'. [ 229.156218][ T6034] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.163795][ T6034] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 229.170362][ T6034] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 229.177099][ T6034] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.184460][ T6034] usb 5-1: config 0 descriptor?? [ 229.191114][ T6034] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 229.196733][ T6034] dvb-usb: bulk message failed: -22 (3/0) [ 229.202355][ T6034] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 229.210558][ T6034] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 229.219633][ T6034] usb 5-1: media controller created [ 229.225455][ T6034] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 229.242415][ T6034] dvb-usb: bulk message failed: -22 (6/0) [ 229.244635][ T6034] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 229.246535][ T5354] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 229.248545][ T6034] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input69 [ 229.248934][ T5354] loop2: partition table partially beyond EOD, truncated [ 229.253918][ T6034] dvb-usb: schedule remote query interval to 150 msecs. [ 229.255407][ T5354] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 229.256953][ T6034] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 229.377026][ T5354] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 229.378766][ T5354] loop2: partition table partially beyond EOD, truncated [ 229.381365][ T5354] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 229.394857][ T8690] dibusb: i2c wr: len=198 is too big! [ 229.394857][ T8690] [ 229.398578][ T24] usb 5-1: USB disconnect, device number 5 [ 229.412417][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 229.817438][ T8730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.738'. [ 229.826297][ T8730] loop2: detected capacity change from 0 to 7 [ 229.841310][ T8730] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 229.843200][ T8730] loop2: partition table partially beyond EOD, truncated [ 229.846008][ T8730] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 230.172882][ T24] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 230.554112][ T5354] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 230.556353][ T5354] loop2: partition table partially beyond EOD, truncated [ 230.559670][ T5354] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 230.587291][ T5354] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 230.589083][ T5354] loop2: partition table partially beyond EOD, truncated [ 230.591529][ T5354] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 230.639018][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.643394][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 230.647688][ T24] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 230.651201][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.657041][ T24] usb 6-1: config 0 descriptor?? [ 230.665515][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 230.668126][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 230.693241][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 230.699999][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 230.702253][ T24] usb 6-1: media controller created [ 230.709473][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 230.722980][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 230.725545][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 230.737966][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input70 [ 230.756439][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 230.759420][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 230.865489][ T8729] dvb-usb: bulk message failed: -22 (2/0) [ 230.868415][ T34] usb 6-1: USB disconnect, device number 5 [ 230.882075][ T34] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 230.984376][ T8749] serio: Serial port ptm0 [ 231.272802][ T10] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 231.390189][ T8757] serio: Serial port ptm1 [ 231.404323][ T10] usb 5-1: device descriptor read/64, error -71 [ 231.663057][ T10] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 231.675167][ T8765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.748'. [ 231.687926][ T8765] loop2: detected capacity change from 0 to 7 [ 231.700377][ T8765] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 231.702719][ T8765] loop2: partition table partially beyond EOD, truncated [ 231.706058][ T8765] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 231.804079][ T10] usb 5-1: device descriptor read/64, error -71 [ 231.924262][ T10] usb usb5-port1: attempt power cycle [ 232.048756][ T5354] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 232.050785][ T5354] loop2: partition table partially beyond EOD, truncated [ 232.054218][ T5354] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 232.157369][ T5354] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 232.159610][ T5354] loop2: partition table partially beyond EOD, truncated [ 232.162391][ T5354] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 232.169394][ T8773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.752'. [ 232.241088][ T5354] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 232.243918][ T5354] loop2: partition table partially beyond EOD, truncated [ 232.247936][ T5354] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 232.272811][ T10] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 232.292077][ T5354] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 232.293379][ T10] usb 5-1: device descriptor read/8, error -71 [ 232.294491][ T5354] loop2: partition table partially beyond EOD, truncated [ 232.298695][ T5354] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 232.405309][ T5354] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 232.407355][ T5354] loop2: partition table partially beyond EOD, truncated [ 232.409958][ T5354] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 232.429820][ T5947] udevd[5947]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 232.461372][ T5947] udevd[5947]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 232.553431][ T10] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 232.573341][ T10] usb 5-1: device descriptor read/8, error -71 [ 232.633683][ T8783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.755'. [ 232.644951][ T8783] loop2: detected capacity change from 0 to 7 [ 232.660631][ T8783] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 232.663113][ T8783] loop2: partition table partially beyond EOD, truncated [ 232.666351][ T8783] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 232.694281][ T10] usb usb5-port1: unable to enumerate USB device [ 232.772989][ T8785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.756'. [ 233.192692][ T5354] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 233.196108][ T5354] loop2: partition table partially beyond EOD, truncated [ 233.199721][ T5354] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 233.232269][ T5354] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 233.234408][ T5354] loop2: partition table partially beyond EOD, truncated [ 233.237005][ T5354] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 233.263930][ T5354] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 233.265987][ T5354] loop2: partition table partially beyond EOD, truncated [ 233.269935][ T5354] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 233.578979][ T8793] serio: Serial port ptm0 [ 234.394477][ T8814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.765'. [ 234.939364][ T8826] serio: Serial port ptm0 [ 235.411957][ T8840] serio: Serial port ptm2 [ 236.106956][ T8855] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.777'. [ 236.526925][ T8868] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 236.529581][ T8868] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 236.532448][ T8868] vhci_hcd vhci_hcd.0: Device attached [ 236.823731][ T8877] loop2: detected capacity change from 0 to 7 [ 236.839959][ T8877] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 236.842091][ T8877] loop2: partition table partially beyond EOD, truncated [ 236.845570][ T8877] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 237.097406][ T8880] serio: Serial port ptm0 [ 237.301669][ T8869] vhci_hcd: connection closed [ 237.302375][ T1140] vhci_hcd: stop threads [ 237.306880][ T1140] vhci_hcd: release socket [ 237.309640][ T1140] vhci_hcd: disconnect device [ 237.322593][ T29] usb 43-1: new high-speed USB device number 8 using vhci_hcd [ 237.325140][ T29] usb 43-1: enqueue for inactive port 0 [ 237.402625][ T29] vhci_hcd: vhci_device speed not set [ 237.745552][ T8890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.786'. [ 237.907353][ T8909] serio: Serial port ptm0 [ 238.383341][ T8921] serio: Serial port ptm1 [ 238.406886][ T8920] serio: Serial port ptm2 [ 239.081339][ T8933] serio: Serial port ptm1 [ 239.898057][ T8949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.798'. [ 240.280913][ T8968] serio: Serial port ptm0 [ 240.439034][ T8972] serio: Serial port ptm1 [ 241.347682][ T8991] serio: Serial port ptm0 [ 241.383774][ T8992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.808'. [ 241.864451][ T9010] serio: Serial port ptm1 [ 242.191595][ T9016] serio: Serial port ptm0 [ 242.896595][ T9031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.819'. [ 243.546005][ T9053] serio: Serial port ptm2 [ 244.057534][ T9068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.830'. [ 244.496525][ T9088] overlayfs: missing 'lowerdir' [ 244.560187][ T9091] serio: Serial port ptm0 [ 244.624441][ T9095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.840'. [ 246.414788][ T9109] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 246.416873][ T9109] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 246.419308][ T9109] vhci_hcd vhci_hcd.0: Device attached [ 246.522336][ T9120] vhci_hcd: connection closed [ 246.522914][ T1140] vhci_hcd: stop threads [ 246.526905][ T1140] vhci_hcd: release socket [ 246.529012][ T1140] vhci_hcd: disconnect device [ 246.949516][ T9125] overlayfs: missing 'lowerdir' [ 246.979142][ T9128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.850'. [ 247.288305][ T9142] serio: Serial port ptm0 [ 247.995259][ T9155] 9pnet_fd: Insufficient options for proto=fd [ 248.266920][ T9151] loop2: detected capacity change from 0 to 7 [ 248.284370][ T9151] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 248.286391][ T9151] loop2: partition table partially beyond EOD, truncated [ 248.289761][ T9151] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 248.417386][ T9166] serio: Serial port ptm0 [ 248.852723][ T9171] overlayfs: missing 'lowerdir' [ 249.063029][ T34] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 249.088265][ T9177] serio: Serial port ptm0 [ 249.344507][ T34] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.349786][ T34] usb 7-1: config 0 has no interfaces? [ 249.352382][ T34] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 249.362934][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.381858][ T34] usb 7-1: config 0 descriptor?? [ 249.651261][ T34] usb 7-1: USB disconnect, device number 5 [ 251.121865][ T9189] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 251.125373][ T9189] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 251.136507][ T9189] vhci_hcd vhci_hcd.0: Device attached [ 251.146643][ T9191] vhci_hcd: connection closed [ 251.150685][ T1140] vhci_hcd: stop threads [ 251.156685][ T1140] vhci_hcd: release socket [ 251.158132][ T1140] vhci_hcd: disconnect device [ 251.244605][ T9201] overlayfs: missing 'lowerdir' [ 251.526232][ T9204] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 251.529042][ T9204] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 251.531814][ T9204] vhci_hcd vhci_hcd.0: Device attached [ 251.552696][ T840] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 251.704860][ T840] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.709057][ T840] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 251.712055][ T840] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 251.715503][ T840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.721592][ T840] usb 5-1: config 0 descriptor?? [ 251.726585][ T840] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 251.729457][ T840] dvb-usb: bulk message failed: -22 (3/0) [ 251.735562][ T840] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 251.739573][ T840] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 251.742495][ T840] usb 5-1: media controller created [ 251.745745][ T840] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 251.751977][ T840] dvb-usb: bulk message failed: -22 (6/0) [ 251.754045][ T840] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 251.759025][ T840] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input71 [ 251.764547][ T840] dvb-usb: schedule remote query interval to 150 msecs. [ 251.766951][ T840] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 251.772703][ T6377] usb 39-1: new high-speed USB device number 6 using vhci_hcd [ 251.933200][ T840] dvb-usb: bulk message failed: -22 (1/0) [ 251.935351][ T840] dvb-usb: error while querying for an remote control event. [ 251.952174][ T9206] dvb-usb: bulk message failed: -22 (59/0) [ 251.966521][ T10] usb 5-1: USB disconnect, device number 10 [ 252.547691][ T9207] vhci_hcd: connection reset by peer [ 252.553099][ T219] vhci_hcd: stop threads [ 252.555005][ T219] vhci_hcd: release socket [ 252.558393][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 252.563143][ T219] vhci_hcd: disconnect device [ 253.440901][ T9226] overlayfs: missing 'lowerdir' [ 254.950436][ T9245] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 254.952845][ T9245] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 254.957133][ T9245] vhci_hcd vhci_hcd.0: Device attached [ 255.202666][ T840] usb 37-1: new high-speed USB device number 11 using vhci_hcd [ 255.223667][ T9248] vhci_hcd: connection reset by peer [ 255.226430][ T46] vhci_hcd: stop threads [ 255.228078][ T46] vhci_hcd: release socket [ 255.230029][ T46] vhci_hcd: disconnect device [ 255.481304][ T9253] fuse: Unknown parameter 'user_i00000000000000000000' [ 255.486138][ T53] Process accounting resumed [ 255.700336][ T9258] overlayfs: missing 'lowerdir' [ 256.897211][ T9280] serio: Serial port ptm0 [ 256.942712][ T6377] vhci_hcd: vhci_device speed not set [ 257.497295][ T9295] loop2: detected capacity change from 0 to 7 [ 257.648324][ T9295] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 257.650947][ T9295] loop2: partition table partially beyond EOD, truncated [ 257.655412][ T9295] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 258.335950][ T9298] serio: Serial port ptm0 [ 258.980216][ T9313] netlink: 132 bytes leftover after parsing attributes in process `syz.1.913'. [ 259.562796][ T9321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.914'. [ 260.376322][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.378946][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.555578][ T840] vhci_hcd: vhci_device speed not set [ 261.193315][ T9336] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 261.195965][ T9336] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 261.201263][ T9336] vhci_hcd vhci_hcd.0: Device attached [ 261.399762][ T9346] vhci_hcd: connection closed [ 261.400174][ T46] vhci_hcd: stop threads [ 261.403600][ T46] vhci_hcd: release socket [ 261.406206][ T46] vhci_hcd: disconnect device [ 261.432713][ T6034] usb 41-1: new high-speed USB device number 9 using vhci_hcd [ 261.435929][ T6034] usb 41-1: enqueue for inactive port 0 [ 261.472633][ T24] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 261.502646][ T6034] vhci_hcd: vhci_device speed not set [ 261.635787][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.641675][ T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 261.646059][ T24] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 261.650344][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.661692][ T24] usb 5-1: config 0 descriptor?? [ 261.694525][ T9357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.929'. [ 261.899176][ T3332] usb 5-1: USB disconnect, device number 11 [ 263.180728][ T9383] fuse: Unknown parameter 'grou00000000000000000000' [ 263.215950][ T9386] overlayfs: missing 'lowerdir' [ 263.262779][ T9388] No control pipe specified [ 263.624194][ T9392] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 263.626473][ T9392] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 263.652642][ T9392] vhci_hcd vhci_hcd.0: Device attached [ 263.899387][ T10] usb 41-1: new high-speed USB device number 10 using vhci_hcd [ 263.924586][ T9395] vhci_hcd: connection reset by peer [ 263.926727][ T1139] vhci_hcd: stop threads [ 263.928241][ T1139] vhci_hcd: release socket [ 263.930717][ T1139] vhci_hcd: disconnect device [ 264.518451][ T9408] netlink: 40 bytes leftover after parsing attributes in process `syz.3.949'. [ 264.564459][ T9415] fuse: Unknown parameter 'grou00000000000000000000' [ 265.662836][ T9444] fuse: Unknown parameter 'grou00000000000000000000' [ 265.797134][ T9450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.962'. [ 265.834313][ T9453] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 265.837488][ T9453] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 265.841079][ T9453] vhci_hcd vhci_hcd.0: Device attached [ 265.889887][ T9458] serio: Serial port ptm0 [ 266.102759][ T3332] usb 37-1: new high-speed USB device number 12 using vhci_hcd [ 266.558190][ T9454] vhci_hcd: connection reset by peer [ 266.561975][ T89] vhci_hcd: stop threads [ 266.564530][ T89] vhci_hcd: release socket [ 266.566663][ T89] vhci_hcd: disconnect device [ 266.914864][ T9473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.968'. [ 268.298035][ T9493] ip6gretap0: entered promiscuous mode [ 268.300048][ T9493] vlan2: entered promiscuous mode [ 268.565302][ T9501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.977'. [ 268.847995][ T9506] loop2: detected capacity change from 0 to 7 [ 268.956958][ T9506] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 268.959401][ T9506] loop2: partition table partially beyond EOD, truncated [ 268.963343][ T9506] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 268.992841][ T10] vhci_hcd: vhci_device speed not set [ 270.186711][ T9520] serio: Serial port ptm0 [ 271.101555][ T9539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.988'. [ 271.150030][ T9543] fuse: Unknown parameter 'group_id00000000000000000000' [ 271.178114][ T9548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.992'. [ 271.234135][ T3332] vhci_hcd: vhci_device speed not set [ 271.462648][ T10] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 271.611612][ T9559] serio: Serial port ptm0 [ 271.635197][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.644198][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 271.679571][ T10] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 271.682895][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.715869][ T10] usb 5-1: config 0 descriptor?? [ 271.732716][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 271.739014][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 271.791300][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 271.809102][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 271.813922][ T10] usb 5-1: media controller created [ 271.816409][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 271.851442][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 271.858676][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 271.877294][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input72 [ 271.887306][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 271.891815][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 271.968284][ T10] usb 5-1: USB disconnect, device number 12 [ 271.978838][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 272.768881][ T9576] fuse: Unknown parameter 'group_id00000000000000000000' [ 272.848516][ T9579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1002'. [ 272.905573][ T9580] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 272.907788][ T9580] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 272.911614][ T9580] vhci_hcd vhci_hcd.0: Device attached [ 273.162638][ T839] usb 37-1: new high-speed USB device number 13 using vhci_hcd [ 273.387611][ T9581] vhci_hcd: connection reset by peer [ 273.462848][ T89] vhci_hcd: stop threads [ 273.464262][ T89] vhci_hcd: release socket [ 273.467424][ T89] vhci_hcd: disconnect device [ 274.488319][ T9610] fuse: Unknown parameter 'group_id00000000000000000000' [ 275.110478][ T9628] serio: Serial port ptm0 [ 275.759090][ T9637] fuse: Bad value for 'user_id' [ 275.761230][ T9637] fuse: Bad value for 'user_id' [ 276.331775][ T9652] ip6gretap0: entered promiscuous mode [ 276.333989][ T9652] vlan2: entered promiscuous mode [ 276.523052][ T9658] fuse: Bad value for 'user_id' [ 276.525366][ T9658] fuse: Bad value for 'user_id' [ 277.213148][ T9679] serio: Serial port ptm0 [ 277.462630][ T9681] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 277.464790][ T9681] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 277.467271][ T9681] vhci_hcd vhci_hcd.0: Device attached [ 277.600540][ T9682] vhci_hcd: connection closed [ 277.601057][ T1139] vhci_hcd: stop threads [ 277.605282][ T1139] vhci_hcd: release socket [ 277.607403][ T1139] vhci_hcd: disconnect device [ 277.982633][ T9690] serio: Serial port ptm0 [ 278.071000][ T9692] fuse: Bad value for 'user_id' [ 278.074494][ T9692] fuse: Bad value for 'user_id' [ 278.352644][ T839] vhci_hcd: vhci_device speed not set [ 279.821364][ T9723] vlan2: entered promiscuous mode [ 279.956943][ T9729] fuse: Bad value for 'fd' [ 282.313139][ T9761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1061'. [ 282.863981][ T9776] fuse: Bad value for 'fd' [ 282.875771][ T9775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1066'. [ 282.989314][ T9784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1070'. [ 283.053063][ T9791] vlan2: entered promiscuous mode [ 283.239587][ T9796] fuse: Bad value for 'fd' [ 283.284254][ T9800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1078'. [ 283.625808][ T9810] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 283.628198][ T9810] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 283.632885][ T9810] vhci_hcd vhci_hcd.0: Device attached [ 283.765442][ T9815] serio: Serial port ptm0 [ 284.177620][ T9811] vhci_hcd: connection closed [ 284.239204][ T12] vhci_hcd: stop threads [ 284.246257][ T12] vhci_hcd: release socket [ 284.250093][ T12] vhci_hcd: disconnect device [ 284.282803][ T839] usb 43-1: new high-speed USB device number 9 using vhci_hcd [ 284.285565][ T839] usb 43-1: enqueue for inactive port 0 [ 284.362866][ T839] vhci_hcd: vhci_device speed not set [ 284.556194][ T9838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1089'. [ 286.645037][ T9859] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1096'. [ 286.777646][ T9862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1098'. [ 286.890899][ T9865] serio: Serial port ptm0 [ 287.430820][ T9875] fuse: Invalid rootmode [ 287.606221][ T9883] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 287.708522][ T9886] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1106'. [ 287.742879][ T9888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1107'. [ 287.780273][ T9892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1109'. [ 287.842948][ T9894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1110'. [ 288.018250][ T9899] serio: Serial port ptm0 [ 288.715229][ T9910] serio: Serial port ptm0 [ 288.760173][ T9913] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1115'. [ 289.152221][ T9931] loop2: detected capacity change from 0 to 7 [ 289.161444][ T9931] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 289.163490][ T9931] loop2: partition table partially beyond EOD, truncated [ 289.166037][ T9931] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 289.364168][ T5354] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 289.366250][ T5354] loop2: partition table partially beyond EOD, truncated [ 289.368664][ T5354] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 289.393491][ T9937] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1124'. [ 289.451291][ T9939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1125'. [ 289.616548][ T9947] serio: Serial port ptm0 [ 290.548675][ T9963] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1133'. [ 290.599050][ T9965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1134'. [ 290.693676][ T9966] serio: Serial port ptm0 [ 291.024988][ T9976] loop2: detected capacity change from 0 to 7 [ 291.083114][ T9976] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 291.085443][ T9976] loop2: partition table partially beyond EOD, truncated [ 291.088601][ T9976] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 291.485071][ T9984] fuse: Bad value for 'rootmode' [ 291.550590][ T9989] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1143'. [ 292.394559][T10004] serio: Serial port ptm0 [ 293.259554][T10015] fuse: Bad value for 'rootmode' [ 293.301226][T10019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1152'. [ 293.368449][T10022] nvme_fabrics: missing parameter 'transport=%s' [ 293.370743][T10022] nvme_fabrics: missing parameter 'nqn=%s' [ 293.522433][T10028] loop2: detected capacity change from 0 to 7 [ 293.530767][T10028] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 293.533111][T10028] loop2: partition table partially beyond EOD, truncated [ 293.536061][T10028] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 293.663948][T10030] serio: Serial port ptm0 [ 294.554095][T10044] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 294.556027][T10044] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 294.558923][T10044] vhci_hcd vhci_hcd.0: Device attached [ 294.649785][T10048] fuse: Unknown parameter 'use00000000000000000000' [ 294.717494][T10050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1163'. [ 294.802713][ T839] usb 43-1: new high-speed USB device number 10 using vhci_hcd [ 294.960585][T10052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1165'. [ 295.087350][T10045] vhci_hcd: connection reset by peer [ 295.091408][ T60] vhci_hcd: stop threads [ 295.102354][ T60] vhci_hcd: release socket [ 295.109885][ T60] vhci_hcd: disconnect device [ 295.312382][T10060] loop2: detected capacity change from 0 to 7 [ 295.380210][T10061] serio: Serial port ptm0 [ 295.384830][T10060] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 295.386982][T10060] loop2: partition table partially beyond EOD, truncated [ 295.389556][T10060] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 296.112695][ T10] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 296.284715][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.293095][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 296.299837][ T10] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 296.314410][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.333179][ T10] usb 5-1: config 0 descriptor?? [ 296.344173][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 296.346974][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 296.373808][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 296.377975][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 296.381371][ T10] usb 5-1: media controller created [ 296.394312][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 296.408574][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 296.411093][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 296.454977][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input73 [ 296.469341][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 296.491664][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 296.541001][ T6034] usb 5-1: USB disconnect, device number 13 [ 296.644080][ T6034] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 297.858791][ T5953] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 297.865755][ T5953] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 297.871362][ T5953] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 297.881203][ T5953] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 297.887439][ T5953] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 298.396228][T10091] chnl_net:caif_netlink_parms(): no params data found [ 298.436471][T10103] serio: Serial port ptm0 [ 298.518080][T10091] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.522134][T10091] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.525817][T10091] bridge_slave_0: entered allmulticast mode [ 298.530708][T10091] bridge_slave_0: entered promiscuous mode [ 298.538734][T10091] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.543463][T10091] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.547187][T10091] bridge_slave_1: entered allmulticast mode [ 298.553028][T10091] bridge_slave_1: entered promiscuous mode [ 298.619645][T10091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.624516][T10091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.688408][T10091] team0: Port device team_slave_0 added [ 298.694731][T10091] team0: Port device team_slave_1 added [ 298.751687][T10091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.754723][T10091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.763418][T10091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.769738][T10091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.773246][T10091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.784268][T10091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.819769][T10109] loop2: detected capacity change from 0 to 7 [ 298.827399][T10109] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 298.831400][T10109] loop2: partition table partially beyond EOD, truncated [ 298.834940][T10109] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 298.852709][T10091] hsr_slave_0: entered promiscuous mode [ 298.855189][T10091] hsr_slave_1: entered promiscuous mode [ 298.857455][T10091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 298.860677][T10091] Cannot create hsr debugfs directory [ 298.970535][T10091] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.043919][T10091] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.211414][ T5354] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 299.214317][ T5354] loop2: partition table partially beyond EOD, truncated [ 299.217516][ T5354] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 299.251664][T10091] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.350758][T10091] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.620438][T10091] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 299.648049][T10091] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 299.690500][T10091] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 299.760378][T10091] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 299.900362][T10091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.913924][T10091] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.920884][ T219] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.923954][ T219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.940626][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.943861][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.959393][ T839] vhci_hcd: vhci_device speed not set [ 299.970984][ T5953] Bluetooth: hci3: command tx timeout [ 300.165969][T10091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.231879][T10091] veth0_vlan: entered promiscuous mode [ 300.246576][T10091] veth1_vlan: entered promiscuous mode [ 300.269793][T10091] veth0_macvtap: entered promiscuous mode [ 300.275371][T10091] veth1_macvtap: entered promiscuous mode [ 300.309281][T10091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.322478][T10091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.330859][T10091] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.335121][T10091] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.338798][T10091] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.341942][T10091] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.422349][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.429948][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.449960][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.453744][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.698637][T10145] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 301.701229][T10145] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 301.709872][T10145] vhci_hcd vhci_hcd.0: Device attached [ 301.982677][ T29] usb 37-1: new high-speed USB device number 14 using vhci_hcd [ 302.393996][T10146] vhci_hcd: connection reset by peer [ 302.408985][ T60] vhci_hcd: stop threads [ 302.410491][ T60] vhci_hcd: release socket [ 302.413091][ T60] vhci_hcd: disconnect device [ 302.526773][ T1139] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.458219][T10159] serio: Serial port ptm0 [ 303.843169][ T63] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 303.848730][ T63] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 303.872689][ T63] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 303.893500][ T63] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 303.913294][ T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 304.290061][T10161] chnl_net:caif_netlink_parms(): no params data found [ 304.322805][T10167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1194'. [ 304.484949][T10170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1195'. [ 304.494783][T10171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1196'. [ 304.595421][T10178] netlink: 828 bytes leftover after parsing attributes in process `syz.2.1197'. [ 304.672672][T10161] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.675994][T10161] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.679298][T10161] bridge_slave_0: entered allmulticast mode [ 304.691859][T10161] bridge_slave_0: entered promiscuous mode [ 304.699165][T10161] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.712280][T10161] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.716699][T10161] bridge_slave_1: entered allmulticast mode [ 304.723140][T10161] bridge_slave_1: entered promiscuous mode [ 304.881904][ T1139] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.051254][T10185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1200'. [ 305.073160][ T1139] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.081950][T10161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.088806][T10161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.204114][ T1139] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.215189][T10161] team0: Port device team_slave_0 added [ 305.218785][T10161] team0: Port device team_slave_1 added [ 305.428925][T10161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.431309][T10161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.444722][T10161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.451399][T10161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.454148][T10161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.463003][T10161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.517203][T10161] hsr_slave_0: entered promiscuous mode [ 305.519636][T10161] hsr_slave_1: entered promiscuous mode [ 305.521970][T10161] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.525241][T10161] Cannot create hsr debugfs directory [ 305.636331][ T1139] bridge_slave_1: left allmulticast mode [ 305.638573][ T1139] bridge_slave_1: left promiscuous mode [ 305.641893][ T1139] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.648375][ T1139] bridge_slave_0: left allmulticast mode [ 305.650454][ T1139] bridge_slave_0: left promiscuous mode [ 305.653938][ T1139] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.924889][ T1139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.932773][ T1139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.940790][ T1139] bond0 (unregistering): Released all slaves [ 306.044518][ T63] Bluetooth: hci3: command tx timeout [ 306.377633][ T1139] hsr_slave_0: left promiscuous mode [ 306.382017][ T1139] hsr_slave_1: left promiscuous mode [ 306.386236][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.389893][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.398448][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.405243][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.466656][ T1139] veth1_macvtap: left promiscuous mode [ 306.469955][ T1139] veth0_macvtap: left promiscuous mode [ 306.483590][ T1139] veth1_vlan: left promiscuous mode [ 306.485483][ T1139] veth0_vlan: left promiscuous mode [ 306.582921][T10211] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 306.585137][T10211] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 306.588215][T10211] vhci_hcd vhci_hcd.0: Device attached [ 307.202948][T10213] vhci_hcd: connection reset by peer [ 307.205564][ T219] vhci_hcd: stop threads [ 307.207119][ T219] vhci_hcd: release socket [ 307.211480][ T219] vhci_hcd: disconnect device [ 307.312783][ T29] vhci_hcd: vhci_device speed not set [ 307.454930][ T1139] team0 (unregistering): Port device team_slave_1 removed [ 307.529348][ T1139] team0 (unregistering): Port device team_slave_0 removed [ 307.565251][ T6377] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 307.692724][ T6377] usb 7-1: device descriptor read/64, error -71 [ 307.942870][ T6377] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 308.083377][ T6377] usb 7-1: device descriptor read/64, error -71 [ 308.132771][ T63] Bluetooth: hci3: command tx timeout [ 308.196013][ T6377] usb usb7-port1: attempt power cycle [ 308.543942][ T6377] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 308.573547][ T6377] usb 7-1: device descriptor read/8, error -71 [ 308.658133][T10161] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 308.664858][T10161] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 308.676137][T10161] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 308.687117][T10161] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 308.759863][T10161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.778332][T10161] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.785877][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.788918][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.798969][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.801480][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.825476][ T6377] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 308.867640][ T6377] usb 7-1: device descriptor read/8, error -71 [ 308.878577][T10238] serio: Serial port ptm0 [ 308.977290][T10161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.983072][ T6377] usb usb7-port1: unable to enumerate USB device [ 309.010125][T10161] veth0_vlan: entered promiscuous mode [ 309.019892][T10161] veth1_vlan: entered promiscuous mode [ 309.045070][T10161] veth0_macvtap: entered promiscuous mode [ 309.049641][T10161] veth1_macvtap: entered promiscuous mode [ 309.063221][T10161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.076322][T10161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.082830][T10161] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.085686][T10161] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.089003][T10161] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.094154][T10161] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.140370][ T219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.145655][ T219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.161313][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.164843][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.469159][T10260] bridge0: entered promiscuous mode [ 310.474635][T10260] batman_adv: batadv0: Adding interface: macsec1 [ 310.477075][T10260] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.486023][T10260] batman_adv: batadv0: Interface activated: macsec1 [ 311.513793][T10269] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 311.516364][T10269] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 311.518316][T10271] bridge0: entered promiscuous mode [ 311.521818][T10271] batman_adv: batadv0: Adding interface: macsec1 [ 311.526337][T10271] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.528513][T10268] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 311.535722][T10271] batman_adv: batadv0: Interface activated: macsec1 [ 311.538050][T10268] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 311.538432][T10268] vhci_hcd vhci_hcd.0: Device attached [ 311.556067][T10269] vhci_hcd vhci_hcd.0: Device attached [ 311.606600][T10277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1222'. [ 311.635224][ T219] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.673398][T10274] vhci_hcd: connection closed [ 311.692583][ T60] vhci_hcd: stop threads [ 311.695599][ T60] vhci_hcd: release socket [ 311.702953][ T60] vhci_hcd: disconnect device [ 311.752713][ T10] vhci_hcd: vhci_device speed not set [ 311.786250][T10272] vhci_hcd: connection closed [ 311.787531][ T1143] vhci_hcd: stop threads [ 311.790501][ T1143] vhci_hcd: release socket [ 311.793316][ T1143] vhci_hcd: disconnect device [ 311.822607][ T54] usb 37-1: new high-speed USB device number 15 using vhci_hcd [ 311.825175][ T54] usb 37-1: enqueue for inactive port 0 [ 311.892729][ T54] vhci_hcd: vhci_device speed not set [ 312.841651][ T5953] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 312.862943][ T5953] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 312.873142][ T5953] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 312.890435][ T5953] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 312.901873][ T5953] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 313.558723][T10284] chnl_net:caif_netlink_parms(): no params data found [ 313.897749][T10284] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.905420][T10284] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.916353][T10284] bridge_slave_0: entered allmulticast mode [ 313.920964][T10284] bridge_slave_0: entered promiscuous mode [ 313.936102][T10284] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.939598][T10284] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.946147][T10284] bridge_slave_1: entered allmulticast mode [ 313.954039][T10284] bridge_slave_1: entered promiscuous mode [ 314.039060][T10284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.060478][T10284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.151869][T10284] team0: Port device team_slave_0 added [ 314.175403][T10284] team0: Port device team_slave_1 added [ 314.355897][T10284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.359519][T10284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.399180][T10284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.414290][T10284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.424885][T10284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.434850][T10284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.639746][T10284] hsr_slave_0: entered promiscuous mode [ 314.643422][T10284] hsr_slave_1: entered promiscuous mode [ 314.646823][T10284] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 314.650406][T10284] Cannot create hsr debugfs directory [ 314.665377][ T219] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.759431][T10313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1231'. [ 314.867447][ T219] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.930412][ T63] Bluetooth: hci3: command tx timeout [ 315.265071][ T219] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.472000][ T219] bridge_slave_1: left allmulticast mode [ 315.479764][ T219] bridge_slave_1: left promiscuous mode [ 315.490835][ T219] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.502170][ T219] bridge_slave_0: left allmulticast mode [ 315.511164][ T219] bridge_slave_0: left promiscuous mode [ 315.514527][ T219] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.623562][T10322] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 315.626093][T10322] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 315.631226][T10322] vhci_hcd vhci_hcd.0: Device attached [ 315.872895][ T6034] usb 37-1: new high-speed USB device number 16 using vhci_hcd [ 315.956688][ T219] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.963134][ T219] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.968179][ T219] bond0 (unregistering): Released all slaves [ 316.247639][T10323] vhci_hcd: connection reset by peer [ 316.249987][ T60] vhci_hcd: stop threads [ 316.251378][ T60] vhci_hcd: release socket [ 316.256048][ T60] vhci_hcd: disconnect device [ 316.345094][ T219] hsr_slave_0: left promiscuous mode [ 316.347571][ T219] hsr_slave_1: left promiscuous mode [ 316.351068][ T219] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.358502][ T219] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.362916][ T219] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.366302][ T219] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.414446][ T219] veth1_macvtap: left promiscuous mode [ 316.416905][ T219] veth0_macvtap: left promiscuous mode [ 316.419651][ T219] veth1_vlan: left promiscuous mode [ 316.421591][ T219] veth0_vlan: left promiscuous mode [ 317.016785][ T63] Bluetooth: hci3: command tx timeout [ 317.179832][T10348] serio: Serial port ptm0 [ 317.950467][T10356] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 317.952607][T10356] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 317.957598][T10356] vhci_hcd vhci_hcd.0: Device attached [ 318.134227][T10357] vhci_hcd: connection closed [ 318.135781][ T1143] vhci_hcd: stop threads [ 318.140453][ T1143] vhci_hcd: release socket [ 318.186530][ T1143] vhci_hcd: disconnect device [ 318.202819][ T29] usb 43-1: new high-speed USB device number 12 using vhci_hcd [ 318.494745][ T219] team0 (unregistering): Port device team_slave_1 removed [ 318.610288][ T219] team0 (unregistering): Port device team_slave_0 removed [ 319.082776][ T63] Bluetooth: hci3: command tx timeout [ 320.067064][T10284] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 320.079439][T10284] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 320.099688][T10284] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 320.107268][T10284] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 320.184314][T10284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.194088][T10284] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.199585][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.202079][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.237443][ T89] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.240354][ T89] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.266055][T10369] serio: Serial port ptm0 [ 320.459629][T10384] loop2: detected capacity change from 0 to 7 [ 320.475040][T10384] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 320.476797][T10384] loop2: partition table partially beyond EOD, truncated [ 320.479135][T10384] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 320.584237][T10284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.617412][T10284] veth0_vlan: entered promiscuous mode [ 320.631658][T10284] veth1_vlan: entered promiscuous mode [ 320.659195][T10284] veth0_macvtap: entered promiscuous mode [ 320.665893][T10284] veth1_macvtap: entered promiscuous mode [ 320.677311][T10284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.694253][T10284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.699749][T10284] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.704744][T10284] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.707703][T10284] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.710566][T10284] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.764112][ T219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.766616][ T219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.785393][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.788783][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.879905][ T5354] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 320.881882][ T5354] loop2: partition table partially beyond EOD, truncated [ 320.885511][ T5354] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 320.973777][ T5947] udevd[5947]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 320.997791][ T6034] vhci_hcd: vhci_device speed not set [ 321.809470][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.961396][ T60] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.332608][ T29] vhci_hcd: vhci_device speed not set [ 323.742350][ T5953] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 323.748138][ T5953] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 323.753287][ T5953] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 323.759070][ T5953] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 323.762350][ T5953] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 323.883949][T10424] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 323.885833][T10424] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 323.888844][T10424] vhci_hcd vhci_hcd.0: Device attached [ 323.902932][T10415] chnl_net:caif_netlink_parms(): no params data found [ 324.122635][ T839] usb 41-1: new high-speed USB device number 11 using vhci_hcd [ 324.166121][T10415] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.169214][T10415] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.175553][T10415] bridge_slave_0: entered allmulticast mode [ 324.183855][T10415] bridge_slave_0: entered promiscuous mode [ 324.194375][T10415] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.197085][T10415] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.200301][T10415] bridge_slave_1: entered allmulticast mode [ 324.206102][T10415] bridge_slave_1: entered promiscuous mode [ 324.318031][T10415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.331216][T10415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.435382][T10415] team0: Port device team_slave_0 added [ 324.441271][T10415] team0: Port device team_slave_1 added [ 324.477944][T10425] vhci_hcd: connection reset by peer [ 324.480432][ T1143] vhci_hcd: stop threads [ 324.481870][ T1143] vhci_hcd: release socket [ 324.513047][ T1143] vhci_hcd: disconnect device [ 324.547479][T10415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.549768][T10415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.558750][T10415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.564366][T10415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.566888][T10415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.575742][T10415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.655510][T10415] hsr_slave_0: entered promiscuous mode [ 324.660458][T10415] hsr_slave_1: entered promiscuous mode [ 324.663781][T10415] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.666290][T10415] Cannot create hsr debugfs directory [ 324.915714][ T60] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.081472][ T60] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.154316][ T60] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.167842][T10440] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 325.608286][ T60] bridge_slave_1: left allmulticast mode [ 325.610289][ T60] bridge_slave_1: left promiscuous mode [ 325.612254][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.651242][ T60] bridge_slave_0: left allmulticast mode [ 325.657446][ T60] bridge_slave_0: left promiscuous mode [ 325.660425][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.813085][ T5953] Bluetooth: hci3: command tx timeout [ 326.403922][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.457688][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.474308][ T60] bond0 (unregistering): Released all slaves [ 327.084642][ T60] hsr_slave_0: left promiscuous mode [ 327.087802][ T60] hsr_slave_1: left promiscuous mode [ 327.090334][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.096991][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.102158][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.107056][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.137725][ T60] veth1_macvtap: left promiscuous mode [ 327.139750][ T60] veth0_macvtap: left promiscuous mode [ 327.141837][ T60] veth1_vlan: left promiscuous mode [ 327.145358][ T60] veth0_vlan: left promiscuous mode [ 327.252801][ T63] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 327.885435][ T63] Bluetooth: hci3: command tx timeout [ 329.323527][T10468] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 329.365356][ T60] team0 (unregistering): Port device team_slave_1 removed [ 329.572837][ T839] vhci_hcd: vhci_device speed not set [ 329.596062][ T60] team0 (unregistering): Port device team_slave_0 removed [ 329.965275][ T63] Bluetooth: hci3: command tx timeout [ 330.553434][T10415] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 330.560334][T10415] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 330.576422][T10415] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 330.586008][T10415] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 330.705807][T10415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.736881][T10415] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.762630][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.765910][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.807255][ T219] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.809621][ T219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.068840][T10415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.111825][T10415] veth0_vlan: entered promiscuous mode [ 331.117741][T10415] veth1_vlan: entered promiscuous mode [ 331.142789][T10415] veth0_macvtap: entered promiscuous mode [ 331.170745][T10415] veth1_macvtap: entered promiscuous mode [ 331.308817][T10415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.373465][T10415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.515413][T10415] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.532289][T10415] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.568890][T10415] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.594078][T10415] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.865362][ T219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.894728][ T219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.967414][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.969907][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.043288][ T5953] Bluetooth: hci3: command tx timeout [ 332.266818][T10542] autofs: Unknown parameter 'fd0x0000000000000000' [ 334.110792][T10570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1289'. [ 334.259820][T10576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1292'. [ 336.618068][T10621] autofs: Unknown parameter '0x0000000000000000' [ 337.080935][T10636] serio: Serial port ptm0 [ 338.537371][T10653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1320'. [ 338.576602][T10655] autofs: Unknown parameter 'fd0x0000000000000000' [ 338.798271][T10658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1319'. [ 339.200737][T10677] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 339.202934][T10677] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 339.208850][T10677] vhci_hcd vhci_hcd.0: Device attached [ 339.512728][ T29] usb 41-1: new high-speed USB device number 12 using vhci_hcd [ 339.782451][T10678] vhci_hcd: connection reset by peer [ 339.785585][ T1140] vhci_hcd: stop threads [ 339.787162][ T1140] vhci_hcd: release socket [ 339.788694][ T1140] vhci_hcd: disconnect device [ 340.409261][T10690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1330'. [ 340.969663][T10698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1329'. [ 341.683885][T10711] serio: Serial port ptm2 [ 341.961818][T10716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1334'. [ 342.330834][T10720] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 342.333908][T10720] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 342.338065][T10720] vhci_hcd vhci_hcd.0: Device attached [ 342.592668][ T54] usb 43-1: new high-speed USB device number 13 using vhci_hcd [ 342.801505][T10732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1341'. [ 342.925182][T10721] vhci_hcd: connection reset by peer [ 342.927643][ T1143] vhci_hcd: stop threads [ 342.929663][ T1143] vhci_hcd: release socket [ 342.931715][ T1143] vhci_hcd: disconnect device [ 343.579410][T10742] serio: Serial port ptm0 [ 343.870159][T10748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1346'. [ 344.329120][T10754] bond0: entered promiscuous mode [ 344.331697][T10754] bond_slave_0: entered promiscuous mode [ 344.335437][T10754] bond_slave_1: entered promiscuous mode [ 344.622679][ T29] vhci_hcd: vhci_device speed not set [ 345.193047][T10767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1351'. [ 345.292180][T10768] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 345.295064][T10768] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 345.299120][T10768] vhci_hcd vhci_hcd.0: Device attached [ 345.622685][ T29] usb 41-1: device descriptor read/64, error -110 [ 345.813251][T10769] vhci_hcd: connection closed [ 345.813665][ T60] vhci_hcd: stop threads [ 345.817867][ T60] vhci_hcd: release socket [ 345.820135][ T60] vhci_hcd: disconnect device [ 345.882694][ T29] usb 41-1: new high-speed USB device number 13 using vhci_hcd [ 345.886422][ T29] usb 41-1: enqueue for inactive port 0 [ 345.962938][ T29] vhci_hcd: vhci_device speed not set [ 346.240777][T10796] bond0: entered promiscuous mode [ 346.243764][T10796] bond_slave_0: entered promiscuous mode [ 346.247145][T10796] bond_slave_1: entered promiscuous mode [ 346.298834][T10790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1360'. [ 347.002144][T10822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1369'. [ 347.688428][T10831] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1374'. [ 347.712713][ T54] vhci_hcd: vhci_device speed not set [ 347.829886][T10839] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1378'. [ 348.156837][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 348.156854][ T40] audit: type=1800 audit(2000000007.229:144): pid=10844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1379" name="nullb0" dev="tmpfs" ino=2006 res=0 errno=0 [ 348.609104][T10852] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 348.611751][T10852] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 348.615178][T10852] vhci_hcd vhci_hcd.0: Device attached [ 348.892618][ T839] usb 41-1: new high-speed USB device number 14 using vhci_hcd [ 349.171460][T10853] vhci_hcd: connection reset by peer [ 349.174853][ T12] vhci_hcd: stop threads [ 349.176301][ T12] vhci_hcd: release socket [ 349.178066][ T12] vhci_hcd: disconnect device [ 349.489722][ T40] audit: type=1800 audit(2000000008.559:145): pid=10870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1385" name="nullb0" dev="tmpfs" ino=2014 res=0 errno=0 [ 349.654259][T10874] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1391'. [ 350.294115][T10889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1393'. [ 350.797198][T10900] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1400'. [ 351.446704][T10917] bond0: entered promiscuous mode [ 351.448874][T10917] bond_slave_0: entered promiscuous mode [ 351.451529][T10917] bond_slave_1: entered promiscuous mode [ 351.463170][ T6033] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 351.614466][ T6033] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.618023][ T6033] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 351.621070][ T6033] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 351.626775][ T6033] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.630812][ T6033] usb 7-1: config 0 descriptor?? [ 351.856354][ T6015] usb 7-1: USB disconnect, device number 10 [ 352.030263][T10926] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 354.032822][ T839] vhci_hcd: vhci_device speed not set [ 354.359048][T10958] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1419'. [ 354.408600][T10960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1420'. [ 354.549709][T10966] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1422'. [ 354.977803][T10972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1425'. [ 355.389739][T10983] trusted_key: encrypted_key: master key parameter 'size=8 [ 355.389739][T10983] verification' is invalid [ 355.673668][T11005] netlink: 'syz.0.1440': attribute type 12 has an invalid length. [ 356.864908][T11036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1449'. [ 357.675711][T11055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1460'. [ 358.079040][T11071] serio: Serial port ptm0 [ 358.840211][T11087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1473'. [ 359.136622][T11089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1474'. [ 359.806263][T11096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1475'. [ 360.505382][T11114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1484'. [ 361.894977][T11136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1483'. [ 361.945701][T11139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1493'. [ 363.018769][T11162] 9pnet_fd: Insufficient options for proto=fd [ 363.200458][T11167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1501'. [ 363.618349][ T40] audit: type=1800 audit(2000000000.899:146): pid=11184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1510" name="nullb0" dev="tmpfs" ino=2014 res=0 errno=0 [ 364.609679][T11199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1515'. [ 365.022247][T11204] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 365.024358][T11204] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 365.027789][T11204] vhci_hcd vhci_hcd.0: Device attached [ 365.262706][ T34] usb 41-1: new high-speed USB device number 15 using vhci_hcd [ 365.757357][T11205] vhci_hcd: connection reset by peer [ 365.759518][ T1143] vhci_hcd: stop threads [ 365.761174][ T1143] vhci_hcd: release socket [ 365.763281][ T1143] vhci_hcd: disconnect device [ 366.593769][ T40] audit: type=1800 audit(2000000003.879:147): pid=11225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1523" name="nullb0" dev="tmpfs" ino=2006 res=0 errno=0 [ 367.042236][T11235] serio: Serial port ptm0 [ 367.337785][T11231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1525'. [ 368.074547][T11254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1532'. [ 368.275328][T11249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1531'. [ 368.735456][T11280] bridge_slave_0: left allmulticast mode [ 368.737633][T11280] bridge_slave_0: left promiscuous mode [ 368.741362][T11280] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.749157][T11280] bridge_slave_1: left allmulticast mode [ 368.751499][T11280] bridge_slave_1: left promiscuous mode [ 368.764558][T11280] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.776144][T11280] bond0: (slave bond_slave_0): Releasing backup interface [ 368.784577][T11280] bond_slave_0: left promiscuous mode [ 368.788387][T11280] bond0: (slave bond_slave_1): Releasing backup interface [ 368.791734][T11280] bond_slave_1: left promiscuous mode [ 368.800614][T11280] team0: Port device team_slave_0 removed [ 368.817780][T11280] team0: Port device team_slave_1 removed [ 368.820350][T11280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.824929][T11280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.830174][T11280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.833245][T11280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.845668][ T5953] Bluetooth: hci0: unexpected cc 0x042d length: 63 > 7 [ 368.848336][ T5953] Bluetooth: hci0: unexpected event for opcode 0x042d [ 368.920828][T11293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1551'. [ 369.064926][T11308] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1559'. [ 369.099928][T11310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1560'. [ 369.244266][T11317] serio: Serial port ptm0 [ 369.379679][T11320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1555'. [ 369.850887][T11328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1566'. [ 370.261726][T11342] serio: Serial port ptm0 [ 370.432723][ T34] vhci_hcd: vhci_device speed not set [ 370.909554][T11353] bridge_slave_0: left allmulticast mode [ 370.911573][T11353] bridge_slave_0: left promiscuous mode [ 370.914217][T11353] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.926472][T11353] bridge_slave_1: left allmulticast mode [ 370.928930][T11353] bridge_slave_1: left promiscuous mode [ 370.931461][T11353] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.936592][T11355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1576'. [ 370.943783][T11353] bond0: (slave bond_slave_0): Releasing backup interface [ 370.947358][T11353] bond_slave_0: left promiscuous mode [ 370.952299][T11353] bond0: (slave bond_slave_1): Releasing backup interface [ 370.956133][T11353] bond_slave_1: left promiscuous mode [ 370.963959][T11353] team0: Port device team_slave_0 removed [ 370.970997][T11353] team0: Port device team_slave_1 removed [ 370.974716][T11353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.977307][T11353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.980367][T11353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.983400][T11353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.991775][T11353] batman_adv: batadv0: Interface deactivated: macsec1 [ 370.994242][T11353] batman_adv: batadv0: Removing interface: macsec1 [ 371.083930][ T133] ------------[ cut here ]------------ [ 371.086006][ T133] workqueue: cannot queue hci_conn_timeout on wq hci3 [ 371.088171][ T133] WARNING: CPU: 3 PID: 133 at kernel/workqueue.c:2257 __queue_work+0xc9c/0x10f0 [ 371.091058][ T133] Modules linked in: [ 371.092795][ T133] CPU: 3 UID: 0 PID: 133 Comm: kworker/3:2 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 371.098341][ T133] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 371.101881][ T133] Workqueue: events l2cap_chan_timeout [ 371.103744][ T133] RIP: 0010:__queue_work+0xc9c/0x10f0 [ 371.105631][ T133] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 04 00 00 48 8b 75 18 4c 89 f2 48 c7 c7 80 fd ab 8b e8 45 44 f7 ff 90 <0f> 0b 90 90 e9 96 f7 ff ff e8 26 2e 38 00 90 0f 0b 90 e9 1b f6 ff [ 371.111716][ T133] RSP: 0018:ffffc90002287a48 EFLAGS: 00010082 [ 371.113821][ T133] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817aa1a8 [ 371.116440][ T133] RDX: ffff888022682440 RSI: ffffffff817aa1b5 RDI: 0000000000000001 [ 371.119148][ T133] RBP: ffff888070110948 R08: 0000000000000001 R09: 0000000000000000 [ 371.121700][ T133] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 371.124241][ T133] R13: ffff88804a159000 R14: ffff88804a159178 R15: ffff888070110950 [ 371.126716][ T133] FS: 0000000000000000(0000) GS:ffff888097860000(0000) knlGS:0000000000000000 [ 371.129525][ T133] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 371.131597][ T133] CR2: 00000000580034c0 CR3: 0000000066f6b000 CR4: 0000000000352ef0 [ 371.134209][ T133] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 371.136735][ T133] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 371.139423][ T133] Call Trace: [ 371.140530][ T133] [ 371.141517][ T133] ? __cancel_work+0x2c8/0x370 [ 371.143072][ T133] ? clear_pending_if_disabled+0xa8/0x210 [ 371.144881][ T133] ? __pfx_clear_pending_if_disabled+0x10/0x10 [ 371.146842][ T133] __queue_delayed_work+0x35b/0x460 [ 371.148694][ T133] queue_delayed_work_on+0x1b5/0x200 [ 371.150576][ T133] l2cap_chan_del+0x5a0/0x8f0 [ 371.152084][ T133] l2cap_chan_close+0xfe/0xa30 [ 371.154049][ T133] ? __pfx_l2cap_chan_close+0x10/0x10 [ 371.155974][ T133] l2cap_chan_timeout+0x196/0x310 [ 371.157845][ T133] process_one_work+0x9cc/0x1b70 [ 371.159951][ T133] ? __pfx_process_one_work+0x10/0x10 [ 371.161863][ T133] ? assign_work+0x1a0/0x250 [ 371.163380][ T133] worker_thread+0x6c8/0xf10 [ 371.164870][ T133] ? __pfx_worker_thread+0x10/0x10 [ 371.166357][ T133] kthread+0x3c5/0x780 [ 371.167658][ T133] ? __pfx_kthread+0x10/0x10 [ 371.169412][ T133] ? rcu_is_watching+0x12/0xc0 [ 371.170958][ T133] ? __pfx_kthread+0x10/0x10 [ 371.172652][ T133] ret_from_fork+0x5d4/0x6f0 [ 371.174127][ T133] ? __pfx_kthread+0x10/0x10 [ 371.175540][ T133] ret_from_fork_asm+0x1a/0x30 [ 371.177140][ T133] [ 371.178160][ T133] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 371.180468][ T133] CPU: 3 UID: 0 PID: 133 Comm: kworker/3:2 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 371.184322][ T133] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 371.187773][ T133] Workqueue: events l2cap_chan_timeout [ 371.189670][ T133] Call Trace: [ 371.190770][ T133] [ 371.191743][ T133] dump_stack_lvl+0x3d/0x1f0 [ 371.193233][ T133] panic+0x71c/0x800 [ 371.194495][ T133] ? __pfx_panic+0x10/0x10 [ 371.195902][ T133] ? show_trace_log_lvl+0x29b/0x3e0 [ 371.197573][ T133] ? check_panic_on_warn+0x1f/0xb0 [ 371.199307][ T133] ? __queue_work+0xc9c/0x10f0 [ 371.201046][ T133] check_panic_on_warn+0xab/0xb0 [ 371.202800][ T133] __warn+0xf6/0x3c0 [ 371.204170][ T133] ? __queue_work+0xc9c/0x10f0 [ 371.205697][ T133] report_bug+0x3c3/0x580 [ 371.207224][ T133] ? __queue_work+0xc9c/0x10f0 [ 371.208799][ T133] handle_bug+0x184/0x210 [ 371.210235][ T133] exc_invalid_op+0x17/0x50 [ 371.211691][ T133] asm_exc_invalid_op+0x1a/0x20 [ 371.213242][ T133] RIP: 0010:__queue_work+0xc9c/0x10f0 [ 371.214986][ T133] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 04 00 00 48 8b 75 18 4c 89 f2 48 c7 c7 80 fd ab 8b e8 45 44 f7 ff 90 <0f> 0b 90 90 e9 96 f7 ff ff e8 26 2e 38 00 90 0f 0b 90 e9 1b f6 ff [ 371.221285][ T133] RSP: 0018:ffffc90002287a48 EFLAGS: 00010082 [ 371.223219][ T133] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817aa1a8 [ 371.225729][ T133] RDX: ffff888022682440 RSI: ffffffff817aa1b5 RDI: 0000000000000001 [ 371.228176][ T133] RBP: ffff888070110948 R08: 0000000000000001 R09: 0000000000000000 [ 371.230688][ T133] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 371.233387][ T133] R13: ffff88804a159000 R14: ffff88804a159178 R15: ffff888070110950 [ 371.236195][ T133] ? __warn_printk+0x198/0x350 [ 371.238067][ T133] ? __warn_printk+0x1a5/0x350 [ 371.239751][ T133] ? __queue_work+0xc9b/0x10f0 [ 371.241346][ T133] ? __cancel_work+0x2c8/0x370 [ 371.242944][ T133] ? clear_pending_if_disabled+0xa8/0x210 [ 371.244764][ T133] ? __pfx_clear_pending_if_disabled+0x10/0x10 [ 371.246719][ T133] __queue_delayed_work+0x35b/0x460 [ 371.248361][ T133] queue_delayed_work_on+0x1b5/0x200 [ 371.250068][ T133] l2cap_chan_del+0x5a0/0x8f0 [ 371.252056][ T133] l2cap_chan_close+0xfe/0xa30 [ 371.253634][ T133] ? __pfx_l2cap_chan_close+0x10/0x10 [ 371.255355][ T133] l2cap_chan_timeout+0x196/0x310 [ 371.256971][ T133] process_one_work+0x9cc/0x1b70 [ 371.258589][ T133] ? __pfx_process_one_work+0x10/0x10 [ 371.260371][ T133] ? assign_work+0x1a0/0x250 [ 371.261920][ T133] worker_thread+0x6c8/0xf10 [ 371.263473][ T133] ? __pfx_worker_thread+0x10/0x10 [ 371.265122][ T133] kthread+0x3c5/0x780 [ 371.266445][ T133] ? __pfx_kthread+0x10/0x10 [ 371.267921][ T133] ? rcu_is_watching+0x12/0xc0 [ 371.269521][ T133] ? __pfx_kthread+0x10/0x10 [ 371.270999][ T133] ret_from_fork+0x5d4/0x6f0 [ 371.272472][ T133] ? __pfx_kthread+0x10/0x10 [ 371.273961][ T133] ret_from_fork_asm+0x1a/0x30 [ 371.275504][ T133] [ 371.277060][ T133] Kernel Offset: disabled [ 371.278454][ T133] Rebooting in 86400 seconds.. VM DIAGNOSIS: 05:20:15 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=ffffea00016e7b00 RCX=ffffffff81f64475 RDX=fffff940002dcf61 RSI=0000000000000008 RDI=ffffea00016e7b00 RBP=ffffea00016e7b00 RSP=ffffc90002a87428 R8 =0000000000000001 R9 =fffff940002dcf60 R10=ffffea00016e7b07 R11=0000000000000001 R12=ffff88806c8b8048 R13=dffffc0000000000 R14=ffff88802b2332f0 R15=ffff88802b2333a8 RIP=ffffffff81f6447c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097560000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c366106 CR3=000000005dc9b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000ec000000000 0000002900000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000dc6dcb RBX=0000000000000001 RCX=ffffffff8b7cac29 RDX=0000000000000000 RSI=ffffffff8de13876 RDI=ffffffff8c1565a0 RBP=ffffed1003bdb488 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =ffffed1005666645 R10=ffff88802b33322b R11=0000000000000001 R12=0000000000000001 R13=ffff88801deda440 R14=ffffffff90a82d50 R15=0000000000000000 RIP=ffffffff8b7c978f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097660000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f58a7ba8 CR3=000000000e382000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffff888027ce8000 RBX=ffffffff8e5c47c0 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8df055e0 RDI=ffffffff8c1565a0 RBP=0000000000000002 RSP=ffffc900035c6fd0 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=00000000000061a9 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8b7cb3b8 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097760000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f46e40 CR3=00000000472a5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f73e3ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000069 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855820d5 RDI=ffffffff9b06ca00 RBP=ffffffff9b06c9c0 RSP=ffffc900022873b0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000069 R14=ffffffff9b06c9c0 R15=ffffffff85582070 RIP=ffffffff855820ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097860000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000580034c0 CR3=0000000066f6b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000ec000000000 0000002900000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000